last executing test programs: 11.381509627s ago: executing program 0 (id=17743): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 11.138014992s ago: executing program 3 (id=17744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x20040084) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fcdbdf25fc0000000000000000000000000000fcac141410000000000000000000000000000000044e2400200a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000804ce40000200000000000000042080099320000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={0x0, 0x40, 0x3325, 0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0xc74c, 0x9}, 0x8) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, 0x0, 0x0) 10.615667088s ago: executing program 3 (id=17746): socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x2, 0x2, 0x80000009, 0x800, 0xfffffffd, 0x10000007, 0x1, 0x8001, 0xffffffff, 0x54, 0x93, 0x1c, 0x10, 0x10000ff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}, {0x0}], 0x2}, 0x0) 10.281446332s ago: executing program 3 (id=17749): shutdown(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 9.304335664s ago: executing program 3 (id=17752): syz_init_net_socket$netrom(0x6, 0x5, 0x0) 9.197799878s ago: executing program 3 (id=17753): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000005c0)={0x8, 0x7, 0x8dd4, 0x0, 0xf, 0x9, 0x0, &(0x7f0000000500)=[{0x10, 0xfe, 0x400000}, {0x1a, 0x101, 0x482}, {0xd, 0x101, 0x6}, {0x16, 0xfe, 0x1}, {0x3, 0x1ff, 0x800}, {0x1, 0x101, 0x42}, {0x7, 0x101, 0x5}, {0xe, 0xfe, 0x8001}, {0x1b, 0x101, 0x7f}]}) unshare(0x6a040000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x200400, 0x0, 0x4, 0x0, 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300000000001400"], 0x58}}, 0x20008000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1, 0x0, 0xe2a00000, 0x5, 0xa}, &(0x7f0000000200)=0x98) sendmmsg$inet_sctp(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @private2, 0xe9}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x9e78, 0x1, 0x38a80000, 0xe7b, r3}}], 0x20}], 0x1, 0x848d0) r4 = socket$netlink(0x10, 0x3, 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000800), 0x2, 0x0) 8.929546112s ago: executing program 0 (id=17754): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x636a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) socket(0x18, 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000011c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000000)={0x4, 0x400000000000000, 0xffffffffffffffff, 0xfffffefffffffffd, 0x1, 0x0, 0x5, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x100000019, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 7.737136573s ago: executing program 0 (id=17757): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 6.589262597s ago: executing program 1 (id=17761): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r2}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r8) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, 0x0, 0x44080) 5.733733481s ago: executing program 1 (id=17764): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) 5.521470075s ago: executing program 1 (id=17765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) recvmsg(r2, 0x0, 0x100) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x40) sendmsg$can_raw(r1, &(0x7f0000000200)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f00000003c0)=@canfd={{0x2, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "0ae02278c57dfe0f449069428bfe080aa5521dcf18451c5aaf208a134e871d22069301a16ccff715868849247de4ec3b1eab43e0fb6b30ebd7b5cf264cdefb56"}, 0x48}}, 0x40) 5.019970844s ago: executing program 0 (id=17767): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x4044081}, 0x4004) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$rds(0x15, 0x5, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 4.433291161s ago: executing program 1 (id=17770): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.991347286s ago: executing program 3 (id=17772): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 3.839979191s ago: executing program 4 (id=17773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5b9ee126, 0x43}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}], @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 2.651068666s ago: executing program 2 (id=17776): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000faffff6100000000000000008500000027000000850000000500000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x88c9}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe, 0x8}}]}]}]}, 0x44}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000001640)={'bond_slave_1\x00', {0x2, 0x0, @private}}) getsockname(r1, 0x0, &(0x7f00000007c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000011780)='tasks\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011880)={{{@in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000011980)=0xe8) gettid() getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f00000000c0)) 2.551234252s ago: executing program 2 (id=17777): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x3c, r2, 0x200, 0x70bd22, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004010) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) splice(r6, 0x0, r5, 0x0, 0x1100000000f336, 0x8) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r10, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.376560518s ago: executing program 4 (id=17778): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, 0x0, 0x0) 1.904657082s ago: executing program 4 (id=17779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) close(r3) bind$bt_hci(r3, &(0x7f0000000240), 0x6) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000010000000003000000280001800e0001"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x18, 0x803, 0x2) getsockname$packet(r8, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.773162602s ago: executing program 4 (id=17780): recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {0x0}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a000004090001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.64571752s ago: executing program 2 (id=17781): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000000140)) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.20438413s ago: executing program 4 (id=17782): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) shutdown(r1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "5467ab00", "df7b57d67e69283c56bd41adb4d53f4ad34ad31139acfb5bd7ec4175c068f087", '\x00', "0200"}, 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000480), &(0x7f0000000140)='GPL\x00', 0x7, 0xf1, &(0x7f0000000540)=""/241, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x2c, 0x715}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1, r3, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000740)=r7, 0x4) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000340)=0x4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x68, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 717.213431ms ago: executing program 4 (id=17783): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x4008080) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 463.028501ms ago: executing program 2 (id=17784): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000d80)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xeee3e86f}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000013c0)="f9", 0x1}], 0x1, &(0x7f0000007300)=ANY=[@ANYBLOB="e0"], 0x30}}], 0x2, 0x4000000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800b000100697036746e6c000044000280050006000800000004001300060011004e22000014000300fc0000000000000008000700070000000600100001000000060012004e2000"/92], 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) 368.901434ms ago: executing program 0 (id=17785): r0 = socket(0x10, 0x2, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x7, 0x0, 0x1, 0x8}, &(0x7f0000000480)=0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000010) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 300.948805ms ago: executing program 2 (id=17786): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 174.112566ms ago: executing program 1 (id=17787): socket(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x108}}], 0x1, 0xc040) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x1000, 0x2, 0x0, 0x0, 0xc5}, {0x10000, 0x3, 0x1, 0x0, 0x6, 0x19b, 0x0, 0xfffffffffffffff7}, {0x8001, 0x8, 0xdffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x2, 0x6c}, 0x7ee2f141f03da2b8, @in=@empty, 0x3504, 0x5, 0x0, 0xb7, 0x0, 0x1}}, 0xe8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8847}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x0) 155.920245ms ago: executing program 2 (id=17788): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x636a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) socket(0x18, 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000011c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000000)={0x4, 0x400000000000000, 0xffffffffffffffff, 0xfffffefffffffffd, 0x1, 0x0, 0x5, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x100000019, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 87.147883ms ago: executing program 0 (id=17789): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 0s ago: executing program 1 (id=17790): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r3, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, 0x0, 0x30) syz_open_procfs$namespace(r1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x44014) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) kernel console output (not intermixed with test programs): 84] netlink: 'syz.3.16158': attribute type 1 has an invalid length. [ 807.308389][ T8884] netlink: 'syz.3.16158': attribute type 4 has an invalid length. [ 807.326703][ T8884] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.16158'. [ 807.340688][ T8885] netlink: 'syz.3.16158': attribute type 1 has an invalid length. [ 807.364260][ T8885] netlink: 'syz.3.16158': attribute type 4 has an invalid length. [ 807.389787][ T8885] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.16158'. [ 807.435246][ T8870] 9iLL speed is unknown, defaulting to 1000 [ 807.445452][ T8856] virt_wifi0 speed is unknown, defaulting to 1000 [ 808.056950][ T8870] virt_wifi0 speed is unknown, defaulting to 1000 [ 809.436049][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16171'. [ 811.515304][ T8950] wg1 speed is unknown, defaulting to 1000 [ 811.525516][ T8950] 9iLL speed is unknown, defaulting to 1000 [ 811.757696][ T8950] virt_wifi0 speed is unknown, defaulting to 1000 [ 812.093865][ T8975] block nbd8: server does not support multiple connections per device. [ 812.119256][ T8975] block nbd8: shutting down sockets [ 812.319411][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16191'. [ 812.536528][ T8988] wg1 speed is unknown, defaulting to 1000 [ 812.551762][ T8988] 9iLL speed is unknown, defaulting to 1000 [ 812.682515][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16196'. [ 813.069234][ T8988] virt_wifi0 speed is unknown, defaulting to 1000 [ 813.438084][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16200'. [ 813.963212][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16208'. [ 815.300269][ T9068] syz_tun: entered allmulticast mode [ 815.310931][ T9067] syz_tun: left allmulticast mode [ 815.487063][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16218'. [ 815.933724][ T9080] wg1 speed is unknown, defaulting to 1000 [ 815.953003][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16222'. [ 815.989079][ T9080] 9iLL speed is unknown, defaulting to 1000 [ 816.040870][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16224'. [ 816.263145][ T9080] virt_wifi0 speed is unknown, defaulting to 1000 [ 816.288263][ T9090] sctp: [Deprecated]: syz.3.16225 (pid 9090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.288263][ T9090] Use struct sctp_sack_info instead [ 816.607521][ T9093] netlink: 'syz.3.16226': attribute type 4 has an invalid length. [ 816.646584][ T9093] netlink: 'syz.3.16226': attribute type 4 has an invalid length. [ 816.972163][ T9104] netlink: 192 bytes leftover after parsing attributes in process `syz.3.16229'. [ 817.065706][ T9103] wg1 speed is unknown, defaulting to 1000 [ 817.096305][ T9103] 9iLL speed is unknown, defaulting to 1000 [ 817.589425][ T9103] virt_wifi0 speed is unknown, defaulting to 1000 [ 818.754068][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16236'. [ 819.127470][ T9136] wg1 speed is unknown, defaulting to 1000 [ 819.145569][ T9136] 9iLL speed is unknown, defaulting to 1000 [ 819.440239][ T9136] virt_wifi0 speed is unknown, defaulting to 1000 [ 820.111260][ T9156] netlink: 'syz.4.16249': attribute type 1 has an invalid length. [ 820.276494][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16249'. [ 820.304980][ T9156] 8021q: adding VLAN 0 to HW filter on device bond10 [ 820.362460][ T9158] bond10: (slave veth1): Enslaving as an active interface with a down link [ 820.363588][ T9143] lec:lec_atm_close: lec0: Shut down! [ 820.457311][ T9161] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 820.523289][ T9161] bond10: (slave batadv2): making interface the new active one [ 820.571513][ T9161] batadv2: entered promiscuous mode [ 820.601024][ T9161] bond10: (slave batadv2): Enslaving as an active interface with an up link [ 821.046594][ T9188] wg1 speed is unknown, defaulting to 1000 [ 821.077914][ T9188] 9iLL speed is unknown, defaulting to 1000 [ 821.234734][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16262'. [ 821.612168][ T9188] virt_wifi0 speed is unknown, defaulting to 1000 [ 821.701744][ T9220] netlink: 'syz.1.16266': attribute type 1 has an invalid length. [ 821.769546][ T9220] 8021q: adding VLAN 0 to HW filter on device bond8 [ 821.906751][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16267'. [ 821.922647][ T9223] bond8: (slave veth11): Enslaving as an active interface with a down link [ 821.983541][ T9220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.994303][ T9220] bond8: (slave batadv0): making interface the new active one [ 822.003852][ T9220] batadv0: entered promiscuous mode [ 822.009907][ T9220] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 822.124959][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16271'. [ 822.185297][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16271'. [ 822.457544][ T5900] lec:lec_start_xmit: lec0:No lecd attached [ 822.476430][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16277'. [ 822.518101][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16277'. [ 822.653709][ T9252] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16276'. [ 822.678493][ T9252] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16276'. [ 822.929929][ T9256] wg1 speed is unknown, defaulting to 1000 [ 823.004670][ T9256] 9iLL speed is unknown, defaulting to 1000 [ 823.239628][ T9281] vlan2: entered allmulticast mode [ 823.261270][ T9281] bond0: entered allmulticast mode [ 823.442810][ T9287] bond0 (unregistering): Released all slaves [ 823.503521][ T9291] wg1 speed is unknown, defaulting to 1000 [ 823.676782][ T9256] virt_wifi0 speed is unknown, defaulting to 1000 [ 823.683883][ T9291] 9iLL speed is unknown, defaulting to 1000 [ 824.058558][ T9315] __nla_validate_parse: 8 callbacks suppressed [ 824.058580][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16294'. [ 824.406360][ T9315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16294'. [ 824.926383][ T9291] virt_wifi0 speed is unknown, defaulting to 1000 [ 825.302140][ T9330] wg1 speed is unknown, defaulting to 1000 [ 825.327201][ T9330] 9iLL speed is unknown, defaulting to 1000 [ 825.794135][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16305'. [ 825.822826][ T9330] virt_wifi0 speed is unknown, defaulting to 1000 [ 825.881062][ T9347] wg1 speed is unknown, defaulting to 1000 [ 825.883962][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16305'. [ 825.924052][ T9347] 9iLL speed is unknown, defaulting to 1000 [ 826.043230][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16306'. [ 826.172496][ T9355] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16306'. [ 826.388019][ T9347] virt_wifi0 speed is unknown, defaulting to 1000 [ 826.460593][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16309'. [ 827.372980][ T9401] wg1 speed is unknown, defaulting to 1000 [ 827.404522][ T9401] 9iLL speed is unknown, defaulting to 1000 [ 827.444090][ T9399] wg1 speed is unknown, defaulting to 1000 [ 827.634172][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16327'. [ 827.789582][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16330'. [ 827.825828][ T9401] virt_wifi0 speed is unknown, defaulting to 1000 [ 827.825829][ T9399] 9iLL speed is unknown, defaulting to 1000 [ 827.859594][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16330'. [ 827.996250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 828.004818][ C1] lec:lec_tx_timeout: lec0 [ 828.009558][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 828.442817][ T9399] virt_wifi0 speed is unknown, defaulting to 1000 [ 828.946005][ T9451] wg1 speed is unknown, defaulting to 1000 [ 828.964999][ T9451] 9iLL speed is unknown, defaulting to 1000 [ 829.364090][ T9451] virt_wifi0 speed is unknown, defaulting to 1000 [ 829.375441][ T9473] siw: device registration error -23 [ 829.628359][ T9481] atomic_op ffff88805bf68998 conn xmit_atomic 0000000000000000 [ 829.696809][ T9485] __nla_validate_parse: 4 callbacks suppressed [ 829.696839][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16355'. [ 830.329834][ T9507] wg1 speed is unknown, defaulting to 1000 [ 830.357964][ T9507] 9iLL speed is unknown, defaulting to 1000 [ 830.452156][ T9513] bond7: entered allmulticast mode [ 830.458078][ T9513] vcan1: entered allmulticast mode [ 830.469111][ T9512] bond7: left allmulticast mode [ 830.485952][ T9512] vcan1: left allmulticast mode [ 830.752904][ T9522] netlink: 'syz.1.16368': attribute type 16 has an invalid length. [ 830.761458][ T9522] netlink: 'syz.1.16368': attribute type 17 has an invalid length. [ 830.861861][ T9522] xfrm0: left promiscuous mode [ 830.867827][ T9522] xfrm0: left allmulticast mode [ 830.874760][ T9522] vlan0: left promiscuous mode [ 830.882849][ T9522] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 830.892415][ T9522] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 830.900221][ T9522] geneve2: left promiscuous mode [ 830.905579][ T9522] geneve2: left allmulticast mode [ 830.917131][ T9522] sit2: left allmulticast mode [ 830.936018][ T9522] veth1_to_hsr: left allmulticast mode [ 830.949901][ T9522] veth1_to_hsr: left promiscuous mode [ 830.964373][ T9522] macvtap1: left promiscuous mode [ 830.978856][ T9522] macvtap1: left allmulticast mode [ 830.994652][ T9522] vlan3: left allmulticast mode [ 831.036655][ T9522] team0: left allmulticast mode [ 831.042112][ T9522] team_slave_0: left allmulticast mode [ 831.050121][ T9522] : left allmulticast mode [ 831.054936][ T9522] dummy0: left allmulticast mode [ 831.077036][ T9522] macsec2: left promiscuous mode [ 831.082204][ T9522] macsec2: left allmulticast mode [ 831.096489][ T9522] bond4: left promiscuous mode [ 831.102518][ T9522] bond5: left promiscuous mode [ 831.143245][ T9522] geneve0: left promiscuous mode [ 831.149123][ T9522] geneve0: left allmulticast mode [ 831.161673][ T9522] xfrm1: left promiscuous mode [ 831.166856][ T9522] xfrm1: left allmulticast mode [ 831.172272][ T9522] ip6gre2: left promiscuous mode [ 831.186609][ T9522] sit3: left promiscuous mode [ 831.227687][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16371'. [ 831.237062][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16371'. [ 831.276849][ T9522] bond6: left promiscuous mode [ 831.284052][ T9522] erspan2: left promiscuous mode [ 831.292344][ T9522] bond6: left allmulticast mode [ 831.307410][ T9522] erspan2: left allmulticast mode [ 831.325903][ T9522] bond7: left promiscuous mode [ 831.333623][ T9522] vcan1: left promiscuous mode [ 831.369535][ T9522] geneve4: left promiscuous mode [ 831.390054][ T9507] virt_wifi0 speed is unknown, defaulting to 1000 [ 831.406259][ T979] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.418425][ T979] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.437350][ T979] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.458364][ T979] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.515094][ T979] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.523805][ T979] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.544599][ T979] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.565121][ T979] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.760961][ T9549] wg1 speed is unknown, defaulting to 1000 [ 831.779472][ T9549] 9iLL speed is unknown, defaulting to 1000 [ 831.875469][ T151] batadv2: left promiscuous mode [ 831.949990][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16382'. [ 832.210315][ T9549] virt_wifi0 speed is unknown, defaulting to 1000 [ 832.427266][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16389'. [ 832.637944][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16392'. [ 832.666395][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16392'. [ 832.770219][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16394'. [ 832.780682][ T9596] wg1 speed is unknown, defaulting to 1000 [ 832.799330][ T9596] 9iLL speed is unknown, defaulting to 1000 [ 833.016565][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 833.024701][ C1] lec:lec_tx_timeout: lec0 [ 833.031510][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 833.384236][ T9596] virt_wifi0 speed is unknown, defaulting to 1000 [ 833.439298][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16403'. [ 833.478163][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16403'. [ 833.767449][ T9621] wg1 speed is unknown, defaulting to 1000 [ 833.794034][ T9621] 9iLL speed is unknown, defaulting to 1000 [ 833.918357][ T9631] tipc: Enabling of bearer rejected, failed to enable media [ 834.211380][ T9622] netlink: 'syz.1.16404': attribute type 5 has an invalid length. [ 834.469229][ T9621] virt_wifi0 speed is unknown, defaulting to 1000 [ 834.768480][ T9658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.822877][ T9658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.862038][ T9658] bond0 (unregistering): Released all slaves [ 835.184583][ T9666] wg1 speed is unknown, defaulting to 1000 [ 835.208254][ T9666] 9iLL speed is unknown, defaulting to 1000 [ 835.464615][ T9666] virt_wifi0 speed is unknown, defaulting to 1000 [ 836.151772][ T9703] __nla_validate_parse: 2 callbacks suppressed [ 836.151791][ T9703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16424'. [ 836.243094][ T9701] vlan2: entered allmulticast mode [ 836.276388][ T9701] bond0: entered allmulticast mode [ 836.501208][ T9703] bond0 (unregistering): Released all slaves [ 836.546363][ T9704] syzkaller1: entered promiscuous mode [ 836.552139][ T9704] syzkaller1: entered allmulticast mode [ 836.863642][ T9731] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16430'. [ 836.948428][ T9734] syzkaller1: entered promiscuous mode [ 836.953989][ T9734] syzkaller1: entered allmulticast mode [ 837.129853][ T9749] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16435'. [ 837.235553][ T9754] wg1 speed is unknown, defaulting to 1000 [ 837.244334][ T9754] 9iLL speed is unknown, defaulting to 1000 [ 837.460349][ T5488] veth1_macvtap: left promiscuous mode [ 837.501454][ T9754] virt_wifi0 speed is unknown, defaulting to 1000 [ 838.056192][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 838.064329][ C1] lec:lec_tx_timeout: lec0 [ 838.069247][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 838.149364][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16442'. [ 838.809481][ T9792] tipc: Failed to remove unknown binding: 66,1,1/4227858433:1649224843/1649224844 [ 839.447887][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16450'. [ 840.936105][ T9803] wg1 speed is unknown, defaulting to 1000 [ 840.987809][ T9803] 9iLL speed is unknown, defaulting to 1000 [ 841.021728][ T9813] wg1 speed is unknown, defaulting to 1000 [ 841.208033][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16457'. [ 841.229452][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16457'. [ 841.743621][ T9813] 9iLL speed is unknown, defaulting to 1000 [ 841.749027][ T9803] virt_wifi0 speed is unknown, defaulting to 1000 [ 842.354924][ T9874] wg1 speed is unknown, defaulting to 1000 [ 842.382913][ T9871] wg1 speed is unknown, defaulting to 1000 [ 842.382941][ T9874] 9iLL speed is unknown, defaulting to 1000 [ 842.391627][ T9813] virt_wifi0 speed is unknown, defaulting to 1000 [ 842.937349][ T9871] 9iLL speed is unknown, defaulting to 1000 [ 843.076394][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 843.084499][ C1] lec:lec_tx_timeout: lec0 [ 843.084530][ T9895] xt_hashlimit: size too large, truncated to 1048576 [ 843.089455][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 843.115638][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16476'. [ 843.167069][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16477'. [ 843.253166][ T9900] netlink: 'syz.3.16478': attribute type 1 has an invalid length. [ 843.305951][ T9900] bond0: (slave ip6gre5): The slave device specified does not support setting the MAC address [ 843.316658][ T9900] bond0: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode [ 843.329196][ T9900] bond0: (slave ip6gre5): making interface the new active one [ 843.337670][ T9900] bond0: (slave ip6gre5): Enslaving as an active interface with an up link [ 843.402931][ T9874] virt_wifi0 speed is unknown, defaulting to 1000 [ 843.423857][ T9871] virt_wifi0 speed is unknown, defaulting to 1000 [ 843.605958][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16480'. [ 843.626562][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16480'. [ 845.201338][ T9953] net_ratelimit: 551 callbacks suppressed [ 845.201360][ T9953] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 845.673698][ T9971] wg1 speed is unknown, defaulting to 1000 [ 845.684053][ T9971] 9iLL speed is unknown, defaulting to 1000 [ 845.895290][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16508'. [ 846.205536][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16512'. [ 846.495096][ T9971] virt_wifi0 speed is unknown, defaulting to 1000 [ 846.868015][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16520'. [ 846.877470][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16520'. [ 846.898603][T10025] syzkaller1: entered promiscuous mode [ 846.904138][T10025] syzkaller1: entered allmulticast mode [ 847.657174][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16527'. [ 848.106207][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 848.114369][ C1] lec:lec_tx_timeout: lec0 [ 848.119193][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 848.448529][T10082] syzkaller1: entered promiscuous mode [ 848.457400][T10082] syzkaller1: entered allmulticast mode [ 849.005119][T10085] syzkaller1: entered promiscuous mode [ 849.015256][T10085] syzkaller1: entered allmulticast mode [ 849.050165][ T9986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.607365][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16538'. [ 849.704628][T10095] wg1 speed is unknown, defaulting to 1000 [ 849.725825][T10095] 9iLL speed is unknown, defaulting to 1000 [ 849.888159][T10110] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16541'. [ 850.079381][T10095] virt_wifi0 speed is unknown, defaulting to 1000 [ 850.306076][T10124] netlink: 'syz.3.16545': attribute type 11 has an invalid length. [ 850.675221][T10141] netlink: 'syz.4.16547': attribute type 4 has an invalid length. [ 850.751139][T10141] netlink: 'syz.4.16547': attribute type 4 has an invalid length. [ 851.110833][T10147] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 851.171785][T10147] bond6 (unregistering): Released all slaves [ 851.496732][ T5932] 9iLL speed is unknown, defaulting to 1000 [ 851.516954][T14564] 9iLL speed is unknown, defaulting to 1000 [ 851.539199][ T5932] 9iLL speed is unknown, defaulting to 1000 [ 852.437685][T10215] tipc: Enabled bearer , priority 0 [ 852.623120][T10215] syzkaller0: entered promiscuous mode [ 852.640909][T10215] syzkaller0: entered allmulticast mode [ 852.656026][T10215] tipc: Resetting bearer [ 852.674003][T10221] tipc: Bearer : already 2 bearers with priority 0 [ 852.698173][T10221] tipc: Enabling of bearer rejected, cannot adjust to lower [ 852.806739][ T1254] tipc: Resetting bearer [ 852.884841][T10226] syzkaller0: entered promiscuous mode [ 852.907110][T10226] syzkaller0: entered allmulticast mode [ 852.913888][T10238] tipc: Enabled bearer , priority 0 [ 852.989581][T10214] tipc: Resetting bearer [ 853.136188][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 853.144326][ C1] lec:lec_tx_timeout: lec0 [ 853.149260][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 854.865761][T10214] tipc: Disabling bearer [ 854.875560][T10240] netlink: 'syz.2.16575': attribute type 1 has an invalid length. [ 854.884121][T10240] netlink: 'syz.2.16575': attribute type 2 has an invalid length. [ 854.892364][T10241] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 854.900184][T10241] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 857.011823][T10306] wg1 speed is unknown, defaulting to 1000 [ 857.049797][T10306] 9iLL speed is unknown, defaulting to 1000 [ 857.403913][T10334] tipc: Failed to remove unknown binding: 66,1,1/4227858433:3834379219/3834379221 [ 857.420107][T10334] tipc: Failed to remove unknown binding: 66,1,1/4227858433:3834379219/3834379221 [ 857.430539][T10334] tipc: Failed to remove unknown binding: 66,1,1/4227858433:3834379219/3834379221 [ 857.511728][T10338] netlink: 'syz.0.16598': attribute type 1 has an invalid length. [ 857.654883][T10338] 8021q: adding VLAN 0 to HW filter on device bond7 [ 857.802745][T10342] veth21: entered promiscuous mode [ 857.828315][T10342] bond7: (slave veth21): Enslaving as an active interface with an up link [ 857.878450][T10347] : entered promiscuous mode [ 857.960013][T10306] virt_wifi0 speed is unknown, defaulting to 1000 [ 858.156244][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 858.164443][ C1] lec:lec_tx_timeout: lec0 [ 858.169238][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 858.295996][T10359] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.341635][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16603'. [ 858.397916][T10359] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.470280][T10359] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.509195][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16606'. [ 858.604067][T10366] wg1 speed is unknown, defaulting to 1000 [ 858.612573][T10359] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.646612][T10366] 9iLL speed is unknown, defaulting to 1000 [ 858.932031][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16609'. [ 858.956618][ T58] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.964911][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.990690][T10381] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 859.018564][T10380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 859.037874][T10366] virt_wifi0 speed is unknown, defaulting to 1000 [ 859.067612][T10383] macsec2: entered promiscuous mode [ 859.072970][T10383] bond6: entered promiscuous mode [ 859.079673][T10383] bond6: left promiscuous mode [ 859.095149][ T7735] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.158415][ T58] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.600040][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16619'. [ 860.147226][T10428] scsi_nl_rcv_msg: discarding partial skb [ 860.967051][T10454] netlink: 'syz.2.16633': attribute type 1 has an invalid length. [ 861.008090][T10454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.096327][T10459] netlink: 'syz.2.16634': attribute type 1 has an invalid length. [ 861.192507][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16635'. [ 861.385977][T10472] tipc: Bearer : already 2 bearers with priority 0 [ 861.402415][T10472] tipc: Enabling of bearer rejected, cannot adjust to lower [ 861.473085][T10472] syzkaller0: entered promiscuous mode [ 861.479288][T10472] syzkaller0: entered allmulticast mode [ 862.188348][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16648'. [ 863.193072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 863.201198][ C1] lec:lec_tx_timeout: lec0 [ 863.206307][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 863.619732][T10502] tipc: Enabled bearer , priority 0 [ 863.632332][T10500] tipc: Disabling bearer [ 863.715753][T10512] syzkaller0: entered promiscuous mode [ 863.721596][T10512] syzkaller0: entered allmulticast mode [ 866.179402][T10560] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16663'. [ 866.869825][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16671'. [ 867.047273][T10585] wg1 speed is unknown, defaulting to 1000 [ 867.055116][T10585] 9iLL speed is unknown, defaulting to 1000 [ 867.484319][T10585] virt_wifi0 speed is unknown, defaulting to 1000 [ 867.734330][T10603] netlink: 'syz.2.16676': attribute type 39 has an invalid length. [ 868.002091][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16678'. [ 868.081670][T10610] netlink: 'syz.4.16677': attribute type 4 has an invalid length. [ 868.140437][T10612] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16679'. [ 868.150406][T10606] netlink: 'syz.4.16677': attribute type 4 has an invalid length. [ 868.183877][T14564] 9iLL speed is unknown, defaulting to 1000 [ 868.208179][T14564] sqz0: Port: 1 Link ACTIVE [ 868.212995][T14564] 9iLL speed is unknown, defaulting to 1000 [ 868.385681][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16683'. [ 868.946866][T10650] netlink: 'syz.4.16694': attribute type 10 has an invalid length. [ 868.956175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 868.964226][ C1] lec:lec_tx_timeout: lec0 [ 868.969050][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 868.990392][T10650] team0: Port device dummy0 added [ 869.026408][T10650] netlink: 'syz.4.16694': attribute type 10 has an invalid length. [ 869.057488][T10650] team0: Port device dummy0 removed [ 869.988284][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16709'. [ 870.675793][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16719'. [ 870.686510][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16719'. [ 870.695853][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16719'. [ 870.705970][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16719'. [ 871.158484][T10741] netlink: 'syz.3.16731': attribute type 5 has an invalid length. [ 871.176505][T10741] netlink: 'syz.3.16731': attribute type 6 has an invalid length. [ 871.194009][T10741] __nla_validate_parse: 4 callbacks suppressed [ 871.194030][T10741] netlink: 35 bytes leftover after parsing attributes in process `syz.3.16731'. [ 871.339905][T10749] wg1 speed is unknown, defaulting to 1000 [ 871.363148][T10749] 9iLL speed is unknown, defaulting to 1000 [ 871.661686][T10759] wg1 speed is unknown, defaulting to 1000 [ 871.688663][T10763] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.16740'. [ 871.756494][T10759] 9iLL speed is unknown, defaulting to 1000 [ 871.764547][T10749] virt_wifi0 speed is unknown, defaulting to 1000 [ 872.154193][T10759] virt_wifi0 speed is unknown, defaulting to 1000 [ 872.534008][T10780] wg1 speed is unknown, defaulting to 1000 [ 872.557377][T10780] 9iLL speed is unknown, defaulting to 1000 [ 872.835364][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16748'. [ 872.875708][T10780] virt_wifi0 speed is unknown, defaulting to 1000 [ 873.055500][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16749'. [ 873.640519][T10809] vlan3: entered promiscuous mode [ 873.664882][T10809] vlan3: entered allmulticast mode [ 873.996268][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 874.004629][ C1] lec:lec_tx_timeout: lec0 [ 874.009838][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 874.019801][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16759'. [ 874.280123][T10827] erspan1: left promiscuous mode [ 874.294477][T10827] bond3: left promiscuous mode [ 874.306283][T10827] bond3: left allmulticast mode [ 874.324791][T10827] veth3: left promiscuous mode [ 874.334536][T10827] geneve3: left promiscuous mode [ 874.342822][T10827] geneve3: left allmulticast mode [ 874.351134][T10827] bond5: left promiscuous mode [ 874.356756][T10827] bond5: left allmulticast mode [ 874.362958][T10827] macsec1: left promiscuous mode [ 874.369432][T10827] macsec1: left allmulticast mode [ 874.416590][T10827] bond6: left promiscuous mode [ 874.421716][T10827] bond7: left promiscuous mode [ 874.448926][T10827] ip6gre1: left promiscuous mode [ 874.457465][T10827] ip6gre1: left allmulticast mode [ 874.519575][T10827] geneve4: left promiscuous mode [ 874.529786][T10827] geneve4: left allmulticast mode [ 874.570879][T10829] .70: left allmulticast mode [ 874.575767][T10829] hsr_slave_0: left allmulticast mode [ 874.597537][T10829] hsr_slave_1: left allmulticast mode [ 874.604098][T10829] vlan0: left promiscuous mode [ 874.612747][T10829] geneve1: left promiscuous mode [ 874.618110][T10829] geneve1: left allmulticast mode [ 874.627700][T10829] bridge7: left promiscuous mode [ 874.632942][T10829] bridge7: left allmulticast mode [ 874.639189][T10829] ip6erspan0: left allmulticast mode [ 874.644861][T10829] gtp0: left promiscuous mode [ 874.651401][T10829] gtp0: left allmulticast mode [ 874.656991][T10829] vlan3: left allmulticast mode [ 874.662160][T10829] team0: left allmulticast mode [ 874.668261][T10829] geneve0: left allmulticast mode [ 874.674663][T10829] gtp1: left promiscuous mode [ 874.679798][T10829] gtp1: left allmulticast mode [ 874.716001][T10829] ip6gre4: left allmulticast mode [ 874.871345][T10839] bond0: (slave team0): Releasing backup interface [ 874.907711][T10839] team0 (unregistering): Failed to send options change via netlink (err -105) [ 874.919535][T10839] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 874.931294][T10839] team0 (unregistering): Port device team_slave_0 removed [ 874.963853][T10839] team0 (unregistering): Failed to send options change via netlink (err -105) [ 874.975503][T10839] team0 (unregistering): Failed to send port change of device 76 via netlink (err -105) [ 874.986851][T10839] team0 (unregistering): Port device 76 removed [ 875.008550][T10839] team0 (unregistering): Failed to send options change via netlink (err -105) [ 875.018321][T10839] team0 (unregistering): Failed to send port change of device dummy0 via netlink (err -105) [ 875.030184][T10839] team0 (unregistering): Port device dummy0 removed [ 875.043357][ T151] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.053045][ T151] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.063963][ T151] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.072839][ T151] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.083717][ T151] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.092448][ T151] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.127015][T10842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16765'. [ 875.282179][ T151] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.294550][ T151] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.336811][T10845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16765'. [ 875.645785][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16770'. [ 875.840472][T10866] wg1 speed is unknown, defaulting to 1000 [ 875.881009][T10866] 9iLL speed is unknown, defaulting to 1000 [ 875.926758][T10873] wg1 speed is unknown, defaulting to 1000 [ 876.317406][T10873] 9iLL speed is unknown, defaulting to 1000 [ 876.324493][T10866] virt_wifi0 speed is unknown, defaulting to 1000 [ 876.557265][T10890] nbd1: detected capacity change from 0 to 63 [ 876.568218][T10894] block nbd1: NBD_DISCONNECT [ 876.588119][T10894] block nbd1: Disconnected due to user request. [ 876.606356][T10894] block nbd1: shutting down sockets [ 876.648439][ C1] blk_print_req_error: 138 callbacks suppressed [ 876.648464][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.664428][ C1] buffer_io_error: 138 callbacks suppressed [ 876.664458][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 876.680902][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.690468][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 876.699188][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.708748][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 876.716615][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.726182][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 876.735971][T10588] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.758736][T10892] syzkaller1: entered promiscuous mode [ 876.765978][T10892] syzkaller1: entered allmulticast mode [ 876.802411][T10588] Buffer I/O error on dev nbd1, logical block 0, async page read [ 876.824661][T10588] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.848010][T10588] Buffer I/O error on dev nbd1, logical block 1, async page read [ 876.871166][T10588] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.912217][T10588] Buffer I/O error on dev nbd1, logical block 2, async page read [ 876.935945][T10588] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 876.966786][T10588] Buffer I/O error on dev nbd1, logical block 3, async page read [ 876.991367][T10588] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 877.021515][T10588] Buffer I/O error on dev nbd1, logical block 0, async page read [ 877.033551][T10588] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 877.048014][T10588] Buffer I/O error on dev nbd1, logical block 1, async page read [ 877.082533][T10588] ldm_validate_partition_table(): Disk read failed. [ 877.107441][T10588] Dev nbd1: unable to read RDB block 0 [ 877.126008][T10588] nbd1: unable to read partition table [ 877.136276][T10873] virt_wifi0 speed is unknown, defaulting to 1000 [ 877.154405][T10588] ldm_validate_partition_table(): Disk read failed. [ 877.179039][T10588] Dev nbd1: unable to read RDB block 0 [ 877.191918][T10588] nbd1: unable to read partition table [ 877.256778][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16786'. [ 877.399806][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.477672][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.566669][T10908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.026185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 879.034453][ C1] lec:lec_tx_timeout: lec0 [ 879.039337][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 880.213196][T10970] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16803'. [ 880.633566][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16810'. [ 880.655624][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16810'. [ 880.774047][T10974] wg1 speed is unknown, defaulting to 1000 [ 880.797321][T10974] 9iLL speed is unknown, defaulting to 1000 [ 880.958245][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16812'. [ 881.206763][T10974] virt_wifi0 speed is unknown, defaulting to 1000 [ 881.914419][T11018] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 881.938988][T11018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.071169][T11024] 8021q: adding VLAN 0 to HW filter on device bond8 [ 882.104418][T11024] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 882.163402][T11024] bond8: (slave macvlan4): Enslaving as an active interface with a down link [ 882.299155][T11032] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 882.500427][T11044] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 882.525356][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16833'. [ 882.535314][T11042] netlink: 'syz.1.16832': attribute type 13 has an invalid length. [ 882.550225][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16833'. [ 882.599958][T11046] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 882.617058][T11046] pim6reg1: entered promiscuous mode [ 882.628845][T11046] pim6reg1: entered allmulticast mode [ 883.512612][T11075] syzkaller1: entered promiscuous mode [ 883.525053][T11075] syzkaller1: entered allmulticast mode [ 883.868831][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16846'. [ 884.046173][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 884.054258][ C1] lec:lec_tx_timeout: lec0 [ 884.059018][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 884.268629][T11093] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16849'. [ 884.284010][T11092] wg1 speed is unknown, defaulting to 1000 [ 884.319754][T11092] 9iLL speed is unknown, defaulting to 1000 [ 884.474497][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16851'. [ 884.683350][T11092] virt_wifi0 speed is unknown, defaulting to 1000 [ 885.414255][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16854'. [ 886.065919][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16860'. [ 887.012615][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16867'. [ 887.435656][ T5900] 9iLL speed is unknown, defaulting to 1000 [ 887.484209][ T5900] sqz0: Port: 1 Link DOWN [ 887.498900][ T5900] 9iLL speed is unknown, defaulting to 1000 [ 887.671769][T11172] syzkaller0: entered promiscuous mode [ 887.677654][T11172] syzkaller0: entered allmulticast mode [ 889.066255][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 889.074386][ C1] lec:lec_tx_timeout: lec0 [ 889.079424][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 889.136068][T11214] syzkaller0: entered promiscuous mode [ 889.142424][T11214] syzkaller0: entered allmulticast mode [ 889.485850][T11221] netlink: 'syz.3.16891': attribute type 1 has an invalid length. [ 891.146434][T11221] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 891.147677][T11223] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 891.689313][T11265] vlan0: entered promiscuous mode [ 891.703924][T11265] syz_tun: entered promiscuous mode [ 891.832878][T11269] tipc: Enabled bearer , priority 0 [ 891.875701][T11269] syzkaller0: entered promiscuous mode [ 891.881382][T11269] syzkaller0: entered allmulticast mode [ 891.887942][T11269] tipc: Resetting bearer [ 891.910613][T11268] tipc: Resetting bearer [ 892.190956][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16909'. [ 893.541562][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16917'. [ 894.096187][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 894.104354][ C1] lec:lec_tx_timeout: lec0 [ 894.110005][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 894.164102][T11268] tipc: Disabling bearer [ 894.381726][T11317] syzkaller0: entered promiscuous mode [ 894.387497][T11317] syzkaller0: entered allmulticast mode [ 894.453221][T11314] wg1 speed is unknown, defaulting to 1000 [ 894.462475][T11314] 9iLL speed is unknown, defaulting to 1000 [ 894.576721][T11326] netlink: 'syz.4.16926': attribute type 1 has an invalid length. [ 894.689428][T11330] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 894.752323][T11330] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 894.768286][T11330] bond0: (slave vxcan3): making interface the new active one [ 894.777283][T11330] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 894.802875][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16926'. [ 894.821673][T11326] bond0 (unregistering): (slave vxcan3): Releasing backup interface [ 894.842401][T11326] bond0 (unregistering): Released all slaves [ 894.908854][T11314] virt_wifi0 speed is unknown, defaulting to 1000 [ 895.964192][T11364] syzkaller0: entered promiscuous mode [ 895.977214][T11364] syzkaller0: entered allmulticast mode [ 896.219091][T11379] "syz.1.16941" (11379) uses obsolete ecb(arc4) skcipher [ 896.226639][T11373] tipc: Enabling of bearer rejected, already enabled [ 896.407128][T11378] wg1 speed is unknown, defaulting to 1000 [ 896.446300][T11378] 9iLL speed is unknown, defaulting to 1000 [ 896.791308][T11378] virt_wifi0 speed is unknown, defaulting to 1000 [ 896.858806][T11392] wg1 speed is unknown, defaulting to 1000 [ 896.870542][T11392] 9iLL speed is unknown, defaulting to 1000 [ 897.333718][T11411] wg1 speed is unknown, defaulting to 1000 [ 897.704390][T11411] 9iLL speed is unknown, defaulting to 1000 [ 897.704686][T11392] virt_wifi0 speed is unknown, defaulting to 1000 [ 898.202369][T11411] virt_wifi0 speed is unknown, defaulting to 1000 [ 898.304144][T11439] netlink: 'syz.3.16953': attribute type 1 has an invalid length. [ 898.590097][T11445] syzkaller0: entered promiscuous mode [ 898.595857][T11445] syzkaller0: entered allmulticast mode [ 898.739411][T11453] syzkaller0: entered promiscuous mode [ 898.755747][T11453] syzkaller0: entered allmulticast mode [ 899.126310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 899.134439][ C1] lec:lec_tx_timeout: lec0 [ 899.139272][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 900.086497][ T5900] page_pool_release_retry() stalled pool shutdown: id 172, 1 inflight 60 sec [ 900.137901][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16958'. [ 900.227429][T11470] nbd: socks must be embedded in a SOCK_ITEM attr [ 900.418741][T11295] udevd[11295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 900.502693][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16960'. [ 900.854204][T11478] ip6gre2: entered promiscuous mode [ 900.859727][T11478] ip6gre2: entered allmulticast mode [ 900.874025][T11480] netlink: 'syz.4.16960': attribute type 6 has an invalid length. [ 900.899936][T11480] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16960'. [ 901.147364][T11490] IPv6: Can't replace route, no match found [ 901.153676][T11490] IPv6: Can't replace route, no match found [ 901.221534][T11491] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 901.278825][T11491] syzkaller0: entered promiscuous mode [ 901.284458][T11491] syzkaller0: entered allmulticast mode [ 901.374652][T11497] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.16968'. [ 902.151602][T11509] wg1 speed is unknown, defaulting to 1000 [ 902.211133][T11509] 9iLL speed is unknown, defaulting to 1000 [ 902.340210][T11522] syzkaller0: entered promiscuous mode [ 902.345761][T11522] syzkaller0: entered allmulticast mode [ 902.557934][T11524] netlink: 'syz.4.16975': attribute type 13 has an invalid length. [ 902.608259][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16975'. [ 902.874571][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16979'. [ 902.884336][T11535] netlink: 'syz.2.16979': attribute type 12 has an invalid length. [ 902.899014][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16979'. [ 902.915702][T11535] netlink: 'syz.2.16979': attribute type 12 has an invalid length. [ 902.938422][T11509] virt_wifi0 speed is unknown, defaulting to 1000 [ 903.021562][T11541] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 903.605733][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16985'. [ 903.615030][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16985'. [ 903.625644][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16985'. [ 903.968071][T11564] netlink: 'syz.2.16993': attribute type 1 has an invalid length. [ 904.105756][T11564] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 904.126154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 904.134279][ C1] lec:lec_tx_timeout: lec0 [ 904.139271][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 904.221050][T11574] team1: entered promiscuous mode [ 904.236443][T11574] team1: entered allmulticast mode [ 904.249720][T11574] 8021q: adding VLAN 0 to HW filter on device team1 [ 904.281196][T11580] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 904.321692][T11580] team2: entered promiscuous mode [ 904.326999][T11580] team2: entered allmulticast mode [ 904.340804][T11580] 8021q: adding VLAN 0 to HW filter on device team2 [ 904.394976][T11579] bond9 (unregistering): (slave ip6gretap2): Releasing backup interface [ 904.432220][T11579] bond9 (unregistering): Released all slaves [ 904.833171][T11563] mpoa:mpoad_close: () going down [ 905.092667][T11571] lec:lec_atm_close: lec0: Shut down! [ 905.295553][T11609] syzkaller0: entered promiscuous mode [ 905.303065][T11609] syzkaller0: entered allmulticast mode [ 907.669868][T11646] tap0: tun_chr_ioctl cmd 2148553947 [ 907.938890][T11653] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 907.989056][T11664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.315015][T11681] netlink: 'syz.1.17025': attribute type 4 has an invalid length. [ 908.335202][T11682] syzkaller0: entered promiscuous mode [ 908.341400][T11682] syzkaller0: entered allmulticast mode [ 908.516895][T11688] __nla_validate_parse: 8 callbacks suppressed [ 908.516919][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17028'. [ 908.553946][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17028'. [ 908.685020][T11694] wg1 speed is unknown, defaulting to 1000 [ 908.702616][T11694] 9iLL speed is unknown, defaulting to 1000 [ 908.716981][T11696] syzkaller0: entered promiscuous mode [ 908.722607][T11696] syzkaller0: entered allmulticast mode [ 909.108194][T11694] virt_wifi0 speed is unknown, defaulting to 1000 [ 909.316483][T11713] netlink: 'syz.0.17036': attribute type 39 has an invalid length. [ 909.435493][T11719] sit0: left promiscuous mode [ 909.444102][T11719] batadv0: left promiscuous mode [ 909.456356][T11719] wg1: left promiscuous mode [ 909.476660][T11719] wg1: left allmulticast mode [ 909.503999][T11719] batadv_slave_1: left promiscuous mode [ 909.520334][T11719] xfrm0: left promiscuous mode [ 909.525272][T11719] xfrm0: left allmulticast mode [ 909.554711][T11719] gre1: left allmulticast mode [ 909.568048][T11719] bridge3: left promiscuous mode [ 909.576421][T11719] bridge3: left allmulticast mode [ 909.584643][T11719] bond3: left promiscuous mode [ 909.597271][T11719] veth5: left promiscuous mode [ 909.614725][T11719] bond9: left promiscuous mode [ 909.619707][T11719] veth7: left promiscuous mode [ 909.625559][T11719] bridge0: left allmulticast mode [ 909.633175][T11719] geneve3: left promiscuous mode [ 909.646545][T11719] team1: left promiscuous mode [ 909.651586][T11719] team1: left allmulticast mode [ 909.661928][T11719] team2: left promiscuous mode [ 909.671908][T11719] team2: left allmulticast mode [ 909.685261][T11719] ip6gre2: left promiscuous mode [ 909.690799][T11719] ip6gre2: left allmulticast mode [ 909.699148][T11720] netlink: 'syz.4.17037': attribute type 66 has an invalid length. [ 910.096163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 910.104351][ C1] lec:lec_tx_timeout: lec0 [ 910.109054][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 910.372492][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17049'. [ 910.641549][T11760] syzkaller0: entered promiscuous mode [ 910.647348][T11760] syzkaller0: entered allmulticast mode [ 911.155060][T11784] syzkaller0: entered promiscuous mode [ 911.160829][T11784] syzkaller0: entered allmulticast mode [ 912.537402][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17078'. [ 912.565875][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17078'. [ 912.647025][T11829] tipc: Enabled bearer , priority 0 [ 912.865873][T11829] syzkaller0: entered promiscuous mode [ 912.883210][T11829] syzkaller0: entered allmulticast mode [ 912.891811][T11829] tipc: Resetting bearer [ 912.988607][ T7735] tipc: Resetting bearer [ 912.995810][T11828] tipc: Resetting bearer [ 914.726079][T11828] tipc: Disabling bearer [ 914.860040][T11868] netlink: 'syz.2.17090': attribute type 4 has an invalid length. [ 915.053016][T11877] wg1 speed is unknown, defaulting to 1000 [ 915.088525][T11877] 9iLL speed is unknown, defaulting to 1000 [ 915.116316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 915.124528][ C1] lec:lec_tx_timeout: lec0 [ 915.129361][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 915.426087][T11899] syzkaller0: entered promiscuous mode [ 915.435936][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17101'. [ 915.450711][T11899] syzkaller0: entered allmulticast mode [ 915.507843][T11899] tipc: Enabled bearer , priority 0 [ 915.521159][T11898] tipc: Resetting bearer [ 915.563277][T11898] tipc: Disabling bearer [ 915.610852][T11905] syzkaller0: entered promiscuous mode [ 915.630249][T11905] syzkaller0: entered allmulticast mode [ 915.644195][T11877] virt_wifi0 speed is unknown, defaulting to 1000 [ 915.827412][T11912] wg1 speed is unknown, defaulting to 1000 [ 915.835234][T11912] 9iLL speed is unknown, defaulting to 1000 [ 915.910064][T11909] wg1 speed is unknown, defaulting to 1000 [ 916.018036][T11918] syzkaller0: entered promiscuous mode [ 916.023973][T11918] syzkaller0: entered allmulticast mode [ 916.328330][T11909] 9iLL speed is unknown, defaulting to 1000 [ 916.567736][T11909] virt_wifi0 speed is unknown, defaulting to 1000 [ 916.676709][T11912] virt_wifi0 speed is unknown, defaulting to 1000 [ 917.427800][T11948] wg1 speed is unknown, defaulting to 1000 [ 917.435537][T11948] 9iLL speed is unknown, defaulting to 1000 [ 917.460394][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17118'. [ 917.513505][T11952] syzkaller0: entered promiscuous mode [ 917.547651][T11952] syzkaller0: entered allmulticast mode [ 917.612225][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17119'. [ 917.745839][T11957] bond10: entered promiscuous mode [ 917.752523][T11957] 8021q: adding VLAN 0 to HW filter on device bond10 [ 917.762252][T11948] virt_wifi0 speed is unknown, defaulting to 1000 [ 917.762285][T11960] netlink: 'syz.0.17119': attribute type 5 has an invalid length. [ 917.806264][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17119'. [ 917.911960][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17123'. [ 917.928626][T11964] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 918.180426][T11977] netlink: 'syz.1.17127': attribute type 1 has an invalid length. [ 918.248935][T11983] siw: device registration error -23 [ 918.296496][T11984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17127'. [ 918.429890][T11993] bond11: (slave geneve5): making interface the new active one [ 918.474896][T11993] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 918.485951][T11984] 8021q: adding VLAN 0 to HW filter on device bond11 [ 918.497995][ T1262] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 918.515668][ T1262] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 918.553778][ T1262] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 918.571096][ T1262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 918.606308][T11999] netlink: 550 bytes leftover after parsing attributes in process `syz.3.17134'. [ 918.662645][T11997] syzkaller0: entered promiscuous mode [ 918.688575][T11997] syzkaller0: entered allmulticast mode [ 918.773699][T11997] tipc: Enabled bearer , priority 0 [ 918.815427][T11996] tipc: Resetting bearer [ 918.892943][T11996] tipc: Disabling bearer [ 918.911526][T12010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17137'. [ 918.952030][T12010] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17137'. [ 918.997107][T12010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17137'. [ 919.836016][T12046] syzkaller0: entered promiscuous mode [ 919.848201][T12046] syzkaller0: entered allmulticast mode [ 919.857630][T12050] syzkaller0: entered promiscuous mode [ 919.865793][T12050] syzkaller0: entered allmulticast mode [ 920.136181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 920.144305][ C1] lec:lec_tx_timeout: lec0 [ 920.149579][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 920.774726][T12081] 9iLL speed is unknown, defaulting to 1000 [ 920.803647][T12086] syzkaller0: entered promiscuous mode [ 920.809669][T12086] syzkaller0: entered allmulticast mode [ 920.963886][T12081] virt_wifi0 speed is unknown, defaulting to 1000 [ 923.123800][T12059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 923.207255][T12092] __nla_validate_parse: 2 callbacks suppressed [ 923.207276][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17164'. [ 923.279923][T12094] netlink: 'syz.2.17166': attribute type 2 has an invalid length. [ 923.423625][T12099] syzkaller0: entered promiscuous mode [ 923.442812][T12099] syzkaller0: entered allmulticast mode [ 923.507210][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17167'. [ 923.536459][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17167'. [ 923.633216][T12101] virtio_net virtio1 eth0: entered promiscuous mode [ 923.644227][T12101] ifb0: entered promiscuous mode [ 923.698389][T12110] batman_adv: batadv0: Adding interface: dummy0 [ 923.704715][T12110] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.756367][T12110] batman_adv: batadv0: Interface activated: dummy0 [ 923.778214][T12111] batadv0: mtu less than device minimum [ 923.785317][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.797523][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.809356][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.821217][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.833060][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.844931][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.856789][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.868632][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.880446][T12111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.929969][T12113] syzkaller0: entered promiscuous mode [ 923.935542][T12113] syzkaller0: entered allmulticast mode [ 924.103257][T12119] syzkaller0: entered promiscuous mode [ 924.110462][T12119] syzkaller0: entered allmulticast mode [ 924.326904][T12134] netlink: 168 bytes leftover after parsing attributes in process `syz.3.17175'. [ 924.424614][T12139] netlink: 'syz.2.17178': attribute type 10 has an invalid length. [ 924.476481][T12142] netlink: 'syz.2.17178': attribute type 10 has an invalid length. [ 924.543463][T12139] team0: Failed to send options change via netlink (err -105) [ 924.551356][T12139] team0: Port device dummy0 added [ 924.563958][T12142] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 924.593592][T12142] team0: Failed to send options change via netlink (err -105) [ 924.601812][T12142] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 924.612158][T12142] team0: Port device dummy0 removed [ 924.621210][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17182'. [ 924.665871][T12154] netlink: 'syz.0.17183': attribute type 1 has an invalid length. [ 924.759270][T12154] bond9: entered promiscuous mode [ 924.764936][T12154] 8021q: adding VLAN 0 to HW filter on device bond9 [ 924.778016][T12151] syzkaller0: entered promiscuous mode [ 924.786495][T12151] syzkaller0: entered allmulticast mode [ 924.819916][T12154] bond9: (slave bridge14): making interface the new active one [ 924.828019][T12154] bridge14: entered promiscuous mode [ 924.834874][T12154] bond9: (slave bridge14): Enslaving as an active interface with an up link [ 925.156185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 925.164341][ C1] lec:lec_tx_timeout: lec0 [ 925.169017][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 925.371706][T12180] 9iLL speed is unknown, defaulting to 1000 [ 925.408041][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17190'. [ 925.502188][T12187] vlan2: entered allmulticast mode [ 925.527880][T12187] bridge5: entered allmulticast mode [ 925.611279][T12188] bridge5: port 1(veth9) entered blocking state [ 925.630869][T12188] bridge5: port 1(veth9) entered disabled state [ 925.661359][T12188] veth9: entered allmulticast mode [ 925.685021][T12188] veth9: entered promiscuous mode [ 925.987088][T12194] syzkaller0: entered promiscuous mode [ 926.007205][T12194] syzkaller0: entered allmulticast mode [ 926.024218][T12197] syzkaller0: entered promiscuous mode [ 926.033537][T12197] syzkaller0: entered allmulticast mode [ 926.085406][T12168] lec:lec_atm_close: lec0: Shut down! [ 928.151014][T12180] virt_wifi0 speed is unknown, defaulting to 1000 [ 928.398332][T12252] syzkaller0: entered promiscuous mode [ 928.414695][T12252] syzkaller0: entered allmulticast mode [ 928.568970][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17205'. [ 928.670953][T12261] 9iLL speed is unknown, defaulting to 1000 [ 928.889789][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17207'. [ 928.907233][T12274] xfrm1: entered allmulticast mode [ 929.062108][T12283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17208'. [ 929.106614][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17208'. [ 929.115720][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17208'. [ 929.145252][T12282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17210'. [ 929.171906][T12282] netlink: 'syz.3.17210': attribute type 7 has an invalid length. [ 929.207435][T12282] netlink: 'syz.3.17210': attribute type 8 has an invalid length. [ 929.255934][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17210'. [ 929.266806][T12261] virt_wifi0 speed is unknown, defaulting to 1000 [ 929.413943][T12292] syzkaller0: entered promiscuous mode [ 929.428730][T12292] syzkaller0: entered allmulticast mode [ 929.454860][T12292] tipc: Enabled bearer , priority 0 [ 929.465683][T12290] tipc: Resetting bearer [ 929.542294][T12290] tipc: Disabling bearer [ 929.891867][T12296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17215'. [ 930.217186][T12313] netlink: 'syz.3.17218': attribute type 1 has an invalid length. [ 930.432799][T12316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17218'. [ 930.553851][T12315] bond7: (slave geneve3): making interface the new active one [ 930.587458][T12315] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 930.637883][T12316] 8021q: adding VLAN 0 to HW filter on device bond7 [ 930.711083][ T979] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 930.725167][ T979] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 930.817461][ T979] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 930.840896][ T979] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 930.939708][T12323] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.17219'. [ 930.956358][T12276] Bluetooth: hci4: command 0x0406 tx timeout [ 931.086165][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 931.094264][ C1] lec:lec_tx_timeout: lec0 [ 931.099138][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 931.133766][T12340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.259269][T12340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.815443][T12371] syzkaller0: entered promiscuous mode [ 931.823910][T12371] syzkaller0: entered allmulticast mode [ 932.911456][T12382] syzkaller0: entered promiscuous mode [ 932.917176][T12382] syzkaller0: entered allmulticast mode [ 933.050788][T12386] syzkaller1: entered promiscuous mode [ 933.059322][T12386] syzkaller1: entered allmulticast mode [ 933.722769][T12400] 9iLL speed is unknown, defaulting to 1000 [ 933.876193][T12400] virt_wifi0 speed is unknown, defaulting to 1000 [ 934.426500][T12404] lec:lec_atm_close: lec0: Shut down! [ 934.539736][T12414] netlink: 'syz.2.17242': attribute type 10 has an invalid length. [ 934.619073][T12362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.653467][T12417] 9iLL speed is unknown, defaulting to 1000 [ 934.775601][T12422] __nla_validate_parse: 2 callbacks suppressed [ 934.775622][T12422] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17245'. [ 934.808640][T12423] netlink: 'syz.3.17244': attribute type 3 has an invalid length. [ 934.827360][T12423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17244'. [ 934.859909][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17246'. [ 934.883215][T12422] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.973849][T12422] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 935.011824][T12417] virt_wifi0 speed is unknown, defaulting to 1000 [ 935.033059][T12428] netlink: 'syz.3.17247': attribute type 16 has an invalid length. [ 935.066310][T12428] netlink: 'syz.3.17247': attribute type 17 has an invalid length. [ 935.093023][T12422] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 935.189128][T12428] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.209551][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 935.217813][T12428] net_ratelimit: 11 callbacks suppressed [ 935.217827][T12428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.283223][T12422] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 935.287390][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 935.306744][T12438] netlink: 'syz.0.17250': attribute type 16 has an invalid length. [ 935.314702][T12438] netlink: 'syz.0.17250': attribute type 17 has an invalid length. [ 935.461532][T12438] bridge0: left allmulticast mode [ 935.477862][T12438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.492684][T12438] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.509670][T12438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.662714][T12443] netlink: 'syz.3.17251': attribute type 5 has an invalid length. [ 935.689602][ T1262] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.790312][ T1262] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.842994][ T1262] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.865845][ T7735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 935.878235][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17253'. [ 935.946036][ T979] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.961642][T12448] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 936.023699][T12450] syzkaller0: entered promiscuous mode [ 936.030959][T12450] syzkaller0: entered allmulticast mode [ 936.139400][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17255'. [ 936.369138][ T30] audit: type=1804 audit(1772354382.865:17): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.17258" name="/newroot/3272/cgroup.controllers" dev="tmpfs" ino=16486 res=1 errno=0 [ 936.439508][ T30] audit: type=1800 audit(1772354382.865:18): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17258" name="cgroup.controllers" dev="tmpfs" ino=16486 res=0 errno=0 [ 936.509543][ T30] audit: type=1800 audit(1772354382.895:19): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17258" name="cgroup.controllers" dev="tmpfs" ino=16486 res=0 errno=0 [ 936.735768][T12472] netlink: 284 bytes leftover after parsing attributes in process `syz.3.17262'. [ 936.887698][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 936.895983][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 936.917409][T12478] syzkaller0: entered promiscuous mode [ 936.923121][T12478] syzkaller0: entered allmulticast mode [ 937.136346][ T5938] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 937.199669][T12484] syzkaller0: entered promiscuous mode [ 937.205365][T12484] syzkaller0: entered allmulticast mode [ 937.637446][T12499] 9iLL speed is unknown, defaulting to 1000 [ 937.800216][T12507] netlink: 'syz.4.17274': attribute type 10 has an invalid length. [ 938.141162][T12499] virt_wifi0 speed is unknown, defaulting to 1000 [ 938.199214][T12488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 938.205416][T12488] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 938.280869][T12488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 938.298389][T12488] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 938.331613][T12488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 938.347461][T12488] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 938.427730][T12488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 938.437087][T12488] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 938.527473][T12488] tipc: Resetting bearer [ 938.600261][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17278'. [ 938.620860][T12524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17278'. [ 938.630585][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17278'. [ 938.655354][T12524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17278'. [ 938.967169][T12544] netlink: 'syz.0.17281': attribute type 1 has an invalid length. [ 939.145874][T12544] bond10: entered promiscuous mode [ 939.164617][T12544] 8021q: adding VLAN 0 to HW filter on device bond10 [ 939.200283][T12538] 9iLL speed is unknown, defaulting to 1000 [ 939.259775][T12551] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 939.306241][T12551] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 939.326241][T12551] bond10: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 939.414671][T12551] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 939.438572][T12551] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 939.996173][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 940.004330][ C1] lec:lec_tx_timeout: lec0 [ 940.010380][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 940.072967][T12538] virt_wifi0 speed is unknown, defaulting to 1000 [ 940.966635][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 941.098206][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17292'. [ 941.312845][T12608] bridge8: port 1(veth19) entered blocking state [ 941.324653][T12608] bridge8: port 1(veth19) entered disabled state [ 941.331813][T12608] veth19: entered allmulticast mode [ 941.339822][T12608] veth19: entered promiscuous mode [ 941.350912][T12611] bridge8: port 2(veth0_to_bond) entered blocking state [ 941.352171][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17294'. [ 941.379186][T12611] bridge8: port 2(veth0_to_bond) entered disabled state [ 941.388857][T12611] veth0_to_bond: entered allmulticast mode [ 941.397309][T12611] veth0_to_bond: entered promiscuous mode [ 941.431939][T12616] bridge8: port 3(veth21) entered blocking state [ 941.441058][T12616] bridge8: port 3(veth21) entered disabled state [ 941.456643][T12616] veth21: entered allmulticast mode [ 941.465676][T12616] veth21: entered promiscuous mode [ 941.511784][T12624] tipc: Enabled bearer , priority 0 [ 941.550623][T12615] tipc: Resetting bearer [ 941.709765][T12632] syzkaller0: entered promiscuous mode [ 941.734151][T12632] syzkaller0: entered allmulticast mode [ 941.751797][T12626] syzkaller0: entered promiscuous mode [ 941.757624][T12626] syzkaller0: entered allmulticast mode [ 941.818318][T12613] tipc: Resetting bearer [ 941.861980][T12613] tipc: Disabling bearer [ 942.087968][T12646] netlink: 'syz.4.17299': attribute type 1 has an invalid length. [ 942.276794][T12656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17301'. [ 942.349788][T12656] netlink: 'syz.0.17301': attribute type 1 has an invalid length. [ 942.358734][T12658] syzkaller0: entered promiscuous mode [ 942.364425][T12658] syzkaller0: entered allmulticast mode [ 942.461181][T12663] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 942.478889][T12663] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 942.569907][T12672] netlink: 'syz.1.17306': attribute type 10 has an invalid length. [ 942.593088][T12673] syzkaller0: entered promiscuous mode [ 942.598911][T12672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17306'. [ 942.608761][T12673] syzkaller0: entered allmulticast mode [ 942.616969][T12672] dummy0: entered promiscuous mode [ 942.628259][T12672] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 942.717757][T12680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17309'. [ 942.733911][T12680] netlink: 'syz.4.17309': attribute type 1 has an invalid length. [ 942.754474][T12680] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 943.185315][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17314'. [ 943.194772][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17314'. [ 943.209217][T12699] netlink: 'syz.4.17314': attribute type 1 has an invalid length. [ 943.219772][T12699] netlink: 10 bytes leftover after parsing attributes in process `syz.4.17314'. [ 943.229503][T12699] block nbd1: Unsupported socket: should be TCP or UNIX. [ 943.273484][T12701] netlink: 'syz.0.17315': attribute type 1 has an invalid length. [ 943.367793][T12701] 8021q: adding VLAN 0 to HW filter on device bond11 [ 943.463695][T12706] vlan4: entered promiscuous mode [ 943.476065][T12701] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17315'. [ 943.480042][T12706] bond11: entered promiscuous mode [ 943.491886][T12706] vlan4: entered allmulticast mode [ 943.497522][T12706] bond11: entered allmulticast mode [ 943.519929][T12701] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 943.529898][T12701] bond11: (slave batadv1): making interface the new active one [ 943.537750][T12701] batadv1: entered promiscuous mode [ 943.543276][T12701] batadv1: entered allmulticast mode [ 943.557650][T12701] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 943.607694][T12711] syzkaller0: entered promiscuous mode [ 943.613242][T12711] syzkaller0: entered allmulticast mode [ 943.644988][T12714] 9iLL speed is unknown, defaulting to 1000 [ 944.398826][T12725] lec:lec_atm_close: lec0: Shut down! [ 945.717070][T12714] virt_wifi0 speed is unknown, defaulting to 1000 [ 945.784397][T12748] tipc: Resetting bearer [ 945.933149][T12756] syzkaller0: entered promiscuous mode [ 945.938963][T12756] syzkaller0: entered allmulticast mode [ 946.058159][ T30] audit: type=1107 audit(1772354392.555:20): pid=12763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 946.077905][T12764] xfrm0: entered promiscuous mode [ 946.095435][T12764] xfrm0: entered allmulticast mode [ 946.180236][T12769] netlink: 'syz.1.17330': attribute type 1 has an invalid length. [ 946.460643][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17333'. [ 946.617915][T12782] syzkaller0: entered promiscuous mode [ 946.635945][T12782] syzkaller0: entered allmulticast mode [ 946.870238][T12788] netlink: 'syz.1.17338': attribute type 1 has an invalid length. [ 947.034258][T12796] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.17340'. [ 947.045389][T12796] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.17340'. [ 947.111269][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17338'. [ 947.151089][T12792] bond12: (slave veth23): Enslaving as an active interface with a down link [ 947.258855][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17341'. [ 947.273741][T12795] bond12: (slave veth25): Enslaving as an active interface with a down link [ 947.361506][T12788] 8021q: adding VLAN 0 to HW filter on device bond12 [ 947.403534][T12793] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 947.457283][T12800] 9iLL speed is unknown, defaulting to 1000 [ 947.593381][T12816] netlink: 'syz.1.17345': attribute type 1 has an invalid length. [ 947.790501][T12819] bond13: (slave bridge9): Enslaving as a backup interface with an up link [ 947.808003][T12811] 9iLL speed is unknown, defaulting to 1000 [ 947.817327][T12800] virt_wifi0 speed is unknown, defaulting to 1000 [ 947.940678][T12816] bond13: (slave bridge10): Enslaving as a backup interface with a down link [ 948.308046][T12833] tipc: Resetting bearer [ 948.318763][T12832] tipc: Enabled bearer , priority 0 [ 948.347829][T12832] syzkaller0: entered promiscuous mode [ 948.365198][T12832] syzkaller0: entered allmulticast mode [ 948.391855][T12811] virt_wifi0 speed is unknown, defaulting to 1000 [ 948.550599][T12832] tipc: Resetting bearer [ 948.611144][T12830] tipc: Resetting bearer [ 948.826898][T12830] tipc: Disabling bearer [ 948.949625][T12847] tipc: Enabled bearer , priority 10 [ 948.956331][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 949.504504][T12855] tipc: Enabled bearer , priority 0 [ 949.523015][T12855] syzkaller0: entered promiscuous mode [ 949.603023][T12855] syzkaller0: entered allmulticast mode [ 949.629184][T12861] tipc: Resetting bearer [ 949.656508][T12854] tipc: Resetting bearer [ 949.760261][T12854] tipc: Disabling bearer [ 949.996376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 950.004498][ C1] lec:lec_tx_timeout: lec0 [ 950.009215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 950.278812][T12878] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 950.439378][T12878] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 950.501198][T12883] 9iLL speed is unknown, defaulting to 1000 [ 950.540362][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17366'. [ 950.548396][T12878] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 950.636589][T12895] tipc: Enabled bearer , priority 0 [ 950.649580][T12878] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 950.857672][T12892] syzkaller0: entered promiscuous mode [ 950.874597][T12892] syzkaller0: entered allmulticast mode [ 950.883403][T12892] tipc: Resetting bearer [ 950.895054][T12883] virt_wifi0 speed is unknown, defaulting to 1000 [ 950.962694][T12891] tipc: Resetting bearer [ 952.985508][T12891] tipc: Disabling bearer [ 953.047219][ T979] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.181017][ T1254] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.202422][T12929] netlink: 'syz.4.17372': attribute type 1 has an invalid length. [ 953.240635][T12929] netlink: 'syz.4.17372': attribute type 1 has an invalid length. [ 953.250592][T12931] tipc: Bearer : already 2 bearers with priority 0 [ 953.266241][T12931] tipc: Enabling of bearer rejected, cannot adjust to lower [ 953.322313][ T979] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.383991][ T1262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.469994][T12936] macsec0: entered promiscuous mode [ 953.475381][T12936] bridge0: entered promiscuous mode [ 953.674270][T12949] syzkaller0: entered promiscuous mode [ 953.680554][T12949] syzkaller0: entered allmulticast mode [ 953.713609][T12945] syzkaller0: entered promiscuous mode [ 953.719463][T12945] syzkaller0: entered allmulticast mode [ 955.026164][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 955.034233][ C1] lec:lec_tx_timeout: lec0 [ 955.039349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 955.426971][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17378'. [ 955.661142][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17384'. [ 955.694390][T12969] syzkaller0: entered promiscuous mode [ 955.700208][T12969] syzkaller0: entered allmulticast mode [ 955.727775][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17384'. [ 955.780754][ T1262] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 955.789559][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17384'. [ 955.826333][ T1262] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.005400][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17384'. [ 956.016287][ T1262] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.059698][ T1262] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.268180][T13001] 9iLL speed is unknown, defaulting to 1000 [ 958.289601][T13029] syzkaller0: entered promiscuous mode [ 958.295217][T13029] syzkaller0: entered allmulticast mode [ 958.588285][T13038] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 958.638030][T13031] syzkaller0: entered promiscuous mode [ 958.643731][T13031] syzkaller0: entered allmulticast mode [ 960.056148][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 960.064313][ C1] lec:lec_tx_timeout: lec0 [ 960.069091][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 960.486525][ T5900] page_pool_release_retry() stalled pool shutdown: id 172, 1 inflight 121 sec [ 960.648578][T13001] virt_wifi0 speed is unknown, defaulting to 1000 [ 960.674836][T13080] tipc: Enabled bearer , priority 0 [ 960.703098][T13084] tipc: Resetting bearer [ 960.997921][T13092] 9iLL speed is unknown, defaulting to 1000 [ 961.152692][T13099] syzkaller0: entered promiscuous mode [ 961.166418][T13099] syzkaller0: entered allmulticast mode [ 961.556385][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17410'. [ 961.566270][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17410'. [ 961.934539][T13092] virt_wifi0 speed is unknown, defaulting to 1000 [ 962.122839][T13118] syzkaller0: entered promiscuous mode [ 962.129290][T13118] syzkaller0: entered allmulticast mode [ 962.451768][T13132] Cannot find set identified by id 65534 to match [ 962.503546][T13131] 9iLL speed is unknown, defaulting to 1000 [ 962.582917][T13136] syzkaller0: entered promiscuous mode [ 962.588612][T13136] syzkaller0: entered allmulticast mode [ 962.984149][T13131] virt_wifi0 speed is unknown, defaulting to 1000 [ 963.663026][T13169] vlan2: entered allmulticast mode [ 963.689229][T13169] veth0_to_bond: entered allmulticast mode [ 963.731899][T13173] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.746955][T13169] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.17426'. [ 963.880291][T13173] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.994623][T13180] syzkaller0: entered promiscuous mode [ 964.028494][T13180] syzkaller0: entered allmulticast mode [ 964.090732][T13173] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.292009][T13173] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.415606][T13191] 9iLL speed is unknown, defaulting to 1000 [ 964.487288][T13195] syzkaller0: entered promiscuous mode [ 964.494045][T13195] syzkaller0: entered allmulticast mode [ 964.532256][ T1262] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.543283][T13197] netlink: 'syz.1.17434': attribute type 39 has an invalid length. [ 964.662173][ T151] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.698286][ T151] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.835201][ T1254] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.844092][T13191] virt_wifi0 speed is unknown, defaulting to 1000 [ 964.929573][T13205] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 964.956291][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 965.076269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 965.084366][ C1] lec:lec_tx_timeout: lec0 [ 965.089027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 965.413333][T13231] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17441'. [ 965.517439][T13226] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 965.546451][T13226] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 965.668090][T13230] bond8 (unregistering): Released all slaves [ 966.433479][T13250] tipc: Enabled bearer , priority 0 [ 966.461301][T13250] syzkaller0: entered promiscuous mode [ 966.476253][T13250] syzkaller0: entered allmulticast mode [ 966.561535][T13250] tipc: Resetting bearer [ 966.596256][T13256] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 966.636481][T13249] tipc: Resetting bearer [ 966.660135][T13249] tipc: Disabling bearer [ 966.675658][T13255] syzkaller1: entered promiscuous mode [ 966.689362][T13255] syzkaller1: entered allmulticast mode [ 966.698038][T13260] syzkaller0: entered promiscuous mode [ 966.703632][T13260] syzkaller0: entered allmulticast mode [ 966.940876][T13267] netlink: 'syz.2.17452': attribute type 13 has an invalid length. [ 967.004844][T13272] netlink: 'syz.0.17455': attribute type 13 has an invalid length. [ 967.015104][T13272] netlink: 'syz.0.17455': attribute type 17 has an invalid length. [ 967.181862][T13272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.204659][T13273] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 967.274368][T13270] 9iLL speed is unknown, defaulting to 1000 [ 967.459773][T13287] tipc: New replicast peer: 255.255.255.255 [ 967.516923][T13287] tipc: Enabled bearer , priority 10 [ 967.612367][T13270] virt_wifi0 speed is unknown, defaulting to 1000 [ 967.961905][T13306] dummy0: left promiscuous mode [ 967.978237][T13306] batman_adv: batadv0: Adding interface: dummy0 [ 967.998397][T13306] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.062444][T13306] batman_adv: batadv0: Interface activated: dummy0 [ 968.157421][T13302] batadv0: mtu less than device minimum [ 968.188282][T13302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.200228][T13302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.212203][T13302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.224031][T13302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.235853][T13302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.247689][T13302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.259511][T13302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.537538][T13314] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 968.708431][T13314] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 968.853353][T13314] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 968.975327][T13314] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 969.244498][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 969.332356][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 969.381325][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 969.441729][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 969.488727][T13329] batman_adv: batadv0: Adding interface: macsec3 [ 969.505388][T13329] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.572639][T13329] batman_adv: batadv0: Interface activated: macsec3 [ 969.913909][T13342] 9iLL speed is unknown, defaulting to 1000 [ 970.012275][T13337] net_ratelimit: 12 callbacks suppressed [ 970.012299][T13337] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 970.026170][ T5900] IPVS: starting estimator thread 0... [ 970.080730][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17478'. [ 970.096144][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 970.104274][ C1] lec:lec_tx_timeout: lec0 [ 970.109124][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 970.135908][T13350] IPVS: using max 26 ests per chain, 62400 per kthread [ 970.375802][T13342] virt_wifi0 speed is unknown, defaulting to 1000 [ 970.602717][T13360] 9iLL speed is unknown, defaulting to 1000 [ 970.690609][T13365] syzkaller0: entered promiscuous mode [ 970.696790][T13365] syzkaller0: entered allmulticast mode [ 970.726946][T13364] tipc: Bearer : already 2 bearers with priority 0 [ 970.734941][T13364] tipc: Enabling of bearer rejected, cannot adjust to lower [ 971.261602][T13375] batman_adv: batadv0: Adding interface: macsec3 [ 971.276207][T13375] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.336417][T13375] batman_adv: batadv0: Interface activated: macsec3 [ 971.353531][T13375] batadv0: mtu less than device minimum [ 971.377729][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.390086][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.401933][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.413758][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.425760][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.437625][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.449482][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.461212][T13375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.544717][T13360] virt_wifi0 speed is unknown, defaulting to 1000 [ 971.702217][T13376] syzkaller0: entered promiscuous mode [ 971.708459][T13376] syzkaller0: entered allmulticast mode [ 973.644559][T13404] netlink: 124 bytes leftover after parsing attributes in process `syz.1.17495'. [ 973.798017][T13409] tipc: Bearer : already 2 bearers with priority 0 [ 973.823847][T13409] tipc: Enabling of bearer rejected, cannot adjust to lower [ 973.864043][T13412] syzkaller0: entered promiscuous mode [ 973.881383][T13412] syzkaller0: entered allmulticast mode [ 973.982496][T13414] syzkaller0: entered promiscuous mode [ 973.991511][T13414] syzkaller0: entered allmulticast mode [ 974.128333][T13420] netlink: 'syz.1.17501': attribute type 1 has an invalid length. [ 974.229923][T13420] 8021q: adding VLAN 0 to HW filter on device bond14 [ 974.259648][T13426] netlink: 'syz.3.17502': attribute type 21 has an invalid length. [ 974.268279][T13426] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.276074][T13426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 974.283392][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 974.290717][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 974.298012][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 974.342670][T13408] netlink: 'syz.2.17496': attribute type 4 has an invalid length. [ 974.720271][T13424] vlan3: entered promiscuous mode [ 974.736702][T13424] bond14: entered promiscuous mode [ 974.742020][T13424] vlan3: entered allmulticast mode [ 974.752816][T13424] bond14: entered allmulticast mode [ 974.827627][T13430] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.891411][T13432] bond14: (slave bridge11): making interface the new active one [ 974.899423][T13432] bridge11: entered promiscuous mode [ 974.905348][T13432] bridge11: entered allmulticast mode [ 974.913265][T13432] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 974.923155][ T7735] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.942531][ T7735] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 974.953784][ T7735] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.963586][ T7735] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 974.982096][T15197] 9iLL speed is unknown, defaulting to 1000 [ 974.982089][ T7735] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.982125][ T7735] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 975.009352][T15197] sqz0: Port: 1 Link ACTIVE [ 975.045879][ T7735] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.055017][ T7735] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 975.081683][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17505'. [ 975.086390][T15197] 9iLL speed is unknown, defaulting to 1000 [ 975.116215][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 975.124313][ C1] lec:lec_tx_timeout: lec0 [ 975.125424][T13441] syzkaller0: entered promiscuous mode [ 975.131506][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 975.135630][T13441] syzkaller0: entered allmulticast mode [ 975.314232][T13447] tipc: Enabling of bearer rejected, already enabled [ 975.413111][T13451] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17508'. [ 975.587751][T13460] vlan5: entered promiscuous mode [ 975.602417][T13460] team0: entered promiscuous mode [ 975.616546][T13460] geneve0: entered promiscuous mode [ 975.872649][T13469] syzkaller0: entered promiscuous mode [ 975.896308][T13469] syzkaller0: entered allmulticast mode [ 976.008991][T13472] tipc: Enabled bearer , priority 0 [ 976.030747][T13471] syzkaller0: entered promiscuous mode [ 976.046209][T13471] syzkaller0: entered allmulticast mode [ 976.111678][T13471] tipc: Resetting bearer [ 976.145729][T13470] tipc: Resetting bearer [ 976.196484][T13470] tipc: Disabling bearer [ 976.213847][T13477] netlink: 'syz.2.17519': attribute type 1 has an invalid length. [ 976.289884][T13477] 8021q: adding VLAN 0 to HW filter on device bond10 [ 976.405589][T13480] bond10: (slave geneve5): making interface the new active one [ 976.478835][T13480] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 976.510498][T13481] syzkaller0: entered promiscuous mode [ 976.516043][T13481] syzkaller0: entered allmulticast mode [ 976.543502][ T1262] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.552359][ T1262] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.658758][ T1262] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.835065][T13484] syzkaller0: entered promiscuous mode [ 976.841416][T13484] syzkaller0: entered allmulticast mode [ 976.848959][ T1254] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.993921][T13504] xt_hashlimit: size too large, truncated to 1048576 [ 978.116992][T13522] netlink: 'syz.1.17529': attribute type 1 has an invalid length. [ 978.288148][T13525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17529'. [ 978.852142][T13528] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.17530'. [ 978.862106][T13528] net_ratelimit: 12 callbacks suppressed [ 978.862126][T13528] netlink: ct family unspecified [ 978.894931][T13528] netlink: 'syz.4.17530': attribute type 1 has an invalid length. [ 978.906850][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17530'. [ 978.978599][T13529] nbd: must specify a size in bytes for the device [ 979.113027][T13507] x9: renamed from bridge_slave_0 [ 979.124927][T13522] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 979.125970][T13523] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 979.362132][T13543] ip6tnl0: Caught tx_queue_len zero misconfig [ 979.603042][T13549] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17538'. [ 979.613252][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17538'. [ 979.705356][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17540'. [ 979.757284][T13555] macvtap1: entered promiscuous mode [ 979.762727][T13555] dummy0: entered promiscuous mode [ 979.768611][T13555] macvtap1: entered allmulticast mode [ 979.774107][T13555] dummy0: entered allmulticast mode [ 980.146156][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 980.154235][ C1] lec:lec_tx_timeout: lec0 [ 980.159919][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 980.194805][T13570] vlan4: entered promiscuous mode [ 980.213609][T13570] dummy0: entered promiscuous mode [ 981.010344][T13607] syzkaller0: entered promiscuous mode [ 981.046287][T13607] syzkaller0: entered allmulticast mode [ 981.317088][T13627] netlink: 6 bytes leftover after parsing attributes in process `syz.1.17563'. [ 981.746683][ T5932] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 981.755460][T13641] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.777170][T13641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 982.034296][T13661] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.136552][T13661] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.239750][T13661] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.276187][T13672] tipc: Bearer : already 2 bearers with priority 0 [ 982.284395][T13672] tipc: Enabling of bearer rejected, cannot adjust to lower [ 982.309746][T13672] syzkaller0: entered promiscuous mode [ 982.322111][T13672] syzkaller0: entered allmulticast mode [ 982.395314][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17576'. [ 982.522584][T13661] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.661960][ T5938] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 982.676995][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 982.787469][ T151] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.820589][ T151] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.832323][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17579'. [ 982.898142][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17579'. [ 982.903854][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.932086][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.082455][T13685] syzkaller0: entered promiscuous mode [ 983.106355][T13685] syzkaller0: entered allmulticast mode [ 983.143069][T13685] 0: reclassify loop, rule prio 0, protocol 800 [ 983.280749][T13696] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 983.383036][T13706] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17584'. [ 983.393261][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17584'. [ 983.515674][T13687] batman_adv: batadv0: Interface deactivated: macsec3 [ 983.562880][ T1254] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.571651][ T1254] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.586874][ T1254] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.606357][ T1254] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.665094][T13715] tipc: Enabling of bearer rejected, already enabled [ 983.695775][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17589'. [ 983.719227][T13718] syzkaller0: entered promiscuous mode [ 983.724915][T13718] syzkaller0: entered allmulticast mode [ 983.735358][T13718] 0: reclassify loop, rule prio 0, protocol 800 [ 983.790118][T13722] netlink: 'syz.4.17591': attribute type 1 has an invalid length. [ 983.821007][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 983.829450][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 983.850985][T13724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17591'. [ 983.898335][T13724] bond0: (slave bridge10): making interface the new active one [ 983.917404][T13724] bond0: (slave bridge10): Enslaving as an active interface with an up link [ 983.961984][T13722] bond0: (slave bridge11): Enslaving as an active interface with a down link [ 983.992508][T13722] macvlan3: entered promiscuous mode [ 983.998593][T13722] macvlan3: entered allmulticast mode [ 984.005078][T13722] bond0: entered promiscuous mode [ 984.012859][T13722] bridge10: entered promiscuous mode [ 984.019617][T13722] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 984.027631][T13722] bond0: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 984.044031][T13722] bond0: left promiscuous mode [ 984.074929][T13722] bridge10: left promiscuous mode [ 984.201519][T13734] 9iLL speed is unknown, defaulting to 1000 [ 984.227876][T13738] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 984.235345][T13738] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 984.296754][ T5932] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 984.533481][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17596'. [ 984.671653][T13747] syzkaller0: entered promiscuous mode [ 984.677726][T13747] syzkaller0: entered allmulticast mode [ 984.742312][T13734] virt_wifi0 speed is unknown, defaulting to 1000 [ 985.095988][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17599'. [ 985.166156][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 985.174231][ C1] lec:lec_tx_timeout: lec0 [ 985.186261][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 985.264636][T13759] netlink: 'syz.0.17600': attribute type 4 has an invalid length. [ 985.481145][T13765] 9iLL speed is unknown, defaulting to 1000 [ 985.735731][T13770] 9iLL speed is unknown, defaulting to 1000 [ 986.061585][T13777] tipc: Enabled bearer , priority 0 [ 986.103318][T13777] syzkaller0: entered promiscuous mode [ 986.122070][T13777] syzkaller0: entered allmulticast mode [ 986.208470][T13777] tipc: Resetting bearer [ 986.362768][T13775] tipc: Resetting bearer [ 986.435522][T13775] tipc: Disabling bearer [ 986.714354][T13792] netlink: 'syz.3.17609': attribute type 10 has an invalid length. [ 986.860602][T13793] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 986.873466][T13793] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 986.884426][T13792] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 987.028808][T13805] __nla_validate_parse: 1 callbacks suppressed [ 987.028831][T13805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17613'. [ 987.049457][T13799] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 987.076335][T13799] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 987.119741][T13800] 9iLL speed is unknown, defaulting to 1000 [ 987.151778][T13807] tipc: Enabling of bearer rejected, already enabled [ 987.547071][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17618'. [ 987.639676][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17620'. [ 987.653738][T13821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 987.676878][T14564] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 987.757732][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17618'. [ 988.111910][T13840] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 988.125066][T13840] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 988.156385][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 988.224148][T13842] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 988.236898][T13842] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 988.366715][T13837] 9iLL speed is unknown, defaulting to 1000 [ 988.504782][T13847] netlink: 'syz.1.17627': attribute type 4 has an invalid length. [ 988.603149][T13832] lec:lec_atm_close: lec0: Shut down! [ 988.716882][ T5932] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 989.045749][T13858] syzkaller0: entered promiscuous mode [ 989.054182][T13858] syzkaller0: entered allmulticast mode [ 989.227227][T13862] 9iLL speed is unknown, defaulting to 1000 [ 989.414358][T13868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.442417][T13870] netlink: 'syz.2.17633': attribute type 13 has an invalid length. [ 989.499691][T13871] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 990.033555][T13889] netlink: 'syz.2.17638': attribute type 2 has an invalid length. [ 990.078605][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17639'. [ 990.088036][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17639'. [ 990.120172][T13894] netlink: 'syz.3.17637': attribute type 11 has an invalid length. [ 990.655314][T13909] tipc: Enabled bearer , priority 0 [ 990.669028][T13909] syzkaller0: entered promiscuous mode [ 990.674780][T13909] syzkaller0: entered allmulticast mode [ 990.727451][T13909] tipc: Resetting bearer [ 990.782088][T13908] tipc: Resetting bearer [ 990.825963][T13908] tipc: Disabling bearer [ 990.854238][T13919] sock: sock_set_timeout: `syz.2.17647' (pid 13919) tries to set negative timeout [ 991.077082][T13926] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17649'. [ 991.077405][T13924] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 991.106478][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17649'. [ 991.551273][T13948] netlink: 'syz.4.17653': attribute type 2 has an invalid length. [ 991.642477][T13939] netlink: 'syz.3.17652': attribute type 10 has an invalid length. [ 991.656419][T13939] netlink: 228 bytes leftover after parsing attributes in process `syz.3.17652'. [ 992.004316][T13958] syzkaller0: entered promiscuous mode [ 992.010043][T13958] syzkaller0: entered allmulticast mode [ 992.093745][T13973] netlink: 'syz.4.17656': attribute type 1 has an invalid length. [ 992.263769][T13983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17656'. [ 992.310001][T13978] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 993.825603][T13973] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 993.865408][T13981] veth23: entered promiscuous mode [ 993.988803][T13982] 9iLL speed is unknown, defaulting to 1000 [ 993.996162][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 994.004242][ C1] lec:lec_tx_timeout: lec0 [ 994.008970][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 995.345622][T14016] 9iLL speed is unknown, defaulting to 1000 [ 995.559164][T14021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17669'. [ 995.986323][T14024] netlink: 'syz.1.17678': attribute type 10 has an invalid length. [ 996.022047][T14036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 996.046769][T15197] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 996.291133][T14045] tipc: Enabled bearer , priority 0 [ 996.348681][T14046] 9iLL speed is unknown, defaulting to 1000 [ 996.378350][T14045] syzkaller0: entered promiscuous mode [ 996.383997][T14045] syzkaller0: entered allmulticast mode [ 996.401590][T14050] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 996.412077][T14050] syzkaller0: entered promiscuous mode [ 996.418253][T14050] syzkaller0: entered allmulticast mode [ 996.464322][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17676'. [ 996.492567][T15197] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 996.632676][T14045] tipc: Resetting bearer [ 996.640211][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.648836][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.660568][T14044] tipc: Resetting bearer [ 996.771837][T14044] tipc: Disabling bearer [ 996.806509][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17676'. [ 996.956314][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 997.742160][T14085] netlink: 'syz.4.17683': attribute type 1 has an invalid length. [ 997.809427][T14087] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 997.884575][T14096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17683'. [ 997.959419][T14090] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 997.971294][T14090] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 998.067303][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17686'. [ 998.221406][T14096] bond11: (slave bridge12): Enslaving as an active interface with a down link [ 998.291139][T14085] bond11: (slave bridge13): Enslaving as an active interface with a down link [ 998.366059][T14097] macvlan3: entered promiscuous mode [ 998.387556][T14097] macvlan3: entered allmulticast mode [ 998.398097][T14097] bond11: entered promiscuous mode [ 998.417726][T14097] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 998.433593][T14097] bond11: left promiscuous mode [ 998.464261][T14107] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 998.768695][T14122] tipc: Failed to remove unknown binding: 66,0,0/4278255617:1089967362/1089967364 [ 998.779467][T14122] tipc: Failed to remove unknown binding: 66,0,0/4278255617:1089967362/1089967363 [ 998.798462][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17691'. [ 998.843595][T14123] tipc: Failed to remove unknown binding: 66,0,0/4278255617:1089967362/1089967364 [ 998.886163][T14123] tipc: Failed to remove unknown binding: 66,0,0/4278255617:1089967362/1089967363 [ 999.016176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 999.024367][ C1] lec:lec_tx_timeout: lec0 [ 999.029214][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 999.211978][T14136] syzkaller0: entered promiscuous mode [ 999.217691][T14136] syzkaller0: entered allmulticast mode [ 999.339659][T14141] lo speed is unknown, defaulting to 1000 [ 999.354982][T14142] IPVS: stopping backup sync thread 21326 ... [ 999.381883][T14141] lo speed is unknown, defaulting to 1000 [ 999.404509][T14141] lo speed is unknown, defaulting to 1000 [ 999.568764][T14148] syzkaller0: entered promiscuous mode [ 999.581080][T14148] syzkaller0: entered allmulticast mode [ 999.865596][ T5488] veth0_vlan: left promiscuous mode [ 999.900109][T14141] infiniband syz0: set down [ 999.904903][T14141] infiniband syz0: added lo [ 999.929167][ T5488] veth0_vlan: entered promiscuous mode [ 999.950957][ T5932] lo speed is unknown, defaulting to 1000 [ 999.977064][T14141] RDS/IB: syz0: added [ 999.991443][T14141] smc: adding ib device syz0 with port count 1 [ 1000.043673][T14141] smc: ib device syz0 port 1 has no pnetid [ 1000.073717][T14141] lo speed is unknown, defaulting to 1000 [ 1000.256265][T15197] lo speed is unknown, defaulting to 1000 [ 1000.562563][T14173] vlan5: entered promiscuous mode [ 1000.567930][T14173] team0: entered promiscuous mode [ 1000.583616][T14173] geneve0: entered promiscuous mode [ 1001.012359][T14193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17703'. [ 1001.074492][T14141] lo speed is unknown, defaulting to 1000 [ 1001.138856][T14191] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1001.304572][T14200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.516027][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17707'. [ 1001.560962][T14207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17706'. [ 1001.569167][T14203] syzkaller0: entered promiscuous mode [ 1001.575746][T14203] syzkaller0: entered allmulticast mode [ 1001.648134][T14207] ip6tnl0: Caught tx_queue_len zero misconfig [ 1001.705675][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17707'. [ 1003.660657][T14141] lo speed is unknown, defaulting to 1000 [ 1003.739507][T14220] 9iLL speed is unknown, defaulting to 1000 [ 1004.036156][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1004.044281][ C1] lec:lec_tx_timeout: lec0 [ 1004.049030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1004.173818][T14141] lo speed is unknown, defaulting to 1000 [ 1004.354395][T14241] 9iLL speed is unknown, defaulting to 1000 [ 1004.650283][T14141] lo speed is unknown, defaulting to 1000 [ 1005.365627][T14220] lo speed is unknown, defaulting to 1000 [ 1005.806252][T14241] lo speed is unknown, defaulting to 1000 [ 1005.854379][T14253] 9iLL speed is unknown, defaulting to 1000 [ 1005.937966][T14261] netlink: 'syz.0.17717': attribute type 21 has an invalid length. [ 1006.035993][T14261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17717'. [ 1006.238719][T14141] lo speed is unknown, defaulting to 1000 [ 1006.453254][T14258] 9iLL speed is unknown, defaulting to 1000 [ 1006.617911][T14267] syzkaller0: entered promiscuous mode [ 1006.633754][T14267] syzkaller0: entered allmulticast mode [ 1006.641240][T14141] lo speed is unknown, defaulting to 1000 [ 1007.056725][T12276] block nbd1: Receive control failed (result -32) [ 1007.363278][T14275] tipc: Enabled bearer , priority 14 [ 1007.370932][T14276] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1007.397234][T14275] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17723'. [ 1007.525406][T14275] 0X: renamed from caif0 [ 1007.544133][T14275] tipc: Disabling bearer [ 1007.563604][T14275] 0X: entered allmulticast mode [ 1007.578259][T14275] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1007.670302][T14282] openvswitch: netlink: Actions may not be safe on all matching packets [ 1007.829868][T14284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17727'. [ 1008.043444][T14290] syzkaller0: entered promiscuous mode [ 1008.058407][T14290] syzkaller0: entered allmulticast mode [ 1008.236581][T14291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17729'. [ 1008.263144][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17730'. [ 1008.368223][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17730'. [ 1008.442235][T14300] ip6gretap0: entered promiscuous mode [ 1008.461004][T14300] ip6gretap0: entered allmulticast mode [ 1008.550167][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17732'. [ 1008.561532][T14307] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17732'. [ 1008.741315][T14311] Cannot find del_set index 4 as target [ 1009.056116][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1009.064217][ C1] lec:lec_tx_timeout: lec0 [ 1009.069465][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1009.307903][T14323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.437263][ T30] audit: type=1800 audit(1772354455.915:21): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17735" name="memory.events" dev="tmpfs" ino=18244 res=0 errno=0 [ 1009.615607][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17739'. [ 1009.704245][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17741'. [ 1010.582843][T14340] batman_adv: batadv0: Interface deactivated: dummy0 [ 1010.611514][ T5900] 9iLL speed is unknown, defaulting to 1000 [ 1010.618857][ T5900] sqz0: Port: 1 Link DOWN [ 1010.679005][ T24] 9iLL speed is unknown, defaulting to 1000 [ 1010.729577][T14339] 9iLL speed is unknown, defaulting to 1000 [ 1010.868440][T14357] syzkaller0: entered promiscuous mode [ 1010.873979][T14357] syzkaller0: entered allmulticast mode [ 1011.175043][T14346] 9iLL speed is unknown, defaulting to 1000 [ 1011.207095][T14339] lo speed is unknown, defaulting to 1000 [ 1011.525834][T14371] syzkaller1: entered promiscuous mode [ 1011.546247][T14371] syzkaller1: entered allmulticast mode [ 1011.606305][T14361] 9iLL speed is unknown, defaulting to 1000 [ 1011.657904][T14346] lo speed is unknown, defaulting to 1000 [ 1012.055049][T14361] lo speed is unknown, defaulting to 1000 [ 1012.438112][T14376] 9iLL speed is unknown, defaulting to 1000 [ 1012.598930][T14384] tipc: Enabling of bearer rejected, already enabled [ 1012.701369][T14388] __nla_validate_parse: 194 callbacks suppressed [ 1012.701391][T14388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17755'. [ 1013.180450][T14376] lo speed is unknown, defaulting to 1000 [ 1013.904476][T14405] 9iLL speed is unknown, defaulting to 1000 [ 1014.076739][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1014.084807][ C1] lec:lec_tx_timeout: lec0 [ 1014.089432][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1014.443622][T14425] netlink: 'syz.4.17760': attribute type 10 has an invalid length. [ 1014.495179][T14426] netlink: 'syz.4.17760': attribute type 10 has an invalid length. [ 1014.681086][T14425] batman_adv: batadv0: Removing interface: dummy0 [ 1014.779780][T14425] team0: Port device dummy0 added [ 1014.876496][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1014.927450][T14426] team0: Port device dummy0 removed [ 1015.286901][T14405] lo speed is unknown, defaulting to 1000 [ 1015.526756][T14432] rdma_rxe: rxe_newlink: failed to add lo [ 1016.296691][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17766'. [ 1016.727846][T14458] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1017.030498][T14456] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1017.078049][T14457] 9iLL speed is unknown, defaulting to 1000 [ 1017.502720][T14472] netlink: 'syz.2.17771': attribute type 1 has an invalid length. [ 1017.718098][T14472] bond11: entered promiscuous mode [ 1017.737927][T14472] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1017.847093][T14478] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1017.865196][T14478] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1017.891936][T14478] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1017.968429][T14478] bond11: (slave wireguard0): making interface the new active one [ 1017.997921][T14478] wireguard0: entered promiscuous mode [ 1018.013384][T14478] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 1018.036281][ T30] audit: type=1800 audit(1772354464.525:22): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.17773" name="memory.events" dev="tmpfs" ino=16991 res=0 errno=0 [ 1018.339016][T14486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.384310][T14488] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1018.436813][T14490] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1018.453061][T14490] bond12: (slave macvlan4): Enslaving as a backup interface with a down link [ 1018.506831][T14457] lo speed is unknown, defaulting to 1000 [ 1018.508335][T14468] 9iLL speed is unknown, defaulting to 1000 [ 1018.637362][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17775'. [ 1018.646672][T14492] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1018.658376][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17775'. [ 1018.668107][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17775'. [ 1018.750330][T14494] netlink: 'syz.2.17776': attribute type 10 has an invalid length. [ 1018.908394][T14497] rdma_op ffff8880492a21f0 conn xmit_rdma 0000000000000000 [ 1018.998860][T14473] 9iLL speed is unknown, defaulting to 1000 [ 1018.999775][T14497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17777'. [ 1019.016640][T14468] lo speed is unknown, defaulting to 1000 [ 1019.034229][T14500] netlink: 'syz.4.17778': attribute type 4 has an invalid length. [ 1019.055329][T14500] netlink: 'syz.4.17778': attribute type 4 has an invalid length. [ 1019.096207][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1019.104297][ C1] lec:lec_tx_timeout: lec0 [ 1019.109004][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1019.122123][ T24] 9iLL speed is unknown, defaulting to 1000 [ 1019.130083][ T24] sqz0: Port: 1 Link ACTIVE [ 1019.138107][ T24] 9iLL speed is unknown, defaulting to 1000 [ 1019.501775][T14473] lo speed is unknown, defaulting to 1000 [ 1019.536559][T14504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17779'. [ 1020.415252][T14519] team0 (unregistering): Port device team_slave_0 removed [ 1020.447851][T14519] team0 (unregistering): Port device team_slave_1 removed [ 1020.701811][T14524] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17783'. [ 1020.970217][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17784'. [ 1021.092905][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17785'. [ 1021.113355][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17785'. [ 1021.155139][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17785'. [ 1021.201913][ T24] page_pool_release_retry() stalled pool shutdown: id 172, 1 inflight 181 sec [ 1021.360306][T14538] netlink: 'syz.0.17789': attribute type 11 has an invalid length. [ 1021.369394][T14538] netlink: 'syz.0.17789': attribute type 23 has an invalid length. [ 1021.675063][T14541] batman_adv: batadv0: Interface deactivated: macsec3 [ 1021.686121][T14541] batadv0: mtu less than device minimum [ 1021.693128][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.705323][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.717126][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.728912][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.740677][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.752504][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.764267][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.776045][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.787838][T14541] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.919962][T14525] ================================================================== [ 1021.928098][T14525] BUG: KASAN: slab-use-after-free in ax25_find_cb+0x179/0x3a0 [ 1021.935618][T14525] Read of size 8 at addr ffff888079399610 by task syz.4.17783/14525 [ 1021.936847][ T1254] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1021.943628][T14525] [ 1021.943661][T14525] CPU: 1 UID: 0 PID: 14525 Comm: syz.4.17783 Not tainted syzkaller #0 PREEMPT(full) [ 1021.943687][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1021.943710][T14525] Call Trace: [ 1021.943738][T14525] [ 1021.943779][T14525] dump_stack_lvl+0xe8/0x150 [ 1021.943887][T14525] print_report+0xba/0x230 [ 1021.943966][T14525] ? ax25_find_cb+0x179/0x3a0 [ 1021.944051][T14525] kasan_report+0x117/0x150 [ 1021.944128][T14525] ? ax25_find_cb+0x179/0x3a0 [ 1021.944220][T14525] ax25_find_cb+0x179/0x3a0 [ 1021.944307][T14525] rose_transmit_link+0x17b/0xac0 [ 1021.944398][T14525] rose_write_internal+0x1256/0x1b60 [ 1021.944481][T14525] ? lockdep_hardirqs_on+0x7a/0x110 [ 1021.944577][T14525] ? __pfx_rose_write_internal+0x10/0x10 [ 1021.944663][T14525] ? timer_delete+0x245/0x340 [ 1021.944730][T14525] rose_release+0x25b/0x510 [ 1021.944804][T14525] sock_close+0xc3/0x240 [ 1021.944859][T14525] ? __pfx_sock_close+0x10/0x10 [ 1021.944922][T14525] __fput+0x44f/0xa70 [ 1021.945046][T14525] task_work_run+0x1d9/0x270 [ 1021.945112][T14525] ? __pfx_task_work_run+0x10/0x10 [ 1021.945168][T14525] ? task_work_add+0x395/0x440 [ 1021.945264][T14525] ? __pfx_task_work_add+0x10/0x10 [ 1021.945351][T14525] get_signal+0x11eb/0x1330 [ 1021.945457][T14525] arch_do_signal_or_restart+0xbc/0x830 [ 1021.945531][T14525] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1021.945634][T14525] exit_to_user_mode_loop+0x86/0x480 [ 1021.945698][T14525] ? rcu_is_watching+0x15/0xb0 [ 1021.945776][T14525] do_syscall_64+0x32d/0xf80 [ 1021.945858][T14525] ? trace_irq_disable+0x3b/0x150 [ 1021.945942][T14525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.946011][T14525] ? clear_bhb_loop+0x40/0x90 [ 1021.946081][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.946144][T14525] RIP: 0033:0x7f5744d9c799 [ 1021.946198][T14525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.946251][T14525] RSP: 002b:00007f5745cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1021.946314][T14525] RAX: fffffffffffffe00 RBX: 00007f5745016090 RCX: 00007f5744d9c799 [ 1021.946357][T14525] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000c [ 1021.946400][T14525] RBP: 00007f5744e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1021.946440][T14525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.946474][T14525] R13: 00007f5745016128 R14: 00007f5745016090 R15: 00007ffc037fbae8 [ 1021.946577][T14525] [ 1021.946610][T14525] [ 1022.201102][T14525] Allocated by task 14325: [ 1022.205559][T14525] kasan_save_track+0x3e/0x80 [ 1022.210259][T14525] __kasan_kmalloc+0x93/0xb0 [ 1022.214879][T14525] __kmalloc_cache_noprof+0x31c/0x660 [ 1022.220266][T14525] ax25_dev_device_up+0x54/0x5f0 [ 1022.225219][T14525] ax25_device_event+0x127/0x8a0 [ 1022.230169][T14525] notifier_call_chain+0x1be/0x400 [ 1022.235309][T14525] __dev_notify_flags+0x1a9/0x310 [ 1022.240354][T14525] netif_change_flags+0xe8/0x1a0 [ 1022.245320][T14525] dev_change_flags+0x130/0x260 [ 1022.250190][T14525] dev_ioctl+0x7b4/0x1150 [ 1022.254540][T14525] sock_do_ioctl+0x23e/0x320 [ 1022.259164][T14525] sock_ioctl+0x5c6/0x7f0 [ 1022.263505][T14525] __se_sys_ioctl+0xfc/0x170 [ 1022.268117][T14525] do_syscall_64+0x14d/0xf80 [ 1022.272732][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.278643][T14525] [ 1022.280985][T14525] Freed by task 5938: [ 1022.284977][T14525] kasan_save_track+0x3e/0x80 [ 1022.289679][T14525] kasan_save_free_info+0x46/0x50 [ 1022.294729][T14525] __kasan_slab_free+0x5c/0x80 [ 1022.299507][T14525] __rcu_free_sheaf_prepare+0x129/0x290 [ 1022.305078][T14525] rcu_free_sheaf+0x31/0x200 [ 1022.309686][T14525] rcu_core+0x7cd/0x1070 [ 1022.313946][T14525] handle_softirqs+0x22a/0x870 [ 1022.318735][T14525] __irq_exit_rcu+0x5f/0x150 [ 1022.323350][T14525] irq_exit_rcu+0x9/0x30 [ 1022.327618][T14525] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1022.333285][T14525] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1022.339283][T14525] [ 1022.341617][T14525] The buggy address belongs to the object at ffff888079399600 [ 1022.341617][T14525] which belongs to the cache kmalloc-256 of size 256 [ 1022.355686][T14525] The buggy address is located 16 bytes inside of [ 1022.355686][T14525] freed 256-byte region [ffff888079399600, ffff888079399700) [ 1022.369420][T14525] [ 1022.371765][T14525] The buggy address belongs to the physical page: [ 1022.378207][T14525] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079399400 pfn:0x79398 [ 1022.388323][T14525] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1022.397110][T14525] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1022.405672][T14525] page_type: f5(slab) [ 1022.409689][T14525] raw: 00fff00000000240 ffff88813fea8b40 ffffea0000d91410 ffffea000098d910 [ 1022.418302][T14525] raw: ffff888079399400 000000000010000e 00000000f5000000 0000000000000000 [ 1022.426997][T14525] head: 00fff00000000240 ffff88813fea8b40 ffffea0000d91410 ffffea000098d910 [ 1022.435691][T14525] head: ffff888079399400 000000000010000e 00000000f5000000 0000000000000000 [ 1022.444383][T14525] head: 00fff00000000001 ffffea0001e4e601 00000000ffffffff 00000000ffffffff [ 1022.453076][T14525] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1022.461770][T14525] page dumped because: kasan: bad access detected [ 1022.468217][T14525] page_owner tracks the page as allocated [ 1022.473953][T14525] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5823, tgid 5823 (syz-executor), ts 87210500815, free_ts 87138303825 [ 1022.495337][T14525] post_alloc_hook+0x231/0x280 [ 1022.500133][T14525] get_page_from_freelist+0x24dc/0x2580 [ 1022.505700][T14525] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1022.511524][T14525] allocate_slab+0x77/0x660 [ 1022.516058][T14525] refill_objects+0x331/0x3c0 [ 1022.520795][T14525] __pcs_replace_empty_main+0x2b9/0x620 [ 1022.526464][T14525] __kmalloc_noprof+0x474/0x760 [ 1022.531341][T14525] fib_create_info+0x1723/0x31f0 [ 1022.536306][T14525] fib_table_insert+0xc8/0x1b50 [ 1022.541172][T14525] fib_magic+0x434/0x510 [ 1022.545524][T14525] fib_add_ifaddr+0x144/0x5f0 [ 1022.550225][T14525] fib_netdev_event+0x382/0x490 [ 1022.555106][T14525] notifier_call_chain+0x1be/0x400 [ 1022.560250][T14525] __dev_notify_flags+0x1a9/0x310 [ 1022.565303][T14525] netif_change_flags+0xe8/0x1a0 [ 1022.570263][T14525] do_setlink+0xf82/0x4590 [ 1022.574712][T14525] page last free pid 5824 tgid 5824 stack trace: [ 1022.581051][T14525] __free_frozen_pages+0xc2b/0xdb0 [ 1022.586181][T14525] __slab_free+0x263/0x2b0 [ 1022.590620][T14525] qlist_free_all+0x97/0x100 [ 1022.595226][T14525] kasan_quarantine_reduce+0x148/0x160 [ 1022.600701][T14525] __kasan_slab_alloc+0x22/0x80 [ 1022.605571][T14525] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 1022.611402][T14525] __d_alloc+0x37/0x6f0 [ 1022.615590][T14525] d_alloc_pseudo+0x21/0xc0 [ 1022.620111][T14525] alloc_file_pseudo+0xdd/0x240 [ 1022.624986][T14525] sock_alloc_file+0xb8/0x2e0 [ 1022.629679][T14525] __sys_socket+0x13c/0x1b0 [ 1022.634203][T14525] __x64_sys_socket+0x7a/0x90 [ 1022.638901][T14525] do_syscall_64+0x14d/0xf80 [ 1022.643520][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.649434][T14525] [ 1022.651859][T14525] Memory state around the buggy address: [ 1022.657509][T14525] ffff888079399500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1022.665589][T14525] ffff888079399580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1022.673676][T14525] >ffff888079399600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1022.681754][T14525] ^ [ 1022.686354][T14525] ffff888079399680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1022.694427][T14525] ffff888079399700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1022.702501][T14525] ================================================================== [ 1022.710721][T14525] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1022.717964][T14525] CPU: 1 UID: 0 PID: 14525 Comm: syz.4.17783 Not tainted syzkaller #0 PREEMPT(full) [ 1022.727456][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1022.737581][T14525] Call Trace: [ 1022.740894][T14525] [ 1022.743910][T14525] vpanic+0x56c/0xa60 [ 1022.747938][T14525] ? __pfx_vpanic+0x10/0x10 [ 1022.752487][T14525] ? irqentry_exit+0x59e/0x620 [ 1022.757305][T14525] panic+0xc5/0xd0 [ 1022.761068][T14525] ? __pfx_panic+0x10/0x10 [ 1022.765572][T14525] ? ax25_find_cb+0x179/0x3a0 [ 1022.770311][T14525] ? ax25_find_cb+0x179/0x3a0 [ 1022.775118][T14525] check_panic_on_warn+0x89/0xb0 [ 1022.780092][T14525] ? ax25_find_cb+0x179/0x3a0 [ 1022.784810][T14525] end_report+0x73/0x180 [ 1022.789103][T14525] ? ax25_find_cb+0x179/0x3a0 [ 1022.793822][T14525] kasan_report+0x128/0x150 [ 1022.798367][T14525] ? ax25_find_cb+0x179/0x3a0 [ 1022.803098][T14525] ax25_find_cb+0x179/0x3a0 [ 1022.807658][T14525] rose_transmit_link+0x17b/0xac0 [ 1022.812737][T14525] rose_write_internal+0x1256/0x1b60 [ 1022.818078][T14525] ? lockdep_hardirqs_on+0x7a/0x110 [ 1022.823332][T14525] ? __pfx_rose_write_internal+0x10/0x10 [ 1022.829021][T14525] ? timer_delete+0x245/0x340 [ 1022.833834][T14525] rose_release+0x25b/0x510 [ 1022.838394][T14525] sock_close+0xc3/0x240 [ 1022.842676][T14525] ? __pfx_sock_close+0x10/0x10 [ 1022.847568][T14525] __fput+0x44f/0xa70 [ 1022.851605][T14525] task_work_run+0x1d9/0x270 [ 1022.856264][T14525] ? __pfx_task_work_run+0x10/0x10 [ 1022.861419][T14525] ? task_work_add+0x395/0x440 [ 1022.866229][T14525] ? __pfx_task_work_add+0x10/0x10 [ 1022.871380][T14525] get_signal+0x11eb/0x1330 [ 1022.875940][T14525] arch_do_signal_or_restart+0xbc/0x830 [ 1022.881531][T14525] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1022.887735][T14525] exit_to_user_mode_loop+0x86/0x480 [ 1022.893073][T14525] ? rcu_is_watching+0x15/0xb0 [ 1022.897903][T14525] do_syscall_64+0x32d/0xf80 [ 1022.902629][T14525] ? trace_irq_disable+0x3b/0x150 [ 1022.907696][T14525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.913811][T14525] ? clear_bhb_loop+0x40/0x90 [ 1022.918551][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.924568][T14525] RIP: 0033:0x7f5744d9c799 [ 1022.929012][T14525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.948646][T14525] RSP: 002b:00007f5745cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1022.957091][T14525] RAX: fffffffffffffe00 RBX: 00007f5745016090 RCX: 00007f5744d9c799 [ 1022.965098][T14525] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000c [ 1022.973175][T14525] RBP: 00007f5744e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1022.981169][T14525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.989160][T14525] R13: 00007f5745016128 R14: 00007f5745016090 R15: 00007ffc037fbae8 [ 1022.997166][T14525] [ 1023.000838][T14525] Kernel Offset: disabled [ 1023.005173][T14525] Rebooting in 86400 seconds..