last executing test programs: 7.710439702s ago: executing program 3 (id=2654): setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0xfc1, &(0x7f0000001780)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000fb30000000000849078ac1e0101ffffffffdd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eaf0713a08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb4ee783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2715a660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc051d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0191760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfe71b9d76095c5315ae0dc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e5124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e77e64b4e105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2e294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebffcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0809000000000000005ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91613c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc38d582e5bba5552bf8a438b370b98b6b3c26246d1cbb5dd068830afc49a2e389c0ab4654f2f9fa92c65df66770172925766c9b917962fc797ba9a2c1d5132d32da721bb5604c8aa5e20b3029fe369303f022f14bc88bf82fab95c6af48f5dcb5008821cf4ce8662684180504a07b99cd68e66ad5e9e1580f58aa099da2660635880adeba272ea27f9f5b1ccdeae754d984392d74b4ae41091c9959803fc0ad1816cc7008fa1758c5040a54eb638ea75e3ea242e590d3fb2708ca687728ea0925ded6b7d4a52ae3ebeaeffd968083231ad1a576a2b7fdc3a1b78805696a5739a16835113b242b08a89557d46fa79c3891f485748b3ef71fcb59383f0ce29cb7a3565161f9a81dd16624c87ab646a7923e63ec098d8f1d7f9804e0396ed21af359519e3b79523d4"], 0x0) 7.521631266s ago: executing program 3 (id=2657): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x200, 0x10}, &(0x7f00000000c0)=0xc) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0x965}, &(0x7f00000002c0)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2050}, 0xd0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000800)={@private, @dev, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0x4f6, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, 0x7, 0x700, 0x0, 0x9f}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x2, 0x208, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0xcf, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x32, 0x0}, {[@end, @lsrr={0x83, 0x13, 0x98, [@loopback, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000ac0)={@remote, @private, 0x0}, &(0x7f0000000b00)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b40)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000e40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)={0x248, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000e80)={r2, 0x8, 0x20}, &(0x7f0000000ec0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r16, 0x84, 0x78, &(0x7f0000000f00)=r17, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000f40)={{0x88, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'sh\x00', 0x20, 0x1ff, 0x1c}, {@local, 0x4e23, 0x1, 0x1, 0x3, 0xc0000000}}, 0x44) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r16, 0x84, 0x20, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001140)={r16, &(0x7f0000001040)='syz1\x00', 0x222002, &(0x7f0000001080)={@_ha_fsid={[0x4, 0x5]}, {0x1, 0x7, 0x2, 0x1000}}, 0x0, &(0x7f00000010c0), &(0x7f0000001100)=0x80000001}) r19 = openat$cgroup_ro(r18, &(0x7f0000001180)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r19, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xf8, 0x13, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xd7, 0x8, "59f049faa706ac517940f76ba6e46b6013e0348d9a0713ed37cd1e6d86566773374476eb2b080883517e004c76a4586f264f3960e93595600daec42c83d968ce1c6b39ecf4ee62d165f6ded9749d4f2cd1f493dc628dffa1e3182ec7e6955777fc52de557f7a48804b17564fe346faf62616e40dad38f457d7d724d2b9ab9fecc5f4fa042dd8504df622de121a046b6d5690f04d557c80e03bcba2750914553df05af8036b53b44cf5d3597cd7856c8fa17b423e10951067d79c799c7e590cd672126af0de0b1c6d1ba4f7db4e854a1f8da1df"}, @NFTA_OBJ_USERDATA={0x9, 0x8, "b61ee2a5f0"}]}, 0xf8}, 0x1, 0x0, 0x0, 0xe16b594845852cd9}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r19, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x1, 0x4, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8c50}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001480), &(0x7f00000014c0)=0x4) 7.226544053s ago: executing program 3 (id=2660): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="150a00000000000061118c00000000001800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x40, 0x700, 0x0, 0x22412858, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @local, {[@ra={0x94, 0x4, 0x2000}, @timestamp={0x44, 0xc, 0xc6, 0x0, 0xb, [0x720, 0x4]}, @timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x8, [{@broadcast, 0x8}, {@empty, 0xfffffffd}, {@private=0xa010102, 0x1}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x48}}, 0x4040000) (async) socket$nl_generic(0x10, 0x3, 0x10) 7.127058633s ago: executing program 3 (id=2662): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'pim6reg\x00', {0x6}}) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r7, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r8, r9, 0x4, r5}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r11) sendmsg$NLBL_MGMT_C_REMOVEDEF(r11, 0x0, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) 6.482706983s ago: executing program 0 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0xc4, 0x30, 0x1, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_xt={0x6c, 0x13, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x3b, 0x6, "cd7f9f6173b1c9c05503fc1c57337ab69bb9416f0540241fb90dfeccd10f52f8e296c4de0518c03656f0949588058226380626d914111f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xc4}}, 0x0) 6.409075718s ago: executing program 0 (id=2672): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000040000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000200)='macvlan1\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000002c0)=0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x9, @local, 0x80000000}}, 0x1, 0xfffe}, 0x90) 6.237730414s ago: executing program 0 (id=2673): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x81, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 6.032268069s ago: executing program 0 (id=2676): unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e24, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) write$tun(0xffffffffffffffff, 0x0, 0xfce) 5.679367594s ago: executing program 4 (id=2679): socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 5.486707883s ago: executing program 4 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000a80)={0x0, @in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}, [0xc, 0xfff, 0x5, 0x2, 0x1, 0x0, 0x5, 0x5dd, 0x7fff, 0x2, 0x1, 0x10, 0x9b87, 0x5, 0x1]}, &(0x7f0000000b80)=0x100) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 32) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000580)) (async, rerun: 32) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r2, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) (rerun: 32) 5.184531412s ago: executing program 4 (id=2681): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.857881683s ago: executing program 0 (id=2683): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x2c020400) r3 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000500)={{r4, &(0x7f00000001c0)='ns/cgroup\x00', 0x2001, &(0x7f0000000200)={@align=0x3, {0x6, 0xff, 0x6, 0x8000}}, 0x40, &(0x7f00000002c0), &(0x7f0000000300)=0x1}, {[0x2, 0x4, 0x0, 0x4]}, 0xabc, 0x61, &(0x7f0000000340)=""/97}) r5 = socket(0x14, 0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaab057544d3b125bb564a7290086dd605e15"], 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x1}}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)}, {&(0x7f0000000100)="060a520a82495ea3601e28ac6704d68e66770dfb80861ae687fe742e313d4fcf64887fa88a6b5957e240b84b2950d0d43c47a1a7b071af66addb29da29a94a89c3a1140ae148d15543", 0x49}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4008000) 2.843174266s ago: executing program 4 (id=2684): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000181000"/28, @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000a8a000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 2.654602495s ago: executing program 4 (id=2687): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x114, 0xe}, {0x18, 0x110, 0xe, "c76a55c9"}], 0x28}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x42261, 0x2, 0x8001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="97eb010018000000"], &(0x7f0000000f80)=""/4115, 0x31, 0x1013, 0x1}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2a, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000080)={0x4, 0x5, 0x80000000, 0xa, 0xab, 0x0, 0x26ac}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}]}, 0x44}}, 0x48040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 2.298891685s ago: executing program 4 (id=2691): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000b4b2180000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x8c, &(0x7f0000001300)=""/140, 0x41100, 0xa}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xe01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x220, 0x20040}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20000090) recvmsg$can_j1939(r1, &(0x7f0000000a00)={&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/212, 0xd4}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000440)=""/8, 0x8}], 0x6, &(0x7f00000009c0)=""/29, 0x1d}, 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket(0x22, 0xa, 0x2) (async) r5 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) close(0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000028000000b70400000100000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000028000000b70400000100000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.108787697s ago: executing program 2 (id=2692): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000001020500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xc8, &(0x7f0000000040)=""/200}, 0x94) 1.978332831s ago: executing program 0 (id=2694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x25) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) (async) unshare(0x6a040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x2, 0x4e21, @loopback}, 0x6d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0xc34}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700050000000400000000000900020073797a310029bdc0d38f1d026029080a466fa7eed000000011000300"], 0x60}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x844}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) r5 = socket(0x840000000002, 0x3, 0xfc) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) (async, rerun: 64) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) (rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000d00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x10000, 0xf5, &(0x7f00000004c0)=""/245, 0x41000, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x10, 0xfff, 0x10000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x0, 0x0, 0xee, 0x0, &(0x7f0000000800)=""/238, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4020) 1.914620563s ago: executing program 2 (id=2695): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8, @any, 0xfdff}, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettfilter={0x34, 0x2e, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0xa}, {0xc, 0x4}, {0x7, 0x4}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xaa}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4080) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x400000, 0x2000001, {0x0, 0x0, 0x0, r3, {0x2}, {0xd, 0xfff2}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xa055}, 0x20008014) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, 0x50}}, 0x0) 1.803133374s ago: executing program 1 (id=2696): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x20000400) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8) listen(r0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4008000) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000001c0)=0x8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0x0, 0xfeac) sendmsg$nl_route(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) 1.447851483s ago: executing program 2 (id=2697): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc", 0xae}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000002700)="7182159d05118b143e133b2e78e4d4c045ed85e3bf8266604cd6e63dff2ba768781b2a9aef2643cc37dcb20f067677ff34eb0768325725cbd27c73637073a6590f000c5a4a16f384e20a8aa898428b50611b5d6603eed9e6000000000000008c05c1e3445f3b93cb8c241951a0d6e588f3840ccc3011bffa0124c9e6e6fe24cd819d3e42f1d7b2a68cc5abc301cd88219a6353fb4ec0ad2ca6f72ca7ed6de945219ae17d3fd2b8299b5aa61a5bda580404b29ea384950fdf6a4f63071733a2b01d32a508d2d6fa0dc261e638bf1968ae2ad756740b5408f64ec288ae00"/231, 0xe7}, {&(0x7f0000000300)="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", 0xca3}], 0x5}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2}, 0x40012220) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001040), 0x12) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001"], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r6, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r8, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x4c017}}], 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r11], 0x44}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3700}, [@IFLA_MASTER={0x8, 0xa, r14}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.086584395s ago: executing program 2 (id=2698): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 829.557438ms ago: executing program 1 (id=2699): socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000180)=0x4, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4005) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 768.40078ms ago: executing program 1 (id=2700): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0xfffffd4e) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000b00)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x9, 0x10, 0x5, 0x5, 0xfffffffffffffff7]}, &(0x7f0000000300)=0x78) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000e00)=ANY=[@ANYBLOB="344c3481f3ce333427ba58920000004a472c535d5605b46eba51a2e500", @ANYRES16=r5, @ANYBLOB="030f0000000000000000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000dc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x168, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3d, 0xa8, @random="eef352cd1d35c8131e309d08bc0de28bb4ff4a4834708e2dddbf271bc8ddbf7bd31c2c5fac44d7bcf4aec3449cf6f34594fdbcdadd25ed47a8"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4e, 0xa8, @random="2d659ed28cc48738fdd3ffce17a94af64ba5c62387b0b76801bbabe529200aca5c63ff498ea941784bbe0bb3f2844ed0e09bc8d356fe93249f06e9e5160dc4c4a3947e3a921e35e163e1"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/159, 0x9f}], 0x1}, 0xfbfffffe}], 0x1, 0x40000002, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) pselect6(0x40, &(0x7f0000000100)={0x6, 0x40000000, 0xe681, 0x100000004, 0x2, 0xd1, 0x10, 0x7ff}, &(0x7f0000000ac0)={0x8000, 0x9, 0x0, 0x4, 0x3, 0x1ff, 0xffffffff, 0xa8}, &(0x7f0000000340)={0x10000, 0x9, 0x0, 0x2, 0x2, 0x8, 0x7, 0x1}, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x2883]}, 0x8}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000004371520aa3bd7000fcdbdf25020000000d0001004241544d414e5f4956000000"], 0x24}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f00000006c0)=0x7ff, 0x525dafc) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)}, {&(0x7f0000000880)="8d2ec6b4f00861b33417430baf236916a28656a621d615d6ccf8988277e59dff1f12146add1a8b5ce4143481f18b87405ec1e079dd1673a40b7584b00eb15c0e440ac47a119ac3e2d3ac1af8758b65a4fdae2a25e36c6739841ef97eb102c68bd1e16aff804a75d5dbf428015c46906389feff2a6f1c47275d735dd017e51359f8c91712f83040568409733016ff06eeee79825e39ca6f43421f3a9fc6dc2898edfab3fe3ee0ea305c6d192867b435629cde5d34ca608306c8ab73f67ec47b85d6e64b7e9408119156bfff67456e74e91fcf9a14508369688c9df24e810d", 0xde}], 0x2}, 0x81) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="2c00000019aeae835ce45f51eebe500fa16dd74bc649b5d343793bd3a1eb6ad45f84eada76fb9ba9f3d206e939cecff8e778923c5f9349", @ANYRES16=r7, @ANYBLOB="00012bbd7000fbdbdf250e0000000800040001000000100001800c0007003600000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 590.512297ms ago: executing program 1 (id=2701): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x1ff}]}}}]}, 0x4c}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) r6 = socket$tipc(0x1e, 0x0, 0x0) listen(r6, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r7, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="d29f", 0x2}], 0x1}}, {{&(0x7f00000003c0)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4}, 0x14) 544.429403ms ago: executing program 1 (id=2702): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x9}, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r4, 0x0, 0x0, 0x141, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r3, 0x3, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r3, 0x3, 0x2}, 0x8) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x70, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x6, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9, 0x4}}, {0xc, 0x2, [0x4, 0x7f, 0x7, 0xd61]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) 454.319842ms ago: executing program 3 (id=2703): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000009f40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000009c00)=""/198, 0xc6}], 0x5}, 0x2}], 0x1, 0x2030, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x4) 198.187099ms ago: executing program 1 (id=2704): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) unshare(0x4020580) r1 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r1, &(0x7f0000000800), 0x2, 0x0) r2 = accept(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 195.505494ms ago: executing program 2 (id=2705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12}, 0x50) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000000c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000ffe4a69d539064b8af67f539d07ba6bd637f37bd35f5f801eb6a126f59b0c0c3830fb680e95d1e7b24223140f17fad5e105719e208cdebc70cd624ac312876b12b"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0xfffffeaa) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r2, 0x4) listen(r2, 0xffffffff) 34.06305ms ago: executing program 2 (id=2706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@multicast1, @in=@rand_addr=0x64010102, 0x4e23, 0x4da, 0x4e22, 0xb, 0xa, 0x80, 0xa0, 0x32}, {0x2, 0x4, 0x2, 0xc0ec, 0x5, 0x9, 0x24, 0xffffffff}, {0x81, 0x1, 0x2, 0x3}, 0xb148, 0x6e6bbc, 0x0, 0x0, 0x2, 0x2}, {{@in=@local, 0x4d2, 0x7b}, 0xa, @in=@private=0xa010100, 0x0, 0x7, 0x2, 0x0, 0x1, 0x6e}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x60}}, 0x80000c0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x4d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x4d, 0x0, @opaque="64ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"}}}}}}, 0x0) 0s ago: executing program 3 (id=2707): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000a952f62f0b93893e055b441ba043a48962b6227c03659419ec1c88424836166dd9f957bdd3eeadf0bb99bec80b65816437648fb30500000059eadd2ced294e2e0460ce093987339e65694d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x9a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) kernel console output (not intermixed with test programs): c_tx_timeout: lec0 [ 183.919912][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 183.969673][ T9810] bond2: (slave geneve3): making interface the new active one [ 184.004346][ T9810] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 184.015584][ T9817] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 184.025076][ T9811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.064401][ T6443] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.078184][ T9817] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 184.107851][ T6443] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.117308][ T6443] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.126561][ T9817] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 184.174468][ T9822] netlink: 'syz.0.976': attribute type 5 has an invalid length. [ 184.175782][ T6443] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.193691][ T9821] netlink: 'syz.0.976': attribute type 5 has an invalid length. [ 184.206188][ T6443] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.217090][ T9817] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 184.243017][ T6443] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.263268][ T6443] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.391198][ T9824] lo speed is unknown, defaulting to 1000 [ 184.612137][ T5886] lo speed is unknown, defaulting to 1000 [ 185.661718][ T9875] tipc: Failed to remove unknown binding: 66,1,1/1019045169:1402367671/1402367673 [ 185.671970][ T9875] tipc: Failed to remove unknown binding: 66,1,1/1019045169:1402367671/1402367673 [ 186.052531][ T9886] __nla_validate_parse: 77 callbacks suppressed [ 186.052554][ T9886] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.993'. [ 186.099538][ T9886] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 186.386459][ T9880] lec:lec_atm_close: lec0: Shut down! [ 186.587860][ T9904] rdma_rxe: rxe_newlink: failed to add lo [ 186.661416][ T9906] x_tables: duplicate underflow at hook 1 [ 186.700532][ T9908] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20002 [ 186.997587][ T9924] sctp: [Deprecated]: syz.3.1004 (pid 9924) Use of int in max_burst socket option. [ 186.997587][ T9924] Use struct sctp_assoc_value instead [ 187.340860][ T9931] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 187.345961][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 187.362484][ T9931] bond1 (unregistering): Released all slaves [ 187.434332][ T9937] macsec1: entered promiscuous mode [ 187.439855][ T9937] bridge0: entered promiscuous mode [ 187.445385][ T9937] macsec1: entered allmulticast mode [ 187.451791][ T9937] bridge0: entered allmulticast mode [ 187.458949][ T9937] bridge0: port 3(macsec1) entered blocking state [ 187.474391][ T9937] bridge0: port 3(macsec1) entered disabled state [ 187.496397][ T9937] bridge0: left allmulticast mode [ 187.512871][ T9937] bridge0: left promiscuous mode [ 187.667525][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.718613][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.748634][ T9943] batman_adv: batadv0: Removing interface: ipvlan2 [ 187.765059][ T9943] batman_adv: batadv0: Removing interface: macvtap1 [ 187.944412][ T9953] lo speed is unknown, defaulting to 1000 [ 187.948489][ T9950] validate_nla: 63 callbacks suppressed [ 187.948538][ T9950] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 188.019105][ T9950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1011'. [ 188.035287][ T9960] sctp: [Deprecated]: syz.1.1012 (pid 9960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.035287][ T9960] Use struct sctp_sack_info instead [ 188.087474][ T9956] lo speed is unknown, defaulting to 1000 [ 188.324702][ T9978] Unsupported ieee802154 address type: 0 [ 188.744602][ T9995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1022'. [ 188.901871][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 189.103946][T10000] ieee802154 phy0 wpan0: encryption failed: -90 [ 189.258888][T10009] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1026'. [ 189.279853][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 189.296114][T10009] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1026'. [ 189.433168][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 189.448758][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 189.827092][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.114917][T10045] netlink: 'syz.4.1037': attribute type 10 has an invalid length. [ 190.855997][T10043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.885554][T10049] ip6t_srh: unknown srh invflags BA61 [ 191.115817][T10056] __nla_validate_parse: 4 callbacks suppressed [ 191.115837][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'. [ 191.172247][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 191.240363][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.257840][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.291099][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.328551][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.364454][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.400292][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.427676][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.440938][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 191.749983][T10078] netlink: 'syz.0.1044': attribute type 9 has an invalid length. [ 191.846620][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms [ 191.854682][ C0] lec:lec_tx_timeout: lec0 [ 191.856929][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 191.894159][T10064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.669566][T10113] pim6reg: entered allmulticast mode [ 192.687156][T10114] pim6reg: left allmulticast mode [ 193.377491][T10156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.516186][T10151] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 194.102616][T10169] netlink: 'syz.3.1065': attribute type 10 has an invalid length. [ 194.123936][T10169] bond0: entered promiscuous mode [ 194.129317][T10169] bond_slave_0: entered promiscuous mode [ 194.135401][T10169] bond_slave_1: entered promiscuous mode [ 194.261978][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.272533][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.530967][T10187] netlink: 'syz.2.1067': attribute type 5 has an invalid length. [ 196.214429][T10222] __nla_validate_parse: 39 callbacks suppressed [ 196.214453][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 196.307291][T10222] bridge2: port 1(ip6gretap1) entered blocking state [ 196.332894][T10222] bridge2: port 1(ip6gretap1) entered disabled state [ 196.350179][T10222] ip6gretap1: entered allmulticast mode [ 196.366205][T10228] netlink: 'syz.1.1079': attribute type 10 has an invalid length. [ 196.380907][T10222] ip6gretap1: entered promiscuous mode [ 196.419818][T10235] netlink: 'syz.1.1079': attribute type 10 has an invalid length. [ 196.442896][T10230] bridge2: port 2(veth5) entered blocking state [ 196.461886][T10230] bridge2: port 2(veth5) entered disabled state [ 196.476454][T10230] veth5: entered allmulticast mode [ 196.494671][T10230] veth5: entered promiscuous mode [ 196.513029][T10230] bridge2: port 2(veth5) entered blocking state [ 196.519518][T10230] bridge2: port 2(veth5) entered forwarding state [ 196.604978][T10228] team0: Port device dummy0 added [ 196.678542][T10235] team0: Port device dummy0 removed [ 196.825377][T10235] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.864175][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 196.886565][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 196.894664][ C0] lec:lec_tx_timeout: lec0 [ 196.899426][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 196.918044][ T6423] bridge2: port 2(veth5) entered disabled state [ 196.945021][T10242] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1082'. [ 197.859997][T10269] bond3: entered allmulticast mode [ 198.743357][T10295] syzkaller0: entered promiscuous mode [ 198.758890][T10295] syzkaller0: entered allmulticast mode [ 198.876244][T10295] netlink: 'syz.1.1092': attribute type 3 has an invalid length. [ 199.016673][T10298] block nbd1: NBD_DISCONNECT [ 199.224745][T10301] lo speed is unknown, defaulting to 1000 [ 199.625852][T10323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1099'. [ 199.648885][T10319] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1099'. [ 199.769085][T10301] IPVS: length: 132 != 8 [ 199.798929][T10301] pimreg: entered allmulticast mode [ 199.823187][T10301] pimreg: left allmulticast mode [ 199.961755][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1101'. [ 200.065299][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 200.603914][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 200.613223][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 200.708290][T10340] block nbd0: not configured, cannot reconfigure [ 200.844900][T10343] xt_ipcomp: unknown flags 1D [ 200.989563][T10347] x_tables: ip_tables: ah match: only valid for protocol 51 [ 201.027894][T10343] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 201.724367][T10372] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.813517][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 201.833814][T10381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.882822][T10380] lo speed is unknown, defaulting to 1000 [ 201.906546][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 201.914720][ C0] lec:lec_tx_timeout: lec0 [ 201.919519][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 201.938358][T10372] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.970528][T10384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.990831][T10384] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 202.059143][T10372] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.152694][T10372] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.293431][ T6443] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.327871][ T6443] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.372519][ T6443] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.406096][ T6443] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.568500][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'. [ 202.627235][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1114'. [ 202.764542][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 203.033693][T10412] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 203.132075][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 203.141467][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'. [ 203.151129][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 203.177698][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'. [ 203.196147][T10412] syzkaller0: entered promiscuous mode [ 203.233740][T10412] syzkaller0: entered allmulticast mode [ 203.329974][T10419] unsupported nlmsg_type 40 [ 203.649908][T10435] tipc: Enabled bearer , priority 0 [ 203.689435][T10435] syzkaller0: entered promiscuous mode [ 203.706666][T10435] syzkaller0: entered allmulticast mode [ 203.918397][T10435] tipc: Resetting bearer [ 204.016962][T10433] tipc: Resetting bearer [ 204.070483][T10433] tipc: Disabling bearer [ 204.114387][T10454] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 204.185334][T10451] bridge26: entered promiscuous mode [ 204.201998][T10451] macsec1: entered promiscuous mode [ 204.232159][T10454] openvswitch: netlink: Message has 12 unknown bytes. [ 204.248622][T10451] bridge26: port 1(macsec1) entered blocking state [ 204.264867][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.294454][T10451] bridge26: port 1(macsec1) entered disabled state [ 204.311838][T10451] macsec1: entered allmulticast mode [ 204.328276][T10451] bridge26: entered allmulticast mode [ 204.342072][T10461] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 204.353520][T10451] macsec1: left allmulticast mode [ 204.355609][T10461] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 204.369386][T10451] bridge26: left allmulticast mode [ 204.397042][T10464] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 204.397425][T10451] bridge26: left promiscuous mode [ 204.405807][T10464] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 204.477228][T10456] lo speed is unknown, defaulting to 1000 [ 204.732019][T10473] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 204.874248][T10482] netlink: 'syz.2.1140': attribute type 89 has an invalid length. [ 204.915272][T10473] tipc: Started in network mode [ 204.920500][T10473] tipc: Node identity 00000000000000000000000300000001, cluster identity 4711 [ 204.930167][T10473] tipc: Enabling of bearer rejected, failed to enable media [ 205.132951][ T6423] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.148739][ T6423] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.226760][ T6423] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.259990][ T6423] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.518034][T10515] netlink: 'syz.2.1149': attribute type 9 has an invalid length. [ 205.578564][T10514] syzkaller0: entered promiscuous mode [ 205.584109][T10514] syzkaller0: entered allmulticast mode [ 206.103440][T10544] lo speed is unknown, defaulting to 1000 [ 206.229060][T10551] lo speed is unknown, defaulting to 1000 [ 206.244060][T10545] lo speed is unknown, defaulting to 1000 [ 206.678422][T10566] netlink: 'syz.2.1166': attribute type 3 has an invalid length. [ 206.926543][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 206.934637][ C0] lec:lec_tx_timeout: lec0 [ 206.939273][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.265939][T10611] netlink: 'syz.1.1176': attribute type 309 has an invalid length. [ 207.448951][T10614] syzkaller0: entered promiscuous mode [ 207.454509][T10614] syzkaller0: entered allmulticast mode [ 207.518567][T10614] 0: reclassify loop, rule prio 0, protocol 800 [ 207.549154][T10614] __nla_validate_parse: 11 callbacks suppressed [ 207.549175][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 207.654497][T10623] lo: Caught tx_queue_len zero misconfig [ 207.660365][T10623] netem: incorrect gi model size [ 207.665348][T10623] netem: change failed [ 207.700071][T10626] netlink: 'syz.3.1182': attribute type 13 has an invalid length. [ 207.844099][T10635] Bluetooth: MGMT ver 1.23 [ 207.929350][T10643] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1187'. [ 207.949233][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1186'. [ 208.219388][T10652] lo speed is unknown, defaulting to 1000 [ 208.593686][T10665] Unsupported ieee802154 address type: 0 [ 208.731525][T10665] lo speed is unknown, defaulting to 1000 [ 208.828169][T10680] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 208.898651][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 209.323425][T10704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1205'. [ 209.398157][T10704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.454174][T10704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.480674][T10704] bond0 (unregistering): Released all slaves [ 209.980051][T10730] lo speed is unknown, defaulting to 1000 [ 210.042949][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 210.064442][T10741] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 210.177837][T10747] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 210.178616][T10755] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1217'. [ 210.310959][T10741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.502947][T10748] netlink: 'syz.2.1217': attribute type 4 has an invalid length. [ 210.875640][T10774] block nbd0: Unsupported socket: should be TCP or UNIX. [ 210.888809][T10769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.965952][ T5885] lo speed is unknown, defaulting to 1000 [ 210.973141][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 211.008974][ T5885] syz2: Port: 1 Link DOWN [ 211.022177][T10775] pimreg3: entered allmulticast mode [ 211.145506][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1213'. [ 211.476281][T10795] netlink: 'syz.2.1228': attribute type 4 has an invalid length. [ 211.497546][T10795] netlink: 'syz.2.1228': attribute type 4 has an invalid length. [ 211.689033][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 211.689053][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 211.695113][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 211.714717][T10806] ipt_REJECT: TCP_RESET invalid for non-tcp [ 211.748659][ T5941] lo speed is unknown, defaulting to 1000 [ 211.946549][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 211.954686][ C0] lec:lec_tx_timeout: lec0 [ 211.959430][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 212.430397][ T5941] lo speed is unknown, defaulting to 1000 [ 212.437724][T10810] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 212.466659][T10816] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1233'. [ 212.798666][T10835] netlink: 'syz.4.1238': attribute type 1 has an invalid length. [ 212.882247][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.973117][T10844] vlan1: entered promiscuous mode [ 213.001201][T10844] bond0: entered promiscuous mode [ 213.006601][T10844] vlan1: entered allmulticast mode [ 213.013080][T10844] bond0: entered allmulticast mode [ 213.092188][T10852] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1242'. [ 213.122215][T10852] .70·: renamed from hsr0 [ 213.140300][T10852] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.191620][T10852] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.217671][T10852] .70·: entered allmulticast mode [ 213.228204][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 213.237688][T10852] hsr_slave_0: entered allmulticast mode [ 213.245754][T10852] hsr_slave_1: entered allmulticast mode [ 213.265792][T10852] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 213.356658][T10840] lo speed is unknown, defaulting to 1000 [ 213.882000][ T796] IPVS: starting estimator thread 0... [ 213.997113][T10886] IPVS: using max 27 ests per chain, 64800 per kthread [ 214.057159][T10885] lo speed is unknown, defaulting to 1000 [ 214.603958][T10911] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 214.623096][T10911] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 214.730797][T10913] macsec1: entered promiscuous mode [ 214.754311][T10913] bridge0: entered promiscuous mode [ 214.769782][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 214.918370][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 215.013319][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 215.136925][T10935] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 215.185903][T10935] bond1 (unregistering): Released all slaves [ 215.270276][T10940] wlan1 speed is unknown, defaulting to 1000 [ 215.281164][T10940] wlan1 speed is unknown, defaulting to 1000 [ 215.292667][T10940] wlan1 speed is unknown, defaulting to 1000 [ 215.370757][T10940] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.465379][T10957] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1270'. [ 215.479172][T10957] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 215.479952][T10940] wlan1 speed is unknown, defaulting to 1000 [ 215.516629][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 215.538125][T10960] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 215.554551][T10953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.586569][T10953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.606224][T10953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.628256][T10940] wlan1 speed is unknown, defaulting to 1000 [ 215.660954][T10963] netlink: 180568 bytes leftover after parsing attributes in process `syz.3.1270'. [ 215.671435][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 215.785404][T10957] bond1: (slave geneve2): making interface the new active one [ 215.846250][T10957] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 215.855880][T10940] wlan1 speed is unknown, defaulting to 1000 [ 215.869763][T10963] bond1 (unregistering): (slave geneve2): Releasing active interface [ 215.893926][T10963] bond1 (unregistering): Released all slaves [ 215.947261][T10953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.987137][T10953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.009779][T10953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.066033][T10940] wlan1 speed is unknown, defaulting to 1000 [ 216.074755][T10940] wlan1 speed is unknown, defaulting to 1000 [ 216.148503][T10953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.163559][T10953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.199612][T10953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.250127][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 216.326203][T10953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.346716][T10953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.361131][T10953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.607655][ T6437] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.615911][ T6437] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.645527][ T6437] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 216.730145][ T1088] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.738859][ T1088] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.780271][ T1088] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 216.919028][ T6431] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.944999][ T6431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.962971][ T6431] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 216.966753][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 216.979307][ C0] lec:lec_tx_timeout: lec0 [ 216.984619][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 216.997659][ T6431] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.012337][ T6431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 217.031072][ T6431] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.143734][T11034] IPVS: Unknown mcast interface: hsr0 [ 217.324219][T11043] x_tables: duplicate underflow at hook 1 [ 218.206599][T11101] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 218.223659][T11103] __nla_validate_parse: 1 callbacks suppressed [ 218.223680][T11103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1303'. [ 218.373079][T11109] IPVS: set_ctl: invalid protocol: 135 172.20.20.52:20002 [ 218.528934][T11115] vti0: entered allmulticast mode [ 218.546328][T11116] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 218.554388][T11116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.714555][T11118] lo speed is unknown, defaulting to 1000 [ 218.728709][T11118] wlan1 speed is unknown, defaulting to 1000 [ 218.915115][T11132] tipc: Disabling bearer [ 219.027407][T11131] syzkaller1: entered promiscuous mode [ 219.033457][T11131] syzkaller1: entered allmulticast mode [ 219.100639][T11142] vxcan3: entered promiscuous mode [ 219.417828][T11148] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 219.427048][T11148] syz_tun: entered promiscuous mode [ 219.463126][T11148] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.395625][T11192] sctp: [Deprecated]: syz.0.1328 (pid 11192) Use of int in maxseg socket option. [ 220.395625][T11192] Use struct sctp_assoc_value instead [ 220.443892][T11193] lo speed is unknown, defaulting to 1000 [ 220.484181][T11193] wlan1 speed is unknown, defaulting to 1000 [ 220.669227][T11208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1332'. [ 220.981085][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1335'. [ 221.033481][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1336'. [ 221.091090][T11226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1336'. [ 221.186596][T11213] lo speed is unknown, defaulting to 1000 [ 221.215138][T11213] wlan1 speed is unknown, defaulting to 1000 [ 221.303560][T11241] netlink: 'syz.0.1342': attribute type 101 has an invalid length. [ 221.350001][T11241] netlink: 'syz.0.1342': attribute type 7 has an invalid length. [ 221.722412][T11266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'. [ 221.752752][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 221.823787][T11269] nbd: couldn't find a device at index 65546 [ 221.869817][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 221.955574][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 221.975621][T11264] lo speed is unknown, defaulting to 1000 [ 221.996792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 222.004860][ C0] lec:lec_tx_timeout: lec0 [ 222.009561][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 222.017715][T11278] tipc: Enabled bearer , priority 10 [ 222.030250][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 222.059072][T11264] wlan1 speed is unknown, defaulting to 1000 [ 222.197316][T11285] netlink: 'syz.1.1352': attribute type 15 has an invalid length. [ 222.992621][T11336] netlink: 'syz.3.1365': attribute type 2 has an invalid length. [ 223.016145][T11336] vlan2: entered promiscuous mode [ 223.030044][T11336] macvtap0: entered promiscuous mode [ 223.362849][T11356] __nla_validate_parse: 6 callbacks suppressed [ 223.362965][T11356] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1372'. [ 223.675176][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 223.693675][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 224.036432][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'. [ 224.047381][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'. [ 224.478510][T11411] IPVS: fo: FWM 3 0x00000003 - no destination available [ 225.242917][T11451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'. [ 225.278719][T11451] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1396'. [ 225.669619][T11476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.769170][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 225.806760][T11484] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1401'. [ 226.411842][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1406'. [ 226.926613][T11542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.016588][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 227.024711][ C0] lec:lec_tx_timeout: lec0 [ 227.029424][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.284876][T11560] batadv_slave_0: entered promiscuous mode [ 227.409071][T11560] batadv_slave_0 (unregistering): left promiscuous mode [ 227.488221][T11563] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 227.509152][T11563] bridge3: entered allmulticast mode [ 227.604421][T11571] lo speed is unknown, defaulting to 1000 [ 227.652098][T11573] lo speed is unknown, defaulting to 1000 [ 227.691321][T11571] wlan1 speed is unknown, defaulting to 1000 [ 227.772301][T11573] wlan1 speed is unknown, defaulting to 1000 [ 228.065063][T11591] vlan2: entered promiscuous mode [ 228.072415][T11591] veth0_to_team: entered promiscuous mode [ 228.078926][T11591] vlan2: entered allmulticast mode [ 228.084175][T11591] veth0_to_team: entered allmulticast mode [ 228.423320][T11600] __nla_validate_parse: 3 callbacks suppressed [ 228.423342][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 228.488297][T11604] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1429'. [ 228.510112][T11604] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1429'. [ 228.652397][T11606] syzkaller0: entered promiscuous mode [ 228.658195][T11606] syzkaller0: entered allmulticast mode [ 228.984378][T11621] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 228.992304][T11621] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 229.061470][T11625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1437'. [ 229.645122][T11652] syzkaller0: entered promiscuous mode [ 229.651607][T11652] syzkaller0: entered allmulticast mode [ 229.663146][T11652] tipc: Enabled bearer , priority 0 [ 229.681752][T11651] tipc: Resetting bearer [ 229.704087][T11651] tipc: Disabling bearer [ 230.120460][T11677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1460'. [ 230.256617][T11686] tipc: Enabled bearer , priority 0 [ 230.268501][T11686] syzkaller0: entered promiscuous mode [ 230.277654][T11686] syzkaller0: entered allmulticast mode [ 230.295918][T11683] lo speed is unknown, defaulting to 1000 [ 230.323439][T11686] tipc: Resetting bearer [ 230.334844][T11686] xt_hashlimit: max too large, truncated to 1048576 [ 230.346169][T11686] xt_hashlimit: overflow, try lower: 13/0 [ 230.379331][T11683] wlan1 speed is unknown, defaulting to 1000 [ 230.391970][T11679] tipc: Resetting bearer [ 230.433482][T11679] tipc: Disabling bearer [ 230.471626][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 230.496754][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1464'. [ 230.715183][T11696] syzkaller0: entered promiscuous mode [ 230.729583][T11696] syzkaller0: entered allmulticast mode [ 230.773544][T11701] syzkaller0: entered promiscuous mode [ 230.783735][T11701] syzkaller0: entered allmulticast mode [ 230.994459][T11703] bond3: option ad_actor_sys_prio: invalid value (0) [ 231.032740][T11703] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 231.053819][T11713] netlink: 'syz.4.1468': attribute type 10 has an invalid length. [ 231.074019][T11703] bond3 (unregistering): Released all slaves [ 231.538197][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1475'. [ 231.631625][T11726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.678278][T11734] macsec2: entered promiscuous mode [ 231.697129][T11734] bond4: entered promiscuous mode [ 231.734082][T11734] bond4: left promiscuous mode [ 231.791277][T11739] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 231.803178][T11739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1479'. [ 232.036525][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 232.044591][ C0] lec:lec_tx_timeout: lec0 [ 232.050298][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 232.161326][T11751] lo speed is unknown, defaulting to 1000 [ 232.248037][T11751] wlan1 speed is unknown, defaulting to 1000 [ 232.388107][T11743] lo speed is unknown, defaulting to 1000 [ 232.548303][T11789] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 232.563535][T11790] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 232.608360][T11791] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 232.697099][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1489'. [ 232.794734][T11793] bond1: entered promiscuous mode [ 232.801197][T11793] bond1: entered allmulticast mode [ 232.808404][T11793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.857824][T11796] bridge1: entered promiscuous mode [ 232.863449][T11796] bridge1: entered allmulticast mode [ 232.869685][T11796] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 232.882176][T11743] wlan1 speed is unknown, defaulting to 1000 [ 232.898361][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 232.919831][T11803] pim6reg99999999: entered allmulticast mode [ 233.037175][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 233.285140][T11823] sctp: [Deprecated]: syz.3.1501 (pid 11823) Use of int in max_burst socket option deprecated. [ 233.285140][T11823] Use struct sctp_assoc_value instead [ 233.760543][T11847] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 233.905652][T11854] __nla_validate_parse: 2 callbacks suppressed [ 233.905675][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 234.133907][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 234.143030][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 234.157254][T11862] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 234.169853][T11862] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 234.235284][T11867] netlink: 'syz.4.1511': attribute type 21 has an invalid length. [ 234.243446][T11867] netlink: 'syz.4.1511': attribute type 22 has an invalid length. [ 234.273700][T11867] netlink: 'syz.4.1511': attribute type 23 has an invalid length. [ 234.301963][T11867] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1511'. [ 234.383799][T11877] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1516'. [ 234.394100][T11875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.427152][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 234.507523][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 234.567606][T11883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1517'. [ 234.809637][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 234.839992][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 234.864570][T11899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.610829][T11939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.974371][T11946] tipc: New replicast peer: 255.255.255.255 [ 235.986592][T11946] tipc: Enabled bearer , priority 10 [ 236.026872][T11946] tipc: Enabling of bearer rejected, already enabled [ 236.034870][T11946] tipc: Enabling of bearer rejected, already enabled [ 236.105392][T11951] syzkaller0: entered promiscuous mode [ 236.126750][T11951] syzkaller0: entered allmulticast mode [ 236.156425][T11950] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 236.384815][T11953] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 237.056543][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 237.064616][ C0] lec:lec_tx_timeout: lec0 [ 237.069421][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 237.097589][ T796] tipc: Node number set to 622887512 [ 238.072694][T12027] netlink: 'syz.0.1553': attribute type 13 has an invalid length. [ 238.090871][T12027] netlink: 'syz.0.1553': attribute type 17 has an invalid length. [ 238.258994][T12027] syz_tun: left promiscuous mode [ 238.337626][T12027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.376287][T12027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.956350][T12034] netlink: 'syz.4.1555': attribute type 10 has an invalid length. [ 239.092920][T12060] __nla_validate_parse: 3 callbacks suppressed [ 239.092941][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1559'. [ 239.242393][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 239.273471][T12066] syzkaller1: entered promiscuous mode [ 239.280508][T12066] syzkaller1: entered allmulticast mode [ 239.292019][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1560'. [ 239.483129][T12075] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 239.500648][T12075] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 239.553678][T12071] lo speed is unknown, defaulting to 1000 [ 239.648602][T12071] wlan1 speed is unknown, defaulting to 1000 [ 240.080779][T12081] IPVS: length: 132 != 8 [ 240.089212][T12095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.261039][T12104] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 240.274273][T12104] bond4 (unregistering): Released all slaves [ 240.344938][T12109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.357533][T12109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.368626][T12109] hsr0: entered promiscuous mode [ 240.373622][T12109] hsr0: entered allmulticast mode [ 240.379598][T12109] hsr_slave_0: entered allmulticast mode [ 240.385280][T12109] hsr_slave_1: entered allmulticast mode [ 240.728390][T12124] lo speed is unknown, defaulting to 1000 [ 240.736081][T12124] wlan1 speed is unknown, defaulting to 1000 [ 240.771694][T12128] rdma_op ffff8880564c91f0 conn xmit_rdma 0000000000000000 [ 240.796815][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'. [ 240.918027][T12130] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.1574'. [ 240.929282][T12130] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 240.951868][T12139] netlink: 'syz.3.1576': attribute type 4 has an invalid length. [ 240.969797][T12139] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1576'. [ 241.210742][T12152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1580'. [ 241.248383][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1579'. [ 241.263345][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1579'. [ 241.272760][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1579'. [ 242.130005][T12207] macvtap1: entered promiscuous mode [ 242.151339][T12207] veth1_to_hsr: entered promiscuous mode [ 242.169527][T12207] macvtap1: entered allmulticast mode [ 242.174979][T12207] veth1_to_hsr: entered allmulticast mode [ 242.308053][T12207] openvswitch: netlink: Flow key attr not present in new flow. [ 242.520103][T12230] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.550848][T12230] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.584982][T12230] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.623998][T12233] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 242.673487][T12230] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.706020][T12230] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.723629][T12230] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.797546][T12230] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.814746][T12230] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.835537][T12230] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.886510][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 242.894609][ C0] lec:lec_tx_timeout: lec0 [ 242.899325][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 242.945311][T12230] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.991364][T12230] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.018246][T12230] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.211337][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.237037][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.258709][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.271973][T12260] xt_hashlimit: max too large, truncated to 1048576 [ 243.284713][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.306024][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.317535][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.343612][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.352428][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.362526][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.398248][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.406727][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.415041][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.438240][T12229] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.449346][T12229] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.459412][T12229] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.525430][T12229] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.546565][T12229] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.576880][T12229] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.635322][T12229] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.652505][T12229] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.678367][T12229] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.757951][T12229] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.768112][T12229] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.786813][T12229] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.254674][T12302] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 244.458745][T12308] ip6gre0: entered allmulticast mode [ 244.515787][T12318] __nla_validate_parse: 10 callbacks suppressed [ 244.515810][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 244.790846][T12329] bond5: (slave veth5): Enslaving as an active interface with a down link [ 244.869082][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 244.878312][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 244.891241][T12339] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1629'. [ 244.920029][T12321] bond5: (slave veth7): Enslaving as an active interface with a down link [ 244.953327][T12339] netlink: 'syz.0.1629': attribute type 2 has an invalid length. [ 245.127848][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 245.316170][T12348] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 245.429498][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 245.508615][T12371] netlink: 'syz.0.1637': attribute type 4 has an invalid length. [ 245.554193][T12371] netlink: 'syz.0.1637': attribute type 4 has an invalid length. [ 245.586713][T12371] bridge0: entered allmulticast mode [ 245.604888][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 245.620576][T12375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1639'. [ 245.626926][T12371] bridge_slave_1: left allmulticast mode [ 245.635367][T12371] bridge_slave_1: left promiscuous mode [ 245.642559][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.658260][T12371] bridge_slave_0: left allmulticast mode [ 245.664083][T12371] bridge_slave_0: left promiscuous mode [ 245.677083][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.733792][T12371] bridge0 (unregistering): left allmulticast mode [ 245.989251][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 246.002269][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 246.015777][T12402] C: renamed from team_slave_0 [ 246.022778][T12402] netlink: 'syz.0.1642': attribute type 1 has an invalid length. [ 246.031447][T12402] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 246.136884][T12404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.706162][T12440] xt_hashlimit: size too large, truncated to 1048576 [ 246.731146][ T1088] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.747794][ T1088] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.767580][ T1088] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.809018][ T6443] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.821038][ T6443] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.849498][ T6443] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.891930][ T6443] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.901628][ T6443] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.912362][ T6443] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.945692][ T6443] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.971662][ T6443] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.007086][ T6443] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 247.303491][T12468] netlink: Conntrack attr has 3 unknown bytes [ 247.761217][T12476] netlink: 'syz.4.1661': attribute type 3 has an invalid length. [ 247.769961][T12476] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 247.906523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 247.914663][ C0] lec:lec_tx_timeout: lec0 [ 247.919632][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 248.432486][T12483] wlan1 speed is unknown, defaulting to 1000 [ 248.737667][T12516] netlink: 'syz.3.1669': attribute type 10 has an invalid length. [ 248.834634][T12516] bond0: left promiscuous mode [ 248.854872][T12516] bond_slave_0: left promiscuous mode [ 248.872956][T12516] bond_slave_1: left promiscuous mode [ 248.898915][T12516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.908080][T12516] bond0: entered promiscuous mode [ 248.913272][T12516] bond_slave_0: entered promiscuous mode [ 248.919405][T12516] bond_slave_1: entered promiscuous mode [ 248.927303][T12516] team0: Port device bond0 added [ 249.336152][T12545] netlink: 'syz.4.1675': attribute type 13 has an invalid length. [ 249.434576][T12545] pim6reg1: entered promiscuous mode [ 249.450739][T12545] pim6reg1: entered allmulticast mode [ 249.584509][T12556] __nla_validate_parse: 11 callbacks suppressed [ 249.584532][T12556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1679'. [ 249.779772][ T1088] tipc: Subscription rejected, illegal request [ 250.175642][T12574] wlan1 speed is unknown, defaulting to 1000 [ 250.531906][T12602] bridge29: entered promiscuous mode [ 250.538149][T12602] bridge29: entered allmulticast mode [ 250.553531][T12602] team0: Port device bridge29 added [ 251.074365][T12623] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = -2, id = 0 [ 251.129833][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 251.182680][T12626] netlink: 'syz.3.1698': attribute type 1 has an invalid length. [ 251.227347][T12621] netlink: 'syz.2.1697': attribute type 4 has an invalid length. [ 251.257011][T12621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1697'. [ 251.657413][T12647] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 251.786042][T12650] tipc: Trying to set illegal importance in message [ 251.797787][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1703'. [ 251.854458][T12652] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 251.935961][T12652] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 251.971917][T12647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1703'. [ 252.069298][T12656] bond0: (slave bridge6): Enslaving as an active interface with a down link [ 252.124672][T12652] macvlan3: entered promiscuous mode [ 252.143765][T12652] macvlan3: entered allmulticast mode [ 252.150676][T12652] bond0: entered promiscuous mode [ 252.158570][T12652] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 252.168988][T12652] bond0: left promiscuous mode [ 252.425380][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1711'. [ 252.435971][T12682] netlink: zone id is out of range [ 252.455492][T12682] netlink: zone id is out of range [ 252.461183][T12682] netlink: zone id is out of range [ 252.469576][T12682] netlink: zone id is out of range [ 252.474761][T12682] netlink: zone id is out of range [ 252.481397][T12682] netlink: zone id is out of range [ 252.488980][T12682] netlink: zone id is out of range [ 252.494392][T12682] netlink: zone id is out of range [ 252.501550][T12682] netlink: zone id is out of range [ 252.509565][T12690] : renamed from bond_slave_0 [ 252.514562][T12682] netlink: zone id is out of range [ 252.788389][T12703] wlan1 speed is unknown, defaulting to 1000 [ 252.926504][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 252.934603][ C0] lec:lec_tx_timeout: lec0 [ 252.940041][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.437886][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 253.500356][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 253.622233][T12745] veth0_vlan: left promiscuous mode [ 253.878763][T12758] netlink: 'syz.1.1731': attribute type 1 has an invalid length. [ 253.893484][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 253.914347][T12758] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 253.914662][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 254.308250][T12793] netlink: 'syz.2.1740': attribute type 2 has an invalid length. [ 254.445013][T12800] netlink: 'syz.1.1742': attribute type 61 has an invalid length. [ 254.464301][ T6437] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.475638][ T6437] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.494455][ T6437] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.585257][ T6437] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.752323][T12817] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.760568][T12817] bridge0: entered allmulticast mode [ 255.351252][T12834] sit0: entered promiscuous mode [ 255.368120][T12834] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 255.402248][T12834] __nla_validate_parse: 67 callbacks suppressed [ 255.402271][T12834] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1751'. [ 255.427876][T12838] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 255.435913][T12838] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1751'. [ 255.696722][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.644490][T12867] xt_hashlimit: max too large, truncated to 1048576 [ 256.713372][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 256.736626][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 256.757266][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 256.777618][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 256.881401][T12903] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1765'. [ 257.042965][T12913] syzkaller0: entered promiscuous mode [ 257.059251][T12913] syzkaller0: entered allmulticast mode [ 257.351965][T12928] netlink: 'syz.1.1772': attribute type 2 has an invalid length. [ 257.394466][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1773'. [ 257.465140][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 257.489259][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 257.516279][T12932] sctp: [Deprecated]: syz.0.1774 (pid 12932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.516279][T12932] Use struct sctp_sack_info instead [ 257.643798][T12934] wlan1 speed is unknown, defaulting to 1000 [ 257.946504][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 257.954603][ C0] lec:lec_tx_timeout: lec0 [ 257.959297][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 257.994847][T12950] xt_bpf: check failed: parse error [ 258.799882][ T30] audit: type=1800 audit(1772519245.934:6): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1786" name="memory.events" dev="tmpfs" ino=1816 res=0 errno=0 [ 259.254167][T12992] wlan1 speed is unknown, defaulting to 1000 [ 259.523845][T12998] gretap2: entered promiscuous mode [ 259.536384][T12999] geneve3: entered allmulticast mode [ 259.633201][T13002] netlink: 'syz.3.1794': attribute type 58 has an invalid length. [ 259.768576][T13004] tipc: Enabled bearer , priority 0 [ 260.027611][T13014] wlan1 speed is unknown, defaulting to 1000 [ 260.132412][T13023] wlan1 speed is unknown, defaulting to 1000 [ 260.224912][T13020] wlan1 speed is unknown, defaulting to 1000 [ 260.957873][ T796] tipc: Node number set to 2 [ 260.964365][T13072] __nla_validate_parse: 11 callbacks suppressed [ 260.964383][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1812'. [ 261.103198][T13070] raw_sendmsg: syz.1.1812 forgot to set AF_INET. Fix it! [ 261.267146][T13078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 261.304876][T13076] syzkaller0: entered promiscuous mode [ 261.319920][T13076] syzkaller0: entered allmulticast mode [ 261.330282][T13078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 261.631406][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 262.198062][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 262.967398][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 262.975523][ C0] lec:lec_tx_timeout: lec0 [ 262.980253][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 263.343750][T13125] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 263.363174][T13125] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 263.442492][T13133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1827'. [ 263.501522][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 263.759638][T13152] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1832'. [ 263.824869][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 263.835698][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 263.861368][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.868636][T13155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.880872][T13155] bridge0: left allmulticast mode [ 263.892157][T13155] net_ratelimit: 127 callbacks suppressed [ 263.892169][T13155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.081017][T13174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.106153][T13174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.146848][T13174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.160824][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.203483][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.214387][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.223467][T13174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.247561][T13178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.254907][T13174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.291210][T13174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.538953][T13187] wlan1 speed is unknown, defaulting to 1000 [ 264.860082][T13201] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 264.971213][T13203] dummy0: entered allmulticast mode [ 265.848053][T13226] netlink: 'syz.3.1854': attribute type 2 has an invalid length. [ 265.865279][T13228] netlink: 'syz.3.1854': attribute type 2 has an invalid length. [ 265.887732][T13202] dummy0: left allmulticast mode [ 265.926797][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.938749][T13226] : entered promiscuous mode [ 266.468596][T13252] __nla_validate_parse: 2 callbacks suppressed [ 266.468617][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 266.663652][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 266.779642][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1866'. [ 267.054413][T13283] xt_connbytes: Forcing CT accounting to be enabled [ 267.075453][T13285] netlink: 'syz.0.1869': attribute type 2 has an invalid length. [ 267.148518][T13285] !©9: entered promiscuous mode [ 267.373597][T13298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1872'. [ 267.382909][T13298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1872'. [ 267.393598][T13299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1874'. [ 267.518642][T13305] SET target dimension over the limit! [ 267.729798][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 267.986500][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 267.994669][ C0] lec:lec_tx_timeout: lec0 [ 267.999431][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 268.189019][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 268.203472][T13337] xfrm0: Caught tx_queue_len zero misconfig [ 268.273175][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 268.417184][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 269.161612][T13379] syzkaller1: entered promiscuous mode [ 269.168456][T13379] syzkaller1: entered allmulticast mode [ 269.373883][T13393] wlan1 speed is unknown, defaulting to 1000 [ 270.494931][T13463] netlink: 'syz.4.1917': attribute type 4 has an invalid length. [ 270.560556][T13465] netlink: 'syz.4.1917': attribute type 4 has an invalid length. [ 270.844790][T13483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.852141][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 270.859481][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 271.448690][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.830850][T13471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.860849][T13471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.137152][T13471] veth1_macvtap: left allmulticast mode [ 272.278103][T13471] macsec0: left allmulticast mode [ 272.479287][T13488] __nla_validate_parse: 6 callbacks suppressed [ 272.479310][T13488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1922'. [ 272.525830][T10817] wlan1 speed is unknown, defaulting to 1000 [ 272.525856][ T1097] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.547356][T10817] óyz2: Port: 1 Link DOWN [ 272.586580][ T1097] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.610156][ T1097] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.639361][ T1097] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.676737][ T1097] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.685165][ T1097] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.719545][ T1097] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.729546][T13523] netlink: 'syz.0.1927': attribute type 15 has an invalid length. [ 272.744313][ T1097] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.758560][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 272.958680][T13533] wlan1 speed is unknown, defaulting to 1000 [ 273.001816][T13538] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1931'. [ 273.010903][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.010938][ C0] lec:lec_tx_timeout: lec0 [ 273.019193][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 273.090463][T13542] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1934'. [ 273.191282][T13538] wlan1 speed is unknown, defaulting to 1000 [ 273.343269][T13552] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 273.442597][T13552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.474566][T13552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1939'. [ 273.560019][T13560] wlan1 speed is unknown, defaulting to 1000 [ 273.808170][T13569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1944'. [ 273.871653][T13576] sctp: [Deprecated]: syz.4.1947 (pid 13576) Use of int in max_burst socket option. [ 273.871653][T13576] Use struct sctp_assoc_value instead [ 273.989329][T13578] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1945'. [ 274.058939][T13580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1949'. [ 274.091663][T13582] net_ratelimit: 268 callbacks suppressed [ 274.091684][T13582] openvswitch: netlink: IP tunnel dst address not specified [ 274.129400][T13583] openvswitch: netlink: IP tunnel dst address not specified [ 274.228611][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 274.271055][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1950'. [ 274.632847][T13605] wlan1 speed is unknown, defaulting to 1000 [ 274.792188][T13601] wlan1 speed is unknown, defaulting to 1000 [ 274.906401][T13616] netlink: 'syz.4.1956': attribute type 4 has an invalid length. [ 275.281846][T13651] netlink: 'syz.0.1964': attribute type 3 has an invalid length. [ 275.318046][T13651] netlink: 'syz.0.1964': attribute type 10 has an invalid length. [ 275.346225][T13651] syz_tun: entered promiscuous mode [ 275.557836][ T6437] bond1: (slave bridge1): link status up again after 0 ms [ 275.607477][ T1097] bond1: (slave bridge1): link status up again after 0 ms [ 275.636104][ T1097] bond1: (slave bridge1): failed to get link speed/duplex [ 275.777259][ T6423] bond1: (slave bridge1): failed to get link speed/duplex [ 275.855576][T13678] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 275.916611][ T6423] bond1: (slave bridge1): failed to get link speed/duplex [ 275.925417][T13680] netlink: 'syz.3.1972': attribute type 96 has an invalid length. [ 276.036644][ T6423] bond1: (slave bridge1): failed to get link speed/duplex [ 276.156701][ T6423] bond1: (slave bridge1): failed to get link speed/duplex [ 276.298345][ T6443] bond1: (slave bridge1): failed to get link speed/duplex [ 276.379406][T13709] xt_bpf: check failed: parse error [ 276.388444][T13709] lo speed is unknown, defaulting to 1000 [ 276.394316][T13709] lo speed is unknown, defaulting to 1000 [ 276.408417][T13709] lo speed is unknown, defaulting to 1000 [ 276.448401][T13709] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 276.541016][T13709] lo speed is unknown, defaulting to 1000 [ 276.571891][T13709] lo speed is unknown, defaulting to 1000 [ 276.598816][T13709] lo speed is unknown, defaulting to 1000 [ 276.620816][T13709] lo speed is unknown, defaulting to 1000 [ 276.680437][T13709] lo speed is unknown, defaulting to 1000 [ 276.813975][T13724] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 276.828924][T10817] IPVS: starting estimator thread 0... [ 276.931269][T13732] IPVS: using max 25 ests per chain, 60000 per kthread [ 277.122616][T13746] netlink: 'syz.1.1990': attribute type 1 has an invalid length. [ 277.135835][T13740] bond7: entered allmulticast mode [ 277.171184][T13746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.194781][T13747] bond4: (slave ip6erspan0): making interface the new active one [ 277.204453][T13747] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 277.215949][T13746] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 277.227906][T13747] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 277.238917][T13742] syzkaller0: entered promiscuous mode [ 277.257614][T13742] syzkaller0: entered allmulticast mode [ 277.275572][T13742] tipc: Enabled bearer , priority 0 [ 277.305890][T13738] tipc: Resetting bearer [ 277.330338][T13738] tipc: Disabling bearer [ 277.367730][T13751] syzkaller1: entered promiscuous mode [ 277.373623][T13751] syzkaller1: entered allmulticast mode [ 277.435877][T13753] FAULT_INJECTION: forcing a failure. [ 277.435877][T13753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.476700][T13753] CPU: 0 UID: 0 PID: 13753 Comm: syz.4.1992 Not tainted syzkaller #0 PREEMPT(full) [ 277.476731][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.476750][T13753] Call Trace: [ 277.476758][T13753] [ 277.476768][T13753] dump_stack_lvl+0xe8/0x150 [ 277.476811][T13753] should_fail_ex+0x412/0x560 [ 277.476843][T13753] _copy_from_iter+0x1d3/0x1670 [ 277.476875][T13753] ? rcu_is_watching+0x15/0xb0 [ 277.476912][T13753] ? __pfx__copy_from_iter+0x10/0x10 [ 277.476949][T13753] ? netlink_sendmsg+0x650/0xb40 [ 277.476975][T13753] ? skb_put+0x11b/0x210 [ 277.477009][T13753] netlink_sendmsg+0x6c0/0xb40 [ 277.477046][T13753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.477086][T13753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 277.477114][T13753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.477140][T13753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.477166][T13753] ____sys_sendmsg+0xa68/0xad0 [ 277.477208][T13753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.477250][T13753] ? import_iovec+0x73/0xa0 [ 277.477284][T13753] ___sys_sendmsg+0x2a5/0x360 [ 277.477322][T13753] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.477393][T13753] ? __fget_files+0x2a/0x420 [ 277.477422][T13753] ? __fget_files+0x3a0/0x420 [ 277.477464][T13753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 277.477499][T13753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.477542][T13753] ? __pfx_ksys_write+0x10/0x10 [ 277.477577][T13753] do_syscall_64+0x14d/0xf80 [ 277.477606][T13753] ? trace_irq_disable+0x3b/0x150 [ 277.477637][T13753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.477658][T13753] ? clear_bhb_loop+0x40/0x90 [ 277.477684][T13753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.477706][T13753] RIP: 0033:0x7fcf36d9c799 [ 277.477737][T13753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.477757][T13753] RSP: 002b:00007fcf37b8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.477788][T13753] RAX: ffffffffffffffda RBX: 00007fcf37015fa0 RCX: 00007fcf36d9c799 [ 277.477804][T13753] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 277.477817][T13753] RBP: 00007fcf37b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.477831][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.477843][T13753] R13: 00007fcf37016038 R14: 00007fcf37015fa0 R15: 00007fff71664748 [ 277.477877][T13753] [ 278.036798][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 278.044937][ C0] lec:lec_tx_timeout: lec0 [ 278.050035][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 278.230290][T13794] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 278.269792][T13798] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 278.351737][T13800] __nla_validate_parse: 14 callbacks suppressed [ 278.351763][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 278.390618][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 278.501059][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 278.516862][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 278.526271][T13800] netlink: 'syz.1.2003': attribute type 5 has an invalid length. [ 279.106626][ T1088] net_ratelimit: 203 callbacks suppressed [ 279.106649][ T1088] bond1: (slave bridge1): failed to get link speed/duplex [ 279.266780][ T1088] bond1: (slave bridge1): failed to get link speed/duplex [ 279.376708][ T6443] bond1: (slave bridge1): failed to get link speed/duplex [ 279.388804][T13851] netlink: 'syz.4.2017': attribute type 10 has an invalid length. [ 279.398501][T13851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2017'. [ 279.487321][T13856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.516753][ T1097] bond1: (slave bridge1): failed to get link speed/duplex [ 279.636886][ T1088] bond1: (slave bridge1): failed to get link speed/duplex [ 279.674048][T13872] IPv6: sit2: Disabled Multicast RS [ 279.746738][ T1097] bond1: (slave bridge1): failed to get link speed/duplex [ 279.812030][T13878] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 279.823515][T13878] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2026'. [ 279.833843][T13878] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 279.842742][T13878] netlink: 'syz.2.2026': attribute type 8 has an invalid length. [ 279.858622][T13878] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2026'. [ 279.867851][ T1088] bond1: (slave bridge1): failed to get link speed/duplex [ 279.874476][T13890] xt_hashlimit: size too large, truncated to 1048576 [ 279.882202][T13890] xt_hashlimit: max too large, truncated to 1048576 [ 279.905295][T13878] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2026'. [ 279.996852][ T1088] bond1: (slave bridge1): failed to get link speed/duplex [ 280.079981][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2029'. [ 280.106868][ T6443] bond1: (slave bridge1): failed to get link speed/duplex [ 280.153417][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2032'. [ 280.682385][T13921] tun0: tun_chr_ioctl cmd 1074025677 [ 280.699543][T13921] tun0: linktype set to 778 [ 280.822816][T13928] C: renamed from team_slave_0 [ 280.892674][T13928] netlink: 'syz.2.2039': attribute type 1 has an invalid length. [ 280.913042][T13933] tc_dump_action: action bad kind [ 280.924705][T13931] tc_dump_action: action bad kind [ 281.103190][T13943] tipc: Enabled bearer , priority 0 [ 281.152306][T13953] netlink: 'syz.2.2046': attribute type 4 has an invalid length. [ 281.304520][T13943] syzkaller0: entered promiscuous mode [ 281.311142][T13943] syzkaller0: entered allmulticast mode [ 281.317878][T13943] tipc: Resetting bearer [ 281.444056][ T6437] tipc: Resetting bearer [ 281.483981][T13939] tipc: Resetting bearer [ 283.060621][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 283.068714][ C0] lec:lec_tx_timeout: lec0 [ 283.073337][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 283.498623][T13939] tipc: Disabling bearer [ 283.516330][T13945] wlan1 speed is unknown, defaulting to 1000 [ 283.524687][T13945] lo speed is unknown, defaulting to 1000 [ 283.528059][T13973] __nla_validate_parse: 17 callbacks suppressed [ 283.528111][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 283.555958][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'. [ 283.586713][T13973] netlink: 'syz.1.2051': attribute type 5 has an invalid length. [ 283.898166][T13997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2057'. [ 284.206581][ T6443] net_ratelimit: 17 callbacks suppressed [ 284.206603][ T6443] bond1: (slave bridge1): failed to get link speed/duplex [ 284.356787][ T6437] bond1: (slave bridge1): failed to get link speed/duplex [ 284.555169][T14019] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 284.608206][T14019] bond8 (unregistering): Released all slaves [ 284.661523][T14038] openvswitch: netlink: Message has 572 unknown bytes. [ 284.668786][ T6423] bond1: (slave bridge1): failed to get link speed/duplex [ 284.676678][T14038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.703734][T14034] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 284.771408][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 284.802497][ T6443] bond1: (slave bridge1): failed to get link speed/duplex [ 284.817778][T14026] wlan1 speed is unknown, defaulting to 1000 [ 284.853340][T14026] lo speed is unknown, defaulting to 1000 [ 284.967568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.977447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.986141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.067457][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 285.076705][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 285.096228][T14053] tap0: tun_chr_ioctl cmd 1074025677 [ 285.104338][T14058] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2068'. [ 285.107835][T14053] tap0: linktype set to 769 [ 285.155376][ T6437] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.164625][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 285.164652][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 285.164682][T14056] netlink: 'syz.3.2067': attribute type 5 has an invalid length. [ 285.190964][ T6437] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.209090][ T6437] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.223878][ T6437] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.388033][T14071] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 285.447223][T14072] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 285.858069][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 286.002866][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.195366][T14110] wlan1 speed is unknown, defaulting to 1000 [ 286.209094][T14110] lo speed is unknown, defaulting to 1000 [ 286.370247][T14118] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 286.384805][T14124] nbd: must specify a size in bytes for the device [ 286.398609][T14122] netlink: 'syz.3.2074': attribute type 3 has an invalid length. [ 286.481481][T14118] bond8: entered promiscuous mode [ 286.490741][T14118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.567466][T14119] bond8: entered allmulticast mode [ 286.573781][T14079] netlink: 'syz.3.2074': attribute type 5 has an invalid length. [ 286.819881][T14166] netlink: 'syz.4.2090': attribute type 30 has an invalid length. [ 286.903355][T14166] bond9: option arp_missed_max: invalid value (0) [ 286.910746][T14166] bond9: option arp_missed_max: allowed values 1 - 255 [ 286.924123][T14166] bond9 (unregistering): Released all slaves [ 287.285206][T14182] wlan1 speed is unknown, defaulting to 1000 [ 287.295259][T14182] lo speed is unknown, defaulting to 1000 [ 287.820893][T14215] vlan2: entered promiscuous mode [ 287.825973][T14215] geneve1: entered promiscuous mode [ 287.877761][T14215] vlan2: entered allmulticast mode [ 287.882957][T14215] geneve1: entered allmulticast mode [ 288.339850][T14244] netlink: 'syz.0.2110': attribute type 13 has an invalid length. [ 288.349780][T14196] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 288.936146][T14273] __nla_validate_parse: 46 callbacks suppressed [ 288.936168][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2118'. [ 288.957285][T14273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2118'. [ 288.966494][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5890 ms [ 288.974571][ C0] lec:lec_tx_timeout: lec0 [ 288.981589][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.078298][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'. [ 289.120773][T14278] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.168916][T14278] macsec2: entered promiscuous mode [ 289.184463][T14278] bond7: entered promiscuous mode [ 289.201456][T14278] bond7: left promiscuous mode [ 289.237451][ T13] net_ratelimit: 30 callbacks suppressed [ 289.237475][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 289.377983][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 289.526736][ T5834] Bluetooth: hci4: command 0x0401 tx timeout [ 289.529353][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 289.663267][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 289.708677][T14311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2130'. [ 289.721713][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 289.731903][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2130'. [ 289.752106][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.760649][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 289.770017][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.781228][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.792929][T14312] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2130'. [ 289.802483][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2130'. [ 289.817609][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.836646][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 289.844251][T14275] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.966756][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 289.981211][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 290.015014][T14320] netlink: 'syz.0.2133': attribute type 6 has an invalid length. [ 290.027272][T14319] netlink: 'syz.0.2133': attribute type 6 has an invalid length. [ 290.086580][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 290.197142][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 290.216214][T14334] netlink: 'syz.3.2137': attribute type 1 has an invalid length. [ 290.346616][T14141] bond1: (slave bridge1): failed to get link speed/duplex [ 290.466901][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 291.741821][T14377] netlink: 'syz.3.2153': attribute type 1 has an invalid length. [ 291.890095][T14381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.901157][T14381] bond3: (slave bond4): making interface the new active one [ 291.910244][T14381] bond3: (slave bond4): Enslaving as an active interface with an up link [ 291.952110][T14377] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 291.980456][T14381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.043966][T14377] vlan4: entered promiscuous mode [ 292.049384][T14377] bond3: entered promiscuous mode [ 292.054621][T14377] bond4: entered promiscuous mode [ 292.130377][T14394] wlan1 speed is unknown, defaulting to 1000 [ 292.190807][T14394] lo speed is unknown, defaulting to 1000 [ 292.368840][T14415] sctp: [Deprecated]: syz.1.2166 (pid 14415) Use of int in max_burst socket option. [ 292.368840][T14415] Use struct sctp_assoc_value instead [ 293.026977][T14453] wlan1 speed is unknown, defaulting to 1000 [ 293.034875][T14453] lo speed is unknown, defaulting to 1000 [ 293.315984][T14472] netlink: 'syz.0.2183': attribute type 1 has an invalid length. [ 293.514617][T14477] bond5: (slave geneve3): making interface the new active one [ 293.527773][T14477] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 293.577549][T14480] bond5 (unregistering): (slave geneve3): Releasing active interface [ 293.594249][T14480] bond5 (unregistering): Released all slaves [ 293.640804][T14487] netlink: 'syz.4.2185': attribute type 1 has an invalid length. [ 293.757452][T14487] 8021q: adding VLAN 0 to HW filter on device bond9 [ 293.798896][T14487] netlink: 'syz.4.2185': attribute type 5 has an invalid length. [ 293.815133][T14489] bond9: option resend_igmp: invalid value (2805) [ 293.822217][T14489] bond9: option resend_igmp: allowed values 0 - 255 [ 293.899624][T14501] atomic_op ffff88803285b198 conn xmit_atomic 0000000000000000 [ 293.996504][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 294.004566][ C0] lec:lec_tx_timeout: lec0 [ 294.009748][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 294.148421][T14517] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 294.191930][T14516] __nla_validate_parse: 15 callbacks suppressed [ 294.191953][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 294.226797][T14521] xt_recent: Unsupported userspace flags (000000b1) [ 294.338884][ T1088] net_ratelimit: 26 callbacks suppressed [ 294.338907][ T1088] bond1: (slave bridge1): failed to get link speed/duplex [ 294.424460][T14525] wlan1 speed is unknown, defaulting to 1000 [ 294.468326][T14525] lo speed is unknown, defaulting to 1000 [ 294.477506][ T6429] bond1: (slave bridge1): failed to get link speed/duplex [ 294.617072][ T6422] bond1: (slave bridge1): failed to get link speed/duplex [ 294.721416][T14541] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 294.737519][T14162] bond1: (slave bridge1): failed to get link speed/duplex [ 294.897888][ T737] bond1: (slave bridge1): failed to get link speed/duplex [ 295.081869][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 295.164332][T14562] netlink: 744 bytes leftover after parsing attributes in process `syz.4.2205'. [ 295.206938][ T6429] bond1: (slave bridge1): failed to get link speed/duplex [ 295.219398][T14566] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 295.295815][T14572] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 295.368510][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 295.466419][T14588] netlink: 'syz.3.2211': attribute type 10 has an invalid length. [ 295.512612][T14592] pimreg: entered allmulticast mode [ 295.556630][ T1088] bond1: (slave bridge1): failed to get link speed/duplex [ 295.667462][T14580] netlink: 'syz.1.2208': attribute type 10 has an invalid length. [ 295.721869][T14599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2215'. [ 295.798531][T14607] netlink: 'syz.3.2216': attribute type 3 has an invalid length. [ 295.825113][T14580] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.845879][T14607] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2216'. [ 295.880908][T14609] lo: Caught tx_queue_len zero misconfig [ 295.887031][T14609] sch_tbf: burst 240 is lower than device lo mtu (1294) ! [ 295.950623][ T5142] Bluetooth: hci4: command 0x0401 tx timeout [ 296.184886][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 296.347839][T14636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2225'. [ 296.360303][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 296.380077][T14636] batadv1: entered promiscuous mode [ 296.416950][T14636] batadv1: entered allmulticast mode [ 296.454472][T14636] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 296.610880][T14651] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2229'. [ 296.643777][T14654] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2230'. [ 296.838301][T14662] validate_nla: 2 callbacks suppressed [ 296.838324][T14662] netlink: 'syz.3.2233': attribute type 10 has an invalid length. [ 296.864746][T14662] veth0_vlan: left promiscuous mode [ 296.886101][T14662] veth0_vlan: entered promiscuous mode [ 296.905392][T14662] team0: Device veth0_vlan failed to register rx_handler [ 297.559110][T14694] netlink: 'syz.3.2240': attribute type 1 has an invalid length. [ 297.587419][T14694] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2240'. [ 297.626198][T14696] netlink: 'syz.2.2241': attribute type 39 has an invalid length. [ 297.726737][T14700] netlink: 'syz.2.2241': attribute type 5 has an invalid length. [ 297.840368][T14696] vlan3: entered allmulticast mode [ 298.186163][T14722] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 298.267941][T14733] netlink: 'syz.2.2245': attribute type 11 has an invalid length. [ 298.323565][T14730] wlan1 speed is unknown, defaulting to 1000 [ 298.379949][T14730] lo speed is unknown, defaulting to 1000 [ 298.674542][T14742] x_tables: unsorted entry at hook 3 [ 298.693924][T14745] bond5: entered promiscuous mode [ 298.713291][T14745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.803095][T14749] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.830479][T14749] bond6: entered promiscuous mode [ 298.838114][T14749] bond5: (slave bond6): Enslaving as an active interface with an up link [ 299.016526][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 299.024663][ C0] lec:lec_tx_timeout: lec0 [ 299.029616][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 299.200385][T14766] tunl0: Caught tx_queue_len zero misconfig [ 299.266706][T14761] wlan1 speed is unknown, defaulting to 1000 [ 299.280227][T14768] __nla_validate_parse: 5 callbacks suppressed [ 299.280247][T14768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2256'. [ 299.303423][T14761] lo speed is unknown, defaulting to 1000 [ 299.376719][ T6429] net_ratelimit: 25 callbacks suppressed [ 299.376740][ T6429] bond1: (slave bridge1): failed to get link speed/duplex [ 299.608896][ T6422] bond1: (slave bridge1): failed to get link speed/duplex [ 300.272622][T14805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2263'. [ 300.696631][ T6429] bond1: (slave bridge1): failed to get link speed/duplex [ 300.775272][T14823] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2271'. [ 300.845775][T14817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2269'. [ 300.889548][T14823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.935045][T14823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.962702][T14823] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 300.979150][T14823] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 300.999837][T14823] bond0 (unregistering): Released all slaves [ 301.029985][T14833] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2274'. [ 301.036890][T14162] bond1: (slave bridge1): failed to get link speed/duplex [ 301.048287][T14816] delete_channel: no stack [ 301.057904][T14833] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 301.073635][T14833] ..0ªî{X¹¦: entered allmulticast mode [ 301.105740][T14833] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 301.166898][ T6429] bond1: (slave bridge1): failed to get link speed/duplex [ 301.198489][T14839] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.228167][T14839] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.256609][T14839] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.324793][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 301.353210][T14839] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.365643][T14839] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.377797][T14851] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2280'. [ 301.391322][T14839] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.441826][T14841] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 301.470923][ T29] lo speed is unknown, defaulting to 1000 [ 301.477563][T14162] bond1: (slave bridge1): failed to get link speed/duplex [ 301.489286][T14855] netlink: 'syz.3.2281': attribute type 1 has an invalid length. [ 301.550560][T14855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.567126][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 301.597245][ T6429] bond1: (slave bridge1): failed to get link speed/duplex [ 301.605339][T14860] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 301.643515][T14860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.654236][T14839] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.679452][T14839] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.690238][T14839] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.714017][T14853] macvlan4: entered promiscuous mode [ 301.719617][T14853] macvlan4: entered allmulticast mode [ 301.725377][T14853] bond7: entered allmulticast mode [ 301.731219][T14853] bond7: entered promiscuous mode [ 301.737341][T14853] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 301.748405][T14853] team0: Port device macvlan4 added [ 301.825487][T14860] bond0: (slave veth9): Enslaving as an active interface with a down link [ 301.871385][T14860] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2282'. [ 301.890999][T14864] bond0: (slave dummy0): making interface the new active one [ 301.921737][T14864] dummy0: entered promiscuous mode [ 301.972699][T14864] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 302.008815][T14839] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.028205][T14839] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 302.047535][T14878] netlink: 'syz.3.2284': attribute type 16 has an invalid length. [ 302.055711][T14878] netlink: 'syz.3.2284': attribute type 17 has an invalid length. [ 302.062282][T14839] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.131425][T14860] bond0: (slave dummy0): Releasing active interface [ 302.172968][T14860] dummy0 (unregistering): left promiscuous mode [ 302.217670][ T737] bond1: (slave bridge1): link status up again after 0 ms [ 302.238567][T14878] ..0ªî{X¹¦: left allmulticast mode [ 302.250284][T14878] ip6gre0: left allmulticast mode [ 302.357694][ T6429] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.365959][ T6429] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.382646][ T6429] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.425569][ T6429] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.444886][ T6429] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.464005][ T6429] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.563566][T14892] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2288'. [ 302.564962][ T737] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.626858][ T737] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.631369][T14895] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 302.666673][ T737] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.675000][ T737] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.699298][T14895] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 302.726778][ T737] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.748575][ T737] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.936695][T14913] netlink: 'syz.4.2295': attribute type 13 has an invalid length. [ 302.969732][T14917] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.000110][T14917] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.013927][T14922] FAULT_INJECTION: forcing a failure. [ 303.013927][T14922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.037073][T14917] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.055054][T14922] CPU: 1 UID: 0 PID: 14922 Comm: syz.2.2297 Not tainted syzkaller #0 PREEMPT(full) [ 303.055084][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.055098][T14922] Call Trace: [ 303.055105][T14922] [ 303.055113][T14922] dump_stack_lvl+0xe8/0x150 [ 303.055149][T14922] should_fail_ex+0x412/0x560 [ 303.055178][T14922] _copy_from_user+0x2d/0xb0 [ 303.055208][T14922] ___sys_sendmsg+0x1c6/0x360 [ 303.055247][T14922] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.055317][T14922] ? __fget_files+0x2a/0x420 [ 303.055346][T14922] ? __fget_files+0x3a0/0x420 [ 303.055385][T14922] __x64_sys_sendmsg+0x1bd/0x2a0 [ 303.055419][T14922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.055462][T14922] ? __pfx_ksys_write+0x10/0x10 [ 303.055498][T14922] do_syscall_64+0x14d/0xf80 [ 303.055527][T14922] ? trace_irq_disable+0x3b/0x150 [ 303.055556][T14922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.055578][T14922] ? clear_bhb_loop+0x40/0x90 [ 303.055605][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.055626][T14922] RIP: 0033:0x7f7537b9c799 [ 303.055646][T14922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.055664][T14922] RSP: 002b:00007f7538afc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.055687][T14922] RAX: ffffffffffffffda RBX: 00007f7537e16090 RCX: 00007f7537b9c799 [ 303.055703][T14922] RDX: 00000000240000a0 RSI: 0000200000001200 RDI: 0000000000000006 [ 303.055718][T14922] RBP: 00007f7538afc090 R08: 0000000000000000 R09: 0000000000000000 [ 303.055741][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.055754][T14922] R13: 00007f7537e16128 R14: 00007f7537e16090 R15: 00007fff5aa87148 [ 303.055789][T14922] [ 303.350077][T14918] wlan1 speed is unknown, defaulting to 1000 [ 303.370682][T14917] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.387882][T14917] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.398116][T14917] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.420687][T14918] lo speed is unknown, defaulting to 1000 [ 303.518560][T14917] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.528666][T14917] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.538907][T14917] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.618179][T14917] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.628517][T14917] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.638911][T14917] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.922310][T14951] wlan1 speed is unknown, defaulting to 1000 [ 303.930730][T14951] lo speed is unknown, defaulting to 1000 [ 304.046530][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 304.054645][ C0] lec:lec_tx_timeout: lec0 [ 304.060202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 304.417102][T14162] net_ratelimit: 25 callbacks suppressed [ 304.417122][T14162] bond1: (slave bridge1): failed to get link speed/duplex [ 304.458868][T14980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.477039][T14983] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 304.488787][T14980] __nla_validate_parse: 10 callbacks suppressed [ 304.488806][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 304.574366][T14983] veth1: left allmulticast mode [ 304.601082][T14989] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 304.635724][T14983] bond7: left allmulticast mode [ 304.641443][T14983] bond7: left promiscuous mode [ 304.650452][ T6422] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.660507][ T6422] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.705982][ T6422] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.727984][ T6422] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.763361][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'. [ 304.905746][T14999] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2314'. [ 305.084332][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2315'. [ 305.296853][T15013] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 305.351330][T15015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2317'. [ 305.432306][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2318'. [ 305.508106][T15023] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 305.514064][T15023] pim6reg0: persist disabled [ 305.523685][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2318'. [ 305.541398][T15018] netlink: 'syz.0.2318': attribute type 1 has an invalid length. [ 305.643163][T15031] vxcan1: entered promiscuous mode [ 305.749286][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 305.761323][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 305.937616][ T6422] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.946415][ T6422] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.966266][ T6422] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 305.990699][ T6422] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.006592][ T6422] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.014947][ T6422] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 306.055673][T14162] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.064069][T14162] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.083645][T14162] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 306.104682][T14162] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.148877][T14162] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.158166][T14162] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 306.262403][T15056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.353208][T15061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2331'. [ 306.749223][T15089] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 306.796064][T15089] syzkaller0: entered promiscuous mode [ 306.802124][T15089] syzkaller0: entered allmulticast mode [ 306.814874][T15092] tipc: Enabling of bearer rejected, already enabled [ 306.849028][T15092] tipc: Resetting bearer [ 308.017233][T15140] wlan1 speed is unknown, defaulting to 1000 [ 308.025362][T15140] lo speed is unknown, defaulting to 1000 [ 308.345190][T15159] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 308.378649][T15161] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 309.020453][T15200] xt_bpf: check failed: parse error [ 309.603507][T15231] __nla_validate_parse: 12 callbacks suppressed [ 309.603528][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 309.635049][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2369'. [ 309.660553][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 309.674654][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2369'. [ 309.838917][T15243] bridge30: entered promiscuous mode [ 309.844384][T15243] bridge30: entered allmulticast mode [ 309.855066][T15243] team0: Port device bridge30 added [ 309.856540][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 309.868592][ C0] lec:lec_tx_timeout: lec0 [ 309.873285][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.882954][T15243] bridge0: port 1(team0) entered blocking state [ 309.893319][T15243] bridge0: port 1(team0) entered disabled state [ 309.900806][T15243] team0: entered allmulticast mode [ 309.909476][T15243] team0: entered promiscuous mode [ 309.916319][T15243] bridge0: port 1(team0) entered blocking state [ 309.923115][T15243] bridge0: port 1(team0) entered forwarding state [ 310.015531][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 310.028515][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'. [ 310.040467][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 310.050344][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'. [ 310.341662][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'. [ 310.356722][T15269] bridge_slave_0: left allmulticast mode [ 310.368119][T15269] bridge_slave_0: left promiscuous mode [ 310.383683][T15269] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.457476][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2381'. [ 311.118475][T15274] bond5: option lacp_active: invalid value (8) [ 311.137770][T15274] bond5 (unregistering): Released all slaves [ 311.278254][T15279] tipc: Resetting bearer [ 311.315317][T15292] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 311.317248][T15293] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 311.613944][ T737] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.652863][ T737] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.661180][ T737] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.684856][ T737] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.205340][T15337] sit0: left promiscuous mode [ 312.361366][T15337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.555338][T15359] netlink: 'syz.0.2401': attribute type 10 has an invalid length. [ 312.661780][T15366] team1: entered promiscuous mode [ 312.672670][T15366] team1: entered allmulticast mode [ 312.693607][T15366] 8021q: adding VLAN 0 to HW filter on device team1 [ 312.751474][T15366] openvswitch: netlink: Message has -2 unknown bytes. [ 312.777239][T15366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.804727][T15369] team2: entered promiscuous mode [ 312.815573][T15369] team2: entered allmulticast mode [ 312.821813][T15369] 8021q: adding VLAN 0 to HW filter on device team2 [ 312.846692][T15374] geneve2: entered promiscuous mode [ 312.853218][T15374] geneve2: entered allmulticast mode [ 313.098413][T15382] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.224219][T15382] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.391218][T15382] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.484678][T15382] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.664440][T14141] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.683067][T14141] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.756642][T14141] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.795517][ T1088] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.003283][T15426] netlink: 'syz.3.2419': attribute type 2 has an invalid length. [ 314.064796][T15426] l24): entered promiscuous mode [ 314.747988][T15461] netlink: 'syz.3.2432': attribute type 3 has an invalid length. [ 314.776296][T15461] __nla_validate_parse: 19 callbacks suppressed [ 314.776322][T15461] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2432'. [ 314.811427][T15469] netlink: 'syz.1.2435': attribute type 10 has an invalid length. [ 314.886654][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 314.894733][ C0] lec:lec_tx_timeout: lec0 [ 314.899477][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 314.925058][T15469] bridge0: port 1(team0) entered disabled state [ 314.945006][T15469] team0: left allmulticast mode [ 314.961203][T15469] team0: left promiscuous mode [ 314.968545][T15469] bridge0: port 1(team0) entered disabled state [ 314.998030][T15469] team0: Cannot enslave team device to itself [ 315.393979][T15500] wlan1 speed is unknown, defaulting to 1000 [ 315.474670][T15500] lo speed is unknown, defaulting to 1000 [ 315.512715][T15507] x_tables: duplicate underflow at hook 1 [ 315.666245][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 315.964337][T15516] sctp: [Deprecated]: syz.1.2443 (pid 15516) Use of int in max_burst socket option. [ 315.964337][T15516] Use struct sctp_assoc_value instead [ 316.111305][T15529] macsec0: entered allmulticast mode [ 316.141697][T15530] netlink: 'syz.2.2445': attribute type 12 has an invalid length. [ 316.170193][T15530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2445'. [ 316.273459][T15535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2449'. [ 316.575981][T15543] SET target dimension over the limit! [ 316.717710][T15551] wlan1 speed is unknown, defaulting to 1000 [ 316.728993][T15551] lo speed is unknown, defaulting to 1000 [ 317.133986][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.622028][T15575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2461'. [ 317.715928][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2462'. [ 317.725505][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2462'. [ 317.922812][T15584] wlan1 speed is unknown, defaulting to 1000 [ 317.951148][T15584] lo speed is unknown, defaulting to 1000 [ 317.960739][T15586] netlink: 'syz.3.2464': attribute type 2 has an invalid length. [ 318.112775][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'. [ 318.136639][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2466'. [ 318.180861][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'. [ 318.612963][T15607] openvswitch: netlink: Flow key attr not present in new flow. [ 318.935251][T15621] bond5: option mode: unable to set because the bond device has slaves [ 319.072851][T15632] ipt_ECN: cannot use operation on non-tcp rule [ 319.132535][T15634] veth0: entered promiscuous mode [ 319.159534][T15629] wlan1 speed is unknown, defaulting to 1000 [ 319.178502][T15633] veth0: left promiscuous mode [ 319.203927][T15629] lo speed is unknown, defaulting to 1000 [ 319.323396][T15642] sctp: [Deprecated]: syz.3.2481 (pid 15642) Use of int in max_burst socket option. [ 319.323396][T15642] Use struct sctp_assoc_value instead [ 319.421220][T15623] wlan1 speed is unknown, defaulting to 1000 [ 319.435026][T15623] lo speed is unknown, defaulting to 1000 [ 319.776694][T15658] __nla_validate_parse: 6 callbacks suppressed [ 319.776719][T15658] netlink: 5992 bytes leftover after parsing attributes in process `syz.2.2485'. [ 319.825093][T15658] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2485'. [ 319.906583][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.914719][ C0] lec:lec_tx_timeout: lec0 [ 319.919562][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 320.067494][T15662] wlan1 speed is unknown, defaulting to 1000 [ 320.088543][T15662] lo speed is unknown, defaulting to 1000 [ 320.116257][T15672] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2490'. [ 320.772456][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 321.071801][T15711] bond8: option miimon: invalid value (18446744073709551607) [ 321.079961][T15711] bond8: option miimon: allowed values 0 - 2147483647 [ 321.092124][T15711] bond8 (unregistering): Released all slaves [ 321.353794][T15728] sctp: [Deprecated]: syz.0.2509 (pid 15728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.353794][T15728] Use struct sctp_sack_info instead [ 321.374780][T15729] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 321.418522][T15729] bond5: (slave lo): Enslaving as an active interface with an up link [ 321.441075][T15729] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 321.566397][T15738] wlan1 speed is unknown, defaulting to 1000 [ 321.587708][T15735] syzkaller1: entered promiscuous mode [ 321.620193][T15735] syzkaller1: entered allmulticast mode [ 321.642266][T15738] lo speed is unknown, defaulting to 1000 [ 321.801311][T15717] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2504'. [ 321.862557][T15747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2504'. [ 322.012939][T15766] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2517'. [ 322.031292][T15766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2517'. [ 322.241526][T15769] syzkaller1: entered promiscuous mode [ 322.288067][T15769] syzkaller1: entered allmulticast mode [ 322.307929][T15775] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 322.495949][T15787] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2524'. [ 322.523095][T15787] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 322.549354][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 322.814782][T15805] tipc: Enabled bearer , priority 0 [ 324.204694][T15873] wlan1 speed is unknown, defaulting to 1000 [ 324.222138][T15873] lo speed is unknown, defaulting to 1000 [ 324.388743][T15871] wlan1 speed is unknown, defaulting to 1000 [ 324.426025][T15871] lo speed is unknown, defaulting to 1000 [ 324.671222][T15892] syzkaller1: entered promiscuous mode [ 324.686688][T15892] syzkaller1: entered allmulticast mode [ 324.804318][T15900] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2556'. [ 324.846642][T15900] netlink: 'syz.2.2556': attribute type 61 has an invalid length. [ 324.926475][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 324.934574][ C0] lec:lec_tx_timeout: lec0 [ 324.940221][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 324.953173][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2557'. [ 324.969936][T15905] vlan0: entered promiscuous mode [ 324.975054][T15905] geneve1: entered promiscuous mode [ 324.995735][T15905] vlan0: entered allmulticast mode [ 325.020047][T15905] geneve1: entered allmulticast mode [ 325.143894][T15913] macsec2: entered allmulticast mode [ 325.149589][T15913] veth1: entered allmulticast mode [ 325.160399][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 325.179659][T15899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2555'. [ 325.252125][T15915] vxcan5: entered allmulticast mode [ 325.287454][T15915] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2560'. [ 325.332357][T15915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2560'. [ 325.847816][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'. [ 326.194634][T15967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2574'. [ 326.236749][T15967] ip6tnl0: Caught tx_queue_len zero misconfig [ 326.634144][T15985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2579'. [ 326.849364][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2581'. [ 327.238185][T16014] netlink: 'syz.4.2587': attribute type 5 has an invalid length. [ 327.738072][T16036] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 327.809250][T16041] netlink: 'syz.3.2591': attribute type 11 has an invalid length. [ 327.820887][T16041] netlink: 'syz.3.2591': attribute type 23 has an invalid length. [ 327.999429][T16041] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 328.017106][T16035] gretap0: entered promiscuous mode [ 329.144250][T16092] netlink: 'syz.3.2611': attribute type 15 has an invalid length. [ 329.201150][T16103] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 329.250148][T16103] netlink: 'syz.0.2613': attribute type 61 has an invalid length. [ 329.290090][T16105] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.946468][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 329.954547][ C0] lec:lec_tx_timeout: lec0 [ 329.959863][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 330.248670][T16150] __nla_validate_parse: 14 callbacks suppressed [ 330.248693][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2622'. [ 330.326920][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'. [ 330.714053][T16176] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 330.791190][T16186] IPv6: Can't replace route, no match found [ 330.801824][T16186] IPv6: Can't replace route, no match found [ 331.217662][T16203] syzkaller0: left promiscuous mode [ 331.222950][T16203] syzkaller0: left allmulticast mode [ 331.675411][T16238] netlink: 'syz.0.2642': attribute type 2 has an invalid length. [ 331.703952][T16238] !: entered promiscuous mode [ 331.738652][T16228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2639'. [ 331.748300][T16239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2639'. [ 332.023349][T16255] bond10 (unregistering): Released all slaves [ 332.057342][T16260] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2649'. [ 332.119203][T16243] wlan1 speed is unknown, defaulting to 1000 [ 332.138535][T16243] lo speed is unknown, defaulting to 1000 [ 332.189987][T16266] netlink: 'syz.1.2650': attribute type 4 has an invalid length. [ 332.206801][T10817] lo speed is unknown, defaulting to 1000 [ 332.214283][T10817] syz2: Port: 1 Link DOWN [ 332.410029][T16275] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2652'. [ 332.735420][T16289] syzkaller1: entered promiscuous mode [ 332.743146][T16290] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20003 [ 332.754816][T16289] syzkaller1: entered allmulticast mode [ 333.082553][T16303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2661'. [ 333.173073][T16303] bond8: entered promiscuous mode [ 333.178817][T16303] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.200654][T16308] lo speed is unknown, defaulting to 1000 [ 333.238588][T16308] lo speed is unknown, defaulting to 1000 [ 333.245187][T16308] lo speed is unknown, defaulting to 1000 [ 333.332591][T16310] netlink: 'syz.0.2664': attribute type 2 has an invalid length. [ 333.426726][T16314] veth1: entered promiscuous mode [ 333.443422][T16314] veth1: entered allmulticast mode [ 333.465911][T16314] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 333.489938][T16317] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2665'. [ 333.721549][ T796] lo speed is unknown, defaulting to 1000 [ 333.728574][T16308] infiniband syz0: set down [ 333.733468][T16308] infiniband syz0: added lo [ 333.862767][T16308] RDS/IB: syz0: added [ 333.889747][T16308] smc: adding ib device syz0 with port count 1 [ 333.921770][T16334] wg1: entered promiscuous mode [ 333.924152][T16308] smc: ib device syz0 port 1 has no pnetid [ 333.939754][T16334] wg1: entered allmulticast mode [ 333.977273][ T796] lo speed is unknown, defaulting to 1000 [ 334.006689][T16308] lo speed is unknown, defaulting to 1000 [ 334.015110][T16341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2674'. [ 334.610320][T16308] lo speed is unknown, defaulting to 1000 [ 334.755475][T16364] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 334.783978][T16364] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 334.802272][T16364] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 334.820681][T16364] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 334.848371][T16364] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 334.967491][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 334.975601][ C0] lec:lec_tx_timeout: lec0 [ 334.980271][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 337.162932][T16369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.239950][T16308] lo speed is unknown, defaulting to 1000 [ 337.448883][T16381] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2685'. [ 337.476710][T16381] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.542587][T16385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2686'. [ 337.575008][T16385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2686'. [ 337.908981][T16308] lo speed is unknown, defaulting to 1000 [ 338.002015][T16400] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 338.039812][T16404] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 338.095961][T16403] wlan1 speed is unknown, defaulting to 1000 [ 338.120559][T16403] lo speed is unknown, defaulting to 1000 [ 338.242417][T16419] xt_hashlimit: size too large, truncated to 1048576 [ 338.315934][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2695'. [ 338.342457][T16415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2694'. [ 338.396750][T16421] bridge_slave_0 (unregistering): left promiscuous mode [ 338.414171][T16421] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.498960][T16412] wlan1 speed is unknown, defaulting to 1000 [ 338.517563][T16412] lo speed is unknown, defaulting to 1000 [ 338.544686][T16308] lo speed is unknown, defaulting to 1000 [ 338.744514][T16429] validate_nla: 20 callbacks suppressed [ 338.744538][T16429] netlink: 'syz.2.2697': attribute type 1 has an invalid length. [ 338.818240][T16431] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2697'. [ 338.835948][T16429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.854566][T16431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2697'. [ 338.904983][T16429] bond9: (slave bridge11): making interface the new active one [ 338.915729][T16429] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 339.065241][T16403] lo speed is unknown, defaulting to 1000 [ 339.299171][T16412] lo speed is unknown, defaulting to 1000 [ 339.537973][T16441] bridge31: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 339.696995][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 339.707592][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 339.735644][T16447] netlink: 'syz.1.2702': attribute type 9 has an invalid length. [ 339.749076][T16446] netlink: 'syz.1.2702': attribute type 9 has an invalid length. [ 339.842944][T16452] netlink: 'syz.3.2703': attribute type 10 has an invalid length. [ 339.887778][T16450] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 339.986490][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 339.994690][ C0] lec:lec_tx_timeout: lec0 [ 340.000273][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.018352][T16452] syz_tun: entered promiscuous mode [ 340.050848][T16452] team0: Port device syz_tun added [ 340.227040][T16458] wlan1 speed is unknown, defaulting to 1000 [ 340.267914][T16458] lo speed is unknown, defaulting to 1000 [ 340.291834][T16458] lo speed is unknown, defaulting to 1000 [ 340.312686][T16403] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 340.324647][T16403] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 340.333103][T16403] CPU: 1 UID: 0 PID: 16403 Comm: syz.4.2691 Not tainted syzkaller #0 PREEMPT(full) [ 340.342515][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.352616][T16403] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 340.358396][T16403] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd e8 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 e8 57 f7 4d 8b 75 00 4d 8d a7 30 [ 340.378053][T16403] RSP: 0018:ffffc9001bb17828 EFLAGS: 00010046 [ 340.384165][T16403] RAX: 0000000000000000 RBX: ffff888059801400 RCX: dffffc0000000000 [ 340.392178][T16403] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff888059801400 [ 340.400194][T16403] RBP: ffff888053586000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 340.408213][T16403] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff88802ef52650 [ 340.416256][T16403] R13: 0000000000000000 R14: ffff888059801430 R15: ffff88802ef52000 [ 340.424272][T16403] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 340.433242][T16403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.439873][T16403] CR2: 000055a6d64ed560 CR3: 000000001beec000 CR4: 00000000003526f0 [ 340.447895][T16403] Call Trace: [ 340.451213][T16403] [ 340.454178][T16403] lec_push+0x3cb/0x19d0 [ 340.458466][T16403] ? __local_bh_enable_ip+0xd0/0x130 [ 340.463806][T16403] ? __pfx_lec_push+0x10/0x10 [ 340.468528][T16403] vcc_release+0x15f/0x580 [ 340.472996][T16403] sock_close+0xc3/0x240 [ 340.477291][T16403] ? __pfx_sock_close+0x10/0x10 [ 340.482183][T16403] __fput+0x44f/0xa70 [ 340.486221][T16403] task_work_run+0x1d9/0x270 [ 340.490851][T16403] ? __pfx_task_work_run+0x10/0x10 [ 340.496020][T16403] ? do_raw_spin_unlock+0xf5/0x210 [ 340.501175][T16403] do_exit+0x69b/0x2320 [ 340.505372][T16403] ? cgroup1_freezing+0x20/0x350 [ 340.510350][T16403] ? __pfx_do_exit+0x10/0x10 [ 340.514978][T16403] ? cgroup1_freezing+0x20/0x350 [ 340.519962][T16403] ? cgroup1_freezing+0x20/0x350 [ 340.524961][T16403] do_group_exit+0x21b/0x2d0 [ 340.529598][T16403] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.534845][T16403] get_signal+0x1284/0x1330 [ 340.539404][T16403] arch_do_signal_or_restart+0xbc/0x830 [ 340.544990][T16403] ? unshare_nsproxy_namespaces+0x143/0x160 [ 340.550944][T16403] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 340.557149][T16403] ? ksys_unshare+0x825/0x930 [ 340.561891][T16403] exit_to_user_mode_loop+0x86/0x480 [ 340.567219][T16403] ? rcu_is_watching+0x15/0xb0 [ 340.572063][T16403] do_syscall_64+0x32d/0xf80 [ 340.576705][T16403] ? trace_irq_disable+0x3b/0x150 [ 340.581786][T16403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.587904][T16403] ? clear_bhb_loop+0x40/0x90 [ 340.592626][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.598557][T16403] RIP: 0033:0x7fcf36d9c799 [ 340.603016][T16403] Code: Unable to access opcode bytes at 0x7fcf36d9c76f. [ 340.610092][T16403] RSP: 002b:00007fcf34ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 340.618549][T16403] RAX: fffffffffffffffc RBX: 00007fcf37016090 RCX: 00007fcf36d9c799 [ 340.626565][T16403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 340.634579][T16403] RBP: 00007fcf36e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 340.642588][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.650595][T16403] R13: 00007fcf37016128 R14: 00007fcf37016090 R15: 00007fff71664748 [ 340.658614][T16403] [ 340.661680][T16403] Modules linked in: [ 340.665627][T16403] ---[ end trace 0000000000000000 ]--- [ 340.671114][T16403] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 340.676895][T16403] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd e8 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 e8 57 f7 4d 8b 75 00 4d 8d a7 30 [ 340.696548][T16403] RSP: 0018:ffffc9001bb17828 EFLAGS: 00010046 [ 340.702657][T16403] RAX: 0000000000000000 RBX: ffff888059801400 RCX: dffffc0000000000 [ 340.710663][T16403] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff888059801400 [ 340.718711][T16403] RBP: ffff888053586000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 340.726722][T16403] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff88802ef52650 [ 340.734743][T16403] R13: 0000000000000000 R14: ffff888059801430 R15: ffff88802ef52000 [ 340.742758][T16403] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 340.751730][T16403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.758362][T16403] CR2: 000055a6d64ed560 CR3: 000000001beec000 CR4: 00000000003526f0 [ 340.766391][T16403] Kernel panic - not syncing: Fatal exception [ 340.773122][T16403] Kernel Offset: disabled [ 340.777465][T16403] Rebooting in 86400 seconds..