last executing test programs: 20m17.46388652s ago: executing program 2 (id=3314): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x668, 0x0, 0x450, 0x148, 0x0, 0x0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffff00], 'pimreg0\x00', 'hsr0\x00', {}, {}, 0x6, 0x0, 0x0, 0x70}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x1c, 0x7}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x3, 0x6d}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@remote, 0xfc}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0xfffffffb, 0x7fffffff], 0x5519, 0x2}}, @common=@hbh={{0x48}, {0x1, 0x2, 0x0, [0x9, 0x1, 0x6, 0x53, 0x1ff, 0x800, 0x400, 0x1ff, 0x7, 0xe, 0xfff, 0x5, 0x101, 0x6, 0x3e], 0x4}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 20m15.944460646s ago: executing program 2 (id=3317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x100, 0x70bd27, 0x25dfdbfc, {0x2, 0x3f, 0xa8, 0xc8, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x3, 0x1, 0xfffff800}}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x1c78115f}}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x100, 0x70bd27, 0x25dfdbfc, {0x2, 0x3f, 0xa8, 0xc8, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x3, 0x1, 0xfffff800}}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x1c78115f}}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) 20m15.67401705s ago: executing program 2 (id=3320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000000b40)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x91) 20m15.393868369s ago: executing program 2 (id=3321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000004e002500ec06f4f995b2e8ff0a04f55f080001000201000208d3fc8005000080", 0x24) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x114, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x659bea22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41a32590}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ef12dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x92daf73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20683051}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f356efd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5366cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d66edcf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48797768}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42b23338}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d0a007e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a1afd9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c70}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f98d19b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29e2ac94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69b8e36d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bff20af}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x44}, @remote}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000280)="25715afa3a7216594f1b12ada77d", 0x0, 0xcfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e23, @multicast2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xd, 0xffff}, {0x9, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2008085}, 0x4041) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a000100fefdffffffdbef25000000150000000008"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20m14.988026752s ago: executing program 2 (id=3323): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x200000}, 0x10}, 0x94) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x40) 20m14.701188912s ago: executing program 2 (id=3326): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000340)) write$cgroup_freezer_state(r1, &(0x7f0000000200)='FROZEN\x00', 0x7) 19m59.364053989s ago: executing program 32 (id=3326): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000340)) write$cgroup_freezer_state(r1, &(0x7f0000000200)='FROZEN\x00', 0x7) 12.713269907s ago: executing program 3 (id=13134): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000005580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "01de9a", 0x44, 0x2f, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x80, 0x0, 0x0, 0x2, 0x2}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2001, {{0x8, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, 0x7}, 0x2, {0x4, 0x575, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) close(r2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000d00)={{r2, &(0x7f0000000180)='}*\'\'\x00', 0x56d040, &(0x7f0000000a00)={@_ha_fsid={[0x2, 0x3]}, {0x5, 0x75, 0x2, 0x5}}, 0x7, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0x3d0}, 0x2, &(0x7f0000000cc0)=[{0x1, 0x8, &(0x7f0000000ac0)='nat\x00', &(0x7f0000000b00)="b49351b4e63d7e1abec206a9d8e73acd473712505233809b74e610e36016468ada9da44f97ff18f68cd872e2fda0021443fb3d9b64956184ad9bd0dd7f50f161ec8f7b0feb18b225080a30de90ddd8130f5b546179c89f7be92075f8e1a8c057b788560e1fd6be42550767e6c5b42a80b26f4179f925a88f3af58109385aaefab12a0611171171e6785d30f70c0391a79b44860338ae9f16b90eb8fef35412b09d", 0xa1, 0x10}, {0x3, 0x3, &(0x7f0000000bc0)='nat\x00', &(0x7f0000000c00)="6a8a33233a1283ac48af73a7fa3c866b708de31faa13391ba488c426c7d3a4c1a84a3b04e7275bd6ed30fcca40cab51ed81f7743a2a685a80752eb9677185a68af5770e85697b9e52c54a3151f9564e7ac894be12bc09bb2231992e88e6cf6c5c171d22782b942e99c09eece0c13b59096064c30e24c60f9ad2d0c276adbc9ea42dbaa8781b1a1807008de4a6d2cf0088bc0dae5ace6bf3d2bf344494a1a", 0x9e, 0x52}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000080000000900000000000100", @ANYRES32, @ANYBLOB="0000000000000000000000f6ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r5, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f0000000200)="bfdbd88dd6e9a02cdae5fb1b3f12849956f0bf111ad0d0741ec57574827343bcbdfd5828c3b1c1b7d5aa2b622dcba96ea7f3f41c6adfae920824a36214138b6091a29f61e6de411e265600e863788f1303efe5de8032edbf59fd453898f65a4bfc051480afaf652a5e019c9f46bc06f47981de1ba5fa20556d96e979eb9398015594272684d806530cf87deed1898384149c8c2b173503661bae950cbbc6387d69b20b96194d653f9d3d", &(0x7f00000002c0)=""/18, &(0x7f0000000300)="5ac26834e99d7846c0b67286de4fb14b826e4c29621da15502ed74e87e5b68e2fd2f0e19e8578a21dd36e0c4d033996d976c9aec7c25485037755e1327b9e5563784db4676bb00c391e5718aecfa993928ce8aafa55fa423632f6f69e7ccc545eb14caa4a37d75733441cf3bccd3e13145be0a08f2ebe5c3106e854034a72f77aa03afcb7daad2071b55d2db7eb9df35f5211f3c4c82361a6fd38f68d7d2dcb1f3b60238a583109f6b2d0da0", &(0x7f00000003c0)="8e83dd2509072c95cddc3f64c93a5e01c5ad8014357915718de6ed2567d72dcdf21bc7f53797f7d17800ed82eb8c96fa35d28016c1c0f61da53cb3011dd271aaabebffff1e04a2939135d6522257da0b051b5de02e73e9b059b8c2320b99876f9e96dd3bae9f0149f26c9434432640ff723fc041dc242ca676c38a279b240b2659f4dd2024aa94957b70055b4a38680eaa2561f2b52c", 0x9, 0x1, 0x4}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) connect$vsock_stream(r5, &(0x7f0000000d80)={0x28, 0x0, 0x2710, @hyper}, 0x10) openat$cgroup_ro(r5, &(0x7f0000000dc0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x1c0, 0x268, 0xfeffffff, 0x98, 0x1c0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x30}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc) 12.560689639s ago: executing program 3 (id=13136): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x2c8, 0xf0, 0xffffffff, 0x1e0, 0x2c8, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'caif0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @port=0x4e23, @port=0x4e24}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [], [0xffffff00, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [0x0, 0x0, 0xffffffff], 'batadv_slave_0\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x40000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000005000000040000007b00000000000000", @ANYRES32, @ANYBLOB="02000000000000009494e0dde72010af8b813500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="000000000000000085000000d4000000180000000003000000000000d0ffffff95000000000000009500000000000000", @ANYRES16=r1, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206e4a900000000000000000000000005000400000000000900020073797a30000020000500010007000000050005000a00000014000012400000ffff12000300686173683a6e65742c706f727400009ea74878422bc9f39d000000"], 0x60}}, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r8, 0x1, 0xfffffffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x402) recvmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0xc012) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0xd3) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 8.873730127s ago: executing program 3 (id=13146): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) accept4(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x80800) socket$netlink(0x10, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) accept4(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x80800) (async) socket$netlink(0x10, 0x3, 0x5) (async) 5.786254014s ago: executing program 4 (id=13159): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x7, 0x0}, 0x1, 0x0, 0x50, 0x0, [{@initdev}, {@private}, {}, {@initdev}, {@empty}]}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd29, 0x24dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 5.389425633s ago: executing program 5 (id=13160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24002}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x11, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x4, 0x6, "f5f8021f6e6f1c221b71392c9860dfc0d1f1194fea5a12c8061a01b6a1daca3f7ecf029e9e51ac560eca1b94a9206e3535ddf99659bc1c8e3e063d4b04d38d577933"}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xb, 0x3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 5.185648927s ago: executing program 4 (id=13162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_int(r2, 0x1, 0x1e4ea90b67f1692d, &(0x7f0000000080)=0xfff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.968285918s ago: executing program 4 (id=13164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xe4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) listen(r2, 0x4bb3) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000001c40)=@rose={'rose', 0x0}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ee80}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x113}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x56c}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000780), &(0x7f00000007c0)=0xc) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r4, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r4, r6, 0x1, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r7}}, 0x1c) socket$igmp(0x2, 0x3, 0x2) 4.88130315s ago: executing program 5 (id=13166): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000019000189da9bb9c60d461102"], 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="ec61d92e9fc4e8c61a9323bba46072de4973c4f9f83b8f3d6162ace6a0093a"], 0x38}, 0x1, 0x0, 0x0, 0x4048854}, 0x0) 4.493823351s ago: executing program 3 (id=13168): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) unshare(0x6a040000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4008000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) unshare(0x6a040000) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4008000) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) 4.064145371s ago: executing program 4 (id=13171): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x4, {}, 0x1}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}}, 0x0) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) listen(r5, 0x3) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x20000001}) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000080)={{r4}, 0x48, 0x1bb3, 0x1}) (async, rerun: 64) r8 = socket$inet6(0xa, 0x5, 0x0) (rerun: 64) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x208}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x1, 0xfffffffd, @local}, @in6={0xa, 0x4e21, 0xe6e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}], 0x38) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r9, &(0x7f0000001200)=ANY=[@ANYBLOB="000086dd0000120000000000008a6306000000970000302c00fe800000000000000000000000080030dd010000000000000000000000000001020090780000d93f64ab94000f082f20ffffff00000000000007000000000001ff0200f3000000000000000000"], 0x66) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e21, 0x0, 0x4e22, 0x0, 0x2, 0x10, 0xa0, 0x33, r2, r3}, {0xc3c, 0x111, 0xffff, 0xfc, 0x401, 0x0, 0x6, 0x6}, {0x9, 0x8, 0x2ba582, 0x2}, 0x8, 0x6e6bba, 0x0, 0x1, 0x0, 0x2}, {{@in6=@mcast1, 0x4d6, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x1, 0x2, 0x300, 0x3, 0x85fd}}, 0xe8) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 3.077322744s ago: executing program 4 (id=13176): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20040894) getsockopt$inet_tcp_buf(r3, 0x6, 0x13, 0x0, &(0x7f00000000c0)) r4 = socket$l2tp(0x2, 0x2, 0x73) write(r4, &(0x7f0000000080)="d3237f353b696df40ba0648dbc9ce073eea5c1674ae9d76954f08cc7301d2561bfcd77cebaf2fe663d6cc77b404c302ca16d58b41c", 0x35) r5 = socket(0x2, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000040)=""/3, &(0x7f0000000100)=0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYBLOB="04000d800800", @ANYRES8], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f00000001c0)={@broadcast, @private=0xa010101}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r8, 0x1ff, 0x1, 0x2}) unshare(0x2000200) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2e, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffd}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 2.809409969s ago: executing program 4 (id=13179): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x875ed000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff850000002f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0x20}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x04'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00@', @ANYRES16=r5, @ANYBLOB="00042dbd7000fbdbdf251a000000070021006262000008009a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r9, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r9, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x44}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.093323721s ago: executing program 1 (id=13183): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x0, 0x37, 0x0, 0x3}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bdf001ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000002000000000000000000000000000000000108000000"], 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="000000000000003dab6e27207b8af8fc14234cc4ce00f8ffffffb703000008000000b704000000000000850000002800000095b5652eb070d60200"/75], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x6, 0x0, &(0x7f0000000100)="e00000a58000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb89261cb20081"], 0x1c}, 0x1, 0xfff0}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0xc0}}], 0x20, 0x4048800}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x3, 0x300) 1.983455803s ago: executing program 1 (id=13184): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112a9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000be000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="ec231f1c7ea9336d181a02000000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000ddd6f32226c4f18215000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000003328b67fb8e43d29000000008000000000"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000004000000000000000b00000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000091d88eca6845ecc20000bf09000001000000550901000000000025000000000000009500000000000000bf91000000000000b7020000020000ae07fcff0000000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x10001, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ad4087b1e18f000000000000000000fd00000000", @ANYRES32=0x0, @ANYBLOB="83650700010000002400128009000100697069700000000014000280050009000000000008000300ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r11, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1, 0x68}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) read(r4, &(0x7f0000000440)=""/205, 0xcd) ioctl$OCFS2_IOC_MOVE_EXT(r7, 0x40406f06, &(0x7f00000001c0)={0x4, 0x0, 0x5, 0x2, 0x4}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) write$tun(r9, &(0x7f00000014c0)=ANY=[@ANYBLOB="0201f50001000b0002006b67fd3300cd110120010000000000000000000000000000fc010000000000000000000000000001000e0407ff080000fe88000000000000000000000000000100000000000000000000000000000001fe80000000000000000000000000000aff020000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000bbfe8800000000000000000000000001010102026a00800000ff010000000000000000000000000001ae9e5401a326ebba62c40d3c6b4f607a53653547f5c034123218c630dcfba00844967589046f19590e000d4ec24b90f3d872e44e19c88adede8c9a5b42"], 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x4, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0x8}}) 1.653713132s ago: executing program 0 (id=13186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000007060104000000000000000000000009080006400000000805000100070000000900020073797a30000000000800060300000004"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.578874233s ago: executing program 0 (id=13187): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x1, {0x1, 0x1, 0x4}, 0xfe}, 0x18) (async) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x1, {0x1, 0x1, 0x4}, 0xfe}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) 1.428080285s ago: executing program 1 (id=13188): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x0, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20044080) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4011, @loopback}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 1.040484127s ago: executing program 1 (id=13189): r0 = socket(0x21, 0x5, 0x7fff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x28, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0xf00}, 0xbe) 942.740214ms ago: executing program 0 (id=13190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/320], 0x140, 0x24008090}, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {0x0}], 0x2}, 0x1021) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000002de0010073797a300000000048fbe2fcfd58fd4c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000891e87460073797a31000000000900010073797a3000000000100003800c0000800800034000000002140006000000010000000000000a000000000000"], 0xd0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050200000000fddbdf251200000008004f00010000001800018014000200626f6e645f736c6176655f3100000000181def7a97d45e49c3f5630ea2322fee32ba16d54b5253a28cfa142dbf79aee00a9adcc02c5fffdbb695517c2c41d9133b086ad46fdc41a8992cb78e48720491bf509c976abae3e3ccc9959ceef0b30449baf8fa4a1334d2497f893f32f7dc6af7fef79b1026300ed2ae0b79cd0e83079556077edd8e35f9e493c8cd7357d8197c3c6dfea62cf6684c8c28ba08a0fd819c6d389c150a01cf687b503d640d118a8b7b0df5ce4d9ab9f783fc3273cbbe0343f08af7e2d433798688a28be1de25a6d3d2ef77f22091d187d58ee4307d2933"], 0x34}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000001c0)) r8 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r8, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10002, 0x0) close(r8) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000007c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r11, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r12, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400010004000300040002000400020004000400040006"], 0x138}}, 0x0) 743.22176ms ago: executing program 5 (id=13191): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff00003506000002000000170600000ee5e50cbf250000000000001f650000000000007507000002000000170700004c0001000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba030c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804ce25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d47dc570a385a459ef8e6ada84e987cc0000f6991078a21788cab9d53ad890206ab56506ab08b294c09ea4536e0b9bb0627a03a1eb9cbe6958812a98abad49f42a6fb2b69c0880548c39f13f4cca63a87ad7ff8d1006cc6d95e406deb61b9c7ac3f35f1fdb27e70900001fd13d4a22fc90e5f7300c53f2b6e7e001058dc04b434e379fd5526b52990b04b183c21e6b974a4bf85567348c6c6a4404d987f71d81fe988ddc82dac01bbb43e006203a31b02f9519ffb29cd3508d7da829712c98381a672db9fa6a8eb38d784c913a804557c4577a22acb7b73c4aa0e07998734fdfbb0d262ef88b3b8cd1a8518dd8326f6367ed938a05c108cf2639e8799fd7cb018f08453fa863f8fb8178569d26a0a48e4498f88d15abbb22d955a162ac1fd3710c1255fbe3c6d1e84152c81ec0192e54d13dc5beebe3de27967e5d1aa8a6139056e3fb738d0ca46b0a1c63a29002e5b12314390ca075ecb43e0c6cd5af64c8b676316b9bff845ea0b20562f53c5b34314411bf3d4af06bdc3def9f2791d6d076ca72e319e6a9e1098bab878a9f1274a61ddee47abb54d8cf901e78bdb85f47ef37dd0daeb6403820ee8414042904917ea1b80a0000000000004c84018fd19fb3581ca1ff9fb5758d76929ec0502802869c51511c2c9dc56ead1449c038e4d2382d6ef61a7d9399cb"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23826}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x40}]}}}]}, 0x38}}, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000)=0xfe, 0x4) 622.405002ms ago: executing program 5 (id=13192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x24, 0x0, @val=@perf_event={0x7ff}}, 0x18) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8917, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 514.817544ms ago: executing program 0 (id=13193): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111ad000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x1da}], 0x1}, 0x84) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x3, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x700, 0xf, 0xd}}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000880)=""/206, 0xce}, 0x2}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 325.909391ms ago: executing program 0 (id=13194): r0 = socket$igmp(0x2, 0x3, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0xa, 0x201}, @void, @eth={@multicast, @broadcast, @void, {@generic={0x6558}}}}, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0xa, 0x201}, @void, @eth={@multicast, @broadcast, @void, {@generic={0x6558}}}}, 0x12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async) 293.230378ms ago: executing program 1 (id=13195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xfd, 0xfffffffffffffffc, &(0x7f0000000a40)="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", &(0x7f0000000140)=""/13, 0x0, 0x0, 0xad, 0x112, &(0x7f0000000240)="9cdc57e4a9c7fcb9b186c9bd43fa44b38bef6138ca1f6f08cdaacbcffe9a2ae0343debf4e6ce7818ec4261022c63c5174dbf51c34fd98db73c55431a897423936fe486079d14be4fdaa264f27421f79a60f4c7f8d297d74bc790de34386008fc17b9ca14491f71bbc7fd8367ce56a3fb28ba9d6d3b2c24568f8b891c71cab31229da7ca3687c49e4e9d44410b7fa88e3f5f4e437b5e143240b3bec30863d4b722b6ad3c8d882037a7daebcb362", &(0x7f0000000880)="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", 0x1, 0x0, 0x2}, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280050081003a00000014000180080001000000000008000200000000000c0019800800020099"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x74, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 240.69942ms ago: executing program 3 (id=13196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'net'}]}, 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) close(r2) recvfrom(r3, 0x0, 0x0, 0x10100, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000004380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088a8"], 0xfdef) 239.559151ms ago: executing program 5 (id=13197): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000"/16], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x75}]}, &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="060006030100000008000100", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 185.282161ms ago: executing program 1 (id=13198): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="024a7f"], 0x3) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x200, 0x0, 0x1, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x500}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) (async) r2 = socket$inet(0x2, 0x1, 0xb4) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) (async, rerun: 32) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x3, &(0x7f0000000140)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39, 0x1}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xca, &(0x7f0000000240)=""/202, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 99.368766ms ago: executing program 0 (id=13199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000000c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="04000380"], 0x24}}, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) unshare(0x400) unshare(0x800) unshare(0x8040000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={0xffffffffffffffff, &(0x7f0000001f80), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x5, 0x0, @void}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r10, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000c000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000008500f70000a50000004a01fcff00000000045109000600000018370000040000000000000000000000186100000d0000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800007fffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000004160000b809000085100000faffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x5, 0x61, &(0x7f0000000800)=""/97, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x1, 0x4, 0x80000001, 0x200}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r7, r9, r10], &(0x7f0000000ac0)=[{0x5, 0x2, 0xd, 0x9}, {0x5, 0x3, 0x10, 0x4}], 0x10, 0x2}, 0x94) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r11, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44400) clock_gettime(0xffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x2007fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x1, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x4, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x80000001, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000e8, 0x9) 21.226104ms ago: executing program 5 (id=13200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'lo\x00', 0xd5}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x45, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x6, [{0x3, 0x3, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, 0x0, 0x35, 0x0, 0x9, 0xfffffffd}, 0x28) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x1) 0s ago: executing program 3 (id=13201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04004400128009000100766c616e00000000340002800609000000000000000004800c00010000000080670000000c00010000010000ffffffff0c000100080000000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x6c}}, 0x8000002) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dceb8005", @ANYRES16=r4, @ANYBLOB="01072bbd7000ffdbdf25010000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r4, @ANYRES16=r1, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000005}, 0x48010) kernel console output (not intermixed with test programs): dency failed, not supported in mode active-backup(1) [ 1549.108311][T20391] bond11 (unregistering): Released all slaves [ 1549.739140][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11801'. [ 1550.000032][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1550.457992][T20426] bond8: option updelay: invalid value (18446744073709493611) [ 1550.479891][T20426] bond8: option updelay: allowed values 0 - 2147483647 [ 1550.505403][T20426] bond8 (unregistering): Released all slaves [ 1550.848493][T20444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11808'. [ 1550.865092][T20443] netlink: 'syz.4.11810': attribute type 2 has an invalid length. [ 1550.887938][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11810'. [ 1550.955930][T20443] úÄì,°¤™u: entered promiscuous mode [ 1550.998849][T20436] syz.1.11808: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1551.024596][T20436] CPU: 0 UID: 0 PID: 20436 Comm: syz.1.11808 Not tainted syzkaller #0 PREEMPT(full) [ 1551.024629][T20436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1551.024643][T20436] Call Trace: [ 1551.024652][T20436] [ 1551.024674][T20436] dump_stack_lvl+0xe8/0x150 [ 1551.024713][T20436] warn_alloc+0x249/0x340 [ 1551.024747][T20436] ? stack_trace_save+0xa9/0x100 [ 1551.024776][T20436] ? __pfx_warn_alloc+0x10/0x10 [ 1551.024817][T20436] ? kasan_save_track+0x4f/0x80 [ 1551.024846][T20436] ? kasan_save_track+0x3e/0x80 [ 1551.024875][T20436] ? __kasan_kmalloc+0x93/0xb0 [ 1551.024893][T20436] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1551.024923][T20436] ? xskq_create+0x56/0x170 [ 1551.024946][T20436] ? xsk_setsockopt+0x54c/0x990 [ 1551.024964][T20436] ? do_sock_setsockopt+0x17c/0x1b0 [ 1551.024994][T20436] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1551.025022][T20436] ? do_syscall_64+0x15f/0xf80 [ 1551.025052][T20436] __vmalloc_node_range_noprof+0x132/0x1730 [ 1551.025122][T20436] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1551.025163][T20436] ? __kasan_kmalloc+0x93/0xb0 [ 1551.025191][T20436] vmalloc_user_noprof+0xad/0xe0 [ 1551.025223][T20436] ? xskq_create+0xbf/0x170 [ 1551.025260][T20436] xskq_create+0xbf/0x170 [ 1551.025287][T20436] xsk_init_queue+0x8a/0xe0 [ 1551.025313][T20436] xsk_setsockopt+0x54c/0x990 [ 1551.025338][T20436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1551.025360][T20436] ? __pfx_aa_sk_perm+0x10/0x10 [ 1551.025398][T20436] ? aa_sock_opt_perm+0xff/0x1a0 [ 1551.025431][T20436] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1551.025463][T20436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1551.025486][T20436] do_sock_setsockopt+0x17c/0x1b0 [ 1551.025523][T20436] __x64_sys_setsockopt+0x13d/0x1b0 [ 1551.025558][T20436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.025582][T20436] do_syscall_64+0x15f/0xf80 [ 1551.025607][T20436] ? trace_irq_disable+0x3b/0x140 [ 1551.025631][T20436] ? clear_bhb_loop+0x40/0x90 [ 1551.025666][T20436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.025688][T20436] RIP: 0033:0x7fd94519c819 [ 1551.025709][T20436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.025729][T20436] RSP: 002b:00007fd946133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1551.025754][T20436] RAX: ffffffffffffffda RBX: 00007fd945415fa0 RCX: 00007fd94519c819 [ 1551.025770][T20436] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 1551.025783][T20436] RBP: 00007fd945232c91 R08: 0000000000000004 R09: 0000000000000000 [ 1551.025797][T20436] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1551.025812][T20436] R13: 00007fd945416038 R14: 00007fd945415fa0 R15: 00007fff5810f148 [ 1551.025851][T20436] [ 1551.025887][T20436] Mem-Info: [ 1551.179692][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.189350][T20436] active_anon:15717 inactive_anon:0 isolated_anon:0 [ 1551.189350][T20436] active_file:2977 inactive_file:41164 isolated_file:0 [ 1551.189350][T20436] unevictable:768 dirty:133 writeback:0 [ 1551.189350][T20436] slab_reclaimable:14048 slab_unreclaimable:190872 [ 1551.189350][T20436] mapped:34950 shmem:1382 pagetables:3628 [ 1551.189350][T20436] sec_pagetables:0 bounce:0 [ 1551.189350][T20436] kernel_misc_reclaimable:0 [ 1551.189350][T20436] free:1183848 free_pcp:21599 free_cma:0 [ 1551.193558][ C1] lec:lec_tx_timeout: lec0 [ 1551.399064][T20460] gre2: entered promiscuous mode [ 1551.399621][T20436] Node 0 active_anon:63668kB inactive_anon:0kB active_file:11908kB inactive_file:164452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:41496kB dirty:532kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17452kB pagetables:14472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1551.474963][T20436] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1551.551343][T20436] Node 0 DMA free:11232kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB [ 1551.670598][T20436] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1551.693934][T20436] Node 0 DMA32 free:1247712kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64068kB inactive_anon:0kB active_file:11908kB inactive_file:164452kB unevictable:1536kB writepending:532kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:31296kB local_pcp:22196kB free_cma:0kB [ 1551.732438][T20436] lowmem_reserve[]: 0 0 0 0 0 [ 1551.738878][T20436] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1551.859619][T20436] lowmem_reserve[]: 0 0 0 0 0 [ 1551.880606][T20436] Node 1 Normal free:3475440kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54768kB local_pcp:26932kB free_cma:0kB [ 1552.013850][T20436] lowmem_reserve[]: 0 0 0 0 0 [ 1552.033411][T20436] Node 0 DMA: 0*4kB 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11232kB [ 1552.090914][T20436] Node 0 DMA32: 7746*4kB (UME) 10000*8kB (UM) 6795*16kB (UME) 315*32kB (UME) 178*64kB (UME) 1085*128kB (UME) 571*256kB (UM) 504*512kB (UME) 298*1024kB (UM) 77*2048kB (UM) 0*4096kB = 1247128kB [ 1552.146643][T20436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1552.176387][T20436] Node 1 Normal: 11*4kB (UM) 9*8kB (UM) 3*16kB (UM) 20*32kB (UM) 14*64kB (UM) 13*128kB (UM) 13*256kB (UM) 13*512kB (UM) 13*1024kB (UM) 12*2048kB (U) 836*4096kB (UM) = 3475492kB [ 1552.250656][T20436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1552.286709][T20436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1552.311471][T20495] netlink: 'syz.3.11821': attribute type 1 has an invalid length. [ 1552.313331][T20436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1552.350181][T20436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1552.373168][T20436] 45520 total pagecache pages [ 1552.387352][T20436] 0 pages in swap cache [ 1552.399049][T20436] Free swap = 124996kB [ 1552.422480][T20436] Total swap = 124996kB [ 1552.436949][T20436] 2097051 pages RAM [ 1552.451760][T20436] 0 pages HighMem/MovableOnly [ 1552.466776][T20436] 427401 pages reserved [ 1552.498802][T20436] 0 pages cma reserved [ 1552.544828][T20499] can: request_module (can-proto-3) failed. [ 1552.574636][T20507] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11824'. [ 1552.637643][T20507] netlink: 'syz.4.11824': attribute type 10 has an invalid length. [ 1552.690683][T20507] team0: Device vxcan1 is of different type [ 1552.780444][T20516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.933179][T20521] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1553.262032][T20531] netlink: 'syz.1.11833': attribute type 28 has an invalid length. [ 1553.278434][T20531] netlink: 'syz.1.11833': attribute type 3 has an invalid length. [ 1553.306762][T20531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11833'. [ 1553.377045][T20536] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11834'. [ 1553.721157][T20559] netlink: 'syz.4.11839': attribute type 1 has an invalid length. [ 1553.872663][T20575] netlink: 'syz.3.11842': attribute type 1 has an invalid length. [ 1554.033070][T20584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1554.084577][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11844'. [ 1554.096280][T20580] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11844'. [ 1554.213706][T20580] vlan2: entered allmulticast mode [ 1554.227882][T20580] macvtap0: entered allmulticast mode [ 1554.266823][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11846'. [ 1554.936622][T20623] netlink: 'syz.0.11852': attribute type 2 has an invalid length. [ 1555.279208][T19175] lec:lec_start_xmit: lec0:No lecd attached [ 1555.361251][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11859'. [ 1555.363398][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11859'. [ 1555.511989][T19048] Bluetooth: hci4: command 0x0406 tx timeout [ 1555.664675][T20667] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11862'. [ 1555.895049][T20673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11863'. [ 1555.921777][T20673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11863'. [ 1555.957127][T20673] netlink: 58 bytes leftover after parsing attributes in process `syz.5.11863'. [ 1556.148618][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11864'. [ 1556.215382][T20682] macvlan3: entered promiscuous mode [ 1556.238585][T20682] macvlan3: entered allmulticast mode [ 1556.252415][T20682] veth1_to_batadv: entered allmulticast mode [ 1556.537716][T20688] team0: Port device team_slave_0 removed [ 1557.134414][T20716] netlink: 'syz.1.11874': attribute type 11 has an invalid length. [ 1557.166340][T20716] netlink: 'syz.1.11874': attribute type 23 has an invalid length. [ 1557.250744][T20724] bpq0: entered promiscuous mode [ 1557.267769][T20724] bpq0: entered allmulticast mode [ 1557.327064][T20724] dummy0: entered promiscuous mode [ 1557.356231][T20724] dummy0: left promiscuous mode [ 1557.498988][T20728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1557.736679][T20730] bond4: entered allmulticast mode [ 1557.837477][T20736] vxcan1: entered promiscuous mode [ 1557.844540][T20736] vxcan1: entered allmulticast mode [ 1557.851500][T20736] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1557.863216][T20736] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1558.121790][T20743] netlink: 'syz.0.11880': attribute type 1 has an invalid length. [ 1558.298670][T20746] bond5: (slave bridge8): making interface the new active one [ 1558.371455][T20746] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 1558.406257][T20743] ip6tnl0: Caught tx_queue_len zero misconfig [ 1558.534199][T20743] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1559.117403][T20773] __nla_validate_parse: 11 callbacks suppressed [ 1559.117428][T20773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11887'. [ 1559.249278][T20778] sch_tbf: burst 240 is lower than device lo mtu (1514) ! [ 1559.636512][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11893'. [ 1559.703473][T20793] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11894'. [ 1560.125113][T20803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11898'. [ 1560.185568][T20803] openvswitch: netlink: Flow actions attr not present in new flow. [ 1560.197520][T20808] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11900'. [ 1560.221324][T20808] netlink: 980 bytes leftover after parsing attributes in process `syz.4.11900'. [ 1560.226253][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11898'. [ 1560.286076][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11901'. [ 1560.495368][T20814] netlink: 428 bytes leftover after parsing attributes in process `syz.5.11901'. [ 1560.678937][T20814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11901'. [ 1561.029633][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1561.037784][ C1] lec:lec_tx_timeout: lec0 [ 1561.129084][T20832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1562.288519][T20877] netlink: 'syz.1.11917': attribute type 1 has an invalid length. [ 1562.490595][T20889] netlink: 'syz.1.11919': attribute type 13 has an invalid length. [ 1562.521777][T20889] netlink: 'syz.1.11919': attribute type 17 has an invalid length. [ 1562.650525][T20896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.680259][T20897] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1562.689110][T20896] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1562.690845][T20889] sit0: left promiscuous mode [ 1562.778442][T20889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.101904][T20914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1563.515126][T20893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.534023][T20893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.544094][T20893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.955988][T20938] sch_tbf: peakrate 5120 is lower than or equals to rate 8197 ! [ 1564.060957][T20946] vlan3: entered allmulticast mode [ 1564.233986][T20948] lo speed is unknown, defaulting to 1000 [ 1564.294782][T20948] lo speed is unknown, defaulting to 1000 [ 1564.372266][T20955] __nla_validate_parse: 7 callbacks suppressed [ 1564.372287][T20955] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11934'. [ 1564.391789][T20948] lo speed is unknown, defaulting to 1000 [ 1564.444031][T20948] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1564.602251][T20948] lo speed is unknown, defaulting to 1000 [ 1564.756812][T20962] netlink: 'syz.4.11935': attribute type 83 has an invalid length. [ 1564.817954][T20948] lo speed is unknown, defaulting to 1000 [ 1564.835625][T20948] lo speed is unknown, defaulting to 1000 [ 1564.877854][T20948] lo speed is unknown, defaulting to 1000 [ 1564.890469][T20948] lo speed is unknown, defaulting to 1000 [ 1564.898680][T20948] lo speed is unknown, defaulting to 1000 [ 1564.909010][T20948] lo speed is unknown, defaulting to 1000 [ 1564.923046][T20948] lo speed is unknown, defaulting to 1000 [ 1564.935801][T20948] lo speed is unknown, defaulting to 1000 [ 1564.944549][T20948] lo speed is unknown, defaulting to 1000 [ 1566.346899][T21021] netlink: 'syz.3.11950': attribute type 11 has an invalid length. [ 1566.534802][T21030] netlink: 'syz.0.11954': attribute type 1 has an invalid length. [ 1566.797149][T21033] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1566.834869][T21033] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 1566.922312][T21004] lo speed is unknown, defaulting to 1000 [ 1567.336131][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11956'. [ 1567.679865][T21018] lo speed is unknown, defaulting to 1000 [ 1567.994801][T21067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11959'. [ 1567.999529][T21066] bpq0: left promiscuous mode [ 1568.010421][T21066] bpq0: left allmulticast mode [ 1568.166054][T21066] netlink: 404 bytes leftover after parsing attributes in process `syz.4.11960'. [ 1568.178631][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11960'. [ 1568.192948][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11960'. [ 1568.206018][T21066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11960'. [ 1568.502941][T21082] netlink: 'syz.3.11963': attribute type 13 has an invalid length. [ 1568.525983][T21082] netlink: 'syz.3.11963': attribute type 17 has an invalid length. [ 1568.625630][T21082] syz_tun: left promiscuous mode [ 1568.684033][T21082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1569.711442][T19593] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 1570.429679][T21134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.746352][T21159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11981'. [ 1573.324318][T21145] ip6gre2: entered promiscuous mode [ 1573.330305][T21145] ip6gre2: entered allmulticast mode [ 1573.527085][T21171] netlink: 'syz.1.11986': attribute type 1 has an invalid length. [ 1573.998454][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11989'. [ 1574.133986][T21195] netlink: 'syz.4.11991': attribute type 12 has an invalid length. [ 1574.171702][T21199] netlink: 'syz.5.11992': attribute type 1 has an invalid length. [ 1574.208442][T21199] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1574.504259][T21206] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11994'. [ 1574.651259][T21210] netlink: 'syz.0.11995': attribute type 13 has an invalid length. [ 1574.914293][T21226] bond12: entered promiscuous mode [ 1574.928867][T21226] bond12: entered allmulticast mode [ 1575.006406][T21233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12003'. [ 1575.105951][T21231] netlink: 'syz.5.12004': attribute type 39 has an invalid length. [ 1575.172948][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12007'. [ 1575.267384][T21246] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1575.697449][T21282] hsr0: entered promiscuous mode [ 1575.857428][T21282] hsr0: left promiscuous mode [ 1575.993323][T21299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12020'. [ 1576.248123][T21263] lo speed is unknown, defaulting to 1000 [ 1576.404929][T21317] : entered promiscuous mode [ 1576.523599][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12025'. [ 1576.539464][T21321] bond0: option mode: unable to set because the bond device has slaves [ 1576.640932][T21330] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12027'. [ 1577.192344][T21356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12034'. [ 1577.209133][T21360] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1577.539006][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12034'. [ 1577.993315][T21382] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1578.048582][T21382] bond9 (unregistering): Released all slaves [ 1578.369224][T21359] lo speed is unknown, defaulting to 1000 [ 1578.455288][T21400] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12044'. [ 1578.487375][T21400] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12044'. [ 1579.502104][T21446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1579.684084][T21454] netlink: 'syz.5.12060': attribute type 30 has an invalid length. [ 1579.720213][T21454] bond5: entered promiscuous mode [ 1579.727292][T21458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12063'. [ 1579.867340][T21462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12064'. [ 1580.096712][T21472] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1580.133020][T21470] 0ªî{X¹¦: left allmulticast mode [ 1580.262511][T21470] veth3: left allmulticast mode [ 1580.265990][T21482] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.12067'. [ 1580.357487][T21470] ip6erspan0: left allmulticast mode [ 1580.401210][T21470] veth7: left allmulticast mode [ 1580.406700][T21470] gretap0: left promiscuous mode [ 1580.416908][T21470] ip6gre1: left promiscuous mode [ 1580.423022][T21470] ip6gre1: left allmulticast mode [ 1580.437523][T21470] vlan2: left allmulticast mode [ 1580.448048][T21470] vlan3: left allmulticast mode [ 1580.455496][T21470] macvtap0: left allmulticast mode [ 1580.623620][T21470] bond5: left promiscuous mode [ 1580.701415][T21482] gretap3: entered promiscuous mode [ 1580.741893][T21492] netlink: 'syz.5.12071': attribute type 1 has an invalid length. [ 1580.786946][T19574] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.797420][T19574] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.812392][T21492] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1580.816161][T19574] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.849120][T19574] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.976828][T21501] openvswitch: netlink: Flow actions attr not present in new flow. [ 1581.061066][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12073'. [ 1581.424609][T21515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12076'. [ 1581.646059][T21525] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12080'. [ 1581.677400][T21525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1581.680421][T21522] netlink: 31 bytes leftover after parsing attributes in process `syz.5.12079'. [ 1581.723205][T21525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.743556][T21529] netlink: 'syz.5.12079': attribute type 11 has an invalid length. [ 1581.772600][T21525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.811265][T21494] lo speed is unknown, defaulting to 1000 [ 1582.128442][T21536] tipc: Enabled bearer , priority 0 [ 1582.140046][T21542] syzkaller0: entered promiscuous mode [ 1582.149814][T21542] syzkaller0: entered allmulticast mode [ 1582.176357][T21544] netlink: 'syz.4.12083': attribute type 1 has an invalid length. [ 1582.188367][T21533] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12082'. [ 1582.209923][T21533] tipc: Resetting bearer [ 1582.590853][T21544] bond2: entered promiscuous mode [ 1582.616895][T21544] bond2: entered allmulticast mode [ 1582.644857][T21544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1582.657003][T21532] tipc: Resetting bearer [ 1582.701344][T21532] tipc: Disabling bearer [ 1582.750183][T21546] macvlan2: entered promiscuous mode [ 1582.762988][T21546] macvlan2: entered allmulticast mode [ 1582.796726][T21546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1583.224997][T21568] veth1_to_bond: entered allmulticast mode [ 1583.249977][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12091'. [ 1583.270215][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1583.281138][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12090'. [ 1583.294006][T21570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12091'. [ 1583.305757][T21568] veth1_to_bond (unregistering): left allmulticast mode [ 1583.415879][T21575] netlink: 'syz.5.12092': attribute type 29 has an invalid length. [ 1583.450267][T21576] netlink: 'syz.5.12092': attribute type 29 has an invalid length. [ 1583.765054][T21586] netlink: 'syz.3.12094': attribute type 16 has an invalid length. [ 1583.786318][T21586] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.12094'. [ 1584.277703][T21593] lo speed is unknown, defaulting to 1000 [ 1584.939025][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1585.200783][T21621] netem: change failed [ 1585.536076][T21638] netlink: 'syz.1.12106': attribute type 1 has an invalid length. [ 1585.890327][T21640] bond13: (slave bridge6): Enslaving as a backup interface with an up link [ 1585.975104][T21634] macvlan1: entered promiscuous mode [ 1585.997689][T21634] macvlan1: entered allmulticast mode [ 1586.025371][T21634] bond13: entered promiscuous mode [ 1586.051946][T21634] bridge6: entered promiscuous mode [ 1586.058048][T21646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1586.081601][T21634] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1586.102291][T21634] bond13: left promiscuous mode [ 1586.115141][T21634] bridge6: left promiscuous mode [ 1586.193336][T21647] netlink: 'syz.5.12108': attribute type 1 has an invalid length. [ 1586.298956][T21635] veth11: entered promiscuous mode [ 1586.659773][T21647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1587.003359][T21678] xt_HMARK: spi-set and port-set can't be combined [ 1587.032001][T21678] netlink: 'syz.0.12112': attribute type 2 has an invalid length. [ 1587.076242][T21678] úÁàél24): entered promiscuous mode [ 1587.266310][T21689] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1587.364265][T21695] __nla_validate_parse: 3 callbacks suppressed [ 1587.364290][T21695] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12116'. [ 1588.221940][T21720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12122'. [ 1588.269766][T21720] IPVS: Unknown mcast interface: vcan0 [ 1588.667746][T21745] pim6reg1: entered promiscuous mode [ 1588.682761][T21745] pim6reg1: entered allmulticast mode [ 1589.005367][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12130'. [ 1589.073991][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12130'. [ 1589.196813][T19048] Bluetooth: hci5: command 0x0405 tx timeout [ 1590.133717][T21811] netlink: 'syz.1.12140': attribute type 1 has an invalid length. [ 1590.141968][T21811] netlink: 228 bytes leftover after parsing attributes in process `syz.1.12140'. [ 1590.650546][T21837] openvswitch: netlink: Message has 91 unknown bytes. [ 1590.717960][T21837] macvtap1: entered promiscuous mode [ 1590.739268][T21837] macvtap1: entered allmulticast mode [ 1590.760516][T21837] dummy0: entered promiscuous mode [ 1590.766156][T21837] dummy0: entered allmulticast mode [ 1590.802289][T21837] team0: Device macvtap1 failed to register rx_handler [ 1590.823796][T21837] dummy0: left allmulticast mode [ 1590.835824][T21837] dummy0: left promiscuous mode [ 1590.924383][T21801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1591.025415][T21824] lo speed is unknown, defaulting to 1000 [ 1591.575654][T19048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1591.600374][T19048] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1591.612616][T19048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1591.622040][T19048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1591.628534][T21867] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12149'. [ 1591.640300][T19048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1591.785119][T21870] bridge_slave_0: invalid flags given to default FDB implementation [ 1592.121584][T21879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12150'. [ 1592.184685][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12150'. [ 1592.187229][T21879] nbd: must specify a size in bytes for the device [ 1592.255214][T21880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12150'. [ 1592.766881][ T9935] syz_tun (unregistering): left allmulticast mode [ 1592.782091][ T9935] syz_tun (unregistering): left promiscuous mode [ 1592.800794][ T9935] bridge0: port 1(syz_tun) entered disabled state [ 1593.184786][T21864] lo speed is unknown, defaulting to 1000 [ 1593.238431][T21902] netlink: 284 bytes leftover after parsing attributes in process `syz.4.12153'. [ 1593.272072][T21902] netlink: 'syz.4.12153': attribute type 1 has an invalid length. [ 1593.651741][T21926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12158'. [ 1593.749714][T19048] Bluetooth: hci0: command tx timeout [ 1593.952681][T21937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12159'. [ 1594.364211][T21902] veth3: entered allmulticast mode [ 1594.422115][T21902] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 1594.582502][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12162'. [ 1594.602884][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12161'. [ 1594.767559][T21959] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1594.827967][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12167'. [ 1594.940922][T21864] chnl_net:caif_netlink_parms(): no params data found [ 1595.212484][T21864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.220127][T21864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.227512][T21864] bridge_slave_0: entered allmulticast mode [ 1595.236441][T21864] bridge_slave_0: entered promiscuous mode [ 1595.246777][T21864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.254473][T21864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.261808][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805631f800: rx timeout, send abort [ 1595.271634][T21864] bridge_slave_1: entered allmulticast mode [ 1595.280326][T21864] bridge_slave_1: entered promiscuous mode [ 1595.327687][T21864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.342502][T21864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.404303][T21864] team0: Port device team_slave_0 added [ 1595.420815][T21864] team0: Port device team_slave_1 added [ 1595.568961][T21864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.588492][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.680400][T21864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.706618][T21864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.733201][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.759720][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057160400: rx timeout, send abort [ 1595.768707][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805631f800: abort rx timeout. Force session deactivation [ 1595.820451][T21864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.831445][ T5832] Bluetooth: hci0: command tx timeout [ 1595.936256][T21864] hsr_slave_0: entered promiscuous mode [ 1595.944617][T21864] hsr_slave_1: entered promiscuous mode [ 1595.951730][T21864] debugfs: 'hsr0' already exists in 'hsr' [ 1595.957631][T21864] Cannot create hsr debugfs directory [ 1596.068632][T22017] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12177'. [ 1596.259856][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057160400: abort rx timeout. Force session deactivation [ 1596.363848][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12181'. [ 1596.427285][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12182'. [ 1596.438236][T22032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1596.673722][T22040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12187'. [ 1596.707315][T22042] netlink: 'syz.3.12188': attribute type 4 has an invalid length. [ 1596.993810][T21864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1597.008614][T21864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1597.018110][T21864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1597.033583][T21864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1597.045520][T21864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1597.062831][T21864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1597.072948][T21864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1597.085235][T21864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1597.094510][T22051] syz_tun: entered allmulticast mode [ 1597.133342][T22048] syz_tun: left allmulticast mode [ 1597.277376][T21864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.329012][T22068] netlink: 'syz.5.12196': attribute type 15 has an invalid length. [ 1597.333145][T21864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.341117][T22068] netlink: 'syz.5.12196': attribute type 25 has an invalid length. [ 1597.445184][T19565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.452482][T19565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.495458][T22073] vlan2: entered allmulticast mode [ 1597.501422][T22073] macvtap0: entered allmulticast mode [ 1597.506861][T22073] veth0_macvtap: entered allmulticast mode [ 1597.572273][T19573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.579629][T19573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.790611][T22084] netlink: zone id is out of range [ 1597.811156][T22084] netlink: zone id is out of range [ 1597.833164][T22084] netlink: zone id is out of range [ 1597.856402][T22084] netlink: zone id is out of range [ 1597.877018][T22084] netlink: zone id is out of range [ 1597.894941][T22084] netlink: zone id is out of range [ 1597.907438][T22084] netlink: zone id is out of range [ 1597.912918][ T5832] Bluetooth: hci0: command tx timeout [ 1597.923543][T22090] netlink: 'syz.3.12203': attribute type 1 has an invalid length. [ 1597.925071][T22084] netlink: zone id is out of range [ 1597.942229][T22084] netlink: zone id is out of range [ 1597.956062][T22087] geneve3: entered promiscuous mode [ 1598.124433][T22090] bond9: entered promiscuous mode [ 1598.135022][T22090] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1598.184237][T22090] IPv6: Can't replace route, no match found [ 1598.200283][T22090] IPv6: Can't replace route, no match found [ 1598.285089][T22112] __nla_validate_parse: 7 callbacks suppressed [ 1598.285112][T22112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12205'. [ 1598.602031][T22118] veth0_to_team: entered allmulticast mode [ 1598.623050][T22119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12206'. [ 1598.641764][T22120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12206'. [ 1599.008590][T21864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.157478][T21864] veth0_vlan: entered promiscuous mode [ 1599.173923][T22141] netlink: 'syz.4.12210': attribute type 4 has an invalid length. [ 1599.184156][T21864] veth1_vlan: entered promiscuous mode [ 1599.230178][T22145] sock: sock_timestamping_bind_phc: sock not bind to device [ 1599.347789][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12212'. [ 1599.484756][T21864] veth0_macvtap: entered promiscuous mode [ 1599.512406][T21864] veth1_macvtap: entered promiscuous mode [ 1599.606234][T21864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.627872][T12221] IPVS: starting estimator thread 0... [ 1599.672762][T21864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.724168][T19565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.736814][T22161] IPVS: using max 48 ests per chain, 115200 per kthread [ 1599.765724][T19565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.798011][T19565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.816296][T19565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.992903][ T5832] Bluetooth: hci0: command tx timeout [ 1600.097766][T22170] netlink: 'syz.5.12216': attribute type 1 has an invalid length. [ 1600.179263][T22170] bond7: entered promiscuous mode [ 1600.211963][T22170] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1600.276408][T22174] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1600.290715][T22174] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1600.309328][T22174] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1600.458638][T22159] lo speed is unknown, defaulting to 1000 [ 1600.537961][T19573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.551581][T19573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.660993][T19594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.692483][T19594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.952219][T22193] netlink: 'syz.3.12223': attribute type 1 has an invalid length. [ 1601.065178][T22188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12222'. [ 1601.123847][T22199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12224'. [ 1601.125270][T22193] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1601.173744][T22193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12223'. [ 1601.312074][T22196] bond10: (slave veth11): Enslaving as an active interface with a down link [ 1601.369048][T22193] bond10: (slave bridge7): Enslaving as an active interface with a down link [ 1601.394579][T22206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12226'. [ 1601.404288][T22206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12226'. [ 1601.413646][T22206] netlink: 'syz.0.12226': attribute type 4 has an invalid length. [ 1601.508131][T22206] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1601.508715][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12226'. [ 1601.530332][T22206] bond1 (unregistering): Released all slaves [ 1602.104765][T22195] lo speed is unknown, defaulting to 1000 [ 1602.140481][T22197] infiniband !yz!: set down [ 1602.151185][T22197] infiniband !yz!: added team_slave_0 [ 1602.301266][T22197] RDS/IB: !yz!: added [ 1602.305519][T22197] smc: adding ib device !yz! with port count 1 [ 1602.313556][T22197] smc: ib device !yz! port 1 has no pnetid [ 1603.278749][T22263] bond4: entered promiscuous mode [ 1603.284477][T22263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1604.577167][T22284] netlink: 'syz.4.12245': attribute type 1 has an invalid length. [ 1604.606185][T22284] __nla_validate_parse: 2 callbacks suppressed [ 1604.606206][T22284] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12245'. [ 1604.636193][T22286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12246'. [ 1604.652869][T22284] netlink: 'syz.4.12245': attribute type 1 has an invalid length. [ 1604.674668][T22284] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12245'. [ 1604.724491][T19048] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1604.744314][T19048] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1604.749690][T22286] netlink: 'syz.0.12246': attribute type 9 has an invalid length. [ 1604.754414][T19048] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1604.771820][T19048] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1604.780036][T19048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1604.806637][T22286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12246'. [ 1605.353987][T22306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12249'. [ 1605.773099][T22317] netlink: 'syz.4.12252': attribute type 2 has an invalid length. [ 1605.783891][T22317] tipc: Started in network mode [ 1605.792075][T22317] tipc: Node identity 340008, cluster identity 4711 [ 1605.798846][T22317] tipc: Node number set to 3407880 [ 1606.248595][T22331] syzkaller0: entered promiscuous mode [ 1606.255374][T22331] syzkaller0: entered allmulticast mode [ 1606.589816][T22336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12259'. [ 1606.870368][ T5832] Bluetooth: hci6: command tx timeout [ 1606.997378][T22347] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12262'. [ 1607.360200][T22290] lo speed is unknown, defaulting to 1000 [ 1607.461873][T22364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1607.605536][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1607.684799][T22290] chnl_net:caif_netlink_parms(): no params data found [ 1607.859140][T22290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.879186][T22290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.888302][T22290] bridge_slave_0: entered allmulticast mode [ 1607.911566][T22290] bridge_slave_0: entered promiscuous mode [ 1607.932097][T22290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.946783][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.962883][T22290] bridge_slave_1: entered allmulticast mode [ 1607.987000][T22290] bridge_slave_1: entered promiscuous mode [ 1607.991451][T22386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1608.074221][T22290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.088390][T22290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.101279][T22386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1608.157013][T22290] team0: Port device team_slave_0 added [ 1608.167470][T22290] team0: Port device team_slave_1 added [ 1608.203736][T22290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.211728][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.250557][T22290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.264598][T22290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.277528][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.354249][T22290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.613615][T22290] hsr_slave_0: entered promiscuous mode [ 1608.624904][T22290] hsr_slave_1: entered promiscuous mode [ 1608.633510][T22290] debugfs: 'hsr0' already exists in 'hsr' [ 1608.645544][T22290] Cannot create hsr debugfs directory [ 1608.834618][T22407] bond11: Removing last ns target with arp_interval on [ 1608.930539][T22415] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1608.949836][ T5832] Bluetooth: hci6: command tx timeout [ 1609.423041][T22439] "syz.3.12286" (22439) uses obsolete ecb(arc4) skcipher [ 1609.610786][T22418] lo speed is unknown, defaulting to 1000 [ 1609.736706][T22443] __nla_validate_parse: 3 callbacks suppressed [ 1609.736729][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12287'. [ 1609.895369][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12287'. [ 1609.929675][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12287'. [ 1609.971233][T22443] syzkaller0: entered promiscuous mode [ 1609.978753][T22443] syzkaller0: entered allmulticast mode [ 1611.035543][ T5832] Bluetooth: hci6: command tx timeout [ 1613.029704][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1613.037775][ C1] lec:lec_tx_timeout: lec0 [ 1613.120978][ T5832] Bluetooth: hci6: command tx timeout [ 1614.514409][T22436] lo speed is unknown, defaulting to 1000 [ 1614.936129][T22290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1614.954030][T22290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1614.962842][T22290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1614.987820][T22290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1615.000714][T22470] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.012910][T22290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1615.021740][T22466] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.042536][T22290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1615.054462][T22467] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.096046][T22470] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.108730][T22290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1615.123931][T22467] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.146641][T22470] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.156353][T22290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1615.168517][T22467] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.191850][T22470] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.217277][T22467] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.235827][T22470] netlink: 1484 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1615.571176][T22487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input14 [ 1615.954658][T22495] pim6reg1: entered promiscuous mode [ 1615.961693][T22495] pim6reg1: entered allmulticast mode [ 1615.974313][T22495] pim6reg1: left promiscuous mode [ 1615.981360][T22495] pim6reg1: left allmulticast mode [ 1616.007079][T22290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.222035][T22290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.252675][T19574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.260099][T19574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.276334][T19574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.283571][T19574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.768701][T22505] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 1616.810220][T22290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1617.485203][T22290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.596298][T22290] veth0_vlan: entered promiscuous mode [ 1617.631171][T22290] veth1_vlan: entered promiscuous mode [ 1617.722894][T22290] veth0_macvtap: entered promiscuous mode [ 1617.763063][T22290] veth1_macvtap: entered promiscuous mode [ 1617.844658][T22290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.888466][T22290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1617.948615][T19574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.976927][T19574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.007836][T19574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.044539][T19574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.145027][T22584] net_ratelimit: 337 callbacks suppressed [ 1618.145048][T22584] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1618.395691][T19576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.424077][T19576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.525589][T19573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.537471][T19573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.644214][T22597] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1618.867280][T22600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.040822][T22600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.157227][T22600] veth0_macvtap: left allmulticast mode [ 1619.188919][T22600] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1619.227264][T22600] syzkaller0: left promiscuous mode [ 1619.236358][T22600] syzkaller0: left allmulticast mode [ 1619.236554][T19175] lec:lec_start_xmit: lec0:No lecd attached [ 1619.298627][T22600] bond2: left promiscuous mode [ 1619.307836][T22600] bond2: left allmulticast mode [ 1619.315138][T22600] veth3: left allmulticast mode [ 1619.326783][T22600] vlan2: left allmulticast mode [ 1619.332339][T22600] macvtap0: left allmulticast mode [ 1619.348746][T22600] geneve3: left promiscuous mode [ 1619.362808][T22600] bond4: left promiscuous mode [ 1619.376173][T22596] lo speed is unknown, defaulting to 1000 [ 1619.385484][ T9219] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.407612][ T9219] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.428670][ T9219] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.453201][ T9219] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.617741][T22616] syzkaller0: entered promiscuous mode [ 1619.634510][T22616] syzkaller0: entered allmulticast mode [ 1619.968031][T22629] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20000 [ 1620.129113][T22631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1620.526134][T22650] __nla_validate_parse: 72 callbacks suppressed [ 1620.526158][T22650] netlink: 172 bytes leftover after parsing attributes in process `syz.0.12337'. [ 1620.753979][T22654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12338'. [ 1620.866199][T22661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12338'. [ 1621.131146][T22664] veth0_macvtap: left promiscuous mode [ 1621.192299][T22669] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1621.215423][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12341'. [ 1621.346361][T22676] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12343'. [ 1621.508217][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12344'. [ 1621.523962][T22669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1621.538096][T22685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12344'. [ 1621.630787][T22680] dvmrp1: entered allmulticast mode [ 1621.775153][T19592] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.795058][T19592] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.843887][T19592] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.862652][T22694] netlink: 'syz.4.12346': attribute type 2 has an invalid length. [ 1621.890489][T19592] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.907954][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12347'. [ 1621.925755][T22694] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1621.961655][T22697] bond1: entered promiscuous mode [ 1621.967195][T22697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1621.978263][T22700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12349'. [ 1621.982523][T22697] bridge0: port 3(bond1) entered blocking state [ 1621.994575][T22697] bridge0: port 3(bond1) entered disabled state [ 1622.002863][T22697] bond1: entered allmulticast mode [ 1622.012353][T22697] bridge0: port 3(bond1) entered blocking state [ 1622.018941][T22697] bridge0: port 3(bond1) entered forwarding state [ 1622.236930][T22705] netlink: 'syz.4.12352': attribute type 1 has an invalid length. [ 1622.266363][T22712] openvswitch: netlink: IP tunnel dst address not specified [ 1622.293529][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12351'. [ 1622.326291][T19592] bridge0: port 3(bond1) entered disabled state [ 1622.346182][T22713] netlink: 'syz.1.12351': attribute type 13 has an invalid length. [ 1622.399346][T22713] netlink: 'syz.1.12351': attribute type 17 has an invalid length. [ 1622.593994][T22713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1622.796697][T22732] syzkaller1: entered promiscuous mode [ 1622.844980][T22732] syzkaller1: entered allmulticast mode [ 1623.029174][T22744] netlink: 'syz.3.12360': attribute type 10 has an invalid length. [ 1623.076743][T22744] team0: Device ipvlan1 failed to register rx_handler [ 1623.975401][T19048] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1623.995063][T19048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1624.003643][T19048] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1624.017020][T19048] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1624.026421][T19048] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1624.249570][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1624.257651][ C1] lec:lec_tx_timeout: lec0 [ 1624.914985][ T30] audit: type=1804 audit(1776639317.336:26): pid=22796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.12369" name="/newroot/568/memory.events" dev="tmpfs" ino=2923 res=1 errno=0 [ 1624.962618][T10536] bond0: (slave syz_tun): Releasing backup interface [ 1625.021518][ T30] audit: type=1800 audit(1776639317.336:27): pid=22796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12369" name="memory.events" dev="tmpfs" ino=2923 res=0 errno=0 [ 1625.106146][ T30] audit: type=1804 audit(1776639317.446:28): pid=22807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.12369" name="/newroot/568/memory.events" dev="tmpfs" ino=2923 res=1 errno=0 [ 1625.156175][T22762] lo speed is unknown, defaulting to 1000 [ 1625.616987][T22832] __nla_validate_parse: 6 callbacks suppressed [ 1625.617009][T22832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12378'. [ 1625.651393][T22832] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12378'. [ 1625.852714][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12380'. [ 1625.870442][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12380'. [ 1625.885768][T22836] gre2: entered promiscuous mode [ 1626.024739][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12379'. [ 1626.061435][T22836] netlink: 'syz.5.12379': attribute type 39 has an invalid length. [ 1626.153695][ T5832] Bluetooth: hci3: command tx timeout [ 1626.218855][T22852] bond6: option all_slaves_active: invalid value (5) [ 1626.252362][T22852] bond6 (unregistering): Released all slaves [ 1626.499329][T22866] syzkaller0: entered promiscuous mode [ 1626.524772][T22866] syzkaller0: entered allmulticast mode [ 1626.644420][T22762] chnl_net:caif_netlink_parms(): no params data found [ 1626.713001][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12385'. [ 1626.763476][T22866] veth1: entered promiscuous mode [ 1626.780132][T22866] veth1: entered allmulticast mode [ 1626.987447][T22894] netlink: 'syz.5.12390': attribute type 1 has an invalid length. [ 1627.025220][T22762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.027395][T22894] netlink: 204 bytes leftover after parsing attributes in process `syz.5.12390'. [ 1627.045018][T22762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.070169][T22762] bridge_slave_0: entered allmulticast mode [ 1627.078693][T22762] bridge_slave_0: entered promiscuous mode [ 1627.106875][T22894] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1627.116816][T22762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.125551][T22762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.133591][T22762] bridge_slave_1: entered allmulticast mode [ 1627.142542][T22762] bridge_slave_1: entered promiscuous mode [ 1627.188429][T22762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.204899][T22762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.330995][T22762] team0: Port device team_slave_0 added [ 1627.354020][T22762] team0: Port device team_slave_1 added [ 1627.442235][T22762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.450640][T22762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.487733][T22762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.504188][T22762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.518053][T22762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.553656][T22762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.702699][T22762] hsr_slave_0: entered promiscuous mode [ 1627.726173][T22762] hsr_slave_1: entered promiscuous mode [ 1627.743682][T22762] debugfs: 'hsr0' already exists in 'hsr' [ 1627.762151][T22762] Cannot create hsr debugfs directory [ 1628.079437][T22921] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12396'. [ 1628.231463][T19048] Bluetooth: hci3: command tx timeout [ 1628.292533][T22927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12398'. [ 1628.326069][T22762] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.495086][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.520983][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.584540][T22762] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.621951][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.683903][T22762] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.701004][T22927] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1628.771272][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.788526][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.819360][T22762] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.851782][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.863454][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.890447][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.905613][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.941453][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.966101][T22927] wg1 speed is unknown, defaulting to 1000 [ 1628.991704][T22927] wg1 speed is unknown, defaulting to 1000 [ 1629.029068][T22927] wg1 speed is unknown, defaulting to 1000 [ 1629.054348][T22927] wg1 speed is unknown, defaulting to 1000 [ 1629.076121][T22927] wg1 speed is unknown, defaulting to 1000 [ 1629.494892][T22762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1629.530487][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1629.552176][T22762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1629.580523][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.598442][T22963] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12410'. [ 1629.619321][T22963] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1629.662070][T22762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1629.690926][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.711071][T22762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1629.735517][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1629.773888][T22966] bridge7: entered promiscuous mode [ 1629.916295][T22979] openvswitch: netlink: Flow key attr not present in new flow. [ 1630.042512][T22762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.121171][T22762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.164633][T19576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.171899][T19576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.175181][T22986] xt_CT: No such helper "snmp_trap" [ 1630.214457][T19576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.221756][T19576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.316400][T19048] Bluetooth: hci3: command tx timeout [ 1630.358438][T22991] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1630.801913][T23013] __nla_validate_parse: 1 callbacks suppressed [ 1630.801935][T23013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12423'. [ 1630.830238][T23013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12423'. [ 1631.065670][T22762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.092375][T23018] syzkaller1: entered promiscuous mode [ 1631.102891][T23018] syzkaller1: entered allmulticast mode [ 1631.149114][T23018] netem: incorrect gi model size [ 1631.165393][T23018] netem: change failed [ 1631.202787][T23028] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12427'. [ 1631.266423][T22998] lo speed is unknown, defaulting to 1000 [ 1631.338676][T22762] veth0_vlan: entered promiscuous mode [ 1631.384492][T22762] veth1_vlan: entered promiscuous mode [ 1631.548935][T22762] veth0_macvtap: entered promiscuous mode [ 1631.577225][T22762] veth1_macvtap: entered promiscuous mode [ 1631.637663][T22762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1631.692299][T22762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.728563][ T9219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.765440][ T9219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.767423][T23035] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1631.783063][ T5875] IPVS: starting estimator thread 0... [ 1631.789983][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1631.838839][T23040] netlink: 'syz.1.12430': attribute type 1 has an invalid length. [ 1631.858713][ T9219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.891415][T23037] IPVS: using max 29 ests per chain, 69600 per kthread [ 1631.903956][ T9219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.131959][T23024] lo speed is unknown, defaulting to 1000 [ 1632.166072][T19565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.181453][T19565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.224052][T22998] wg1 speed is unknown, defaulting to 1000 [ 1632.275566][T23046] netlink: 'syz.1.12432': attribute type 1 has an invalid length. [ 1632.298446][T23046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1632.389230][T23047] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.12432'. [ 1632.390258][T19048] Bluetooth: hci3: command tx timeout [ 1632.450819][T19576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.475615][T19576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.836023][T23024] wg1 speed is unknown, defaulting to 1000 [ 1632.837790][T23031] lo speed is unknown, defaulting to 1000 [ 1632.987414][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12362'. [ 1633.092777][T23058] macvlan2: entered allmulticast mode [ 1633.547760][T23031] wg1 speed is unknown, defaulting to 1000 [ 1633.778147][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12442'. [ 1633.822153][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12442'. [ 1633.894689][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12443'. [ 1633.935431][T23085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12443'. [ 1633.994927][T23087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12443'. [ 1634.330022][T23089] tipc: Invalid UDP bearer configuration [ 1634.330084][T23089] tipc: Enabling of bearer rejected, failed to enable media [ 1634.538793][T23098] netlink: 'syz.1.12445': attribute type 2 has an invalid length. [ 1634.633257][T23097] bridge_slave_0: left allmulticast mode [ 1634.660567][T23097] bridge_slave_0: left promiscuous mode [ 1634.668874][T23097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.692091][T23097] bridge_slave_1: left allmulticast mode [ 1634.714258][T23097] bridge_slave_1: left promiscuous mode [ 1634.729585][T23097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.779009][T23097] bond0: (slave bond_slave_0): Releasing backup interface [ 1634.826445][T23097] bond0: (slave bond_slave_1): Releasing backup interface [ 1634.873866][T23097] team0: Port device team_slave_0 removed [ 1634.913908][T23097] team0: Port device team_slave_1 removed [ 1634.931781][T23097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.949440][T23097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.977574][T23097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.997736][T23097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.017021][T23097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1635.936318][T23123] __nla_validate_parse: 4 callbacks suppressed [ 1635.936351][T23123] netlink: 504 bytes leftover after parsing attributes in process `syz.0.12452'. [ 1636.241559][T23110] lec:lec_start_xmit: lec0:No lecd attached [ 1636.382957][T23143] netlink: 'syz.4.12456': attribute type 1 has an invalid length. [ 1636.448076][T23145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12458'. [ 1636.615513][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12459'. [ 1636.708687][T19576] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1636.727668][T19576] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1636.758076][T19576] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1636.779766][T19576] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1636.975218][T23171] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1637.033817][T23173] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1637.126253][T23179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12468'. [ 1637.142361][T23178] netlink: 'syz.4.12468': attribute type 1 has an invalid length. [ 1637.177120][T23178] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1637.234381][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12469'. [ 1637.299251][T23188] netlink: 'syz.1.12469': attribute type 11 has an invalid length. [ 1637.369170][T23191] macsec0: entered allmulticast mode [ 1637.674972][T23166] lo speed is unknown, defaulting to 1000 [ 1637.746274][T23200] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12473'. [ 1637.756773][T23200] netlink: 'syz.5.12473': attribute type 1 has an invalid length. [ 1638.426401][T23166] wg1 speed is unknown, defaulting to 1000 [ 1638.546168][T23234] openvswitch: netlink: Message has 8 unknown bytes. [ 1639.058887][T23256] bond_slave_0: entered promiscuous mode [ 1639.066761][T23256] bond_slave_1: entered promiscuous mode [ 1639.090706][T23256] vlan2: entered promiscuous mode [ 1639.098118][T23256] bond0: entered promiscuous mode [ 1639.107583][T23256] vlan2: entered allmulticast mode [ 1639.116647][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12482'. [ 1639.137690][T23256] bond0: entered allmulticast mode [ 1639.151440][T23261] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1639.160135][T23256] bond_slave_0: entered allmulticast mode [ 1639.170176][T23256] bond_slave_1: entered allmulticast mode [ 1639.176035][T23261] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1639.323647][T23228] lo speed is unknown, defaulting to 1000 [ 1639.667524][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12484'. [ 1640.266199][T23286] bond2: (slave bond_slave_1): Device is not our slave [ 1640.273945][T23286] bond2: option active_slave: invalid value (bond_slave_1) [ 1640.285560][T23286] bond2 (unregistering): Released all slaves [ 1640.395624][T23257] lo speed is unknown, defaulting to 1000 [ 1640.547135][T23228] wg1 speed is unknown, defaulting to 1000 [ 1641.251006][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1641.259128][ C1] lec:lec_tx_timeout: lec0 [ 1641.265983][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1641.301221][T23284] lo speed is unknown, defaulting to 1000 [ 1641.308095][T23257] wg1 speed is unknown, defaulting to 1000 [ 1641.852087][T23311] netlink: 632 bytes leftover after parsing attributes in process `syz.0.12493'. [ 1641.928281][T23284] wg1 speed is unknown, defaulting to 1000 [ 1642.000066][T23313] netlink: 'syz.0.12493': attribute type 1 has an invalid length. [ 1642.884561][T23329] netlink: 656 bytes leftover after parsing attributes in process `syz.5.12497'. [ 1642.901685][T23329] netlink: 156 bytes leftover after parsing attributes in process `syz.5.12497'. [ 1643.269369][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12499'. [ 1643.331711][T23320] lo speed is unknown, defaulting to 1000 [ 1643.342399][T23307] lo speed is unknown, defaulting to 1000 [ 1643.453490][T23338] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12500'. [ 1643.653592][T23351] sch_fq: defrate 0 ignored. [ 1643.794424][T23353] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1643.861055][ T6450] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1643.982737][T23320] wg1 speed is unknown, defaulting to 1000 [ 1644.106547][T23361] netlink: 'syz.1.12506': attribute type 39 has an invalid length. [ 1644.158636][T23364] sctp: [Deprecated]: syz.5.12507 (pid 23364) Use of int in max_burst socket option. [ 1644.158636][T23364] Use struct sctp_assoc_value instead [ 1644.262109][ T6450] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1644.366222][T23366] bond7: left promiscuous mode [ 1644.393216][T23367] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12508'. [ 1644.577238][T23366] bridge7: left promiscuous mode [ 1644.617718][T23307] wg1 speed is unknown, defaulting to 1000 [ 1646.035565][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1646.059032][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1646.075247][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1646.089002][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1646.103504][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1646.153585][T23380] syzkaller0: entered promiscuous mode [ 1646.159122][T23380] syzkaller0: entered allmulticast mode [ 1647.280689][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 1647.288805][ C1] lec:lec_tx_timeout: lec0 [ 1647.294057][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1648.237082][T19048] Bluetooth: hci1: command tx timeout [ 1648.549910][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1650.210847][T23376] lo speed is unknown, defaulting to 1000 [ 1650.309958][T19048] Bluetooth: hci1: command tx timeout [ 1650.403489][T23397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12515'. [ 1650.446517][T23400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1650.759285][T23412] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12520'. [ 1650.861734][T23376] wg1 speed is unknown, defaulting to 1000 [ 1650.944021][T23387] lo speed is unknown, defaulting to 1000 [ 1651.724507][T19565] veth1_to_team: left allmulticast mode [ 1652.404730][T19048] Bluetooth: hci1: command tx timeout [ 1652.455105][T19565] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1652.484929][T19565] bond10 (unregistering): (slave gretap2): Releasing active interface [ 1652.764547][T19565] bond9 (unregistering): (slave bridge4): Releasing active interface [ 1652.874701][T19565] bond13 (unregistering): (slave bridge6): Releasing backup interface [ 1652.965154][T19565] bond1 (unregistering): Released all slaves [ 1652.980343][T19565] bond2 (unregistering): Released all slaves [ 1652.995232][T19565] bond3 (unregistering): Released all slaves [ 1653.011038][T19565] bond4 (unregistering): Released all slaves [ 1653.028845][T19565] bond5 (unregistering): Released all slaves [ 1653.034898][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 1653.034920][ C1] lec:lec_tx_timeout: lec0 [ 1653.043839][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1653.072031][T19565] bond6 (unregistering): Released all slaves [ 1653.087295][T19565] bond7 (unregistering): Released all slaves [ 1653.104426][T19565] bond0 (unregistering): (slave veth3): Releasing active interface [ 1653.123177][T19565] batadv1: entered promiscuous mode [ 1653.132983][T19565] bond0 (unregistering): (slave batadv1): Releasing active interface [ 1653.143191][T19565] bond0 (unregistering): Released all slaves [ 1653.160137][T19565] bond8 (unregistering): Released all slaves [ 1653.176197][T19565] bond9 (unregistering): (slave veth7): Releasing active interface [ 1653.192628][T19565] bond9 (unregistering): (slave veth9): Releasing active interface [ 1653.201624][T19565] bond9 (unregistering): Released all slaves [ 1653.217188][T19565] bond10 (unregistering): Released all slaves [ 1653.234099][T19565] bond11 (unregistering): Released all slaves [ 1653.248796][T19565] bond12 (unregistering): Released all slaves [ 1653.264250][T19565] bond13 (unregistering): Released all slaves [ 1653.279168][T23387] wg1 speed is unknown, defaulting to 1000 [ 1653.801608][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12531'. [ 1653.836074][T19565] !: left promiscuous mode [ 1653.925833][T23458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1653.988291][T19565] : left promiscuous mode [ 1654.148116][T23429] lo speed is unknown, defaulting to 1000 [ 1654.178706][T23458] IPv6: sit1: Disabled Multicast RS [ 1654.191810][T23387] chnl_net:caif_netlink_parms(): no params data found [ 1654.478453][T19048] Bluetooth: hci1: command tx timeout [ 1654.518058][T23474] netlink: 'syz.4.12536': attribute type 1 has an invalid length. [ 1654.622875][T23474] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1654.695709][T23482] netlink: 'syz.3.12537': attribute type 1 has an invalid length. [ 1654.875636][T23387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.894421][T23387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.934516][T23387] bridge_slave_0: entered allmulticast mode [ 1654.946658][T23387] bridge_slave_0: entered promiscuous mode [ 1654.997995][T23387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.044174][T23387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.092286][T23387] bridge_slave_1: entered allmulticast mode [ 1655.125468][T23387] bridge_slave_1: entered promiscuous mode [ 1655.129011][ T6450] IPVS: starting estimator thread 0... [ 1655.173073][T23429] wg1 speed is unknown, defaulting to 1000 [ 1655.230220][T23492] IPVS: using max 29 ests per chain, 69600 per kthread [ 1655.357991][T23387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.408213][T23387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.450146][T19565] IPVS: stopping master sync thread 12305 ... [ 1655.668642][T23387] team0: Port device team_slave_0 added [ 1655.726176][T23387] team0: Port device team_slave_1 added [ 1655.852821][T23387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.870085][T23387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.924180][T23387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.941457][T23489] lo speed is unknown, defaulting to 1000 [ 1655.970937][T23387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.984965][T23387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.021590][T23387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.305825][T23387] hsr_slave_0: entered promiscuous mode [ 1656.342521][T23387] hsr_slave_1: entered promiscuous mode [ 1656.349367][T23387] debugfs: 'hsr0' already exists in 'hsr' [ 1656.356794][T23387] Cannot create hsr debugfs directory [ 1656.532026][T23489] wg1 speed is unknown, defaulting to 1000 [ 1657.284512][T19565] hsr_slave_0: left promiscuous mode [ 1657.293445][T19565] hsr_slave_1: left promiscuous mode [ 1657.310203][T19565] pim6reg (unregistering): left allmulticast mode [ 1658.072569][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1658.081111][ C1] lec:lec_tx_timeout: lec0 [ 1658.087350][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1658.292636][T19565] IPVS: stop unused estimator thread 0... [ 1658.403180][T23499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1658.823345][T23528] netlink: 'syz.0.12548': attribute type 1 has an invalid length. [ 1658.906587][T23528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1658.969676][T23387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1658.990951][T23541] netlink: 'syz.1.12551': attribute type 2 has an invalid length. [ 1659.004732][T23387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1659.066775][T23535] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1659.100365][T23387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1659.113508][T23528] netlink: 'syz.0.12548': attribute type 1 has an invalid length. [ 1659.128569][T23387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1659.165637][T23528] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1659.178575][T23528] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1659.198649][T23387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1659.218346][T23387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1659.226906][T23387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1659.246263][T23387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1659.331344][T23552] syzkaller1: entered promiscuous mode [ 1659.340642][T23552] syzkaller1: entered allmulticast mode [ 1659.355360][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12553'. [ 1659.363492][T23556] netlink: 'syz.0.12554': attribute type 1 has an invalid length. [ 1659.376197][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12553'. [ 1659.404292][T23552] netlink: 'syz.1.12553': attribute type 12 has an invalid length. [ 1659.437332][T23552] netlink: 'syz.1.12553': attribute type 11 has an invalid length. [ 1659.458099][T23556] bond3: entered promiscuous mode [ 1659.464661][T23556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1659.519353][T23556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1659.526776][T23556] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1659.538198][T23556] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1659.560310][T23556] bond3: (slave wireguard0): making interface the new active one [ 1659.569816][T23556] wireguard0: entered promiscuous mode [ 1659.577212][T23556] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 1659.934345][T23580] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1660.055026][T23387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.194958][T23387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.245565][T19565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.252896][T19565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.306401][T19574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.313726][T19574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.766785][T23612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12568'. [ 1660.919297][T23616] sit2: entered allmulticast mode [ 1660.954364][T23618] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1661.108713][T23615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12570'. [ 1661.136856][T23387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.175617][T23615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.298443][T23629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12573'. [ 1661.849548][T23387] veth0_vlan: entered promiscuous mode [ 1661.870668][T23387] veth1_vlan: entered promiscuous mode [ 1661.886251][T23663] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1661.942463][T23387] veth0_macvtap: entered promiscuous mode [ 1661.967866][T23387] veth1_macvtap: entered promiscuous mode [ 1661.994206][T23665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12579'. [ 1662.008006][T23387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.049410][T23387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.067020][T19576] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.078536][T19576] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.089019][T19576] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.105548][T19576] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.248765][T23667] netlink: 'syz.0.12580': attribute type 13 has an invalid length. [ 1662.257604][T23667] netlink: 'syz.0.12580': attribute type 17 has an invalid length. [ 1662.319252][T23667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1662.410348][T23667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1663.094637][T23671] netlink: 260 bytes leftover after parsing attributes in process `syz.0.12581'. [ 1663.103905][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1663.103933][ C1] lec:lec_tx_timeout: lec0 [ 1663.113006][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1664.068420][T23676] syzkaller0: entered promiscuous mode [ 1664.075077][T23676] syzkaller0: entered allmulticast mode [ 1664.271828][T23629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1664.284458][T23655] netlink: 'syz.4.12577': attribute type 1 has an invalid length. [ 1664.515779][T23683] netlink: 'syz.3.12586': attribute type 1 has an invalid length. [ 1668.124660][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1668.132733][ C1] lec:lec_tx_timeout: lec0 [ 1668.137342][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1668.299296][T23683] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1668.406822][ T9219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.434103][ T9219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.523706][T23701] netlink: 'syz.1.12589': attribute type 30 has an invalid length. [ 1668.575378][T23705] vlan2: entered promiscuous mode [ 1668.587626][T23705] bridge0: entered promiscuous mode [ 1668.667195][T19576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.725684][T19576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.075353][T23727] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12512'. [ 1669.234862][T23737] sctp: [Deprecated]: syz.4.12596 (pid 23737) Use of int in max_burst socket option. [ 1669.234862][T23737] Use struct sctp_assoc_value instead [ 1669.571320][T23743] xt_l2tp: v2 doesn't support IP mode [ 1669.583012][T23743] netlink: 656 bytes leftover after parsing attributes in process `syz.1.12599'. [ 1669.901999][ T5832] block nbd5: Receive control failed (result -32) [ 1669.903755][ T5921] block nbd5: Receive control failed (result -32) [ 1670.123929][T23754] netlink: 'syz.0.12601': attribute type 1 has an invalid length. [ 1670.156159][T23754] netlink: 'syz.0.12601': attribute type 1 has an invalid length. [ 1670.178402][T23754] netlink: 'syz.0.12601': attribute type 1 has an invalid length. [ 1670.178654][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12606'. [ 1670.203821][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12606'. [ 1670.210412][T23754] netlink: 'syz.0.12601': attribute type 2 has an invalid length. [ 1670.265546][T23754] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12601'. [ 1671.105243][T23813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12619'. [ 1671.123568][ T5921] Bluetooth: hci4: command 0x0406 tx timeout [ 1671.135935][T23813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12619'. [ 1671.390995][T23815] bridge0: port 3(syz_tun) entered blocking state [ 1671.412811][T23815] bridge0: port 3(syz_tun) entered disabled state [ 1671.431064][T23815] syz_tun: entered allmulticast mode [ 1671.441596][T23815] syz_tun: entered promiscuous mode [ 1671.447891][T23815] bridge0: port 3(syz_tun) entered blocking state [ 1671.454656][T23815] bridge0: port 3(syz_tun) entered forwarding state [ 1671.535565][T23797] lo speed is unknown, defaulting to 1000 [ 1672.146109][T23797] wg1 speed is unknown, defaulting to 1000 [ 1672.425766][T23842] netlink: 'syz.4.12630': attribute type 1 has an invalid length. [ 1672.434284][T23842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1672.497621][T23847] netlink: 165 bytes leftover after parsing attributes in process `syz.0.12629'. [ 1673.113828][T23868] tipc: Enabled bearer , priority 10 [ 1673.134904][T23865] tipc: Enabling of bearer rejected, already enabled [ 1673.149601][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1673.157716][ C1] lec:lec_tx_timeout: lec0 [ 1673.163680][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1673.175655][T23871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12636'. [ 1673.190740][T23879] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12638'. [ 1673.342334][T23883] netlink: 'syz.4.12640': attribute type 3 has an invalid length. [ 1673.375281][T23886] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1673.414758][T23883] netlink: 'syz.4.12640': attribute type 2 has an invalid length. [ 1673.423681][T23883] netlink: 'syz.4.12640': attribute type 2 has an invalid length. [ 1674.172243][T23917] __nla_validate_parse: 4 callbacks suppressed [ 1674.172266][T23917] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12646'. [ 1674.390696][T23919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12647'. [ 1674.557400][T23930] openvswitch: netlink: Key 11 has unexpected len 8 expected 2 [ 1675.023763][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12653'. [ 1675.047890][T23937] netlink: 'syz.0.12652': attribute type 1 has an invalid length. [ 1675.071189][T23937] netlink: 'syz.0.12652': attribute type 2 has an invalid length. [ 1675.301881][T23945] syzkaller0: entered promiscuous mode [ 1675.320600][T23945] syzkaller0: entered allmulticast mode [ 1675.359223][T23949] siw: device registration error -23 [ 1675.764514][T23952] netlink: 188212 bytes leftover after parsing attributes in process `syz.3.12657'. [ 1676.033936][T23968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1676.060988][T23970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12662'. [ 1676.069882][T23972] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1676.076055][T23968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1676.202435][T23950] lo speed is unknown, defaulting to 1000 [ 1676.294445][T23981] geneve2: entered promiscuous mode [ 1676.326843][T23985] netlink: 'syz.0.12667': attribute type 11 has an invalid length. [ 1676.412095][T23988] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12666'. [ 1676.800713][T23950] wg1 speed is unknown, defaulting to 1000 [ 1676.880257][T24005] netlink: 'syz.3.12674': attribute type 1 has an invalid length. [ 1676.901328][T24005] netlink: 476 bytes leftover after parsing attributes in process `syz.3.12674'. [ 1676.914748][T24005] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.12674'. [ 1677.363142][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12676'. [ 1677.396048][T24019] tap0: tun_chr_ioctl cmd 1074812118 [ 1677.452063][T24019] tap0: tun_chr_ioctl cmd 1074025676 [ 1677.578374][T24023] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 1677.775094][T24027] bond3: entered allmulticast mode [ 1677.782498][T24027] wireguard0: entered allmulticast mode [ 1677.843983][T24026] bond3: left allmulticast mode [ 1677.863996][T24026] wireguard0: left allmulticast mode [ 1678.179609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1678.187791][ C1] lec:lec_tx_timeout: lec0 [ 1678.192806][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1678.646383][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12693'. [ 1678.746143][T24068] team0: Port device team_slave_0 removed [ 1679.023959][T24081] syzkaller0: entered promiscuous mode [ 1679.053198][T24081] syzkaller0: entered allmulticast mode [ 1679.232515][T24097] tipc: Enabling of bearer rejected, failed to enable media [ 1679.377578][T24103] __nla_validate_parse: 2 callbacks suppressed [ 1679.377600][T24103] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12701'. [ 1680.003508][T24114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12706'. [ 1680.311451][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12709'. [ 1680.344546][T24125] openvswitch: netlink: Flow actions attr not present in new flow. [ 1680.362299][T24125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12709'. [ 1680.479471][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12709'. [ 1680.692068][T24136] netlink: 'syz.0.12714': attribute type 1 has an invalid length. [ 1680.703160][T24136] netlink: 'syz.0.12714': attribute type 3 has an invalid length. [ 1680.713615][T24136] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12714'. [ 1682.172643][T24146] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1682.395856][T24153] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12718'. [ 1682.479460][T24156] tap0: tun_chr_ioctl cmd 1074025681 [ 1682.791731][T24175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12725'. [ 1682.931724][T24193] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 1683.082337][T24201] netlink: 'syz.5.12730': attribute type 1 has an invalid length. [ 1683.201945][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1683.210163][ C1] lec:lec_tx_timeout: lec0 [ 1683.216284][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1683.231293][T24196] bond1: (slave bridge1): making interface the new active one [ 1683.284401][T24196] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1683.363113][T24220] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1683.478890][T24223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12737'. [ 1683.489800][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12737'. [ 1684.098605][T24244] syzkaller1: entered promiscuous mode [ 1684.116386][T24244] syzkaller1: entered allmulticast mode [ 1684.170710][T24249] netlink: 'syz.3.12746': attribute type 1 has an invalid length. [ 1684.292622][T24249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1684.301561][T24256] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1684.431020][T24249] __nla_validate_parse: 3 callbacks suppressed [ 1684.431051][T24249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12746'. [ 1684.458330][T24256] netlink: 'syz.1.12748': attribute type 4 has an invalid length. [ 1684.530170][T24257] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1684.688236][T24261] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1684.708629][T24258] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1684.811690][T24249] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 1685.316256][T24283] veth0_macvtap: entered allmulticast mode [ 1685.336673][T24283] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1685.773297][T24306] netlink: 'syz.3.12760': attribute type 1 has an invalid length. [ 1685.790692][T24306] netlink: 248 bytes leftover after parsing attributes in process `syz.3.12760'. [ 1685.886138][T24311] "syz.4.12761" (24311) uses obsolete ecb(arc4) skcipher [ 1685.980377][T24319] x_tables: duplicate underflow at hook 1 [ 1686.311973][T24330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12768'. [ 1686.461551][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12770'. [ 1686.677880][T24347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12772'. [ 1686.717926][T24342] team0: entered allmulticast mode [ 1686.733469][T24342] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1686.875719][T24351] tipc: Started in network mode [ 1686.889780][T24351] tipc: Node identity d25fd7662e04, cluster identity 4711 [ 1686.901813][T24351] tipc: Enabled bearer , priority 0 [ 1686.917300][T24351] syzkaller0: entered promiscuous mode [ 1686.932551][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12776'. [ 1686.943483][T24351] syzkaller0: entered allmulticast mode [ 1687.039376][T24351] tipc: Resetting bearer [ 1687.185433][T24368] netlink: 'syz.4.12779': attribute type 29 has an invalid length. [ 1687.286830][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12781'. [ 1687.478917][T24375] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.12782'. [ 1687.586372][T24379] netlink: 'syz.3.12784': attribute type 89 has an invalid length. [ 1687.640904][T24350] tipc: Resetting bearer [ 1687.668190][T24350] tipc: Disabling bearer [ 1687.757070][T24384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1688.231098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1688.239237][ C1] lec:lec_tx_timeout: lec0 [ 1688.244291][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1688.265030][T24400] netlink: 'syz.3.12789': attribute type 1 has an invalid length. [ 1688.539099][T24397] veth7: entered allmulticast mode [ 1688.624148][T24405] vlan2: entered allmulticast mode [ 1689.091378][T24420] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12795'. [ 1689.479254][T24435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12799'. [ 1689.508692][T24435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12799'. [ 1689.607887][T24445] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1689.657211][T24450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12803'. [ 1690.017190][T24467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12806'. [ 1690.079250][T24467] bond1: entered promiscuous mode [ 1690.086829][T24467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1690.205900][T24471] bridge2: entered promiscuous mode [ 1690.213624][T24467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12806'. [ 1690.229372][T24471] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1690.368220][T24467] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1690.393970][T24467] bridge2: left promiscuous mode [ 1690.416227][T24467] bond1 (unregistering): Released all slaves [ 1690.908240][T24500] netlink: 'syz.0.12814': attribute type 1 has an invalid length. [ 1690.942481][T24501] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.12816'. [ 1690.983039][T24501] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1691.084078][T24500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1691.132794][T24504] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1691.194645][T24500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12814'. [ 1691.216462][T24505] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1691.307709][T24509] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1691.415663][T24500] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 1691.705714][T24536] netlink: 'syz.1.12824': attribute type 1 has an invalid length. [ 1691.766770][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1691.969210][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12825'. [ 1692.046562][T24553] IPv6: addrconf: prefix option has invalid lifetime [ 1692.164580][T24515] lo speed is unknown, defaulting to 1000 [ 1692.752858][T24515] wg1 speed is unknown, defaulting to 1000 [ 1693.216056][T24588] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12837'. [ 1694.069737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 1694.078052][ C1] lec:lec_tx_timeout: lec0 [ 1694.083105][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1694.101766][T24619] netlink: 'syz.3.12845': attribute type 13 has an invalid length. [ 1695.696024][T24675] netlink: 'syz.1.12860': attribute type 83 has an invalid length. [ 1695.746727][T24675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1695.883392][T24682] __nla_validate_parse: 5 callbacks suppressed [ 1695.883413][T24682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12862'. [ 1696.029008][T24685] netlink: 'syz.0.12863': attribute type 1 has an invalid length. [ 1696.058005][T24685] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12863'. [ 1696.317723][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12868'. [ 1696.328258][T24696] netlink: 'syz.0.12867': attribute type 3 has an invalid length. [ 1696.456265][T24693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12866'. [ 1696.965329][T24729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12876'. [ 1698.342871][T24755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.381391][T24773] netlink: 'syz.5.12888': attribute type 1 has an invalid length. [ 1698.385250][T24755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.415390][T24776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12886'. [ 1698.565023][T24782] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12890'. [ 1698.590512][T24782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12890'. [ 1698.773069][T24755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.816341][T24755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.878276][T24791] netlink: 'syz.3.12894': attribute type 4 has an invalid length. [ 1698.926178][T24794] netlink: 428 bytes leftover after parsing attributes in process `syz.5.12895'. [ 1698.959307][T24791] netlink: 'syz.3.12894': attribute type 4 has an invalid length. [ 1699.007968][T24755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.028123][T24755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.043112][T24797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12895'. [ 1699.089580][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1699.097851][ C1] lec:lec_tx_timeout: lec0 [ 1699.103127][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1699.115901][T24791] netlink: 'syz.3.12894': attribute type 4 has an invalid length. [ 1699.318389][T24755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.330566][T24755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.429482][T24801] vti0: entered promiscuous mode [ 1699.825806][ T9219] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.851654][ T9219] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.941199][ T9219] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.955888][ T9219] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.007288][T19574] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1700.020396][T19574] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.036212][T24838] netlink: 'syz.5.12905': attribute type 1 has an invalid length. [ 1700.104717][T24838] bond2: entered promiscuous mode [ 1700.124078][T24838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1700.212253][T19576] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1700.222059][T19576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.238889][T24849] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1701.235595][T24893] syzkaller0: entered promiscuous mode [ 1701.250558][T24893] syzkaller0: entered allmulticast mode [ 1701.437812][T24870] lo speed is unknown, defaulting to 1000 [ 1701.652895][T24911] netlink: 'syz.1.12924': attribute type 13 has an invalid length. [ 1701.688044][T24911] netlink: 'syz.1.12924': attribute type 17 has an invalid length. [ 1702.138676][T24911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.152894][T24911] team0: left allmulticast mode [ 1702.159382][T24911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.182133][T24911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1702.198673][T24870] wg1 speed is unknown, defaulting to 1000 [ 1702.205234][T19592] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.216427][T19592] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.227143][T19592] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.237865][T19592] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.278404][T19592] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.290809][T19592] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.300045][T19592] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.309054][T19592] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.405051][T24931] __nla_validate_parse: 8 callbacks suppressed [ 1702.405073][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12928'. [ 1702.440453][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12928'. [ 1702.460128][T24931] netlink: 'syz.3.12928': attribute type 19 has an invalid length. [ 1702.491247][T24931] netlink: 'syz.3.12928': attribute type 20 has an invalid length. [ 1702.494214][T24933] netlink: 'syz.5.12929': attribute type 2 has an invalid length. [ 1702.528559][T24933] netlink: 'syz.5.12929': attribute type 8 has an invalid length. [ 1703.285959][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12937'. [ 1703.319322][T24964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12937'. [ 1703.675238][T24982] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.12944'. [ 1703.686367][T24982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12944'. [ 1703.797972][T24987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12946'. [ 1703.868274][T24993] netlink: 'syz.3.12948': attribute type 30 has an invalid length. [ 1703.888203][T24982] veth3: entered allmulticast mode [ 1703.906603][T24996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12946'. [ 1703.947903][T24982] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1703.977354][T24989] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1703.999269][T24989] bond2 (unregistering): Released all slaves [ 1704.063890][T24987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1704.094518][T25008] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12946'. [ 1704.109565][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1704.117668][ C1] lec:lec_tx_timeout: lec0 [ 1704.122397][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1704.204261][T24991] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1704.235064][T24991] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1704.271910][T24996] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1704.282346][T24996] bond5 (unregistering): Released all slaves [ 1704.522217][T25025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12956'. [ 1704.615661][T25031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.131143][T25035] lo speed is unknown, defaulting to 1000 [ 1705.339428][T25035] wg1 speed is unknown, defaulting to 1000 [ 1706.740111][T24998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1706.974866][T25052] netlink: 'syz.1.12961': attribute type 83 has an invalid length. [ 1707.040485][T25052] netlink: 'syz.1.12961': attribute type 5 has an invalid length. [ 1707.096356][T25055] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.180202][T25055] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.235827][T25068] netlink: 'syz.4.12964': attribute type 1 has an invalid length. [ 1707.367736][T25055] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.390333][T25055] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.564429][T25055] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.604611][T25055] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.723784][T25055] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.759057][T25055] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.774878][T25086] __nla_validate_parse: 5 callbacks suppressed [ 1707.774899][T25086] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12971'. [ 1707.881966][T25086] 0ªX¹¦À: renamed from caif0 [ 1707.896407][T25086] 0ªX¹¦À: entered allmulticast mode [ 1707.913935][T25086] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1708.191840][T25072] lo speed is unknown, defaulting to 1000 [ 1708.302332][T19574] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.324554][T19574] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.396590][T19594] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.409767][T19594] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.611105][T19594] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.632159][T19594] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.772608][T19594] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.785005][T19594] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.942882][T25072] wg1 speed is unknown, defaulting to 1000 [ 1709.038017][T25102] netlink: 'syz.1.12976': attribute type 1 has an invalid length. [ 1709.084018][T25105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12977'. [ 1709.123439][T25102] netlink: 'syz.1.12976': attribute type 3 has an invalid length. [ 1709.131424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1709.131459][ C1] lec:lec_tx_timeout: lec0 [ 1709.139913][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1709.167489][T25105] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 1709.180297][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12976'. [ 1709.632352][T25117] xfrm0: entered allmulticast mode [ 1709.774322][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12979'. [ 1709.894909][T25125] Unsupported ieee802154 address type: 0 [ 1709.950623][T25120] netlink: 'syz.1.12979': attribute type 1 has an invalid length. [ 1710.718547][T25138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12984'. [ 1710.978553][T25142] netlink: 'syz.3.12986': attribute type 1 has an invalid length. [ 1712.049989][T25159] lo speed is unknown, defaulting to 1000 [ 1712.130470][T25191] netlink: 'syz.0.12997': attribute type 1 has an invalid length. [ 1712.173165][T25186] bond5 (unregistering): Released all slaves [ 1712.211966][T25191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12997'. [ 1712.260765][T25191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12997'. [ 1712.318608][T25186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12997'. [ 1712.547047][T25203] netlink: 'syz.0.13002': attribute type 1 has an invalid length. [ 1712.575500][T25203] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13002'. [ 1712.804516][T25159] wg1 speed is unknown, defaulting to 1000 [ 1712.946380][T25220] Bluetooth: MGMT ver 1.23 [ 1713.880498][T25232] IPVS: set_ctl: invalid protocol: 136 172.30.0.5:20005 [ 1713.895819][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1714.072674][T25233] macvlan2: entered promiscuous mode [ 1714.088904][T25233] macvlan2: entered allmulticast mode [ 1714.104644][T25233] veth1_to_batadv: entered allmulticast mode [ 1714.149593][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1714.157709][ C1] lec:lec_tx_timeout: lec0 [ 1714.162602][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1714.261635][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13012'. [ 1714.752131][T25267] netlink: 364 bytes leftover after parsing attributes in process `syz.3.13016'. [ 1714.855862][T25264] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1715.326543][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13019'. [ 1715.357621][T25293] netlink: 'syz.4.13021': attribute type 1 has an invalid length. [ 1715.452705][T25293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13021'. [ 1715.503426][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13021'. [ 1715.747788][T25302] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1715.765920][T25302] bond5 (unregistering): Released all slaves [ 1716.122231][T25319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13024'. [ 1716.369411][T25328] netlink: 'syz.4.13027': attribute type 10 has an invalid length. [ 1716.434172][T25330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13028'. [ 1716.595574][T25334] Bluetooth: MGMT ver 1.23 [ 1717.096457][T25347] netlink: 'syz.1.13032': attribute type 21 has an invalid length. [ 1717.122819][T25347] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13032'. [ 1717.178238][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13031'. [ 1717.193432][T19048] Bluetooth: hci0: command 0x0406 tx timeout [ 1717.474373][T25359] bond0: entered promiscuous mode [ 1717.483754][T25359] bond_slave_0: entered promiscuous mode [ 1717.495254][T25359] bond_slave_1: entered promiscuous mode [ 1717.508863][T25359] batadv0: entered promiscuous mode [ 1717.517626][T25359] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1717.533853][T25359] bond0: left promiscuous mode [ 1717.543859][T25359] bond_slave_0: left promiscuous mode [ 1717.557118][T25359] bond_slave_1: left promiscuous mode [ 1717.567584][T25359] batadv0: left promiscuous mode [ 1718.511958][T19048] block nbd6: Receive control failed (result -32) [ 1718.512591][ T5921] block nbd6: Receive control failed (result -32) [ 1718.965060][T25424] pim6reg: entered allmulticast mode [ 1718.977182][T25424] pim6reg: left allmulticast mode [ 1719.106556][T25432] netlink: 'syz.0.13054': attribute type 10 has an invalid length. [ 1719.117531][T25431] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13053'. [ 1719.157952][T25432] syz_tun: entered promiscuous mode [ 1719.169579][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1719.177669][ C1] lec:lec_tx_timeout: lec0 [ 1719.183717][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1719.236993][T25432] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1719.267931][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13056'. [ 1720.054024][T25482] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1720.612686][T25499] netlink: 'syz.0.13068': attribute type 1 has an invalid length. [ 1720.692269][T25470] lo speed is unknown, defaulting to 1000 [ 1720.793234][T25475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13063'. [ 1720.828518][T25475] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1721.164003][T25514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13075'. [ 1721.214754][T25514] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13075'. [ 1721.380171][T25470] wg1 speed is unknown, defaulting to 1000 [ 1721.445663][T25524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13078'. [ 1721.464116][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13078'. [ 1721.499078][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13078'. [ 1721.519249][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13078'. [ 1722.338372][T25550] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 1722.384760][T25521] lo speed is unknown, defaulting to 1000 [ 1722.508295][T25552] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13085'. [ 1722.736637][T25555] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 1722.879531][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809b1a0c00: rx timeout, send abort [ 1723.307528][T25521] wg1 speed is unknown, defaulting to 1000 [ 1723.377517][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809b1a0400: rx timeout, send abort [ 1723.387976][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809b1a0c00: abort rx timeout. Force session deactivation [ 1723.683719][T25574] ip6t_REJECT: ECHOREPLY is not supported [ 1723.885934][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809b1a0400: abort rx timeout. Force session deactivation [ 1724.045996][T25557] lo speed is unknown, defaulting to 1000 [ 1724.199627][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1724.207741][ C1] lec:lec_tx_timeout: lec0 [ 1724.212800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1724.214249][T25588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13093'. [ 1724.614518][T25611] netlink: 'syz.1.13099': attribute type 1 has an invalid length. [ 1724.627761][T25557] wg1 speed is unknown, defaulting to 1000 [ 1724.777498][T25614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1726.017673][T25634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13106'. [ 1726.426043][T25647] openvswitch: netlink: IP tunnel dst address not specified [ 1726.510099][T25648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13109'. [ 1726.820518][T25660] netlink: 'syz.3.13116': attribute type 1 has an invalid length. [ 1726.870108][T25660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1726.881207][ T30] audit: type=1800 audit(1776639419.296:29): pid=25666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13117" name="memory.events" dev="tmpfs" ino=1612 res=0 errno=0 [ 1726.902739][T25660] bond4: (slave ip6erspan0): making interface the new active one [ 1726.912254][T25660] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1727.006598][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13116'. [ 1727.516274][T25700] nr0: tun_chr_ioctl cmd 1074025677 [ 1727.529174][T25700] nr0: linktype set to 774 [ 1727.554403][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13126'. [ 1727.568299][T25704] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1727.617053][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13128'. [ 1727.886233][T25723] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13133'. [ 1727.978146][T25726] xt_TCPMSS: Only works on TCP SYN packets [ 1728.012986][T25727] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13135'. [ 1728.118727][T25731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13135'. [ 1728.520297][T25742] netlink: 'syz.0.13138': attribute type 1 has an invalid length. [ 1728.611802][T25751] netlink: 'syz.1.13140': attribute type 89 has an invalid length. [ 1728.616655][T25742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1728.627078][T25750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13141'. [ 1728.855904][T25747] syzkaller0: entered promiscuous mode [ 1728.862818][T25747] syzkaller0: entered allmulticast mode [ 1729.219911][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1729.228039][ C1] lec:lec_tx_timeout: lec0 [ 1729.232931][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1733.565904][T25761] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1733.580172][T25761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.587720][T25761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.605702][T25766] netlink: 'syz.1.13145': attribute type 10 has an invalid length. [ 1733.632053][T25766] __nla_validate_parse: 1 callbacks suppressed [ 1733.632075][T25766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13145'. [ 1733.884503][T25790] netlink: 'syz.5.13147': attribute type 28 has an invalid length. [ 1734.190145][T25768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.239612][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1734.247852][ C1] lec:lec_tx_timeout: lec0 [ 1734.252802][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1734.447028][T25803] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13153'. [ 1734.584951][T25768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.673075][T25812] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13155'. [ 1734.723900][T25818] netlink: 43 bytes leftover after parsing attributes in process `syz.5.13157'. [ 1734.736906][T25819] netlink: 'syz.0.13156': attribute type 1 has an invalid length. [ 1734.747860][T25818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13157'. [ 1734.837835][T25768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.936988][T25826] xt_hashlimit: size too large, truncated to 1048576 [ 1735.002837][T25819] bond7: entered promiscuous mode [ 1735.018781][T25819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1735.067048][T25818] IPv6: sit1: Disabled Multicast RS [ 1735.082516][T25818] sit1: entered allmulticast mode [ 1735.141195][T25822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1735.158907][T25822] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1735.186178][T25822] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1735.212825][T25822] bond7: (slave wireguard1): making interface the new active one [ 1735.224596][T25822] wireguard1: entered promiscuous mode [ 1735.244878][T25822] bond7: (slave wireguard1): Enslaving as an active interface with an up link [ 1735.290126][T25823] bond7: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1735.306439][T25823] bond7: (slave wireguard2): Enslaving as a backup interface with an up link [ 1735.444320][T25768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.845243][T19576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.935828][T19576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.023679][T19576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.063166][T19576] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.834611][T25888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13172'. [ 1736.890679][T25857] lo speed is unknown, defaulting to 1000 [ 1737.129243][T25902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13173'. [ 1737.909160][T25873] lo speed is unknown, defaulting to 1000 [ 1737.977051][T25857] wg1 speed is unknown, defaulting to 1000 [ 1738.099945][T25935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13180'. [ 1738.213044][T25935] netlink: 'syz.0.13180': attribute type 9 has an invalid length. [ 1738.241443][T25935] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.13180'. [ 1738.265104][T25940] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1738.283094][T25940] openvswitch: netlink: Message has 16 unknown bytes. [ 1738.296561][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13181'. [ 1738.414491][T25935] veth9: entered allmulticast mode [ 1738.428797][T25944] rdma_op ffff888099eb89f0 conn xmit_rdma 0000000000000000 [ 1738.444686][T25942] bond8 (unregistering): Released all slaves [ 1738.585499][T25873] wg1 speed is unknown, defaulting to 1000 [ 1738.802533][T25950] sit1: entered promiscuous mode [ 1739.624549][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13189'. [ 1739.773665][T25968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13190'. [ 1739.793248][T25968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13190'. [ 1739.907985][T25969] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13190'. [ 1740.069891][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 1740.078228][ C1] lec:lec_tx_timeout: lec0 [ 1740.083698][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1740.455177][T25992] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13197'. [ 1740.635191][T26007] wg1: entered promiscuous mode [ 1740.662929][T26007] wg1: entered allmulticast mode [ 1740.684704][T26010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13201'. [ 1740.710397][ C1] ------------[ cut here ]------------ [ 1740.711998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.718846][ C1] ODEBUG: free active (active state 0) object: ffff888032274c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1740.740960][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.0.13199/26011 [ 1740.750197][T26013] xt_bpf: check failed: parse error [ 1740.751926][ C1] Modules linked in: [ 1740.762935][ C1] CPU: 1 UID: 0 PID: 26011 Comm: syz.0.13199 Not tainted syzkaller #0 PREEMPT(full) [ 1740.767251][T26010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13201'. [ 1740.772667][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1740.772687][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1740.772724][ C1] Code: 89 44 24 20 e8 47 54 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 f6 27 8c 48 c7 c2 c0 fb 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1740.772743][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 1740.772766][ C1] RAX: ffffffff8a996a90 RBX: ffffffff9a6b2fb0 RCX: 0000000000000000 [ 1740.772782][ C1] RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f640 RDI: ffffffff903ce070 [ 1740.772798][ C1] RBP: ffffffff8bcf42a0 R08: ffff888032274c90 R09: ffffffff8bcf5600 [ 1740.772814][ C1] R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffff888032274e00 [ 1740.772831][ C1] R13: ffffffff903ce070 R14: ffff888032274000 R15: ffff888032274c90 [ 1740.772847][ C1] FS: 00007f4d8c6766c0(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 1740.772866][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1740.772881][ C1] CR2: 000020000003f000 CR3: 0000000078690000 CR4: 00000000003526f0 [ 1740.772902][ C1] Call Trace: [ 1740.772912][ C1] [ 1740.772922][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1740.772965][ C1] kfree+0x13a/0x620 [ 1740.772992][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1740.773037][ C1] rose_timer_expiry+0x4cb/0x600 [ 1740.773066][ C1] ? call_timer_fn+0x178/0x5e0 [ 1740.773098][ C1] call_timer_fn+0x192/0x5e0 [ 1740.773126][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.773154][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1740.773182][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1740.773222][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1740.773252][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.773284][ C1] __run_timer_base+0x652/0x8b0 [ 1740.773311][ C1] ? ktime_get+0x45/0x220 [ 1740.959320][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1740.964830][ C1] run_timer_softirq+0xb7/0x170 [ 1740.969752][ C1] handle_softirqs+0x22a/0x840 [ 1740.974565][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1740.979802][ C1] __irq_exit_rcu+0xca/0x220 [ 1740.984435][ C1] irq_exit_rcu+0x9/0x30 [ 1740.988721][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1740.994548][ C1] [ 1740.997517][ C1] [ 1741.000543][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1741.006571][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1741.012001][ C1] Code: ff ff ff e8 b1 9d 11 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b 38 9c 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 f2 93 [ 1741.031695][ C1] RSP: 0018:ffffc900036b7628 EFLAGS: 00000286 [ 1741.037895][ C1] RAX: 6901c62927341100 RBX: 0000000000000000 RCX: 0000000000000046 [ 1741.045975][ C1] RDX: 00000000b7e381ed RSI: ffffffff8e22a119 RDI: ffffffff8c27f000 [ 1741.054051][ C1] RBP: ffffffff821c7259 R08: ffffffff821c7259 R09: ffffffff8e95d020 [ 1741.062205][ C1] R10: ffffc900036b784c R11: fffff520006d6f12 R12: 0000000000000002 [ 1741.070334][ C1] R13: ffffffff8e95d020 R14: 0000000000000000 R15: 0000000000000246 [ 1741.078443][ C1] ? __pte_offset_map+0x29/0x240 [ 1741.083581][ C1] ? __pte_offset_map+0x29/0x240 [ 1741.088590][ C1] __pte_offset_map+0x45/0x240 [ 1741.089290][T26015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13202'. [ 1741.093453][ C1] ? __pte_offset_map+0x29/0x240 [ 1741.093486][ C1] ? pte_offset_map_rw_nolock+0x2d/0x160 [ 1741.093518][ C1] pte_offset_map_rw_nolock+0x3b/0x160 [ 1741.093550][ C1] handle_mm_fault+0x1090/0x3310 [ 1741.093593][ C1] ? handle_mm_fault+0xee/0x3310 [ 1741.093637][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1741.093684][ C1] ? lock_mm_and_find_vma+0xa7/0x340 [ 1741.093718][ C1] do_user_addr_fault+0x75b/0x1340 [ 1741.093765][ C1] exc_page_fault+0x6a/0xc0 [ 1741.093793][ C1] asm_exc_page_fault+0x26/0x30 [ 1741.093814][ C1] RIP: 0010:fault_in_readable+0x8e/0x130 [ 1741.093840][ C1] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 30 94 b1 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 1741.093859][ C1] RSP: 0018:ffffc900036b7aa8 EFLAGS: 00050202 [ 1741.093882][ C1] RAX: ffffffff8213cc01 RBX: 0000000000001000 RCX: ffff888054213d80 [ 1741.093899][ C1] RDX: 0000000000000002 RSI: 000020000003f000 RDI: 0000200000040000 [ 1741.093915][ C1] RBP: dffffc0000000001 R08: ffff888054213d80 R09: 0000000000000002 [ 1741.093930][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000 [ 1741.093945][ C1] R13: 000020000003f000 R14: 000020000003f000 R15: 0000200000040000 [ 1741.093970][ C1] ? fault_in_readable+0x61/0x130 [ 1741.094002][ C1] ? fault_in_readable+0x80/0x130 [ 1741.094031][ C1] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 1741.094067][ C1] generic_perform_write+0x7af/0x8f0 [ 1741.094105][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1741.094126][ C1] ? down_write+0x16d/0x200 [ 1741.094162][ C1] ? file_update_time_flags+0x3b3/0x4a0 [ 1741.094197][ C1] shmem_file_write_iter+0xf8/0x120 [ 1741.094229][ C1] vfs_write+0x61d/0xb90 [ 1741.094270][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1741.094302][ C1] ? __pfx_do_futex+0x10/0x10 [ 1741.094329][ C1] ? kmem_cache_free+0x180/0x630 [ 1741.094378][ C1] ksys_write+0x150/0x270 [ 1741.094411][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1741.094451][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.094476][ C1] do_syscall_64+0x15f/0xf80 [ 1741.094502][ C1] ? trace_irq_disable+0x3b/0x140 [ 1741.094527][ C1] ? clear_bhb_loop+0x40/0x90 [ 1741.094555][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.094574][ C1] RIP: 0033:0x7f4d8b79c819 [ 1741.094597][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.094625][ C1] RSP: 002b:00007f4d8c676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1741.094649][ C1] RAX: ffffffffffffffda RBX: 00007f4d8ba16090 RCX: 00007f4d8b79c819 [ 1741.094665][ C1] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000007 [ 1741.094680][ C1] RBP: 00007f4d8b832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1741.094695][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.094710][ C1] R13: 00007f4d8ba16128 R14: 00007f4d8ba16090 R15: 00007ffdd7714cb8 [ 1741.094750][ C1] [ 1741.094764][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1741.094782][ C1] CPU: 1 UID: 0 PID: 26011 Comm: syz.0.13199 Not tainted syzkaller #0 PREEMPT(full) [ 1741.094806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1741.094819][ C1] Call Trace: [ 1741.094827][ C1] [ 1741.094836][ C1] vpanic+0x56c/0xa60 [ 1741.094867][ C1] ? __pfx__printk+0x10/0x10 [ 1741.094890][ C1] ? __pfx_vpanic+0x10/0x10 [ 1741.094917][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1741.094943][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1741.094977][ C1] panic+0xc5/0xd0 [ 1741.095005][ C1] ? __pfx_panic+0x10/0x10 [ 1741.095046][ C1] __warn+0x315/0x4c0 [ 1741.095069][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1741.095096][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1741.095124][ C1] __report_bug+0x29a/0x540 [ 1741.095152][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1741.095178][ C1] ? __pfx___report_bug+0x10/0x10 [ 1741.095213][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1741.095235][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1741.095261][ C1] report_bug_entry+0x19a/0x290 [ 1741.095284][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1741.095308][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1741.095332][ C1] handle_bug+0xce/0x200 [ 1741.095358][ C1] exc_invalid_op+0x1a/0x50 [ 1741.095383][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1741.095401][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1741.095427][ C1] Code: 89 44 24 20 e8 47 54 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 f6 27 8c 48 c7 c2 c0 fb 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1741.095443][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 1741.095461][ C1] RAX: ffffffff8a996a90 RBX: ffffffff9a6b2fb0 RCX: 0000000000000000 [ 1741.095474][ C1] RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f640 RDI: ffffffff903ce070 [ 1741.095488][ C1] RBP: ffffffff8bcf42a0 R08: ffff888032274c90 R09: ffffffff8bcf5600 [ 1741.095503][ C1] R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffff888032274e00 [ 1741.095517][ C1] R13: ffffffff903ce070 R14: ffff888032274000 R15: ffff888032274c90 [ 1741.095537][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1741.095562][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1741.095594][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1741.095640][ C1] kfree+0x13a/0x620 [ 1741.095663][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1741.095695][ C1] rose_timer_expiry+0x4cb/0x600 [ 1741.095720][ C1] ? call_timer_fn+0x178/0x5e0 [ 1741.095748][ C1] call_timer_fn+0x192/0x5e0 [ 1741.095773][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1741.095798][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1741.095822][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1741.095857][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1741.095878][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1741.095906][ C1] __run_timer_base+0x652/0x8b0 [ 1741.095929][ C1] ? ktime_get+0x45/0x220 [ 1741.095962][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1741.096003][ C1] run_timer_softirq+0xb7/0x170 [ 1741.096027][ C1] handle_softirqs+0x22a/0x840 [ 1741.096055][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1741.096088][ C1] __irq_exit_rcu+0xca/0x220 [ 1741.096113][ C1] irq_exit_rcu+0x9/0x30 [ 1741.096136][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1741.096157][ C1] [ 1741.096165][ C1] [ 1741.096174][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1741.096194][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1741.096218][ C1] Code: ff ff ff e8 b1 9d 11 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b 38 9c 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 f2 93 [ 1741.096233][ C1] RSP: 0018:ffffc900036b7628 EFLAGS: 00000286 [ 1741.096250][ C1] RAX: 6901c62927341100 RBX: 0000000000000000 RCX: 0000000000000046 [ 1741.096263][ C1] RDX: 00000000b7e381ed RSI: ffffffff8e22a119 RDI: ffffffff8c27f000 [ 1741.096278][ C1] RBP: ffffffff821c7259 R08: ffffffff821c7259 R09: ffffffff8e95d020 [ 1741.096291][ C1] R10: ffffc900036b784c R11: fffff520006d6f12 R12: 0000000000000002 [ 1741.096305][ C1] R13: ffffffff8e95d020 R14: 0000000000000000 R15: 0000000000000246 [ 1741.096322][ C1] ? __pte_offset_map+0x29/0x240 [ 1741.096348][ C1] ? __pte_offset_map+0x29/0x240 [ 1741.096384][ C1] __pte_offset_map+0x45/0x240 [ 1741.096407][ C1] ? __pte_offset_map+0x29/0x240 [ 1741.096428][ C1] ? pte_offset_map_rw_nolock+0x2d/0x160 [ 1741.096456][ C1] pte_offset_map_rw_nolock+0x3b/0x160 [ 1741.096484][ C1] handle_mm_fault+0x1090/0x3310 [ 1741.096522][ C1] ? handle_mm_fault+0xee/0x3310 [ 1741.096553][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1741.096596][ C1] ? lock_mm_and_find_vma+0xa7/0x340 [ 1741.096635][ C1] do_user_addr_fault+0x75b/0x1340 [ 1741.096677][ C1] exc_page_fault+0x6a/0xc0 [ 1741.096700][ C1] asm_exc_page_fault+0x26/0x30 [ 1741.096718][ C1] RIP: 0010:fault_in_readable+0x8e/0x130 [ 1741.096739][ C1] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 30 94 b1 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 1741.096754][ C1] RSP: 0018:ffffc900036b7aa8 EFLAGS: 00050202 [ 1741.096786][ C1] RAX: ffffffff8213cc01 RBX: 0000000000001000 RCX: ffff888054213d80 [ 1741.096801][ C1] RDX: 0000000000000002 RSI: 000020000003f000 RDI: 0000200000040000 [ 1741.096814][ C1] RBP: dffffc0000000001 R08: ffff888054213d80 R09: 0000000000000002 [ 1741.096828][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000 [ 1741.096840][ C1] R13: 000020000003f000 R14: 000020000003f000 R15: 0000200000040000 [ 1741.096862][ C1] ? fault_in_readable+0x61/0x130 [ 1741.096891][ C1] ? fault_in_readable+0x80/0x130 [ 1741.096916][ C1] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 1741.096946][ C1] generic_perform_write+0x7af/0x8f0 [ 1741.096980][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1741.096999][ C1] ? down_write+0x16d/0x200 [ 1741.097031][ C1] ? file_update_time_flags+0x3b3/0x4a0 [ 1741.097062][ C1] shmem_file_write_iter+0xf8/0x120 [ 1741.097090][ C1] vfs_write+0x61d/0xb90 [ 1741.097126][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1741.097155][ C1] ? __pfx_do_futex+0x10/0x10 [ 1741.097178][ C1] ? kmem_cache_free+0x180/0x630 [ 1741.097221][ C1] ksys_write+0x150/0x270 [ 1741.097251][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1741.097287][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.097308][ C1] do_syscall_64+0x15f/0xf80 [ 1741.097329][ C1] ? trace_irq_disable+0x3b/0x140 [ 1741.097350][ C1] ? clear_bhb_loop+0x40/0x90 [ 1741.097374][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.097393][ C1] RIP: 0033:0x7f4d8b79c819 [ 1741.097410][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.097425][ C1] RSP: 002b:00007f4d8c676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1741.097443][ C1] RAX: ffffffffffffffda RBX: 00007f4d8ba16090 RCX: 00007f4d8b79c819 [ 1741.097456][ C1] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000007 [ 1741.097469][ C1] RBP: 00007f4d8b832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1741.097482][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.097494][ C1] R13: 00007f4d8ba16128 R14: 00007f4d8ba16090 R15: 00007ffdd7714cb8 [ 1741.097526][ C1] [ 1741.104165][ C1] Kernel Offset: disabled