last executing test programs: 6.469281822s ago: executing program 1 (id=2111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x8000}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x8, 0x204}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) 6.346615952s ago: executing program 0 (id=2112): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e25, 0xffffffff, @loopback}, 0x13) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="d9e81fb433fbce0c1e00020000000000181101000fa64d11ed31a4c1d686f909bdbaf79d1546b9cfca718219a384884cb7c9dc817800b3efe3e9cd31971ed8aafbb93d4361f78c86dfae532ba656fac1d963a68fb38863c7ac82d13c7eb72a8ea6d264320348", @ANYRES16=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7174f92a912ce7c5", "b69a1d55049ff7c98e9892b0b714e500", "c4f8eaae", "0a0ae23ccd3a7f47"}, 0x28) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) 5.832670228s ago: executing program 4 (id=2113): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r4, 0x0, 0x70bd27, 0xfffffffa}, 0x14}}, 0x8084) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) 5.713846484s ago: executing program 2 (id=2114): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x6, 0x4000}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0xb, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2bd127709a3120f789c977b5fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217005b39671c6c642b88bdf3286e274ceb51a2fae6979685284b1a3"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.508641597s ago: executing program 3 (id=2115): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e25, 0xffffffff, @loopback}, 0x13) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="d9e81fb433fbce0c1e00020000000000181101000fa64d11ed31a4c1d686f909bdbaf79d1546b9cfca718219a384884cb7c9dc817800b3efe3e9cd31971ed8aafbb93d4361f78c86dfae532ba656fac1d963a68fb38863c7ac82d13c7eb72a8ea6d264320348", @ANYRES16=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7174f92a912ce7c5", "b69a1d55049ff7c98e9892b0b714e500", "c4f8eaae", "0a0ae23ccd3a7f47"}, 0x28) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) 4.950112044s ago: executing program 1 (id=2116): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xb20cf6141e01826d) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x8000f28, 0x0) splice(r9, 0x0, r8, 0x0, 0x7f, 0xe) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newchain={0x6bc, 0x64, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0x7}, {0xc, 0x6}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x680, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2d}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}, @TCA_U32_ACT={0x354, 0x7, [@m_ife={0x124, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd6f, 0x0, 0x0, 0x9952, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x61, 0x1, 0x5, 0x6, 0x5}, 0x1}}]}, {0xaa, 0x6, "aefc73555f9d9b66c86b8c82d157d400fd0f9f538936414d0c0473c92f0ab67977069b4d5cc58fb07204261c1db7ac5d47f8b754ba7a9bf977d7f575c7ba6101f4c8dbbd1c87b0080298bea7d6e8df1d040f58d1bbf831972dbcc7b2287f693a562254763383009ee6cb92e60d0fbb7eaab591df34d48a888a9390bfe4a1e37ab1088b2a92064718b13d5fded08de337d257f04b247413682bd050c6e5a365185c2b5f478d87"}, {0xc, 0x7, {0x36b1d3759726b2a8, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xbc, 0x1f, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x7fff, 0xffffffffffffffff, 0x40, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0x6c, 0x6, "65823852bd02189d3ba30d8ff449e5dfce1ff13d66a95ad8efd0a52d8ac32f7587f73206000941316f5ff65b0c552f56cbb9636fcc605d8665b841d52f54a842772211ed10fd992893a39946f9b7ed6b3768162edde734882fcdf8a58b516b82dea9a9d9dcd1230e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x170, 0x19, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x0, 0x401, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, '}\'\xb4-%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xb, 0x3, '-[&-\x86{\x00'}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x2, 0xe, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x8, 0x1, 0x771d, 0x293}}]}, {0xbb, 0x6, "142882953340c1d59507e4f9e544f635a260d3802c44426aebae33087861489fb2d974a25c1a8980cb9bb75ddcd341e400a7b32ad87f609bd188a62707a458415eef40368532d3506c7c02fa302728043fe38b7c673bab8f69ae7915b509fac2bd5efbcab83d9e63d8aebb32c599edf12a06bae303711f35c5a78ad94c73c9347fb3e1aefc7c8a92077bced7e1a968413c919d66e78b46666dbecbb66461696eeb44a5fb3fda2cfea3bc4bc15f181af91faa4adea64e89"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_ACT={0x2f0, 0x7, [@m_simple={0x114, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x20000000, 0xc998, 0x2d41}}, @TCA_DEF_DATA={0x10, 0x3, ']\x98\'@@,:-,>\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x6, 0x10000000, 0x9, 0x4}}]}, {0x9e, 0x6, "41383ee8e420de724ed81940c1b3b58c11e49c52467c9dc95bc8bde89fd660d2d987dd887b4ccf24689d5bab89a189b3654b2ed22e452b69e63961d8be43d1f24a3de12b6953dabe11f73f23785983be3cd99c51705c1f0a864d091621708a6638f487578fbaffbf6f3704ee5c3ea12abc2aba9be7fc50f29f1aeff9c8439a9de1fe2f55e46b9d290eae622243aaa8ba4cbdaefd6df4f31330e2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xf4, 0x18, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x30, 0x6, {0x0, 'filter\x00', 0x1, 0x6, "16a7ee9668f8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x43, 0x6, "a65afcce38eee5205a5c9a32a685523af411b28a413b68f21a73d09e9d86f671128c507c1ffbfe652d50640fa77ab91438761ebe007fa374d41a5ea5b9c8b2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xe4, 0x1d, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}]}, {0xa9, 0x6, "040bcc42d4502346c928b16aaee3a3c2c2b46b68f8db13437cc9410facb23674146f4f41579d698b0f8bc22a0090b91459bb81efc85e977f37030bb861f15d0dcbe2e142e3520c076801a4f1ea2f1c8425a1e958ccdba1300b41c6c65a49294dc33d7addab2119c7ab4433f80084018a85b90083814ab7b21a75045ebc7b142b3699b6792b3045c13f7dba9cd6879e8fb3fb372e4fdf6f7385451c2886aa0c676a35ef3bc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'dvmrp1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x6bc}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 4.744768892s ago: executing program 2 (id=2117): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 4.163843484s ago: executing program 4 (id=2118): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x3, 0x5, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1}}}}) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000004}) socket$packet(0x11, 0x3, 0x300) socket$caif_seqpacket(0x25, 0x5, 0x2) pselect6(0x40, &(0x7f0000000200)={0x1, 0xd, 0x8000, 0x598, 0xe400000000000000, 0x80, 0xf3a, 0x5}, &(0x7f00000003c0)={0xfffffffffffffff9, 0x0, 0x3, 0xfff, 0x6, 0x4, 0xfffffffffffffff2, 0x32}, &(0x7f0000000400)={0x2, 0x9, 0xfffffffffffffffa, 0x0, 0x2, 0x5, 0x100000000}, &(0x7f0000000440)={0x77359400}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48084}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.989672553s ago: executing program 3 (id=2119): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xb20cf6141e01826d) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x8000f28, 0x0) splice(r9, 0x0, r8, 0x0, 0x7f, 0xe) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newchain={0x6bc, 0x64, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0x7}, {0xc, 0x6}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x680, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2d}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}, @TCA_U32_ACT={0x354, 0x7, [@m_ife={0x124, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd6f, 0x0, 0x0, 0x9952, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x61, 0x1, 0x5, 0x6, 0x5}, 0x1}}]}, {0xaa, 0x6, "aefc73555f9d9b66c86b8c82d157d400fd0f9f538936414d0c0473c92f0ab67977069b4d5cc58fb07204261c1db7ac5d47f8b754ba7a9bf977d7f575c7ba6101f4c8dbbd1c87b0080298bea7d6e8df1d040f58d1bbf831972dbcc7b2287f693a562254763383009ee6cb92e60d0fbb7eaab591df34d48a888a9390bfe4a1e37ab1088b2a92064718b13d5fded08de337d257f04b247413682bd050c6e5a365185c2b5f478d87"}, {0xc, 0x7, {0x36b1d3759726b2a8, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xbc, 0x1f, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x7fff, 0xffffffffffffffff, 0x40, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0x6c, 0x6, "65823852bd02189d3ba30d8ff449e5dfce1ff13d66a95ad8efd0a52d8ac32f7587f73206000941316f5ff65b0c552f56cbb9636fcc605d8665b841d52f54a842772211ed10fd992893a39946f9b7ed6b3768162edde734882fcdf8a58b516b82dea9a9d9dcd1230e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x170, 0x19, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x0, 0x401, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, '}\'\xb4-%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xb, 0x3, '-[&-\x86{\x00'}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x2, 0xe, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x8, 0x1, 0x771d, 0x293}}]}, {0xbc, 0x6, "142882953340c1d59507e4f9e544f635a260d3802c44426aebae33087861489fb2d974a25c1a8980cb9bb75ddcd341e400a7b32ad87f609bd188a62707a458415eef40368532d3506c7c02fa302728043fe38b7c673bab8f69ae7915b509fac2bd5efbcab83d9e63d8aebb32c599edf12a06bae303711f35c5a78ad94c73c9347fb3e1aefc7c8a92077bced7e1a968413c919d66e78b46666dbecbb66461696eeb44a5fb3fda2cfea3bc4bc15f181af91faa4adea64e89b6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_ACT={0x2f0, 0x7, [@m_simple={0x114, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x20000000, 0xc998, 0x2d41}}, @TCA_DEF_DATA={0x10, 0x3, ']\x98\'@@,:-,>\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x6, 0x10000000, 0x9, 0x4}}]}, {0x9e, 0x6, "41383ee8e420de724ed81940c1b3b58c11e49c52467c9dc95bc8bde89fd660d2d987dd887b4ccf24689d5bab89a189b3654b2ed22e452b69e63961d8be43d1f24a3de12b6953dabe11f73f23785983be3cd99c51705c1f0a864d091621708a6638f487578fbaffbf6f3704ee5c3ea12abc2aba9be7fc50f29f1aeff9c8439a9de1fe2f55e46b9d290eae622243aaa8ba4cbdaefd6df4f31330e2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xf4, 0x18, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x30, 0x6, {0x0, 'filter\x00', 0x1, 0x6, "16a7ee9668f8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x43, 0x6, "a65afcce38eee5205a5c9a32a685523af411b28a413b68f21a73d09e9d86f671128c507c1ffbfe652d50640fa77ab91438761ebe007fa374d41a5ea5b9c8b2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xe4, 0x1d, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}]}, {0xa9, 0x6, "040bcc42d4502346c928b16aaee3a3c2c2b46b68f8db13437cc9410facb23674146f4f41579d698b0f8bc22a0090b91459bb81efc85e977f37030bb861f15d0dcbe2e142e3520c076801a4f1ea2f1c8425a1e958ccdba1300b41c6c65a49294dc33d7addab2119c7ab4433f80084018a85b90083814ab7b21a75045ebc7b142b3699b6792b3045c13f7dba9cd6879e8fb3fb372e4fdf6f7385451c2886aa0c676a35ef3bc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'dvmrp1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x6bc}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.930585602s ago: executing program 1 (id=2120): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xb20cf6141e01826d) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x8000f28, 0x0) splice(r9, 0x0, r8, 0x0, 0x7f, 0xe) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newchain={0x6b8, 0x64, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0x7}, {0xc, 0x6}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x67c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2d}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}, @TCA_U32_ACT={0x350, 0x7, [@m_ife={0x124, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd6f, 0x0, 0x0, 0x9952, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x61, 0x1, 0x5, 0x6, 0x5}, 0x1}}]}, {0xaa, 0x6, "aefc73555f9d9b66c86b8c82d157d400fd0f9f538936414d0c0473c92f0ab67977069b4d5cc58fb07204261c1db7ac5d47f8b754ba7a9bf977d7f575c7ba6101f4c8dbbd1c87b0080298bea7d6e8df1d040f58d1bbf831972dbcc7b2287f693a562254763383009ee6cb92e60d0fbb7eaab591df34d48a888a9390bfe4a1e37ab1088b2a92064718b13d5fded08de337d257f04b247413682bd050c6e5a365185c2b5f478d87"}, {0xc, 0x7, {0x36b1d3759726b2a8, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xbc, 0x1f, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x7fff, 0xffffffffffffffff, 0x40, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0x6c, 0x6, "65823852bd02189d3ba30d8ff449e5dfce1ff13d66a95ad8efd0a52d8ac32f7587f73206000941316f5ff65b0c552f56cbb9636fcc605d8665b841d52f54a842772211ed10fd992893a39946f9b7ed6b3768162edde734882fcdf8a58b516b82dea9a9d9dcd1230e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x16c, 0x19, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x0, 0x401, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, '}\'\xb4-%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xb, 0x3, '-[&-\x86{\x00'}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x2, 0xe, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x8, 0x1, 0x771d, 0x293}}]}, {0xb7, 0x6, "142882953340c1d59507e4f9e544f635a260d3802c44426aebae33087861489fb2d974a25c1a8980cb9bb75ddcd341e400a7b32ad87f609bd188a62707a458415eef40368532d3506c7c02fa302728043fe38b7c673bab8f69ae7915b509fac2bd5efbcab83d9e63d8aebb32c599edf12a06bae303711f35c5a78ad94c73c9347fb3e1aefc7c8a92077bced7e1a968413c919d66e78b46666dbecbb66461696eeb44a5fb3fda2cfea3bc4bc15f181af91faa4a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_ACT={0x2f0, 0x7, [@m_simple={0x114, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x20000000, 0xc998, 0x2d41}}, @TCA_DEF_DATA={0x10, 0x3, ']\x98\'@@,:-,>\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x6, 0x10000000, 0x9, 0x4}}]}, {0x9e, 0x6, "41383ee8e420de724ed81940c1b3b58c11e49c52467c9dc95bc8bde89fd660d2d987dd887b4ccf24689d5bab89a189b3654b2ed22e452b69e63961d8be43d1f24a3de12b6953dabe11f73f23785983be3cd99c51705c1f0a864d091621708a6638f487578fbaffbf6f3704ee5c3ea12abc2aba9be7fc50f29f1aeff9c8439a9de1fe2f55e46b9d290eae622243aaa8ba4cbdaefd6df4f31330e2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xf4, 0x18, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x30, 0x6, {0x0, 'filter\x00', 0x1, 0x6, "16a7ee9668f8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x43, 0x6, "a65afcce38eee5205a5c9a32a685523af411b28a413b68f21a73d09e9d86f671128c507c1ffbfe652d50640fa77ab91438761ebe007fa374d41a5ea5b9c8b2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xe4, 0x1d, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}]}, {0xa9, 0x6, "040bcc42d4502346c928b16aaee3a3c2c2b46b68f8db13437cc9410facb23674146f4f41579d698b0f8bc22a0090b91459bb81efc85e977f37030bb861f15d0dcbe2e142e3520c076801a4f1ea2f1c8425a1e958ccdba1300b41c6c65a49294dc33d7addab2119c7ab4433f80084018a85b90083814ab7b21a75045ebc7b142b3699b6792b3045c13f7dba9cd6879e8fb3fb372e4fdf6f7385451c2886aa0c676a35ef3bc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'dvmrp1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x6b8}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.921232138s ago: executing program 0 (id=2121): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xba, &(0x7f00000002c0)=""/186, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) 3.476399204s ago: executing program 2 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x23, &(0x7f0000000e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x2, 0x1, 0x1, 0xf, 0x7, 0x13, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe65e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0}, 0x90) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000780)="945c4f572cfc7c7683e96a27a92ac2dd3e5c8f955004a59f677afa1432ee3e7137b1e2ec6da09edea6967507c2e8f418d063eee203b689c29cff914fb6fbc0ff39c359d502008d513b3e42", 0x4b}, {0x0}], 0x2) 3.367161964s ago: executing program 1 (id=2123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000fae20200703aba"]) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0xf4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x63, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x5, 0x5}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xf7, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xb8}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc89}, @CTA_LABELS_MASK={0x0, 0x17, [0xb09, 0x5, 0xa]}]}, 0xf4}}, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000280)=""/8, 0x8, 0x700, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 3.251120596s ago: executing program 2 (id=2124): r0 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x111, 0x0, 0x0, 0x90aa62107f0000) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x80000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r7, 0x8f5, 0x100000000000000) write$cgroup_type(r7, &(0x7f0000000180), 0x9) write(r5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x4}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe87, 0x6e4, 0x3ff}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.03711147s ago: executing program 3 (id=2125): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x3, 0x5, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1}}}}) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000004}) socket$packet(0x11, 0x3, 0x300) socket$caif_seqpacket(0x25, 0x5, 0x2) pselect6(0x40, &(0x7f0000000200)={0x1, 0xd, 0x8000, 0x598, 0xe400000000000000, 0x80, 0xf3a, 0x5}, &(0x7f00000003c0)={0xfffffffffffffff9, 0x0, 0x3, 0xfff, 0x6, 0x4, 0xfffffffffffffff2, 0x32}, &(0x7f0000000400)={0x2, 0x9, 0xfffffffffffffffa, 0x0, 0x2, 0x5, 0x100000000}, &(0x7f0000000440)={0x77359400}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48084}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.96873304s ago: executing program 4 (id=2126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x8000}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x8, 0x204}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) 2.767501416s ago: executing program 0 (id=2127): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x6, 0x4000}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0xb, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2bd127709a3120f789c977b5fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217005b39671c6c642b88bdf3286e274ceb51a2fae6979685284b1a3"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.409220327s ago: executing program 1 (id=2128): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b9104006"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xba, &(0x7f00000002c0)=""/186, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) 2.272427051s ago: executing program 0 (id=2129): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 2.064659326s ago: executing program 2 (id=2130): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 2.057835763s ago: executing program 3 (id=2131): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xb20cf6141e01826d) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x8000f28, 0x0) splice(r9, 0x0, r8, 0x0, 0x7f, 0xe) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newchain={0x600, 0x64, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0x7}, {0xc, 0x6}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c4, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2d}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}, @TCA_U32_ACT={0x298, 0x7, [@m_ife={0x124, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd6f, 0x0, 0x0, 0x9952, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x61, 0x1, 0x5, 0x6, 0x5}, 0x1}}]}, {0xaa, 0x6, "aefc73555f9d9b66c86b8c82d157d400fd0f9f538936414d0c0473c92f0ab67977069b4d5cc58fb07204261c1db7ac5d47f8b754ba7a9bf977d7f575c7ba6101f4c8dbbd1c87b0080298bea7d6e8df1d040f58d1bbf831972dbcc7b2287f693a562254763383009ee6cb92e60d0fbb7eaab591df34d48a888a9390bfe4a1e37ab1088b2a92064718b13d5fded08de337d257f04b247413682bd050c6e5a365185c2b5f478d87"}, {0xc, 0x7, {0x36b1d3759726b2a8, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x170, 0x19, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x0, 0x401, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, '}\'\xb4-%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xb, 0x3, '-[&-\x86{\x00'}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x2, 0xe, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x8, 0x1, 0x771d, 0x293}}]}, {0xbc, 0x6, "142882953340c1d59507e4f9e544f635a260d3802c44426aebae33087861489fb2d974a25c1a8980cb9bb75ddcd341e400a7b32ad87f609bd188a62707a458415eef40368532d3506c7c02fa302728043fe38b7c673bab8f69ae7915b509fac2bd5efbcab83d9e63d8aebb32c599edf12a06bae303711f35c5a78ad94c73c9347fb3e1aefc7c8a92077bced7e1a968413c919d66e78b46666dbecbb66461696eeb44a5fb3fda2cfea3bc4bc15f181af91faa4adea64e89b6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_ACT={0x2f0, 0x7, [@m_simple={0x114, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x20000000, 0xc998, 0x2d41}}, @TCA_DEF_DATA={0x10, 0x3, ']\x98\'@@,:-,>\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x6, 0x10000000, 0x9, 0x4}}]}, {0x9e, 0x6, "41383ee8e420de724ed81940c1b3b58c11e49c52467c9dc95bc8bde89fd660d2d987dd887b4ccf24689d5bab89a189b3654b2ed22e452b69e63961d8be43d1f24a3de12b6953dabe11f73f23785983be3cd99c51705c1f0a864d091621708a6638f487578fbaffbf6f3704ee5c3ea12abc2aba9be7fc50f29f1aeff9c8439a9de1fe2f55e46b9d290eae622243aaa8ba4cbdaefd6df4f31330e2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xf4, 0x18, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x30, 0x6, {0x0, 'filter\x00', 0x1, 0x6, "16a7ee9668f8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x43, 0x6, "a65afcce38eee5205a5c9a32a685523af411b28a413b68f21a73d09e9d86f671128c507c1ffbfe652d50640fa77ab91438761ebe007fa374d41a5ea5b9c8b2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xe4, 0x1d, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}]}, {0xa9, 0x6, "040bcc42d4502346c928b16aaee3a3c2c2b46b68f8db13437cc9410facb23674146f4f41579d698b0f8bc22a0090b91459bb81efc85e977f37030bb861f15d0dcbe2e142e3520c076801a4f1ea2f1c8425a1e958ccdba1300b41c6c65a49294dc33d7addab2119c7ab4433f80084018a85b90083814ab7b21a75045ebc7b142b3699b6792b3045c13f7dba9cd6879e8fb3fb372e4fdf6f7385451c2886aa0c676a35ef3bc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'dvmrp1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x600}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.98012192s ago: executing program 4 (id=2132): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r4, 0x0, 0x70bd27, 0xfffffffa}, 0x14}}, 0x8084) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) 1.332169264s ago: executing program 3 (id=2133): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') unshare(0x22020600) r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000540)=@req={0x3, 0x7, 0x7, 0x6}, 0x10) socket$rds(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000801) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x48040) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) 1.326844533s ago: executing program 0 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) socket$kcm(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 975.104625ms ago: executing program 4 (id=2135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10) pwrite64(r0, &(0x7f0000000000)="3a70d1e81a797fb92bb3ab90df34dcdbde15ca24a220c8b57362b44dce851531da1b402caf5d493dde189f1f3efd1b6c9fd9886888e4c459c4e2e7e7b16dbf6af9bdae4d3ca82be9169a3235c3a0d627d2ed89d936ee14aa82c5eddd621c229229941d28d4b2b65d03bc5a52ad52064f5d9a5fd824d9108a321ef2ae731e7e8af136254739b3efefa7adbd64c5cc9a4092dbd03b6fac554120a7dad5fd49c1e92815adcc7fa218e85e89cbcfa13fe212a2b15aa091c100d0ba580766a9a312b4f15d2610c5d45e9ebad3ea315473cb2b64eeca2cfcb920ef98d79f52ac80f97e6c5e61fa6f2c547698af86be25e594d5a34c863de0dc", 0xf6, 0x5308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000740)=""/263, 0xfffffffffffffe47, 0x40000022, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000000)={@remote}, 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x700}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@local, @empty, @private0, 0x6, 0x4, 0x4, 0x100, 0x6, 0x400000, r8}) 828.063192ms ago: executing program 3 (id=2136): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) openat$cgroup(r2, &(0x7f0000001600)='syz1\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 739.362506ms ago: executing program 0 (id=2137): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) syz_open_procfs$namespace(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r4, 0x0, 0x70bd27, 0xfffffffa}, 0x14}}, 0x8084) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) 115.68018ms ago: executing program 2 (id=2138): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 31.541072ms ago: executing program 4 (id=2139): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x6, 0x4000}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0xb, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2bd127709a3120f789c977b5fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217005b39671c6c642b88bdf3286e274ceb51a2fae6979685284b1a3"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=2140): r0 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x111, 0x0, 0x0, 0x90aa62107f0000) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x80000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r7, 0x8f5, 0x100000000000000) write$cgroup_type(r7, &(0x7f0000000180), 0x9) write(r5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x4}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe87, 0x6e4, 0x3ff}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): z.3.126'. [ 116.689219][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.726128][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.759265][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.878657][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.301837][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 117.503352][ T6460] syzkaller0: entered promiscuous mode [ 117.516493][ T6460] syzkaller0: entered allmulticast mode [ 117.956151][ T6481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.143'. [ 118.053382][ T6476] wg1: entered promiscuous mode [ 118.070252][ T6476] wg1: entered allmulticast mode [ 118.122620][ T6483] pim6reg: entered allmulticast mode [ 118.171288][ T6483] pim6reg: left allmulticast mode [ 118.539304][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 118.853394][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.861293][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.096559][ T6489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.113145][ T6489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.533316][ T1090] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.555080][ T1090] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.593437][ T1090] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.640874][ T1090] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.817150][ T6542] tipc: Started in network mode [ 119.834162][ T6542] tipc: Node identity beb24032dafa, cluster identity 4711 [ 119.866459][ T6542] tipc: Enabled bearer , priority 0 [ 119.885793][ T6536] syzkaller0: entered promiscuous mode [ 119.940566][ T6536] syzkaller0: entered allmulticast mode [ 120.077828][ T6536] tipc: Resetting bearer [ 120.107174][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.151'. [ 120.146696][ T6534] tipc: Resetting bearer [ 120.206504][ T6534] tipc: Disabling bearer [ 120.532268][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 120.609924][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 120.672924][ T6563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.696015][ T6569] macvlan2: entered promiscuous mode [ 120.716199][ T6569] macvlan2: entered allmulticast mode [ 120.731412][ T6569] bond1: entered promiscuous mode [ 120.737328][ T6569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.782302][ T6569] team0: Port device macvlan2 added [ 120.825820][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 120.929164][ T6563] ip6gretap1: entered promiscuous mode [ 120.942530][ T6563] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 120.956264][ T6576] syzkaller0: entered promiscuous mode [ 120.976217][ T6576] syzkaller0: entered allmulticast mode [ 122.144181][ T6614] syzkaller0: entered promiscuous mode [ 122.149722][ T6614] syzkaller0: entered allmulticast mode [ 122.563399][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 122.572905][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 122.602073][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 122.798000][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 122.831229][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 122.878571][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 123.063684][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 123.087026][ T6636] syzkaller0: entered promiscuous mode [ 123.102049][ T6636] syzkaller0: entered allmulticast mode [ 123.117410][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 123.157728][ T6634] macvtap1: entered promiscuous mode [ 123.169378][ T6634] dummy0: entered promiscuous mode [ 123.181950][ T6634] macvtap1: entered allmulticast mode [ 123.194717][ T6634] dummy0: entered allmulticast mode [ 123.259232][ T6639] macvtap1: left promiscuous mode [ 123.264713][ T6639] dummy0: left promiscuous mode [ 123.272648][ T6639] macvtap1: left allmulticast mode [ 123.278090][ T6639] dummy0: left allmulticast mode [ 123.302468][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 123.316194][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'. [ 123.587538][ T6649] tipc: Started in network mode [ 123.596150][ T6649] tipc: Node identity 62dded2aa30d, cluster identity 4711 [ 123.620404][ T6649] tipc: Enabled bearer , priority 0 [ 123.642080][ T6649] syzkaller0: entered promiscuous mode [ 123.659105][ T6649] syzkaller0: entered allmulticast mode [ 123.674875][ T6648] tipc: Started in network mode [ 123.679813][ T6648] tipc: Node identity 528243da0d78, cluster identity 4711 [ 123.690349][ T6648] tipc: Enabled bearer , priority 0 [ 123.712627][ T6656] syzkaller0: entered promiscuous mode [ 123.718157][ T6656] syzkaller0: entered allmulticast mode [ 123.781023][ T6657] tipc: Resetting bearer [ 123.984391][ T6647] tipc: Resetting bearer [ 124.033973][ T6647] tipc: Disabling bearer [ 124.091073][ T6660] tipc: Resetting bearer [ 124.097649][ T6661] syzkaller0: entered promiscuous mode [ 124.130105][ T6661] syzkaller0: entered allmulticast mode [ 124.167265][ T6646] tipc: Resetting bearer [ 124.386340][ T6646] tipc: Disabling bearer [ 124.910516][ T6525] tipc: Node number set to 1610236890 [ 124.957119][ T6673] syzkaller0: entered promiscuous mode [ 124.969670][ T6673] syzkaller0: entered allmulticast mode [ 126.966969][ T6566] Set syz1 is full, maxelem 65536 reached [ 127.339276][ T6684] bridge1: entered allmulticast mode [ 127.393290][ T6703] tipc: Enabled bearer , priority 0 [ 127.457686][ T6701] tipc: Resetting bearer [ 127.476781][ T6704] syzkaller0: entered promiscuous mode [ 127.490189][ T6704] syzkaller0: entered allmulticast mode [ 127.519234][ T6700] tipc: Resetting bearer [ 127.536981][ T6700] tipc: Disabling bearer [ 127.565613][ T6712] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 127.584380][ T6712] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 127.707234][ T6718] __nla_validate_parse: 3 callbacks suppressed [ 127.707254][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 127.765599][ T6719] tipc: Enabled bearer , priority 0 [ 127.779677][ T6719] syzkaller0: entered promiscuous mode [ 127.794153][ T6719] syzkaller0: entered allmulticast mode [ 127.916926][ T6719] tipc: Resetting bearer [ 128.008743][ T6717] tipc: Resetting bearer [ 128.052224][ T6717] tipc: Disabling bearer [ 128.232327][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 128.303609][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 128.698516][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.190'. [ 128.777886][ T6744] tipc: Enabled bearer , priority 0 [ 128.797857][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.190'. [ 128.804756][ T6734] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 128.809852][ T6744] syzkaller0: entered promiscuous mode [ 128.840847][ T6744] syzkaller0: entered allmulticast mode [ 128.914633][ T6744] tipc: Resetting bearer [ 129.024076][ T6741] tipc: Resetting bearer [ 129.081229][ T6741] tipc: Disabling bearer [ 129.097988][ T6748] syzkaller0: entered promiscuous mode [ 129.103817][ T6748] syzkaller0: entered allmulticast mode [ 129.287496][ T6756] tipc: Started in network mode [ 129.295405][ T6756] tipc: Node identity 8e577631baf3, cluster identity 4711 [ 129.305695][ T6756] tipc: Enabled bearer , priority 0 [ 129.345990][ T6753] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 129.449412][ T6755] tipc: Resetting bearer [ 129.451146][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 129.481124][ T6757] syzkaller0: entered promiscuous mode [ 129.486826][ T6757] syzkaller0: entered allmulticast mode [ 129.506881][ T6762] warning: `syz.1.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.558525][ T6752] tipc: Resetting bearer [ 129.570959][ T6762] nbd: must specify a size in bytes for the device [ 129.610719][ T6752] tipc: Disabling bearer [ 129.832569][ T6766] vlan2: entered promiscuous mode [ 129.832609][ T6749] syz.2.191 (6749) used greatest stack depth: 17832 bytes left [ 129.846207][ T6766] team0: entered promiscuous mode [ 129.864436][ T6766] team_slave_0: entered promiscuous mode [ 129.885023][ T6766] team_slave_1: entered promiscuous mode [ 130.213902][ T6780] vlan2: entered promiscuous mode [ 130.230553][ T6780] bridge0: entered promiscuous mode [ 130.513911][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 130.932201][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.200'. [ 131.004433][ T6799] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 131.097549][ T6813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.204'. [ 131.183089][ T6817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.204'. [ 131.589945][ T6821] bridge_slave_1: left allmulticast mode [ 131.608777][ T6821] bridge_slave_1: left promiscuous mode [ 131.621332][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.651695][ T6821] bridge_slave_0: left allmulticast mode [ 131.657412][ T6821] bridge_slave_0: left promiscuous mode [ 131.663758][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.079206][ T6833] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.508066][ T6837] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 132.541001][ T6837] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 132.896915][ T6856] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 133.374448][ T6874] __nla_validate_parse: 4 callbacks suppressed [ 133.374471][ T6874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.216'. [ 133.610850][ T6883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.216'. [ 133.815799][ T6889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.217'. [ 133.895724][ T6890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.217'. [ 134.033718][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 134.055593][ T6886] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 134.371505][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 134.433954][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.218'. [ 134.676991][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 135.083055][ T6937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.227'. [ 135.140534][ T6937] x_tables: duplicate underflow at hook 3 [ 135.410107][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 135.605576][ T6956] syz.4.229 (6956) used obsolete PPPIOCDETACH ioctl [ 136.586264][ T6967] batman_adv: batadv0: Adding interface: macsec1 [ 136.593519][ T6968] netlink: 'syz.2.234': attribute type 13 has an invalid length. [ 136.635901][ T6967] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.717552][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.773753][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.825935][ T6967] batman_adv: batadv0: Interface activated: macsec1 [ 136.942334][ T6962] ip6tnl1: entered promiscuous mode [ 137.456012][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.464044][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.088298][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.139124][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.222269][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.390921][ T5838] Bluetooth: hci4: link tx timeout [ 138.396329][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.639176][ T5850] Bluetooth: hci4: link tx timeout [ 138.645709][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.393194][ T5850] Bluetooth: hci4: link tx timeout [ 139.398380][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.480803][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.515557][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.553987][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.584578][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.743689][ T6998] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 139.897981][ T7006] __nla_validate_parse: 3 callbacks suppressed [ 139.898311][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.241'. [ 139.938705][ T7006] netlink: 64 bytes leftover after parsing attributes in process `syz.3.241'. [ 139.997447][ T7002] bond0: (slave bond_slave_0): Releasing backup interface [ 139.998352][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 140.064412][ T7002] bond0: (slave bond_slave_1): Releasing backup interface [ 140.111378][ T7002] team0: Failed to send options change via netlink (err -105) [ 140.119168][ T7002] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 140.180426][ T7002] team0: Port device team_slave_0 removed [ 140.202410][ T7002] team0: Failed to send options change via netlink (err -105) [ 140.229228][ T7002] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 140.252622][ T7002] team0: Port device team_slave_1 removed [ 140.259244][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.289870][ T7017] xt_hashlimit: size too large, truncated to 1048576 [ 140.292207][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.341187][ T7002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.368909][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.241'. [ 140.481422][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 140.685264][ T7014] dummy0: entered allmulticast mode [ 141.012614][ T7031] veth0: entered promiscuous mode [ 141.072698][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 141.100393][ T7035] veth0: left promiscuous mode [ 141.139476][ T7031] Bluetooth: MGMT ver 1.23 [ 141.686797][ T7044] netlink: 220 bytes leftover after parsing attributes in process `syz.3.250'. [ 141.768829][ T7047] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 141.810865][ T7047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.250'. [ 142.037082][ T7059] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 142.115976][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 142.137947][ T7059] : entered promiscuous mode [ 142.771420][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 142.856975][ T7053] vlan2: entered allmulticast mode [ 142.885347][ T7053] geneve0: entered allmulticast mode [ 142.907730][ T7053] bridge0: port 3(vlan2) entered blocking state [ 142.925511][ T7053] bridge0: port 3(vlan2) entered disabled state [ 142.941127][ T7053] vlan2: entered promiscuous mode [ 142.946219][ T7053] geneve0: entered promiscuous mode [ 143.327359][ T7089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 143.327956][ T7080] veth0_to_team: entered promiscuous mode [ 143.508223][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 143.855649][ T7096] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.945367][ T7102] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 143.955711][ T7102] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 144.082103][ T7096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.300118][ T7096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.471786][ T7096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.649468][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.716196][ T1090] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.777658][ T1090] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.950844][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.063181][ T7127] __nla_validate_parse: 3 callbacks suppressed [ 145.063202][ T7127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.272'. [ 145.152824][ T7127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.272'. [ 145.372192][ T7134] netlink: 'syz.4.272': attribute type 4 has an invalid length. [ 145.389092][ T7140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.274'. [ 145.406467][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.274'. [ 145.634503][ T7150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.742114][ T7117] lec:lec_atm_close: lec0: Shut down! [ 145.899445][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 147.961779][ T7205] netlink: 'syz.2.285': attribute type 13 has an invalid length. [ 147.980301][ T7205] netlink: 'syz.2.285': attribute type 17 has an invalid length. [ 148.343984][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 148.500139][ T7213] macvtap1: entered promiscuous mode [ 148.505647][ T7213] batadv0: entered promiscuous mode [ 148.512555][ T7213] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 148.600838][ T7213] batadv0: left promiscuous mode [ 148.744097][ T7231] netlink: 'syz.0.289': attribute type 16 has an invalid length. [ 148.794142][ T7231] netlink: 'syz.0.289': attribute type 17 has an invalid length. [ 149.259540][ T7241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.292'. [ 149.269782][ T7241] netlink: 43 bytes leftover after parsing attributes in process `syz.0.292'. [ 149.279569][ T7241] netlink: 'syz.0.292': attribute type 5 has an invalid length. [ 149.288995][ T7241] netlink: 43 bytes leftover after parsing attributes in process `syz.0.292'. [ 150.848613][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 151.162179][ T7301] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 151.196018][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 151.441621][ T7288] batman_adv: batadv0: Interface deactivated: macsec1 [ 151.590497][ T7318] tipc: Started in network mode [ 151.595449][ T7318] tipc: Node identity ae856109d9b5, cluster identity 4711 [ 151.640309][ T7318] tipc: Enabled bearer , priority 0 [ 151.708440][ T7324] netlink: 76 bytes leftover after parsing attributes in process `syz.1.309'. [ 151.767695][ T7312] tipc: Resetting bearer [ 151.803776][ T7320] syzkaller0: entered promiscuous mode [ 151.809345][ T7320] syzkaller0: entered allmulticast mode [ 151.941711][ T7308] tipc: Resetting bearer [ 151.972304][ T7308] tipc: Disabling bearer [ 152.223296][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.313'. [ 152.414426][ T7347] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.314'. [ 152.425363][ T7347] openvswitch: netlink: EtherType 0 is less than min 600 [ 154.274261][ T5497] lec:lec_start_xmit: lec0:No lecd attached [ 154.310981][ T7366] syzkaller0: entered promiscuous mode [ 154.334343][ T7366] syzkaller0: entered allmulticast mode [ 154.678063][ T7389] netlink: 100 bytes leftover after parsing attributes in process `syz.3.319'. [ 154.995752][ T7392] tipc: Can't bind to reserved service type 1 [ 155.234700][ T7400] netlink: 'syz.0.327': attribute type 3 has an invalid length. [ 155.267710][ T7400] netlink: 3 bytes leftover after parsing attributes in process `syz.0.327'. [ 155.533766][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 155.785809][ T7411] bridge_slave_1: left allmulticast mode [ 155.802249][ T7411] bridge_slave_1: left promiscuous mode [ 155.814980][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.873315][ T7411] bridge_slave_0: left allmulticast mode [ 155.889651][ T7411] bridge_slave_0: left promiscuous mode [ 155.924743][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.150571][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 156.179464][ T7418] netlink: 76 bytes leftover after parsing attributes in process `syz.0.328'. [ 157.842598][ T7451] vlan2: entered promiscuous mode [ 157.847742][ T7451] gretap0: entered promiscuous mode [ 157.936142][ T7452] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 157.994774][ T7452] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 158.040008][ T7452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 158.152560][ T7473] tipc: Enabled bearer , priority 0 [ 158.170795][ T7473] syzkaller0: entered promiscuous mode [ 158.176332][ T7473] syzkaller0: entered allmulticast mode [ 158.283946][ T7473] tipc: Resetting bearer [ 158.364936][ T7469] tipc: Resetting bearer [ 158.440304][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 158.514608][ T7469] tipc: Disabling bearer [ 158.547887][ T7472] syzkaller1: entered promiscuous mode [ 158.567780][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 158.576887][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 158.626927][ T7472] syzkaller1: entered allmulticast mode [ 159.606503][ T7524] syzkaller0: entered promiscuous mode [ 159.642766][ T7524] syzkaller0: entered allmulticast mode [ 160.000098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 160.008441][ C1] lec:lec_tx_timeout: lec0 [ 160.013706][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 160.237501][ T7545] netlink: 'syz.0.353': attribute type 12 has an invalid length. [ 160.410658][ T7546] netlink: 'syz.0.353': attribute type 4 has an invalid length. [ 161.160597][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 161.384252][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 161.641715][ T7586] openvswitch: netlink: Unknown nsh attribute 0 [ 161.650168][ T7586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.404853][ T7635] netlink: 'syz.0.379': attribute type 3 has an invalid length. [ 164.072932][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 165.030167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 165.038282][ C1] lec:lec_tx_timeout: lec0 [ 165.043476][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 165.299432][ T7679] block nbd4: not configured, cannot reconfigure [ 165.753327][ T7687] TCP: TCP_TX_DELAY enabled [ 166.419074][ T7704] pim6reg: entered allmulticast mode [ 166.430579][ T7704] pim6reg: left allmulticast mode [ 166.458072][ T7703] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 166.536124][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'. [ 166.708935][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'. [ 166.753883][ T7706] nbd: socks must be embedded in a SOCK_ITEM attr [ 166.800497][ T5840] block nbd64: NBD_DISCONNECT [ 167.067135][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 167.124587][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 167.547078][ T7480] Set syz1 is full, maxelem 65536 reached [ 168.149418][ T7739] geneve2: entered promiscuous mode [ 168.541676][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.406'. [ 168.970827][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 169.349539][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 169.647215][ T7788] netlink: 'syz.0.416': attribute type 4 has an invalid length. [ 169.710715][ T7792] netlink: 'syz.0.416': attribute type 4 has an invalid length. [ 169.722970][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 169.782608][ T7789] netlink: 'syz.2.419': attribute type 4 has an invalid length. [ 169.827034][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 170.035708][ T7805] syzkaller1: entered promiscuous mode [ 170.050096][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 170.052239][ T7805] syzkaller1: entered allmulticast mode [ 170.058193][ C1] lec:lec_tx_timeout: lec0 [ 170.069566][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 170.104453][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 170.479103][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 172.076309][ T7869] netlink: 'syz.0.441': attribute type 27 has an invalid length. [ 172.129848][ T7869] veth0_to_team: left promiscuous mode [ 172.209782][ T7869] bond1: left promiscuous mode [ 172.214951][ T7869] ip6gretap1: left promiscuous mode [ 172.230845][ T7869] macvlan2: left allmulticast mode [ 172.432438][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.462635][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.511253][ T7870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.009731][ T7876] syzkaller0: entered promiscuous mode [ 173.018207][ T7876] syzkaller0: entered allmulticast mode [ 173.265960][ T7903] netlink: 108 bytes leftover after parsing attributes in process `syz.0.448'. [ 173.372437][ T7907] netlink: 108 bytes leftover after parsing attributes in process `syz.0.448'. [ 175.080183][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 175.088250][ C1] lec:lec_tx_timeout: lec0 [ 175.093012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 175.603934][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 175.697264][ T7910] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 175.761298][ T7933] vlan2: entered promiscuous mode [ 175.766405][ T7933] bond0: entered promiscuous mode [ 175.803731][ T7933] bond_slave_0: entered promiscuous mode [ 175.809705][ T7933] bond_slave_1: entered promiscuous mode [ 175.944902][ T7938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.967767][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 176.064060][ T7943] nbd: socks must be embedded in a SOCK_ITEM attr [ 176.183906][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 176.233645][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.461'. [ 176.455680][ T7965] netlink: 'syz.3.463': attribute type 39 has an invalid length. [ 176.471337][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 176.516050][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 176.640416][ T6521] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec [ 176.969187][ T7982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.467'. [ 177.128104][ T7982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.467'. [ 177.211062][ T7985] netlink: 'syz.1.467': attribute type 4 has an invalid length. [ 177.848611][ T8006] openvswitch: netlink: Flow actions attr not present in new flow. [ 178.386280][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'. [ 178.778652][ T8045] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.479'. [ 179.191530][ T8059] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 179.201252][ T8059] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 179.380915][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 179.699476][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 180.100133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 180.108255][ C1] lec:lec_tx_timeout: lec0 [ 180.117416][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 180.453528][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 180.969624][ T8114] netlink: 124 bytes leftover after parsing attributes in process `syz.1.493'. [ 181.163989][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 181.469495][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 182.232091][ T8140] syzkaller0: entered promiscuous mode [ 182.254906][ T8140] syzkaller0: entered allmulticast mode [ 182.899904][ T8160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.505'. [ 184.023653][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 184.220889][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 184.229985][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 184.359046][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 184.402703][ T8169] syzkaller0: entered promiscuous mode [ 184.408723][ T8169] syzkaller0: entered allmulticast mode [ 184.436598][ T8177] nbd: must specify a size in bytes for the device [ 184.974802][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 185.033310][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 185.130124][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 185.138330][ C1] lec:lec_tx_timeout: lec0 [ 185.142983][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 185.924652][ T8187] pim6reg: entered allmulticast mode [ 185.936506][ T8181] pim6reg: left allmulticast mode [ 185.973029][ T8191] syzkaller0: entered promiscuous mode [ 185.978563][ T8191] syzkaller0: entered allmulticast mode [ 186.004841][ T8202] macvtap2: entered promiscuous mode [ 186.016000][ T8202] dummy0: entered promiscuous mode [ 186.023221][ T8202] macvtap2: entered allmulticast mode [ 186.028751][ T8202] dummy0: entered allmulticast mode [ 186.036978][ T8196] tipc: Enabled bearer , priority 0 [ 186.054409][ T8203] dummy0: left allmulticast mode [ 186.059444][ T8203] dummy0: left promiscuous mode [ 186.070981][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 186.095611][ T8186] tipc: Resetting bearer [ 186.142791][ T8186] tipc: Disabling bearer [ 186.376148][ T6521] IPVS: starting estimator thread 0... [ 186.399523][ T8217] IPVS: nq: FWM 3 0x00000003 - no destination available [ 186.450254][ T6521] IPVS: starting estimator thread 0... [ 186.466453][ T8214] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.483212][ T8218] IPVS: using max 24 ests per chain, 57600 per kthread [ 186.504705][ T6527] IPVS: starting estimator thread 0... [ 186.515360][ T8224] IPVS: nq: FWM 3 0x00000003 - no destination available [ 186.583278][ T8222] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.590621][ T8219] IPVS: using max 26 ests per chain, 62400 per kthread [ 186.610562][ T6527] IPVS: starting estimator thread 0... [ 186.633822][ T8225] IPVS: using max 30 ests per chain, 72000 per kthread [ 186.710128][ T8228] IPVS: using max 30 ests per chain, 72000 per kthread [ 186.798947][ T8232] syzkaller0: entered promiscuous mode [ 186.816780][ T8232] syzkaller0: entered allmulticast mode [ 186.890644][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 188.300343][ T8271] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 188.631318][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 189.074353][ T8298] syzkaller0: entered promiscuous mode [ 189.086555][ T8298] syzkaller0: entered allmulticast mode [ 189.157456][ T8304] netlink: 'syz.4.544': attribute type 4 has an invalid length. [ 189.370200][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 190.150084][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 190.158191][ C1] lec:lec_tx_timeout: lec0 [ 190.163189][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 190.803550][ T6521] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 190.875898][ T8333] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 191.083420][ T8335] syzkaller0: entered promiscuous mode [ 191.089028][ T8335] syzkaller0: entered allmulticast mode [ 191.442605][ T6527] IPVS: starting estimator thread 0... [ 191.553291][ T8346] IPVS: using max 27 ests per chain, 64800 per kthread [ 191.764881][ T8351] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 191.957400][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 192.235627][ T8368] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 192.254329][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 192.489516][ T8368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.576630][ T8378] tipc: Enabled bearer , priority 10 [ 192.662335][ T8378] bridge0: entered allmulticast mode [ 192.741320][ T8371] syzkaller0: entered promiscuous mode [ 192.746884][ T8371] syzkaller0: entered allmulticast mode [ 192.830248][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'. [ 193.475323][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 195.118792][ T8382] bridge_slave_1: left allmulticast mode [ 195.127373][ T8382] bridge_slave_1: left promiscuous mode [ 195.170096][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 195.178200][ C1] lec:lec_tx_timeout: lec0 [ 195.182891][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 195.195044][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.207120][ T8382] bridge_slave_0: left allmulticast mode [ 195.218521][ T8382] bridge_slave_0: left promiscuous mode [ 195.225273][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.262077][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 195.573046][ T6527] tipc: Node number set to 3251694890 [ 195.592600][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 195.648040][ T8399] vlan2: left allmulticast mode [ 195.657012][ T8399] geneve0: left allmulticast mode [ 195.684693][ T8399] vlan2: left promiscuous mode [ 195.696153][ T8399] geneve0: left promiscuous mode [ 195.702333][ T8399] bridge0: port 3(vlan2) entered disabled state [ 195.712411][ T8399] bridge_slave_1: left allmulticast mode [ 195.718171][ T8399] bridge_slave_1: left promiscuous mode [ 195.724274][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.734644][ T8399] bridge_slave_0: left allmulticast mode [ 195.741714][ T8399] bridge_slave_0: left promiscuous mode [ 195.747602][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.122967][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 196.269307][ T8425] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 196.675318][ T8426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.299782][ T5838] Bluetooth: hci4: link tx timeout [ 198.305616][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 198.401542][ T8453] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.026014][ T8467] syzkaller0: entered promiscuous mode [ 199.035596][ T8467] syzkaller0: entered allmulticast mode [ 199.438329][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 199.525983][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.232175][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 200.410138][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 200.625907][ T8502] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 200.960056][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 200.968124][ C1] lec:lec_tx_timeout: lec0 [ 200.972895][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 201.814745][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 201.863916][ T8531] bridge_slave_1: left allmulticast mode [ 201.870594][ T8531] bridge_slave_1: left promiscuous mode [ 201.877331][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.012837][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 202.106467][ T8531] bridge_slave_0: left allmulticast mode [ 202.182598][ T8531] bridge_slave_0: left promiscuous mode [ 202.199211][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.312158][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.596'. [ 202.403280][ T8545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.596'. [ 202.443527][ T8545] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 202.682029][ T8552] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.730703][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 203.272274][ T8567] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.732058][ T8576] netlink: 48 bytes leftover after parsing attributes in process `syz.2.602'. [ 203.921976][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 204.478540][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 204.874972][ T8612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.608'. [ 204.999930][ T8615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.608'. [ 205.060539][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 205.078992][ T8615] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 205.595053][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 206.000191][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 206.008299][ C1] lec:lec_tx_timeout: lec0 [ 206.013027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 206.091956][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 207.056210][ T8662] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 207.290311][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 210.316773][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 210.412458][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 210.476676][ T8737] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.486907][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'. [ 210.813684][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 210.948892][ T8748] syzkaller0: entered promiscuous mode [ 210.960495][ T8748] syzkaller0: entered allmulticast mode [ 211.020049][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 211.028144][ C1] lec:lec_tx_timeout: lec0 [ 211.033453][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.551576][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.640'. [ 214.762589][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 215.220481][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.642'. [ 215.248045][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.642'. [ 215.262528][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 215.441051][ T8832] dummy0: entered promiscuous mode [ 215.543325][ T8832] team0: entered promiscuous mode [ 215.548423][ T8832] team_slave_0: entered promiscuous mode [ 215.632497][ T8832] team_slave_1: entered promiscuous mode [ 215.644021][ T8832] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 215.779337][ T8832] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 216.040048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.048151][ C1] lec:lec_tx_timeout: lec0 [ 216.054292][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.960419][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 216.968473][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 216.974813][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 218.640290][ T8824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 219.951997][ T8916] syzkaller0: entered promiscuous mode [ 219.970369][ T8916] syzkaller0: entered allmulticast mode [ 220.344265][ T8926] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 221.070112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 221.078228][ C1] lec:lec_tx_timeout: lec0 [ 221.083148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 221.541184][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 223.834550][ T8996] syzkaller0: entered promiscuous mode [ 223.951182][ T8996] syzkaller0: entered allmulticast mode [ 224.500385][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 225.367735][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 225.432940][ T9026] macvtap3: entered promiscuous mode [ 225.438301][ T9026] team0: entered promiscuous mode [ 225.470434][ T9026] team_slave_0: entered promiscuous mode [ 225.510581][ T9026] team_slave_1: entered promiscuous mode [ 225.516717][ T9026] macvtap3: entered allmulticast mode [ 225.570220][ T9026] team0: entered allmulticast mode [ 225.601335][ T9026] team_slave_0: entered allmulticast mode [ 225.607570][ T9026] team_slave_1: entered allmulticast mode [ 225.620890][ T9026] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 225.641843][ T9029] macvtap3: left promiscuous mode [ 225.646933][ T9029] team0: left promiscuous mode [ 225.670426][ T9029] team_slave_0: left promiscuous mode [ 225.686767][ T9029] team_slave_1: left promiscuous mode [ 225.715132][ T9029] macvtap3: left allmulticast mode [ 225.740895][ T9029] team0: left allmulticast mode [ 225.747709][ T9029] team_slave_0: left allmulticast mode [ 225.753936][ T9029] team_slave_1: left allmulticast mode [ 225.763713][ T9034] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 226.090079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 226.098193][ C1] lec:lec_tx_timeout: lec0 [ 226.103250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.111579][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 227.400983][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 229.009412][ T9084] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 229.273573][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 229.341735][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 229.420958][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 229.611915][ T9100] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 229.661699][ T9098] macvtap1: entered promiscuous mode [ 229.674316][ T9098] erspan0: entered promiscuous mode [ 229.680702][ T9098] macvtap1: entered allmulticast mode [ 229.710273][ T9098] erspan0: entered allmulticast mode [ 229.742477][ T9101] macvtap1: left promiscuous mode [ 229.748803][ T9101] erspan0: left promiscuous mode [ 229.772270][ T9101] macvtap1: left allmulticast mode [ 229.778071][ T9101] erspan0: left allmulticast mode [ 229.918624][ T9106] openvswitch: netlink: ufid size 123 bytes exceeds the range (1, 16) [ 230.060888][ T9111] syzkaller0: entered promiscuous mode [ 230.066670][ T9111] syzkaller0: entered allmulticast mode [ 230.750340][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 231.110063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 231.118139][ C1] lec:lec_tx_timeout: lec0 [ 231.122969][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 232.368159][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 232.700844][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 233.285397][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 233.547702][ T9168] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 233.767354][ T9179] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 233.890930][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 233.988987][ T9183] macvtap4: entered promiscuous mode [ 234.008342][ T9183] team0: entered promiscuous mode [ 234.022443][ T9183] team_slave_0: entered promiscuous mode [ 234.030570][ T9183] team_slave_1: entered promiscuous mode [ 234.036787][ T9183] macvtap4: entered allmulticast mode [ 234.043626][ T9183] team0: entered allmulticast mode [ 234.049565][ T9183] team_slave_0: entered allmulticast mode [ 234.060181][ T9183] team_slave_1: entered allmulticast mode [ 234.067714][ T9183] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 234.203519][ T9196] syzkaller0: entered promiscuous mode [ 234.209196][ T9196] syzkaller0: entered allmulticast mode [ 234.287538][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 236.130036][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 236.138151][ C1] lec:lec_tx_timeout: lec0 [ 236.142801][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 237.765228][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 238.374505][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 239.473451][ T9232] macvtap5: entered promiscuous mode [ 239.479116][ T9232] macvtap5: entered allmulticast mode [ 239.495323][ T9232] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 239.716975][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 239.808004][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 241.150072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 241.158187][ C1] lec:lec_tx_timeout: lec0 [ 241.163057][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 241.821632][ T9274] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 242.200471][ T9286] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.237514][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.746'. [ 242.889336][ T9293] syzkaller0: entered promiscuous mode [ 242.900561][ T9293] syzkaller0: entered allmulticast mode [ 243.462437][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 243.600946][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 245.273743][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 245.371041][ T9308] team0: left allmulticast mode [ 245.376158][ T9308] team_slave_0: left allmulticast mode [ 245.381886][ T9308] team_slave_1: left allmulticast mode [ 245.387530][ T9308] team0: left promiscuous mode [ 245.393371][ T9308] team_slave_0: left promiscuous mode [ 245.399415][ T9308] team_slave_1: left promiscuous mode [ 246.170056][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 246.178222][ C1] lec:lec_tx_timeout: lec0 [ 246.182856][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.461396][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 248.454618][ T9374] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.491837][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.766'. [ 249.205703][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 249.497453][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 251.195747][ T9429] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.207300][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.779'. [ 251.895711][ T9440] netlink: 'syz.4.783': attribute type 4 has an invalid length. [ 252.000024][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 252.008120][ C1] lec:lec_tx_timeout: lec0 [ 252.013410][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.080556][ T8824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 252.342599][ T9458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.788'. [ 252.382431][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 252.451126][ T9463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.788'. [ 252.505600][ T9463] netlink: 'syz.0.788': attribute type 4 has an invalid length. [ 253.079505][ T9479] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.117935][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.790'. [ 253.801810][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 254.319150][ T9517] syzkaller0: entered promiscuous mode [ 254.353203][ T9517] syzkaller0: entered allmulticast mode [ 255.018444][ T9539] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 257.023606][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.031786][ C1] lec:lec_tx_timeout: lec0 [ 257.036726][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.019277][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 258.256211][ T9581] macvtap6: entered promiscuous mode [ 258.276515][ T9581] team0: entered promiscuous mode [ 258.282304][ T9581] team_slave_0: entered promiscuous mode [ 258.288402][ T9581] team_slave_1: entered promiscuous mode [ 258.295436][ T9581] macvtap6: entered allmulticast mode [ 258.317410][ T9581] team0: entered allmulticast mode [ 258.355485][ T9581] team_slave_0: entered allmulticast mode [ 258.365655][ T9581] team_slave_1: entered allmulticast mode [ 258.375572][ T9581] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 258.411434][ T9585] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 258.429153][ T9585] batadv_slave_0: entered promiscuous mode [ 258.451188][ T9585] batadv_slave_0: left promiscuous mode [ 258.469757][ T9585] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 259.137858][ T9612] openvswitch: netlink: ufid size 144 bytes exceeds the range (1, 16) [ 260.643596][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 260.976570][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.027964][ T9629] syzkaller0: entered promiscuous mode [ 261.034039][ T9629] syzkaller0: entered allmulticast mode [ 262.050041][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.058110][ C1] lec:lec_tx_timeout: lec0 [ 262.062880][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.083322][ T9680] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.091908][ T9680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'. [ 263.406119][ T9691] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 265.597649][ T9723] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.621529][ T9723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'. [ 265.752422][ T9726] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 266.071123][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 266.801473][ T8824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 267.070064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 267.078176][ C1] lec:lec_tx_timeout: lec0 [ 267.082889][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.273450][ T9756] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 267.333111][ T9758] netlink: 'syz.4.845': attribute type 4 has an invalid length. [ 267.598781][ T9762] tipc: Enabling of bearer rejected, failed to enable media [ 267.625770][ T9762] syzkaller0: entered promiscuous mode [ 267.643934][ T9762] syzkaller0: entered allmulticast mode [ 268.304532][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 268.343565][ T9773] macvtap7: entered promiscuous mode [ 268.358739][ T9773] bond0: entered promiscuous mode [ 268.374690][ T9773] bond_slave_0: entered promiscuous mode [ 268.387670][ T9773] bond_slave_1: entered promiscuous mode [ 268.440531][ T9773] macvtap7: entered allmulticast mode [ 268.445995][ T9773] bond0: entered allmulticast mode [ 268.451439][ T9773] bond_slave_0: entered allmulticast mode [ 268.457201][ T9773] bond_slave_1: entered allmulticast mode [ 268.501924][ T9773] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 268.533409][ T9774] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 268.559535][ T9774] batadv_slave_0: entered promiscuous mode [ 268.578184][ T9774] batadv_slave_0: left promiscuous mode [ 268.590523][ T9774] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 268.685029][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 269.098637][ T9801] netlink: 108 bytes leftover after parsing attributes in process `syz.3.856'. [ 269.163043][ T9803] netlink: 108 bytes leftover after parsing attributes in process `syz.3.856'. [ 269.589168][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 269.726627][ T9818] macvtap1: entered promiscuous mode [ 269.796204][ T9818] macvtap1: entered allmulticast mode [ 269.810499][ T9818] bond0: entered allmulticast mode [ 269.827252][ T9818] bond_slave_0: entered allmulticast mode [ 269.835906][ T9818] bond_slave_1: entered allmulticast mode [ 269.844987][ T9818] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 270.903498][ T9839] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 271.078299][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 271.228681][ T9851] Set syz1 is full, maxelem 65536 reached [ 271.414180][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 271.487546][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 272.090043][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 272.098223][ C1] lec:lec_tx_timeout: lec0 [ 272.102880][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 273.937958][ T9911] syzkaller0: entered promiscuous mode [ 273.971237][ T9911] syzkaller0: entered allmulticast mode [ 274.385404][ T9924] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.408452][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.883'. [ 275.900613][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 277.112684][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.120799][ C1] lec:lec_tx_timeout: lec0 [ 277.125668][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.519630][ T9974] syzkaller0: entered promiscuous mode [ 278.530190][ T9974] syzkaller0: entered allmulticast mode [ 279.179813][ T9989] openvswitch: netlink: ufid size 159 bytes exceeds the range (1, 16) [ 279.231460][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 280.328082][ T9994] batadv_slave_1: entered promiscuous mode [ 280.336028][ T9993] batadv_slave_1: left promiscuous mode [ 280.459609][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 282.140049][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.148203][ C1] lec:lec_tx_timeout: lec0 [ 282.154922][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.337554][T10045] netlink: 108 bytes leftover after parsing attributes in process `syz.4.914'. [ 283.453604][T10047] netlink: 108 bytes leftover after parsing attributes in process `syz.4.914'. [ 284.060273][T10048] netlink: 'syz.4.914': attribute type 4 has an invalid length. [ 284.340321][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 284.351377][T10051] openvswitch: netlink: ufid size 159 bytes exceeds the range (1, 16) [ 284.650433][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 285.120247][ T6516] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 60 sec [ 285.148675][T10083] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.185215][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.924'. [ 285.377377][T10092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.926'. [ 285.401227][T10092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.926'. [ 285.447612][T10094] netlink: 108 bytes leftover after parsing attributes in process `syz.4.927'. [ 285.563801][T10101] netlink: 108 bytes leftover after parsing attributes in process `syz.4.927'. [ 287.170120][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 287.178279][ C1] lec:lec_tx_timeout: lec0 [ 287.183791][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.410852][T10104] netlink: 'syz.4.927': attribute type 4 has an invalid length. [ 287.682468][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 287.696340][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 289.057075][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 290.034688][T10172] __nla_validate_parse: 1 callbacks suppressed [ 290.034709][T10172] netlink: 108 bytes leftover after parsing attributes in process `syz.4.945'. [ 290.111422][T10174] netlink: 108 bytes leftover after parsing attributes in process `syz.4.945'. [ 291.407673][T10175] netlink: 'syz.4.945': attribute type 4 has an invalid length. [ 292.735254][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 292.962522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 292.970686][ C1] lec:lec_tx_timeout: lec0 [ 292.976565][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 293.808464][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 294.008189][T10209] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.021522][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'. [ 294.061633][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 294.086673][T10212] macvtap8: entered promiscuous mode [ 294.092810][T10212] macvtap8: entered allmulticast mode [ 294.163757][T10212] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 294.248312][T10212] macvtap8: left promiscuous mode [ 294.258674][T10212] macvtap8: left allmulticast mode [ 294.333285][T10215] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 294.403205][T10215] batadv_slave_0: entered promiscuous mode [ 294.421717][T10215] batadv_slave_0: left promiscuous mode [ 294.493232][T10215] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 295.033011][T10232] netlink: 108 bytes leftover after parsing attributes in process `syz.0.958'. [ 295.159635][T10232] netlink: 108 bytes leftover after parsing attributes in process `syz.0.958'. [ 295.191375][T10232] netlink: 'syz.0.958': attribute type 4 has an invalid length. [ 296.221227][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 296.350902][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'. [ 296.873243][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 297.255385][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 298.000338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 298.008477][ C1] lec:lec_tx_timeout: lec0 [ 298.014049][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.088913][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 298.089296][T10292] netlink: 108 bytes leftover after parsing attributes in process `syz.2.970'. [ 298.153880][T10293] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 298.168144][T10293] batadv_slave_0: entered promiscuous mode [ 298.184825][T10296] netlink: 108 bytes leftover after parsing attributes in process `syz.2.970'. [ 298.188500][T10293] batadv_slave_0: left promiscuous mode [ 298.211952][T10293] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 298.230320][T10292] netlink: 'syz.2.970': attribute type 4 has an invalid length. [ 298.488890][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 298.533279][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 299.417361][T10323] macvtap9: entered promiscuous mode [ 299.451534][T10323] macvtap9: entered allmulticast mode [ 299.459210][T10323] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 299.475051][T10327] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 299.492520][T10327] batadv_slave_0: entered promiscuous mode [ 299.506722][T10327] batadv_slave_0: left promiscuous mode [ 299.758101][T10327] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 300.371260][T10346] __nla_validate_parse: 4 callbacks suppressed [ 300.371282][T10346] netlink: 108 bytes leftover after parsing attributes in process `syz.0.982'. [ 300.471064][T10346] netlink: 108 bytes leftover after parsing attributes in process `syz.0.982'. [ 300.637197][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 300.655571][T10346] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 300.896468][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 300.938507][T10355] macvtap1: entered promiscuous mode [ 300.944549][T10355] bond0: entered promiscuous mode [ 300.951264][T10355] bond_slave_0: entered promiscuous mode [ 300.958612][T10355] bond_slave_1: entered promiscuous mode [ 300.966263][T10355] macvtap1: entered allmulticast mode [ 300.972299][T10355] bond0: entered allmulticast mode [ 300.977796][T10355] bond_slave_0: entered allmulticast mode [ 300.989687][T10355] bond_slave_1: entered allmulticast mode [ 301.003181][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 301.015164][T10355] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 301.026709][T10357] macvtap1: left promiscuous mode [ 301.051426][T10357] bond0: left promiscuous mode [ 301.058118][T10357] bond_slave_0: left promiscuous mode [ 301.064103][T10357] bond_slave_1: left promiscuous mode [ 301.070163][T10357] macvtap1: left allmulticast mode [ 301.075598][T10357] bond0: left allmulticast mode [ 301.081315][T10357] bond_slave_0: left allmulticast mode [ 301.086824][T10357] bond_slave_1: left allmulticast mode [ 301.117025][T10358] macvtap2: entered promiscuous mode [ 301.122660][T10358] bond0: entered promiscuous mode [ 301.127719][T10358] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 301.136141][T10358] macvtap2: entered allmulticast mode [ 301.142805][T10358] bond0: entered allmulticast mode [ 301.148047][T10358] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 301.157517][T10358] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 301.193138][T10362] macvtap2: left promiscuous mode [ 301.199500][T10362] bond0: left promiscuous mode [ 301.205983][T10362] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 301.216553][T10362] macvtap2: left allmulticast mode [ 301.222159][T10362] bond0: left allmulticast mode [ 301.227349][T10362] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 301.630691][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 301.826349][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.990'. [ 301.835574][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.990'. [ 302.450934][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 302.501020][T10383] dummy0: entered promiscuous mode [ 302.507781][T10383] team0: entered promiscuous mode [ 302.520411][T10383] team_slave_0: entered promiscuous mode [ 302.526339][T10383] team_slave_1: entered promiscuous mode [ 302.538544][T10383] debugfs: 'hsr1' already exists in 'hsr' [ 302.545539][T10383] Cannot create hsr debugfs directory [ 302.763552][T10402] netlink: 108 bytes leftover after parsing attributes in process `syz.2.994'. [ 302.846891][T10402] netlink: 'syz.2.994': attribute type 4 has an invalid length. [ 303.030076][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.038171][ C1] lec:lec_tx_timeout: lec0 [ 303.050274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.640409][ T8824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 305.611180][T10449] __nla_validate_parse: 1 callbacks suppressed [ 305.611201][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 305.911856][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 305.912439][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 306.002450][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 308.060036][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.068262][ C1] lec:lec_tx_timeout: lec0 [ 308.073126][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 309.197151][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 309.277545][T10493] macvtap1: entered promiscuous mode [ 309.307015][T10493] bond0: entered promiscuous mode [ 309.317656][T10493] bond_slave_0: entered promiscuous mode [ 309.324441][T10493] bond_slave_1: entered promiscuous mode [ 309.337742][T10493] macvtap1: entered allmulticast mode [ 309.344821][T10493] bond0: entered allmulticast mode [ 309.383131][T10493] bond_slave_0: entered allmulticast mode [ 309.389057][T10493] bond_slave_1: entered allmulticast mode [ 309.396327][T10493] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 309.590949][T10494] macvtap1: left promiscuous mode [ 309.596259][T10494] bond0: left promiscuous mode [ 309.605934][T10494] bond_slave_0: left promiscuous mode [ 309.624056][T10494] bond_slave_1: left promiscuous mode [ 309.629865][T10494] macvtap1: left allmulticast mode [ 309.641292][T10494] bond0: left allmulticast mode [ 309.646351][T10494] bond_slave_0: left allmulticast mode [ 309.651963][T10494] bond_slave_1: left allmulticast mode [ 311.259900][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 311.446610][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 311.455819][T10529] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1018'. [ 311.536358][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 311.658970][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 312.050917][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1021'. [ 312.060193][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1021'. [ 312.165591][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 312.453873][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 312.629175][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 313.080063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.088251][ C1] lec:lec_tx_timeout: lec0 [ 313.093041][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.440368][ T6525] page_pool_release_retry() stalled pool shutdown: id 68, 1 inflight 60 sec [ 316.383933][T10623] __nla_validate_parse: 2 callbacks suppressed [ 316.383954][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 316.519217][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1038'. [ 316.840997][T10621] team0: left allmulticast mode [ 316.848727][T10621] team_slave_0: left allmulticast mode [ 316.861912][T10621] team_slave_1: left allmulticast mode [ 316.873095][T10621] team0: left promiscuous mode [ 316.889857][T10621] team_slave_0: left promiscuous mode [ 316.906145][T10621] team_slave_1: left promiscuous mode [ 316.928919][T10621] bond0: left allmulticast mode [ 316.934514][T10621] bond_slave_0: left allmulticast mode [ 316.940550][T10621] bond_slave_1: left allmulticast mode [ 316.946248][T10621] bond0: left promiscuous mode [ 316.951400][T10621] bond_slave_0: left promiscuous mode [ 316.957198][T10621] bond_slave_1: left promiscuous mode [ 317.159919][T10649] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1045'. [ 317.180411][T10649] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1045'. [ 317.191382][T10649] netlink: 'syz.0.1045': attribute type 4 has an invalid length. [ 317.667492][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 318.100013][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.108161][ C1] lec:lec_tx_timeout: lec0 [ 318.113284][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.261481][T10681] netlink: 'syz.3.1053': attribute type 1 has an invalid length. [ 318.425644][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 318.794597][T10689] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1057'. [ 318.905058][T10693] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1057'. [ 318.951455][T10689] netlink: 'syz.0.1057': attribute type 4 has an invalid length. [ 319.305275][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1061'. [ 319.674320][T10711] openvswitch: netlink: ufid size 82 bytes exceeds the range (1, 16) [ 320.119676][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 321.184355][T10727] macvtap2: entered promiscuous mode [ 321.189750][T10727] bond0: entered promiscuous mode [ 321.195544][T10727] bond_slave_0: entered promiscuous mode [ 321.201515][T10727] bond_slave_1: entered promiscuous mode [ 321.207637][T10727] macvtap2: entered allmulticast mode [ 321.213120][T10727] bond0: entered allmulticast mode [ 321.218268][T10727] bond_slave_0: entered allmulticast mode [ 321.224154][T10727] bond_slave_1: entered allmulticast mode [ 321.231364][T10727] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 321.688533][T10743] syzkaller0: entered promiscuous mode [ 321.699021][T10743] syzkaller0: entered allmulticast mode [ 322.421699][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.120223][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 323.128332][ C1] lec:lec_tx_timeout: lec0 [ 323.133137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.012031][T10775] __nla_validate_parse: 3 callbacks suppressed [ 324.012052][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 324.041381][T10775] macvtap3: entered promiscuous mode [ 324.051073][T10775] macvtap3: entered allmulticast mode [ 324.058904][T10775] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 324.190060][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 324.933663][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 324.941734][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 324.960948][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 325.176949][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 325.191505][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 325.326364][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 325.336182][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 325.492271][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 326.645880][T10841] netlink: 'syz.4.1091': attribute type 4 has an invalid length. [ 326.960556][ T8824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 328.140095][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.148187][ C1] lec:lec_tx_timeout: lec0 [ 328.152873][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.457131][T10857] bond0: left allmulticast mode [ 328.462658][T10857] bond_slave_0: left allmulticast mode [ 328.468596][T10857] bond_slave_1: left allmulticast mode [ 328.474320][T10857] bond0: left promiscuous mode [ 328.479261][T10857] bond_slave_0: left promiscuous mode [ 328.485261][T10857] bond_slave_1: left promiscuous mode [ 329.424769][T10895] __nla_validate_parse: 5 callbacks suppressed [ 329.424884][T10895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1104'. [ 329.626382][T10899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1104'. [ 329.791607][T10900] netlink: 'syz.1.1104': attribute type 4 has an invalid length. [ 330.668377][T10905] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 330.684712][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 330.711948][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1109'. [ 331.499054][T10945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1116'. [ 331.563220][T10945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1116'. [ 331.573660][T10945] netlink: 'syz.0.1116': attribute type 4 has an invalid length. [ 333.160017][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.168149][ C1] lec:lec_tx_timeout: lec0 [ 333.173289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.235156][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 333.986223][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 335.017787][T10997] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 335.425455][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 336.277166][T11031] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 336.655682][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 337.096053][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 337.248525][T11053] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 337.377988][T11056] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 338.180010][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 338.188138][ C1] lec:lec_tx_timeout: lec0 [ 338.192943][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.199314][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'. [ 340.115212][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 340.286618][T11079] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 340.428962][T11112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1159'. [ 340.471848][T11112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1159'. [ 340.482724][T11112] netlink: 'syz.4.1159': attribute type 4 has an invalid length. [ 340.503411][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 340.602962][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 340.613212][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 340.642042][T11123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1160'. [ 340.658065][T11122] macvtap4: entered promiscuous mode [ 340.678098][T11122] macvtap4: entered allmulticast mode [ 340.690324][T11122] team0: entered allmulticast mode [ 340.700928][T11122] team_slave_0: entered allmulticast mode [ 340.724394][T11122] team_slave_1: entered allmulticast mode [ 340.730794][T11122] macvlan2: entered allmulticast mode [ 340.744577][T11122] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 341.190281][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 341.685168][T11143] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 341.813227][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'. [ 341.835558][T11146] openvswitch: netlink: ufid size 123 bytes exceeds the range (1, 16) [ 342.271758][T11161] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 342.351328][T11163] tipc: Enabled bearer , priority 0 [ 342.384846][T11163] tipc: Resetting bearer [ 342.413126][T11162] tipc: Disabling bearer [ 343.110931][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 343.231554][T11178] macvtap5: entered promiscuous mode [ 343.237116][T11178] macvtap5: entered allmulticast mode [ 343.250224][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 343.283680][T11178] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 343.551804][T11184] syzkaller0: entered promiscuous mode [ 343.557738][T11184] syzkaller0: entered allmulticast mode [ 344.159979][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5970 ms [ 344.168067][ C1] lec:lec_tx_timeout: lec0 [ 344.180098][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.405439][T11197] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 346.452911][T11217] tipc: Enabling of bearer rejected, failed to enable media [ 346.546318][T11229] syzkaller0: entered promiscuous mode [ 346.552863][T11229] syzkaller0: entered allmulticast mode [ 348.277138][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 349.428577][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 349.999981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 350.008118][ C1] lec:lec_tx_timeout: lec0 [ 350.012961][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.321537][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 353.194048][T11319] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 353.203936][T11319] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 353.218202][T11319] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 353.724915][T11366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1215'. [ 353.740594][T11366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1215'. [ 353.751266][T11366] netlink: 'syz.1.1215': attribute type 4 has an invalid length. [ 354.222911][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 354.775795][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 355.020056][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.028170][ C1] lec:lec_tx_timeout: lec0 [ 355.032905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.697516][T11415] netlink: 'syz.2.1228': attribute type 4 has an invalid length. [ 356.800159][ T5983] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 357.361590][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 357.942424][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 358.067737][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 358.141016][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 358.180552][T11444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1233'. [ 358.427526][T11384] Set syz1 is full, maxelem 65536 reached [ 360.040008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 360.048070][ C1] lec:lec_tx_timeout: lec0 [ 360.052754][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.916214][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 361.108348][T11487] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 361.116639][T11487] batadv_slave_0: entered promiscuous mode [ 361.125264][T11487] batadv_slave_0: left promiscuous mode [ 361.133767][T11487] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 361.687612][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 362.294111][T11514] tipc: Enabled bearer , priority 0 [ 362.322212][T11514] syzkaller0: entered promiscuous mode [ 362.328585][T11514] syzkaller0: entered allmulticast mode [ 362.354746][T11514] tipc: Resetting bearer [ 362.418815][T11513] tipc: Resetting bearer [ 362.471437][T11513] tipc: Disabling bearer [ 363.103128][T11531] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 363.597166][T11544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1255'. [ 363.627108][T11544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1255'. [ 365.059986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.068051][ C1] lec:lec_tx_timeout: lec0 [ 365.075014][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 366.137616][T11580] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.312339][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1262'. [ 366.322793][T11587] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.632230][T11594] tipc: Enabled bearer , priority 0 [ 366.645562][T11594] tipc: Resetting bearer [ 366.675248][T11598] syzkaller0: entered promiscuous mode [ 366.681408][T11598] syzkaller0: entered allmulticast mode [ 366.712362][T11592] tipc: Resetting bearer [ 366.831145][T11592] tipc: Disabling bearer [ 367.247670][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 367.603152][T11610] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.618194][T11610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1268'. [ 368.008869][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 368.536168][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1271'. [ 368.927631][T11637] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 369.322519][ T8824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 370.090016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.098182][ C1] lec:lec_tx_timeout: lec0 [ 370.103252][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.281011][T11660] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 371.543106][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 374.192450][T11725] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.360432][T11725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1293'. [ 375.049209][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 375.058653][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 375.110206][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.118272][ C1] lec:lec_tx_timeout: lec0 [ 375.130115][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.249095][T11739] team0: entered promiscuous mode [ 375.287763][T11739] team_slave_0: entered promiscuous mode [ 375.321201][T11739] team_slave_1: entered promiscuous mode [ 375.353382][T11739] team0: left promiscuous mode [ 375.358212][T11739] team_slave_0: left promiscuous mode [ 375.520730][T11739] team_slave_1: left promiscuous mode [ 378.206770][T11771] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 378.224422][T11771] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 378.236227][T11771] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 378.442693][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'. [ 378.516126][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 379.368648][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'. [ 379.949213][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 380.140009][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.148077][ C1] lec:lec_tx_timeout: lec0 [ 380.518618][T11831] Set syz1 is full, maxelem 65536 reached [ 380.657260][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 382.182502][T11856] syzkaller0: entered promiscuous mode [ 382.198525][T11856] syzkaller0: entered allmulticast mode [ 382.455124][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 382.572587][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 382.643517][T11868] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 383.435878][T11878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1320'. [ 383.446447][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 383.590828][T11885] tipc: Enabled bearer , priority 0 [ 383.598715][T11885] syzkaller0: entered promiscuous mode [ 383.666330][T11885] syzkaller0: entered allmulticast mode [ 383.720423][T11885] tipc: Resetting bearer [ 383.746666][T11884] tipc: Resetting bearer [ 383.845355][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.862770][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 383.953038][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1325'. [ 383.980725][T11884] tipc: Disabling bearer [ 384.131161][T11902] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 384.194711][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 384.209503][T11896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1325'. [ 385.048715][T11924] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 385.785529][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 386.613575][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 387.609382][ T5983] page_pool_release_retry() stalled pool shutdown: id 86, 1 inflight 60 sec [ 388.143445][T11992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1343'. [ 388.426535][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1347'. [ 388.472737][T12001] syzkaller0: entered promiscuous mode [ 388.478803][T12001] syzkaller0: entered allmulticast mode [ 388.960894][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 388.968967][ C1] lec:lec_tx_timeout: lec0 [ 389.276564][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 390.120457][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 390.899749][T12046] openvswitch: netlink: ufid size 162 bytes exceeds the range (1, 16) [ 394.127327][T12102] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 394.256573][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 394.381651][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 395.230764][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 395.606556][T12120] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 396.173966][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 399.232284][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 399.275996][T12169] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 400.546106][T12098] Set syz1 is full, maxelem 65536 reached [ 402.320300][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 402.591711][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 404.644689][T12229] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 404.654608][T12231] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.590297][T12257] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.793516][T12267] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.816253][T12269] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 408.252919][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 408.761499][T12334] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 409.196769][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 409.282869][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 412.543518][T12342] Set syz1 is full, maxelem 65536 reached [ 412.746554][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 414.195970][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1424'. [ 414.647512][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1427'. [ 415.245146][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1429'. [ 415.489478][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 415.498790][T12435] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1429'. [ 415.512664][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 415.876244][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 416.267125][T12453] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 417.458177][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 419.738800][ T7708] lec:lec_start_xmit: lec0:No lecd attached [ 419.790666][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 419.877290][T12483] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 420.402423][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 420.786666][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 421.021612][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 421.035349][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 421.114232][T12520] dummy0: entered promiscuous mode [ 421.126535][T12520] dummy0: left promiscuous mode [ 423.599594][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 424.107915][T12532] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.116407][T12555] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.522069][T12578] tipc: Enabled bearer , priority 0 [ 424.539548][T12578] syzkaller0: entered promiscuous mode [ 424.556567][T12578] syzkaller0: entered allmulticast mode [ 424.585478][T12578] tipc: Resetting bearer [ 424.603293][T12577] tipc: Resetting bearer [ 424.641789][T12577] tipc: Disabling bearer [ 424.835846][T12584] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.959981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5220 ms [ 424.968107][ C1] lec:lec_tx_timeout: lec0 [ 425.382976][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 425.462791][T12598] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 426.474597][T12621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1475'. [ 426.639428][T12621] netlink: 'syz.0.1475': attribute type 4 has an invalid length. [ 427.993540][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 429.857695][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 429.952509][T12701] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 430.334310][T12716] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 432.924897][T12762] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 433.094784][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 433.130376][T12777] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 434.089025][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 434.103305][T12788] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 434.250320][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 434.652633][T12806] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.246309][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 436.424612][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 436.444842][T12835] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1516'. [ 436.523495][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 436.877157][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 437.520300][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 437.683774][T12873] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 438.618905][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 440.118191][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'. [ 440.513793][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 441.069678][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 441.228239][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 441.613962][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 441.709560][T12922] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 442.072154][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 442.650896][T12950] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 442.660602][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1541'. [ 442.799410][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 442.808830][T12955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1541'. [ 443.697791][T12984] __nla_validate_parse: 1 callbacks suppressed [ 443.697813][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 444.424001][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 444.518778][T13002] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 445.087076][T13012] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.100178][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1553'. [ 445.285269][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.294873][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 445.761826][T13026] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 446.333279][T13036] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 446.441850][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'. [ 446.930326][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 450.307543][T13113] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 450.572724][T13121] tipc: Enabled bearer , priority 0 [ 450.591842][T13121] syzkaller0: entered promiscuous mode [ 450.605621][T13121] syzkaller0: entered allmulticast mode [ 450.638255][T13121] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 450.653147][T13121] tipc: Resetting bearer [ 450.672736][T13118] tipc: Resetting bearer [ 450.727191][T13118] tipc: Disabling bearer [ 450.959960][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 450.968116][ C1] lec:lec_tx_timeout: lec0 [ 451.182661][T13137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1582'. [ 451.341446][T13140] netlink: 'syz.2.1582': attribute type 4 has an invalid length. [ 451.347477][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 452.022184][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 452.161390][ T8824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 452.290401][T13160] syzkaller0: entered promiscuous mode [ 452.296065][T13160] syzkaller0: entered allmulticast mode [ 454.571049][T13194] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 456.507927][T13225] Set syz1 is full, maxelem 65536 reached [ 456.649616][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 457.187797][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 457.671326][T13243] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 458.569058][T13256] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 459.590963][T13271] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 460.540816][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 460.554289][T13284] Set syz1 is full, maxelem 65536 reached [ 460.587776][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 461.527785][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 462.911544][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 463.229622][T13343] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 463.337812][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 463.392164][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1633'. [ 464.383106][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 464.413603][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 464.571934][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 465.428320][T13392] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 466.940498][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'. [ 467.268604][T13418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1648'. [ 467.291666][T13418] netlink: 'syz.0.1648': attribute type 4 has an invalid length. [ 467.532043][T13426] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.541026][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1651'. [ 467.944482][T13435] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 468.140175][T13445] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 469.353119][T13471] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 469.508248][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 471.293405][T13490] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 471.302290][T13484] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 471.324740][T13484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 471.360759][T13484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 474.355767][T13536] tipc: Enabling of bearer rejected, failed to enable media [ 474.575707][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 474.696207][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 475.026949][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 475.487577][T13570] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 475.758780][T13581] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 476.011571][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 476.688689][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 476.691089][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'. [ 476.725901][T13603] tipc: Enabled bearer , priority 0 [ 476.736358][T13603] syzkaller0: entered promiscuous mode [ 476.747540][T13603] syzkaller0: entered allmulticast mode [ 476.915130][T13603] tipc: Resetting bearer [ 476.962839][T13602] tipc: Resetting bearer [ 476.995936][T13602] tipc: Disabling bearer [ 477.270862][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 478.315795][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1697'. [ 481.511983][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 482.264441][T13667] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 482.286601][T13667] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 482.298084][T13667] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 482.728554][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 482.989169][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 483.023107][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 483.403370][T13712] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 483.467474][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 484.478967][ T7708] lec:lec_start_xmit: lec0:No lecd attached [ 485.026915][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 485.728013][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 487.433828][T13688] Set syz1 is full, maxelem 65536 reached [ 487.622680][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 488.386666][T13778] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 488.707810][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 488.734644][T13784] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1729'. [ 489.724665][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 489.999995][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 490.008152][ C1] lec:lec_tx_timeout: lec0 [ 490.291729][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1734'. [ 490.973733][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 491.308643][T13833] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 491.751876][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 494.794667][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'. [ 494.812148][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 494.958452][T13800] Set syz1 is full, maxelem 65536 reached [ 495.537028][T13905] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 495.571332][T13906] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 496.768277][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 497.534012][T13932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1762'. [ 497.648285][T13934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1762'. [ 497.850995][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 498.106656][T13946] Set syz1 is full, maxelem 65536 reached [ 498.185044][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 498.266431][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 498.313060][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 500.220136][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 500.321022][ T6516] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 60 sec [ 501.330444][T13997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1776'. [ 501.452381][T13997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1776'. [ 501.766321][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 503.236959][T14003] syzkaller0: entered promiscuous mode [ 503.242757][T14003] syzkaller0: entered allmulticast mode [ 503.267918][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 505.143377][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 505.153383][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 505.453014][T14037] tipc: Enabled bearer , priority 0 [ 505.602843][T14037] syzkaller0: entered promiscuous mode [ 505.615874][T14037] syzkaller0: entered allmulticast mode [ 505.636491][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 505.681867][T14037] tipc: Resetting bearer [ 505.750521][T14034] tipc: Resetting bearer [ 505.850852][T14034] tipc: Disabling bearer [ 506.589155][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 506.725897][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.745428][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 506.853399][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 506.920133][T14076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1795'. [ 507.025432][T14076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1795'. [ 507.092315][T14079] syzkaller0: entered promiscuous mode [ 507.103661][T14079] syzkaller0: entered allmulticast mode [ 507.627664][T14099] netlink: 'syz.3.1799': attribute type 1 has an invalid length. [ 508.162100][ T6527] page_pool_release_retry() stalled pool shutdown: id 102, 1 inflight 60 sec [ 511.295378][T14112] tipc: Enabling of bearer rejected, failed to enable media [ 511.397296][T14161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1807'. [ 511.413891][T14161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1807'. [ 512.000047][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 512.008172][ C1] lec:lec_tx_timeout: lec0 [ 512.826197][T14195] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 513.464314][T14204] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 514.692812][T14225] tipc: Enabled bearer , priority 0 [ 514.706518][T14225] syzkaller0: entered promiscuous mode [ 514.729590][T14225] syzkaller0: entered allmulticast mode [ 514.818026][T14225] tipc: Resetting bearer [ 514.860286][T14224] tipc: Resetting bearer [ 514.881670][T14228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1820'. [ 514.931010][T14224] tipc: Disabling bearer [ 514.954353][T14228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1820'. [ 515.221634][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 515.865071][T14257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1826'. [ 515.975342][T14261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1826'. [ 518.489565][T14294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1833'. [ 518.626633][T14296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1833'. [ 519.973170][T14303] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 520.848599][T14326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1840'. [ 520.861862][T14326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1840'. [ 521.230593][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 522.097390][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1846'. [ 522.508923][T14359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1846'. [ 523.200156][ T6515] page_pool_release_retry() stalled pool shutdown: id 103, 1 inflight 60 sec [ 523.507541][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 523.940739][T14386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1852'. [ 524.016298][T14389] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 524.028959][T14390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1852'. [ 525.052199][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 525.117960][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1857'. [ 527.982234][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 528.282707][T14462] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 529.020639][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 531.214731][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 531.674932][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 531.719325][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 531.970813][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 532.491850][T14551] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 532.565850][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1885'. [ 534.823320][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 535.370741][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 535.810360][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 536.009752][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 536.075368][T14632] macvtap6: entered promiscuous mode [ 536.101287][T14632] macvtap6: entered allmulticast mode [ 536.107216][T14632] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 536.190846][T14634] macvtap6: left promiscuous mode [ 536.200390][T14634] macvtap6: left allmulticast mode [ 536.516474][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1906'. [ 538.614949][T14667] Set syz1 is full, maxelem 65536 reached [ 538.685979][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 539.805491][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 539.823027][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1913'. [ 540.077813][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 540.103876][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 540.600913][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 540.774958][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'. [ 542.734818][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 544.404575][T14691] Set syz1 is full, maxelem 65536 reached [ 544.635302][T14757] Set syz1 is full, maxelem 65536 reached [ 544.708269][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 545.516921][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 545.939266][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 546.317852][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'. [ 547.068616][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'. [ 549.084898][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 549.114365][T14826] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1939'. [ 549.143694][ T7708] lec:lec_start_xmit: lec0:No lecd attached [ 549.161214][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'. [ 549.177263][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 550.013566][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 550.761866][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 551.068990][T14857] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 551.130469][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1946'. [ 553.547574][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 553.895578][T14817] Set syz1 is full, maxelem 65536 reached [ 553.981349][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 554.149955][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 554.158177][ C1] lec:lec_tx_timeout: lec0 [ 554.664321][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'. [ 555.243950][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 555.388081][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 555.440368][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 555.790334][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'. [ 555.832046][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 556.782567][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 557.182306][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 557.729279][T14967] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 559.270297][T14982] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 559.575097][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 560.210539][T14985] Set syz1 is full, maxelem 65536 reached [ 560.544285][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 561.362026][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 564.428254][T14944] Set syz1 is full, maxelem 65536 reached [ 564.575362][T15064] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 565.336245][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1988'. [ 565.962815][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 566.053688][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1991'. [ 566.459456][T15091] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 567.800680][T15123] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 567.891236][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'. [ 568.103076][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 568.178070][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.187114][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 568.622305][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'. [ 568.708540][T15145] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 569.608764][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 570.552811][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 571.428061][T15170] Set syz1 is full, maxelem 65536 reached [ 571.597332][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 572.237520][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2012'. [ 573.615372][T15122] Set syz1 is full, maxelem 65536 reached [ 573.903572][T15238] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 574.001329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 574.009419][ C1] lec:lec_tx_timeout: lec0 [ 575.215566][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 575.447625][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 575.637233][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 576.081483][ T6515] page_pool_release_retry() stalled pool shutdown: id 125, 1 inflight 60 sec [ 576.346970][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'. [ 576.935156][T15284] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 577.007713][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 577.971332][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 578.050183][T15316] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 579.825267][T15354] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 579.836290][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 579.960348][T15357] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 581.788527][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'. [ 583.650224][T15396] team0: left allmulticast mode [ 583.655265][T15396] team_slave_0: left allmulticast mode [ 583.660975][T15396] team_slave_1: left allmulticast mode [ 583.677658][T15396] macvlan2: left allmulticast mode [ 585.142651][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 587.259710][T15478] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 587.412225][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 588.150889][T15498] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 588.459542][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 589.091388][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 590.248620][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 592.072782][T15542] Set syz1 is full, maxelem 65536 reached [ 592.246988][ T6526] page_pool_release_retry() stalled pool shutdown: id 127, 1 inflight 60 sec [ 592.500868][T15536] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 592.773342][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2079'. [ 593.258627][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 593.590107][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 593.717413][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 593.732934][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2085'. [ 594.391482][T15591] Set syz1 is full, maxelem 65536 reached [ 594.655481][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 595.030171][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 597.299251][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2096'. [ 598.308685][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 598.344845][T15650] macvtap10: entered promiscuous mode [ 598.371887][T15650] team0: entered promiscuous mode [ 598.380101][T15650] team_slave_0: entered promiscuous mode [ 598.386197][T15650] team_slave_1: entered promiscuous mode [ 598.403761][T15650] macvtap10: entered allmulticast mode [ 598.409291][T15650] team0: entered allmulticast mode [ 598.438572][T15650] team_slave_0: entered allmulticast mode [ 598.449103][T15650] team_slave_1: entered allmulticast mode [ 598.472399][T15650] 8021q: adding VLAN 0 to HW filter on device macvtap10 [ 598.783825][T15652] macvtap10: left promiscuous mode [ 598.789188][T15652] team0: left promiscuous mode [ 598.795180][T15652] team_slave_0: left promiscuous mode [ 598.807451][T15652] team_slave_1: left promiscuous mode [ 598.824694][T15652] macvtap10: left allmulticast mode [ 598.831612][T15652] team0: left allmulticast mode [ 598.837164][T15652] team_slave_0: left allmulticast mode [ 598.845204][T15652] team_slave_1: left allmulticast mode [ 598.858732][T15655] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 598.867483][T15655] batadv_slave_0: entered promiscuous mode [ 598.879463][T15655] batadv_slave_0: left promiscuous mode [ 598.889257][T15655] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 598.908161][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 599.210559][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 601.411275][T15680] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 601.451593][T15680] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 601.484186][T15680] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 601.657421][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2107'. [ 602.730967][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 604.460425][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'. [ 604.523712][T15744] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 605.117460][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2119'. [ 605.181770][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 606.098760][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 606.722345][T15795] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 607.051921][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 607.805801][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 607.849438][T15820] macvtap7: entered promiscuous mode [ 607.855516][T15820] macvtap7: entered allmulticast mode [ 607.862803][T15820] team0: entered allmulticast mode [ 607.867976][T15820] team_slave_0: entered allmulticast mode [ 607.878678][T15820] team_slave_1: entered allmulticast mode [ 607.886402][T15820] macvlan2: entered allmulticast mode [ 607.893626][T15820] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 607.974220][T15821] macvtap7: left promiscuous mode [ 607.979558][T15821] macvtap7: left allmulticast mode [ 608.003441][T15821] team0: left allmulticast mode [ 608.008707][T15821] team_slave_0: left allmulticast mode [ 608.030280][T15821] team_slave_1: left allmulticast mode [ 608.043751][T15821] macvlan2: left allmulticast mode [ 608.925581][T15839] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 609.120212][ C0] ------------[ cut here ]------------ [ 609.126039][ C0] ODEBUG: free active (active state 0) object: ffff888052b4f090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 609.139664][ C0] WARNING: CPU: 0 PID: 15825 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 609.149427][ C0] Modules linked in: [ 609.153692][ C0] CPU: 0 UID: 0 PID: 15825 Comm: syz.3.2136 Not tainted syzkaller #0 PREEMPT(full) [ 609.163155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.173311][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 609.179195][ C0] Code: 4c 89 ff e8 17 e0 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 5a 3a f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 4f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 609.198985][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 609.205147][ C0] RAX: 948985e539f3d500 RBX: dffffc0000000000 RCX: ffff88806b7b8000 [ 609.213207][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 609.221283][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 609.229312][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a39d970 [ 609.237379][ C0] R13: ffffffff8bbf1400 R14: ffff888052b4f090 R15: ffffffff8b6cf7e0 [ 609.245454][ C0] FS: 00007fb6e93756c0(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 609.254487][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.261157][ C0] CR2: 00007faec4c9cf98 CR3: 000000002d214000 CR4: 00000000003526f0 [ 609.269214][ C0] Call Trace: [ 609.272565][ C0] [ 609.275447][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 609.281117][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 609.286344][ C0] kfree+0x115/0x6d0 [ 609.290400][ C0] rose_timer_expiry+0x4cb/0x600 [ 609.295450][ C0] ? call_timer_fn+0x155/0x5f0 [ 609.300331][ C0] call_timer_fn+0x17e/0x5f0 [ 609.304973][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 609.310534][ C0] ? call_timer_fn+0xbe/0x5f0 [ 609.315266][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 609.320472][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.325743][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.331027][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 609.336564][ C0] __run_timer_base+0x61a/0x860 [ 609.341537][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 609.346985][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 609.353344][ C0] run_timer_softirq+0xb7/0x180 [ 609.358265][ C0] handle_softirqs+0x286/0x870 [ 609.363131][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 609.367961][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 609.373349][ C0] __irq_exit_rcu+0xca/0x1f0 [ 609.377994][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 609.383334][ C0] irq_exit_rcu+0x9/0x30 [ 609.387633][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 609.393375][ C0] [ 609.396376][ C0] [ 609.399348][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.405432][ C0] RIP: 0010:unwind_next_frame+0x12f9/0x2390 [ 609.411423][ C0] Code: 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef <4c> 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 [ 609.431127][ C0] RSP: 0018:ffffc9000454f358 EFLAGS: 00000282 [ 609.437251][ C0] RAX: 0000000000000000 RBX: ffffffff8f936808 RCX: 0000000000000001 [ 609.445334][ C0] RDX: ffffffff8f9367f0 RSI: ffffffff900f4c30 RDI: ffffffff8bbf0880 [ 609.453394][ C0] RBP: ffffffff8f936804 R08: 000000000000000a R09: ffffffff81738c45 [ 609.461464][ C0] R10: ffffc9000454f478 R11: ffffffff81ac2e10 R12: ffffffff81ac2dbb [ 609.469484][ C0] R13: ffffffff8f936800 R14: ffffc9000454f428 R15: ffffffff8f936804 [ 609.477566][ C0] ? stack_trace_save+0x9b/0xe0 [ 609.482523][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 609.488856][ C0] ? unwind_next_frame+0xa5/0x2390 [ 609.494083][ C0] ? unwind_next_frame+0xd4/0x2390 [ 609.499252][ C0] ? arch_stack_walk+0xe4/0x150 [ 609.504211][ C0] ? unwind_next_frame+0xa5/0x2390 [ 609.509521][ C0] ? stack_trace_save+0x9c/0xe0 [ 609.514504][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 609.520763][ C0] arch_stack_walk+0x11c/0x150 [ 609.525601][ C0] ? stack_trace_save+0x9c/0xe0 [ 609.530566][ C0] stack_trace_save+0x9c/0xe0 [ 609.535302][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 609.540778][ C0] ? copy_folio_from_iter_atomic+0x1877/0x1910 [ 609.546994][ C0] save_stack+0xf5/0x1f0 [ 609.551343][ C0] ? __pfx_save_stack+0x10/0x10 [ 609.556271][ C0] ? page_ext_put+0x97/0xc0 [ 609.560885][ C0] __reset_page_owner+0x71/0x1f0 [ 609.565893][ C0] __free_frozen_pages+0xbc4/0xd30 [ 609.571130][ C0] __folio_put+0x21b/0x2c0 [ 609.575605][ C0] ? __pfx___folio_put+0x10/0x10 [ 609.580666][ C0] iter_file_splice_write+0xb48/0x10e0 [ 609.586221][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 609.592225][ C0] ? rcu_read_lock_any_held+0xb3/0x120 [ 609.597745][ C0] ? direct_splice_actor+0x10c/0x160 [ 609.603138][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 609.609088][ C0] direct_splice_actor+0x101/0x160 [ 609.614284][ C0] splice_direct_to_actor+0x5a8/0xcc0 [ 609.619739][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 609.625458][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 609.631448][ C0] do_splice_direct+0x181/0x270 [ 609.636353][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 609.641906][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 609.647863][ C0] ? rw_verify_area+0x255/0x4d0 [ 609.652817][ C0] do_sendfile+0x4da/0x7e0 [ 609.657281][ C0] ? __pfx_vfs_write+0x10/0x10 [ 609.662169][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 609.667172][ C0] ? __se_sys_futex+0x36f/0x400 [ 609.672145][ C0] __se_sys_sendfile64+0x13e/0x190 [ 609.677311][ C0] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 609.683041][ C0] ? do_syscall_64+0xbe/0xfa0 [ 609.687781][ C0] do_syscall_64+0xfa/0xfa0 [ 609.692387][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.697638][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.703799][ C0] ? clear_bhb_loop+0x60/0xb0 [ 609.708532][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.714537][ C0] RIP: 0033:0x7fb6e858f749 [ 609.719024][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.738743][ C0] RSP: 002b:00007fb6e9375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 609.747291][ C0] RAX: ffffffffffffffda RBX: 00007fb6e87e5fa0 RCX: 00007fb6e858f749 [ 609.755369][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000007 [ 609.763427][ C0] RBP: 00007fb6e8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 609.771507][ C0] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 609.779548][ C0] R13: 00007fb6e87e6038 R14: 00007fb6e87e5fa0 R15: 00007fff94ba4638 [ 609.787633][ C0] [ 609.790736][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.798139][ C0] CPU: 0 UID: 0 PID: 15825 Comm: syz.3.2136 Not tainted syzkaller #0 PREEMPT(full) [ 609.807548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.817630][ C0] Call Trace: [ 609.820923][ C0] [ 609.823780][ C0] dump_stack_lvl+0x99/0x250 [ 609.828392][ C0] ? __asan_memcpy+0x40/0x70 [ 609.833023][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.838333][ C0] ? __pfx__printk+0x10/0x10 [ 609.842958][ C0] vpanic+0x237/0x6d0 [ 609.846967][ C0] ? __pfx_vpanic+0x10/0x10 [ 609.851574][ C0] panic+0xb9/0xc0 [ 609.855319][ C0] ? __pfx_panic+0x10/0x10 [ 609.859772][ C0] __warn+0x31b/0x4b0 [ 609.863783][ C0] ? debug_print_object+0x16b/0x1e0 [ 609.869008][ C0] ? debug_print_object+0x16b/0x1e0 [ 609.874230][ C0] report_bug+0x2be/0x4f0 [ 609.878584][ C0] ? debug_print_object+0x16b/0x1e0 [ 609.883815][ C0] ? debug_print_object+0x16b/0x1e0 [ 609.889037][ C0] ? debug_print_object+0x16d/0x1e0 [ 609.894262][ C0] handle_bug+0x84/0x160 [ 609.898574][ C0] exc_invalid_op+0x1a/0x50 [ 609.903128][ C0] asm_exc_invalid_op+0x1a/0x20 [ 609.907995][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 609.913836][ C0] Code: 4c 89 ff e8 17 e0 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 5a 3a f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 4f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 609.933463][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 609.939560][ C0] RAX: 948985e539f3d500 RBX: dffffc0000000000 RCX: ffff88806b7b8000 [ 609.947548][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 609.955541][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 609.963529][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a39d970 [ 609.971518][ C0] R13: ffffffff8bbf1400 R14: ffff888052b4f090 R15: ffffffff8b6cf7e0 [ 609.979531][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 609.985213][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 609.990797][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 609.995936][ C0] kfree+0x115/0x6d0 [ 609.999863][ C0] rose_timer_expiry+0x4cb/0x600 [ 610.004836][ C0] ? call_timer_fn+0x155/0x5f0 [ 610.009618][ C0] call_timer_fn+0x17e/0x5f0 [ 610.014257][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 610.019763][ C0] ? call_timer_fn+0xbe/0x5f0 [ 610.024454][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 610.029693][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.034921][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.040138][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 610.045660][ C0] __run_timer_base+0x61a/0x860 [ 610.050589][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 610.055981][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 610.062263][ C0] run_timer_softirq+0xb7/0x180 [ 610.067141][ C0] handle_softirqs+0x286/0x870 [ 610.071963][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 610.076762][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 610.082075][ C0] __irq_exit_rcu+0xca/0x1f0 [ 610.086679][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 610.091900][ C0] irq_exit_rcu+0x9/0x30 [ 610.096199][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 610.101863][ C0] [ 610.104805][ C0] [ 610.107757][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.113752][ C0] RIP: 0010:unwind_next_frame+0x12f9/0x2390 [ 610.119664][ C0] Code: 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef <4c> 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 [ 610.139386][ C0] RSP: 0018:ffffc9000454f358 EFLAGS: 00000282 [ 610.145569][ C0] RAX: 0000000000000000 RBX: ffffffff8f936808 RCX: 0000000000000001 [ 610.153553][ C0] RDX: ffffffff8f9367f0 RSI: ffffffff900f4c30 RDI: ffffffff8bbf0880 [ 610.161626][ C0] RBP: ffffffff8f936804 R08: 000000000000000a R09: ffffffff81738c45 [ 610.169617][ C0] R10: ffffc9000454f478 R11: ffffffff81ac2e10 R12: ffffffff81ac2dbb [ 610.177603][ C0] R13: ffffffff8f936800 R14: ffffc9000454f428 R15: ffffffff8f936804 [ 610.185596][ C0] ? stack_trace_save+0x9b/0xe0 [ 610.190493][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.196669][ C0] ? unwind_next_frame+0xa5/0x2390 [ 610.201852][ C0] ? unwind_next_frame+0xd4/0x2390 [ 610.206985][ C0] ? arch_stack_walk+0xe4/0x150 [ 610.211860][ C0] ? unwind_next_frame+0xa5/0x2390 [ 610.217085][ C0] ? stack_trace_save+0x9c/0xe0 [ 610.221985][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.228174][ C0] arch_stack_walk+0x11c/0x150 [ 610.233048][ C0] ? stack_trace_save+0x9c/0xe0 [ 610.238207][ C0] stack_trace_save+0x9c/0xe0 [ 610.242919][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 610.248325][ C0] ? copy_folio_from_iter_atomic+0x1877/0x1910 [ 610.254865][ C0] save_stack+0xf5/0x1f0 [ 610.259213][ C0] ? __pfx_save_stack+0x10/0x10 [ 610.264117][ C0] ? page_ext_put+0x97/0xc0 [ 610.268669][ C0] __reset_page_owner+0x71/0x1f0 [ 610.273646][ C0] __free_frozen_pages+0xbc4/0xd30 [ 610.278793][ C0] __folio_put+0x21b/0x2c0 [ 610.283233][ C0] ? __pfx___folio_put+0x10/0x10 [ 610.288201][ C0] iter_file_splice_write+0xb48/0x10e0 [ 610.293720][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 610.299838][ C0] ? rcu_read_lock_any_held+0xb3/0x120 [ 610.305347][ C0] ? direct_splice_actor+0x10c/0x160 [ 610.310658][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 610.316663][ C0] direct_splice_actor+0x101/0x160 [ 610.321797][ C0] splice_direct_to_actor+0x5a8/0xcc0 [ 610.327226][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 610.332894][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 610.338820][ C0] do_splice_direct+0x181/0x270 [ 610.343688][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 610.349072][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 610.354997][ C0] ? rw_verify_area+0x255/0x4d0 [ 610.359888][ C0] do_sendfile+0x4da/0x7e0 [ 610.364354][ C0] ? __pfx_vfs_write+0x10/0x10 [ 610.369151][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 610.374114][ C0] ? __se_sys_futex+0x36f/0x400 [ 610.378996][ C0] __se_sys_sendfile64+0x13e/0x190 [ 610.384129][ C0] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 610.389784][ C0] ? do_syscall_64+0xbe/0xfa0 [ 610.394493][ C0] do_syscall_64+0xfa/0xfa0 [ 610.399008][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.404313][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.410395][ C0] ? clear_bhb_loop+0x60/0xb0 [ 610.415089][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.420995][ C0] RIP: 0033:0x7fb6e858f749 [ 610.425451][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.445073][ C0] RSP: 002b:00007fb6e9375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 610.453683][ C0] RAX: ffffffffffffffda RBX: 00007fb6e87e5fa0 RCX: 00007fb6e858f749 [ 610.461678][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000007 [ 610.469664][ C0] RBP: 00007fb6e8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.477647][ C0] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 610.485635][ C0] R13: 00007fb6e87e6038 R14: 00007fb6e87e5fa0 R15: 00007fff94ba4638 [ 610.493637][ C0] [ 610.497261][ C0] Kernel Offset: disabled [ 610.501644][ C0] Rebooting in 86400 seconds..