last executing test programs: 4.67689522s ago: executing program 4 (id=19742): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c}, 0x0) poll(&(0x7f0000000100)=[{r0, 0x18d}], 0x1, 0x8001) close(r0) (async) close(r0) write$cgroup_subtree(r1, &(0x7f0000000040), 0xfffffc3f) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.375017363s ago: executing program 4 (id=19747): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x440b0) 3.894732527s ago: executing program 4 (id=19753): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRESOCT=r0, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) 3.628720613s ago: executing program 4 (id=19756): r0 = socket(0x2, 0x3, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x440e0}, 0x20000810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) clock_gettime(0xfffffff2, 0x0) (rerun: 32) 3.452380371s ago: executing program 4 (id=19757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8040) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}]}}]}, 0x4c}}, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r10) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="010129bd7000ecdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8010) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfff}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050880) 3.067248172s ago: executing program 4 (id=19762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000040)=0x7e) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000240)=0xd, 0x4) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000003c0)="6b3104dfdcd44e9ca7eecb068090c0e21a954a47652baf89b11f06bb2d4229c4df18dab833845ddcdbbff3c0430eff8d47e25e8c573996dee36dc05fe12094e43efca0df01f96c6aa06069699649828b8ad3", 0x52) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x8, 0xa, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 2.709186774s ago: executing program 2 (id=19767): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) (async) readv(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00'}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000014001280090001007663616e000000000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x880) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x400000, 0x2000001, {0x0, 0x0, 0x0, r8, {0x2}, {0xd, 0xfff2}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xa055}, 0x20008014) 2.488566781s ago: executing program 2 (id=19771): listen(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x40000101, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1", 0x6f}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000ffff00000000", 0x58}], 0x1) 1.769742515s ago: executing program 1 (id=19779): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaff000000ac1e0001ffffffff0e0090787fff01fffffffff30000000c00008000"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffe08, &(0x7f0000000580)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x200041c1}, 0x4040800) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000540)={0x7, 'wlan0\x00', {0x5}, 0xc}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r10, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250a002000180001801400020077673100000000000000170000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x140, r8, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x31}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "b84352af0d829281d4a42838eb0238651c0ebbd19e7ac7c335435f3a8af43d914f98587160fc835cca95a382cc622390e2f4b04afda145c6bc92da7af578370003658d8498941386e47bf53e88ffef89852df78575f7430cb485414d28ab2d1d51ef355415f27956d0c601c9bf4506c61cb9e874da5c6ba19813b3d8160075b8fd040d9f940838a6a8111f65e7340ba1ad2e0aad"}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "ab45de10b86cf61f6fe9377f26f2683165e36d755833b73cc35cb08591b9048447ab4a128cf605481c4559965cfc6c1b4df1e1b160f66b8904bb3e582abd3e1f76991b625b7aa8ae3ae98835"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0xc0800) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206010100000000000000000600000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a32000000000c000780000000050005000200"/92], 0x5c}}, 0x0) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r13, 0x401, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x24}}, 0x0) 1.62148908s ago: executing program 1 (id=19782): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) recvmmsg(r6, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r2, 0x1, {0x1}, 0xff}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1.585910753s ago: executing program 3 (id=19783): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006110610000000000950000000000000083cd88e91116f21edfa1f45755044e11ec70d364bafb41cc5178d0d495bacf59b965fb66d53951775094355d0be3d83795f45ba1fbc3fecaf802f751b035a481928c50d3698454fdfd598922452e23160c33a61f0d122adf0bc87a99faf1a9929b1bb710692e8bbe63d4b46b2f826d8d0e547bca3e3e8642f9bbb6ffb9328fb50c5d2c05a720f676f32b2dd6a5ec5bf20524bdd4a263b38c62cdf1b9e882413953b55abcc18543ffe37e6e6988ad47dc19564c4b350163735c71eb66e1ca4cd627b387ef5569d9b65d19688830a5b95267d8d7de4bee0e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006110610000000000950000000000000083cd88e91116f21edfa1f45755044e11ec70d364bafb41cc5178d0d495bacf59b965fb66d53951775094355d0be3d83795f45ba1fbc3fecaf802f751b035a481928c50d3698454fdfd598922452e23160c33a61f0d122adf0bc87a99faf1a9929b1bb710692e8bbe63d4b46b2f826d8d0e547bca3e3e8642f9bbb6ffb9328fb50c5d2c05a720f676f32b2dd6a5ec5bf20524bdd4a263b38c62cdf1b9e882413953b55abcc18543ffe37e6e6988ad47dc19564c4b350163735c71eb66e1ca4cd627b387ef5569d9b65d19688830a5b95267d8d7de4bee0e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.476478674s ago: executing program 2 (id=19785): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40010) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00000004c0)=""/192, &(0x7f0000000100)=0xc0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000002", @ANYRES64=r4, @ANYBLOB="cbd827bd7000fddbdf2502000000080002004000000008000100", @ANYBLOB="5ccb42bb94eaedf609e8d7de0f30c8cfaf8f68009ef56673c6dbdbe9b2e07c86c22603310c5dad69ce92155b4c3a910483dd8b86e9958610d46cc081a1d515de48bca13554e58fdc8b595807f51de0ba0f7f6f87fb45304448aae55c1b48d01a1175842a6fd9", @ANYRES32=r1, @ANYRESHEX=r3, @ANYRES8=r0, @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4020080) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000002", @ANYRES64=r4, @ANYBLOB="cbd827bd7000fddbdf2502000000080002004000000008000100", @ANYBLOB="5ccb42bb94eaedf609e8d7de0f30c8cfaf8f68009ef56673c6dbdbe9b2e07c86c22603310c5dad69ce92155b4c3a910483dd8b86e9958610d46cc081a1d515de48bca13554e58fdc8b595807f51de0ba0f7f6f87fb45304448aae55c1b48d01a1175842a6fd9", @ANYRES32=r1, @ANYRESHEX=r3, @ANYRES8=r0, @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4020080) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0400000069d9c0c8a152440e5720f9221035f47d44ff51b14fb78ae84de8dfcd93b3e9c9c0532a597df9ac86c1feb0d9c24c036c3cbc3b427886707f2ece01d6884befcba9061bac4aebdd8dcb3e7febce7259115e4869b7e4906a46b250fcaf68b0020cc0ad5ed11054029777651136cf3f510813dfa69e7e8279fac0f5b207f9335a1a4a0d4c8b2315f9", @ANYRES16=r6, @ANYBLOB="02002cbd7000fedbdf254500000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0400000069d9c0c8a152440e5720f9221035f47d44ff51b14fb78ae84de8dfcd93b3e9c9c0532a597df9ac86c1feb0d9c24c036c3cbc3b427886707f2ece01d6884befcba9061bac4aebdd8dcb3e7febce7259115e4869b7e4906a46b250fcaf68b0020cc0ad5ed11054029777651136cf3f510813dfa69e7e8279fac0f5b207f9335a1a4a0d4c8b2315f9", @ANYRES16=r6, @ANYBLOB="02002cbd7000fedbdf254500000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x2b, 0x3, 0xfffffffe) getpeername$packet(r13, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(r13, 0x0, &(0x7f00000004c0), 0x80000) (async) r14 = accept4$tipc(r13, 0x0, &(0x7f00000004c0), 0x80000) r15 = accept4$tipc(r14, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x180800) sendmsg$tipc(r15, &(0x7f00000003c0)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="e45bae1c20f626edc702baf0a834d8440e042b5bfdf9a9ea4482d02dca", 0x1d}], 0x1, &(0x7f0000001180)="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", 0x1000, 0x800}, 0x40040) (async) sendmsg$tipc(r15, &(0x7f00000003c0)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="e45bae1c20f626edc702baf0a834d8440e042b5bfdf9a9ea4482d02dca", 0x1d}], 0x1, &(0x7f0000001180)="e4cccd2efb5894b6f114890437109267d10d0b7482cf7b8aa5446e2db58a651e5f7059b1330e3ce1327855bcf2894782590c25e64e8d556facf7e65ccf4b5013a752926c06d299b0ad445012e3e39801add5834399c8c5e73a76678682ab31240ac8f4fe9b2cb51e9a4aa1406b3193630e8f7536d402b535ceef3b81c4c4eb7053ee5fb01cd1f08549d18c034ea852f2920f626957dfbcf95113b776327ebcec9c81419d8d1090c2041052fed97898b9cb23f495c22296435cb8b61c1c059efcedfbf3d5210bf82abab971b426464093a9542b18e9d05b772ccfe31daf9bc9b7b8d04abf9de202fef6c490f5c6e177b32fa407cb426eb72ce31490a8ce6852d45407ef8fea473fec6170bf34e906dade71f6d49f3ab7739ca4cedefdaea4b77d7fc9858d22097bae2a93d26bd537780f374540e06702884161548f815a3d4608d134898a75cddace436d213ef8dd5bc4519beded522a2fdee85b4a962a3114108807ebf2aebe1953bb86b044055b35eae828b4ebe9657af2edc39dd9a17c12b87fd2fb505b8280d07f55795e2c8b2e450d07a61b942f5583cf24d98f0acba58382ee6a41dfd5d1c938546b1e371483a9763e73ef3748bb204d5625d72d14d58fde8b423229dd6d32f64e7e82322068831fae8d7a4bcacc6a0be18bfabf5d128cb37dd794c2243ecfbcefc1cb24c87a50499d136cfdf1f0b201319eaf12dcbc5349a996f34c697e435998fbd32c0e9bea5bd2f7cdb1c0050c3d4fee326e9d48d4929a79444a1c8334e8e809b9b2a3af6988fc8c1552415e9a03e196b5eef31bd3be5366360654c98afb52fcc45a9f4b4a342d32823460115d9f71383bdf16283f901ec9e946e6e021f2726082a7bd99e51d947b6ec12948bf982ab366ce6b7a955b41d9e8f92547ac6b43808f63e9ff6cc5a4b949deb1f22cc765b149a97c9ed598a074aced2ee003c72036bc73a2cc535905310309a5bd0b3fa0dbedc969398e716b3d0e1ced66566aee979109c178e31f54c11635de133b2231cf42461e91bc717f5ea94c3b50163c97e4daa2124fa59c16e72f747e1e8fe27466f44ae0b417d28a3ba07d8db3f5c3542f7828aa9688763d3e5915e3addafb10b517d9ca0a89e54fa819d8aaebbfc5af031479ae31f128beb26215a593b003cc06b9557b5b683ad2bc2af7553f545f94d75d9665a64a78c51fa9a5bd80ac9e8bfacb2cac73a05224bc1cc9744c73cd5ea62141baf49a3564be04a0ba8385f0d1700e275e3a18aea2219d773dd873526b96889e467ab1da9c2141ea8266a801fbc5dacdaaf2d0a14e2f2e17b87f369ae9a4aa260440ef71868ec6d71d0cc85e12b661ee87b2555a45f8dfc223f97891f0e4e049fe5421b62656267496df541a08c7390d1c79f7b61aa51d99b5af92909b8ffccd74639fc3179af2d9a1bf203a1527efa54896d2930657c604454757e44d929d08cd8a2b55457973e939ae004be82c5d8cfd3a7413b86f68368215a3297992e738414e2a3773c9f4e4a515f6a051a9c3718b3be56e005274865474509fc5982b82cfcca4064d3fb91be8084186fe44e93a53b8eff30fb86c132400da45995f26d9c897cf724af16eddcf808ac2bb9014bf8a8e8634afa9082124ee6c6dfa8a22b2d6c7c3153bb774dfd6d8dc54e920847cb91a380541d22895b40c62fafec01f7919f526fed4d1638f29151ea7d32484c04f44d10e3a6fd4adb73ffe3abe955e1e876cd0e9d6b3b9090ae291a24457b34bc394af63900e4f4bbb434b989a972b220c883f9c6f6384ce8be277f842e539796c4afc3f38c48720b9a4874070d29a92729cefd7c50a616cc25087f7c03b5b07415bfc9692539660509018eee379351e05e159c9d5cfa4474abe38d5f9bcd805c9fdc0a9951d152f34bb518d852b4cd6c130d7fb562fc6f2a5e357c406b9e20b36e79f2e41eebd47cfddcb96b5766d93d0db2f2d3168ce4fc0fefcebfab139f1e4517d1e1b64ca19c88e4639c6cf0ac3f07bb745e611bfaeb5d4f23874b4e09e0d3e0195d165afc91f2b37702b47b7e9230492fd24ea78e61661abeef5c9ecccedb9474bbbf19ad8dc9ce37c4df5663fb4ea7a36cd3f0f8f303d30d0aacdbcbd59a01b730b742bf6e17e35fc39cdf5fac6756f4c85d1f9d1b26344465d7464d514dd2a8ecb9e7b3c4dc17d609cec0c3eba5cbb82cdfe9ba52d810399f6d1c12145c7f735cfa5cc84653ae277dca0855a5b621222ecb8c72c3fa5aa21b61c875198fc97736ff2685af6dc4fd465f6894d6969c1d84487f6b7ef54f566b475d0956c93c4dd521c340c3afcc8a556a4c2b096623ce4a8b4d7f6f5d029b4c213036ace45efe89c999f51656428757de2e97a400e88f0e80f486f2ebe2f97e38a4195fed6eab7975b9813220574b7d19f36af6ab2444fd58b8197d161b135b515810ba213f8a1b690fe9ce6f0a6444d1ba3b463bc2c923c29ce6a58665f9f0d61b4f0cd3b1e29e0d560347d9caa2a5bcd8093841cb5562b7f5301cfbdd21e1dbd49af14fe7bb01fad67aede145e42067dee7dcb3bdcfe5f2f2ea4526c68508520ac5b828b6bf6f1a2ab53e42bbcc12f55f0488e15b0cde889aed767f7dd26ce8fec49ee0bc6a3313c04826f8b3d44b8e23e94d9d79807d7f3c1f43d6ed492b99e6ff69765a8f99ccba8af5b769466394f0742315c6b89e7b389f65cc1f388e0b1ab030c92f8cf373e1427860ebf0c2df731084c270fc5b741e1e9109d39223156e7b37800b81d0dfe3f7d2b7f4cb5c22f6002c6d5d140e65e4e3df779c97a71b4aa6d9609e0863d92d250749cf767ac22a851e7d2402a0a85e0bf9be3dba1f6860d8705e0db47f6074296f99e9f256f1724a56b8580053b9f8316086fd51fdf3b6b8ed286b286bcda48732d062efe65d5a76cb3a6fca09b97937d0f8902530cf34adb37138697effa070a4135e8b546eb5f6145fcc138350131dc9014fc678feb1249e8a988bb4113808f559cf416f4c389b2bf5d574b752b0eb7e6b4d19bb91db85271046564a653300fb5bace717ec6dd295353e776f83870d5315f108b38fa704c0928913b2eb438ef313f39d029660c07661fb5e588ff6a54cc312f7628b548ca05e39b7eb8209cd7c55f729f18bba4501c39d8fca503b52ed221e6012a92c4cc968ab2245d1a6a883ac01f201e336441cfd3ee883b1488c7219d51ba7aaf8c7797d7badcc4a9d74623c3585983df014d968ed1c3563e777054293683afb0ad227b563c1760d4b3a61b7c27a6be15ead64017d587113d711ad4de3ce313e7e04a7fac48b33199337a6eb5ce506fafa8ad9863a5c2c0bd646070a0d4f617fadc2d9c6426a20e9635af793b3f5735107e96659e00b33b95154f4d27bb12d43e739db13a0e76f8ddd9eccb44f7d818a89b838d4d02c594d4f7827b1e0b54912b215fb4be49d919a38b5401ee213fe12943fe61baf579c4dd8b9fe70e65085f16b0fa122cc3e7218c82dadf0a76e858664922a29eeb72727914da459af12b3e87b23cb5c53375c84db311a567881f5031d5f62801149ad8e611c74a2e4800d2ca3671d3c8a226c74f3c0fd5e0aa7eb1acb8d89fa69c721ea593e7e45de68ab06a92794e4eabdec195bca2f0a1def8b20fb273f84d962375ae12ab20e5f6985a698281e0209d1319e48ee5b7cc46e805bc39c81cc0d653381158cf5d4a57c4d77c37ae8e73aa9bca03535dff10c6440e3ca048b31c6a614192ac3e1f4f5a1e92a09e511d1825bc8d830842567b2521e77bab2644addaaa0e8c5ae876ce9703cb6384d29614e4f1bf9cdf39b864d45240f18d675c76f67edb4b801c69fd56b02bf3722ca8ea76378d456ce03cdb255acce9c96f586a7739123044688eb1a52f0511b9ba26070292c5a388ca95140b70f11bb0058f9d3c2bad3823e570b5f3c01ac17dde1fba3c434e10d5420683fe7266ded19d9188ae2b2531a409410557d233fa76bdbc3a255493bb7d594656fcfe4654bbafb3264a50e276c48ec3d6a2098b77dc48feab71f43ee0374c6b3f0515cbbfaa5255cea9d827a2abb0830886c0989233d09fd79d9afd10587c93b6a3daa4d9cacd3c5f3601da4174a886359375f4bb5f1c9eef34ca36f538c8ba46f519347d77de68f39f36faff9ddd21925e3908c8c52ad28d600b434206c99e441f06b374111c363cd7a5af23fc4fd98d5aeb4d1c1f29cc8318051510faf958a8548bc0aa8ad8caa99eb1cca394b908f7edfa983f877aa967e17016ec1d10ac8689bed7a194470829cd9766bd2504e8a0699d9c137b65c4d87755ce398d24d391f5d4ea5dc0df9914340120d9b0bd516c8b5d8816d8e3ca5470d0b8a80c8413b7edb0397d1d185ca8ad98cea895c2f338823a85f8907175e69b129e968869f54bf6f33a606d054a13454ada4fa7817ab43fd7df02317e1bf8f4702864b281902d86386d516bd2773b4abb4090f73cd9794054453753181be73ef89796e36549652e4685a72f57693512aa7948a058adb1de5083b7ff57ff0506b91b88e454aa677b63f54290e2eba9e0991d9c116413f509f683eb229f8fe0d7a1a90381fc609fd16828ed65d24636e45a97c14e1948b3c7e72c5ffba7f1ef662c34d5e6eb342e19d5754365cc288411effc71d593de448955215b742b5bed1b8c3345f7de68bdf2a98e297bd7dcba5752a04f56f722294220c75c8968ca0f4cc2478dbaed9877c657465186314e418d8200fc109b35b9e6f3c1f33744205e3a733b57722ad7fea9745536fd1f0fb111494bc17bf81fe80c11b4b83f8cbf8756945ab091ad047826a5b5b0a0c206c9231aa2cd6df387e800ba33e40f280c9c90dd77bde93e93d57787a801e6063e6638216e5b24a73cec6eb9bd61f02d02db29518ab1940c98b3c6aa102d095426a9de2e5cc638685c312814f628132fb98844dda97519a51ab6d0adcf4db85effc6e2b1e21dab0732f415c623870a04c27b011a50cf8909603eccfb64a33e639b9126602bd2b3077d9367229d3b6e385989905532033a73d8fd4b3dca3378aa673292cab03095d16cc3a83fc6ae53485af4c06c629b48ae9f77b502cb5135531268c01865dc46c2e486715e96cecc2f982fb2a36f1d0cbd21bf78be94553a406deef5a131615b5bcb409b4588d09cc2f88606e082d9e64f8915bdf66e7498d8a1f388766e0b6de21990d6afbc8e946a167799dbc2ae5181aa74983a3850fd6bd1ba345e860c7fdc761510fd7f39725bedda79d6b7f6c51af232dfa91a2b673a40482504a032320fc0d78ba6ad41ab254d1a1907920f48c996e369956562fb8a6a0444846ea1b2f21e5b0a16e42266d4463ebe7948c682f56c603a9b6d52de7439d5267b63f12837ba3f8f50b264fb3d69a14a41e910275d6ef8f75c642e1d59e23a22adf244674d69e2f4ce28ecd3088b3fd43bcd312cf6703e2bd02d2b819a7e3f4f572db1b49161675ee162c6f926437895f5ee4bc77bf0fe5ce6a2fc9af4b4aa1fae1544b1ea01ab15991a0881962d897a29e7283fc318bee92a6f03a8787c4fd8a62fd8d00878cb368453f8dd62e8eeb5d00328f8065adfe81d0142c0e2aba4fa9ad7d349863a9167592d70941dca0b2d6fb5f83757db208965337d59810cff23c59833efe503ff4393615ab826c197dd80b532df3788e77d41564d04b2ee7135bcd4ff03cfb2979e9c79748a0827fbe2bb4157df46c895e2b317cb29a53b7e602dd56c6dbee1db1af8fd5d80e14f6326b02cf8fdc1ea81e99f7dbcb821e747cfa7082279848e960ced85775dd7e12618", 0x1000, 0x800}, 0x40040) 1.445488483s ago: executing program 3 (id=19786): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x8000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = accept4$tipc(r2, 0x0, &(0x7f00000000c0), 0x80800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000240)=0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x3, 0x8000) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) accept4$tipc(r2, 0x0, &(0x7f00000000c0), 0x80800) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3) (async) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) (async) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) (async) 1.291964377s ago: executing program 1 (id=19787): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000944d4536000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x71, 0x61, 0x30, 0x30]}}, &(0x7f0000000280)=""/126, 0x2e, 0x7e, 0x1, 0x151}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xf, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x2, 0x9, 0x9, 0xffffffffffffffc0, 0x1}, @jmp={0x5, 0x1, 0x2, 0x1, 0xb, 0xffffffffffffffe0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x5, 0x2, 0x2, 0x6, 0x71d}, @jmp={0x5, 0x1, 0x3, 0x7, 0x4, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x2, 0x1f, &(0x7f00000001c0)=""/31, 0x41000, 0x48, '\x00', r4, @fallback=0x28, r5, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x6, 0x1, 0x3}, 0x10, r7, r1, 0x9, &(0x7f0000000440)=[r0, r0, r0, r8, r0, r0, r0, r0], &(0x7f0000000580)=[{0x4, 0x3, 0x4, 0x1}, {0x5, 0x3, 0xe, 0x5}, {0x1, 0x3, 0x10, 0x5}, {0x3, 0x3, 0x9, 0xb}, {0x5, 0x1, 0xc, 0x7}, {0x5, 0x1, 0xf, 0x9}, {0x1, 0x5, 0x7, 0xc}, {0x3, 0x5, 0xf, 0x9}, {0x3, 0x3, 0x3, 0x5}], 0x10, 0x1db}, 0x94) 1.241285399s ago: executing program 3 (id=19789): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$kcm(0x2, 0x5, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pppoe(0x18, 0x1, 0x0) tee(r2, r3, 0x202, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82fe5c7241545e66, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0x9}, {0x10000002, 0x4, 0x8, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) listen(0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) (async) getpid() (async) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80c0) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async) r6 = socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40040d4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.145047157s ago: executing program 1 (id=19790): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x19, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x180, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fc000000000000000000000000000000000000044e2300100a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000004000027ef79c7000000000000eaffffffffffffff0000004000000000000000fdffffffffffffff0000000000ffffff000000000000000000000000000000002200000000000000070000000000004000010200000000004c2859ec5dda7fdaaca7736b2110eb0f86b3ba5901674d047e570b00c3c37967b2d19b5e1ccd27dcfd7242e6461d4797de47a24d504620d41f3406f1edca0d9f554a2db0bf0af5ca22f85128c4244fa33a3c6da021445a674d34122bb5c74c0004c775b4dc7378bbbf009998ddfa0e27c98ad30aca90d6b0f6475389204f91d6cf9904628f609f8b37f9af0d9c1acaed480cbebd79fbfdc39b0063930abbc72c6f5fe862f9040156dc4929daa7739c38d41f1cf2c66bc145e8b41fb5a297b5b198cc6557fab8fa11d600000000000000000000000000000000000000000000000023f0831e31a6279eee52fa62b3717847d509ff6bcb7f9f2f"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x891c, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r1, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) 1.136846797s ago: executing program 3 (id=19791): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.06501784s ago: executing program 2 (id=19792): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 960.670269ms ago: executing program 2 (id=19794): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x4a}, 0x28) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x4, 0x0, &(0x7f0000000180)) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r10, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) close(0xffffffffffffffff) 959.599961ms ago: executing program 1 (id=19795): listen(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x40000101, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1", 0x6f}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c1000feffffff00000000", 0x58}], 0x1) 946.303939ms ago: executing program 3 (id=19796): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @mcast2, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@rthdr={{0x18, 0x29, 0x39, {0x3a, 0x0, 0x0, 0x4}}}], 0x18}}], 0x2, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) recvmmsg(r0, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@tipc=@name, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/67, 0x43}], 0x4, &(0x7f0000000440)=""/45, 0x2d}, 0x1}], 0x1, 0x0, &(0x7f00000004c0)={0x77359400}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000500)={'pimreg0\x00', {0x2, 0x4e23, @empty}}) 784.558615ms ago: executing program 2 (id=19798): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@mpls_getnetconf={0x0, 0x52, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x0, 0x6, 0x4}]}, 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x81, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x4e22, 0x1, @private1, 0xfffffffd}, 0x1, {[0x8, 0xd, 0x7, 0xa, 0xf, 0x4, 0x4f, 0x180000]}}, 0x5c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x343040, 0x0) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f00000000c0)) 516.138763ms ago: executing program 0 (id=19800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) 433.278101ms ago: executing program 0 (id=19801): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x404000, &(0x7f0000000080)={@align=0x3, {0x5, 0xfffa, 0x3}}, 0x45e, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x67}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x2, 0x7fffffff, {{0x13, 0x4, 0x0, 0x30, 0x4c, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @private=0xa010100, {[@timestamp={0x44, 0x10, 0xbe, 0x0, 0x3, [0x6, 0x3ff, 0x4]}, @generic={0x89, 0x9, "51566349833ed3"}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x3, [{@remote, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xffffffff}, {@rand_addr=0x64010100}]}, @noop, @noop]}}}}}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f, 0x10}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd26, 0x9, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7c}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x27}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x2, 0x6a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 432.579038ms ago: executing program 0 (id=19802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000800000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703008000000000000000000c000000b70000000000000085100000ffffffff1813000081b61497a9f3dd9dc6d79ebef99397244f924d6f237234a8be5c86c01ccfece24ddf816fe8cdb60b748744dd4bcf46af518e60d9400000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000000000000000035503006a0000002743000004000000186000000f00000000000000faffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f000000f300)=[{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000010c0)="73d3f8ee4ed126a81f76835bc2f6cc0272d130d52e2983f3d50c16cbd2d20598c400505b5518b59eb5fdbf", 0x2b}, {0x0}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0xcb7b, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xa0, "81ed2c44ffaf912c0e9db023a9b6dbddc8659b852f69bc0b365bf670dcdbe64ad94861355e098d32409ccdf6e11ba9b9b1773846dccfa0de3f6f1cce73bd92088c720151a7a179b073cedff2e199a09dc54c4a28392e084a8e69cc8f03ea138071c74cd513a5e857b0507aa7a9b8ddc9e06e384d44f33f7853998aa03a8c52fed4e358132600a264474ce05631844208b81256bf7b7c464659747ec4e686f833"}, &(0x7f00000000c0)=0xa8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x5, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r9, 0x3, 0x7}, 0xc) r10 = socket(0x10, 0x80003, 0x0) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r11) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r12, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0xd8, r12, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc51b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x464014e90ff50416) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r9, 0xc, 0x8, 0x401, 0x7, 0x4279}, 0x14) 310.367476ms ago: executing program 0 (id=19803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x169}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000000100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 103.053065ms ago: executing program 0 (id=19804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x103000, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'xfrm0\x00', @local}) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000007110b800000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.261625ms ago: executing program 0 (id=19805): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0x4e, 0x0, &(0x7f0000000bc0)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000200000400000000000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xe}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1000}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x9472}]}, 0x2c}}, 0x88c4) 231.605µs ago: executing program 1 (id=19806): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) 0s ago: executing program 3 (id=19807): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) close(r8) write$nci(r8, &(0x7f0000000280)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x4}, 0x4) (async) write$nci(r8, &(0x7f0000000280)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x4}, 0x4) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): allbacks suppressed [ 1738.081899][ T7366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1738.108236][ T7367] team0: Port device team_slave_0 removed [ 1738.141916][ T7375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1738.198923][ T7371] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1738.223550][ T7371] netlink: 184 bytes leftover after parsing attributes in process `syz.0.18326'. [ 1738.252025][ T7373] vcan0: entered promiscuous mode [ 1738.257419][ T7373] vcan0: entered allmulticast mode [ 1738.383121][T18405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.395902][T18405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.408423][T18405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1738.442140][ T7384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1738.645877][T18405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.666972][T18405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.685552][T18405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1738.714846][ T7394] tipc: Enabled bearer , priority 0 [ 1738.751129][ T7399] syzkaller0: entered promiscuous mode [ 1738.764485][ T7399] syzkaller0: entered allmulticast mode [ 1738.797323][ T7391] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1738.806010][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18334'. [ 1738.873279][ T7410] openvswitch: netlink: Flow key attr not present in new flow. [ 1738.986668][T18405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.997332][T18405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.008615][T18405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1739.372309][ T7406] bridge_slave_0 (unregistering): left promiscuous mode [ 1739.379513][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.494803][T21406] Bluetooth: hci2: command tx timeout [ 1739.505037][ T7399] tipc: Resetting bearer [ 1739.528875][ T7390] tipc: Resetting bearer [ 1739.571476][ T7390] tipc: Disabling bearer [ 1739.681276][ T7421] xt_bpf: check failed: parse error [ 1739.694698][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18337'. [ 1739.741092][T18405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.770136][T18405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.781924][T18405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1740.010573][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18341'. [ 1740.048792][ T7435] netlink: zone id is out of range [ 1740.056493][ T7435] netlink: zone id is out of range [ 1740.068100][ T7435] netlink: zone id is out of range [ 1740.073993][ T7435] netlink: zone id is out of range [ 1740.079449][ T7435] netlink: zone id is out of range [ 1740.087094][ T7435] netlink: zone id is out of range [ 1740.131015][ T7446] validate_nla: 2 callbacks suppressed [ 1740.131034][ T7446] netlink: 'syz.2.18343': attribute type 32 has an invalid length. [ 1740.193310][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18343'. [ 1740.246912][ T7440] bond0: option fail_over_mac: invalid value (16) [ 1740.256774][ T7440] bond0 (unregistering): Released all slaves [ 1740.362643][ T7446] bond11: Setting coupled_control to off (0) [ 1740.416369][ T7337] chnl_net:caif_netlink_parms(): no params data found [ 1740.545838][ T7455] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 1740.990048][T18405] gretap0 (unregistering): left promiscuous mode [ 1741.048589][T18405] bond4 (unregistering): (slave gretap3): Releasing active interface [ 1741.087108][T18405] dvmrp0 (unregistering): left allmulticast mode [ 1741.131812][T18405] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1741.249969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 1741.258158][ C0] lec:lec_tx_timeout: lec0 [ 1741.328911][T18405] bond0 (unregistering): left promiscuous mode [ 1741.335406][T18405] bond_slave_0: left promiscuous mode [ 1741.341632][T18405] bond_slave_1: left promiscuous mode [ 1741.355094][T18405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.369544][T18405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1741.382070][T18405] bond0 (unregistering): Released all slaves [ 1741.396580][T18405] bond1 (unregistering): Released all slaves [ 1741.417645][T18405] bond2 (unregistering): Released all slaves [ 1741.439371][T18405] bond3 (unregistering): Released all slaves [ 1741.467811][T18405] bond4 (unregistering): Released all slaves [ 1741.491181][T18405] bond5 (unregistering): Released all slaves [ 1741.515739][T18405] bond6 (unregistering): Released all slaves [ 1741.538709][T18405] bond7 (unregistering): Released all slaves [ 1741.565686][T18405] bond8 (unregistering): (slave veth9): Releasing active interface [ 1741.574246][T21406] Bluetooth: hci2: command tx timeout [ 1741.582668][T18405] bond8 (unregistering): Released all slaves [ 1741.855289][T18405] tipc: Disabling bearer [ 1741.861577][T18405] tipc: Disabling bearer [ 1741.883711][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.894033][ T7412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1741.904280][T18405] tipc: Left network mode [ 1741.971462][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.999803][ T7337] bridge_slave_0: entered allmulticast mode [ 1742.034817][ T7337] bridge_slave_0: entered promiscuous mode [ 1742.074725][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.082668][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.090291][ T7337] bridge_slave_1: entered allmulticast mode [ 1742.114384][ T7337] bridge_slave_1: entered promiscuous mode [ 1742.300982][ T7337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.420964][ T7337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.614509][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18355'. [ 1742.658650][ T7505] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18355'. [ 1742.673123][ T7337] team0: Port device team_slave_0 added [ 1742.700135][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18355'. [ 1742.781882][ T7337] team0: Port device team_slave_1 added [ 1742.868768][ T7509] bridge0: port 1(ipvlan0) entered blocking state [ 1742.876261][ T7509] bridge0: port 1(ipvlan0) entered disabled state [ 1742.886335][ T7509] ipvlan0: entered allmulticast mode [ 1742.903869][ T7509] bridge0: entered allmulticast mode [ 1742.912251][ T7509] ipvlan0: left allmulticast mode [ 1742.917634][ T7509] bridge0: left allmulticast mode [ 1743.022862][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.047913][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.121144][ T7337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.176600][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1743.189487][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.216861][ T7337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1743.423692][ T7337] hsr_slave_0: entered promiscuous mode [ 1743.442564][ T7337] hsr_slave_1: entered promiscuous mode [ 1743.449154][ T7337] debugfs: 'hsr0' already exists in 'hsr' [ 1743.489139][ T7337] Cannot create hsr debugfs directory [ 1743.660036][T21406] Bluetooth: hci2: command tx timeout [ 1744.095610][T18405] hsr_slave_1: left promiscuous mode [ 1744.118888][T18405] veth0_macvtap: left promiscuous mode [ 1744.142814][ T7546] sctp: [Deprecated]: syz.0.18362 (pid 7546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1744.142814][ T7546] Use struct sctp_sack_info instead [ 1744.161007][T18405] : left promiscuous mode [ 1744.165650][T18405] veth0_vlan: left promiscuous mode [ 1744.197561][ T7548] ipt_ECN: cannot use operation on non-tcp rule [ 1744.226232][ T7548] ipt_ECN: cannot use operation on non-tcp rule [ 1744.401707][T18405] pimreg (unregistering): left allmulticast mode [ 1744.612001][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18365'. [ 1744.875518][ T7552] tap0: tun_chr_ioctl cmd 1074025678 [ 1744.886206][ T7552] tap0: group set to 0 [ 1745.338575][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18371'. [ 1746.116007][ T7527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1746.153843][ T7337] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1746.232815][ T7337] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1746.276612][ T7596] netlink: 80 bytes leftover after parsing attributes in process `syz.2.18372'. [ 1746.321631][ T7337] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1746.340414][ T7601] netlink: 212 bytes leftover after parsing attributes in process `syz.3.18374'. [ 1746.369033][ T7337] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1746.397065][ T7595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.412773][ T7601] net_ratelimit: 48 callbacks suppressed [ 1746.412792][ T7601] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1746.459667][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18375'. [ 1746.472474][ T7601] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1746.547301][ T7617] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1746.565124][ T7617] syzkaller0: entered promiscuous mode [ 1746.571404][ T7617] syzkaller0: entered allmulticast mode [ 1746.780935][ T7337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.835304][ T7337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.865854][T27540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.873137][T27540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1746.936282][T18398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.943572][T18398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.100576][ T7644] netlink: 'syz.4.18381': attribute type 18 has an invalid length. [ 1747.277848][ T7655] netlink: 'syz.4.18384': attribute type 29 has an invalid length. [ 1747.305260][ T7655] netlink: 'syz.4.18384': attribute type 29 has an invalid length. [ 1747.344993][ T7655] netlink: 'syz.4.18384': attribute type 29 has an invalid length. [ 1747.400069][ T7655] netlink: 500 bytes leftover after parsing attributes in process `syz.4.18384'. [ 1747.717148][ T7337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1747.824637][ T7681] netlink: 'syz.3.18392': attribute type 10 has an invalid length. [ 1747.887888][ T7680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1747.951910][ T7337] veth0_vlan: entered promiscuous mode [ 1748.050973][ T7337] veth1_vlan: entered promiscuous mode [ 1748.155009][ T7337] veth0_macvtap: entered promiscuous mode [ 1748.186830][ T7337] veth1_macvtap: entered promiscuous mode [ 1748.254532][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1748.285605][ T7705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18396'. [ 1748.308883][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1748.353611][T18403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.371506][T18403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.418646][T18403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.446743][T18403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.633873][ T7717] netlink: 'syz.2.18400': attribute type 5 has an invalid length. [ 1748.666898][T18405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1748.692152][T18405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1748.822605][T18398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1748.845991][T18398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1748.955258][ T7735] netlink: 7 bytes leftover after parsing attributes in process `syz.0.18405'. [ 1748.967353][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18406'. [ 1749.405659][ T7751] vcan0: entered promiscuous mode [ 1749.426381][ T7751] vcan0: entered allmulticast mode [ 1749.661014][ T7766] netlink: 72 bytes leftover after parsing attributes in process `syz.4.18409'. [ 1749.799369][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18314'. [ 1750.001671][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d37c400: rx timeout, send abort [ 1750.149984][ T7786] netlink: 'syz.4.18414': attribute type 1 has an invalid length. [ 1750.277131][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1750.289095][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1750.307487][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1750.316005][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1750.324330][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1750.356223][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.502623][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d2d9c00: rx timeout, send abort [ 1750.511673][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d37c400: abort rx timeout. Force session deactivation [ 1750.697243][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18416'. [ 1750.860476][ T7809] bond5: entered promiscuous mode [ 1750.865606][ T7809] bond5: entered allmulticast mode [ 1750.886867][ T7809] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1750.901869][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18419'. [ 1750.918031][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18416'. [ 1751.011116][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d2d9c00: abort rx timeout. Force session deactivation [ 1751.032255][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18419'. [ 1751.219837][ T7790] ip6_vti0 speed is unknown, defaulting to 1000 [ 1751.482055][ T7847] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.18427'. [ 1751.513524][ T7845] syzkaller0: entered promiscuous mode [ 1751.524043][ T7845] syzkaller0: entered allmulticast mode [ 1751.545366][ T7847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1751.703856][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18429'. [ 1751.832005][ T7847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 1751.975782][ T7857] macvlan2: entered promiscuous mode [ 1751.998581][ T7857] macvlan2: entered allmulticast mode [ 1752.015978][ T7867] netlink: 'syz.0.18431': attribute type 8 has an invalid length. [ 1752.028866][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18431'. [ 1752.086425][ T7867] bond0: entered promiscuous mode [ 1752.092336][ T7867] bond_slave_0: entered promiscuous mode [ 1752.098308][ T7867] bond_slave_1: entered promiscuous mode [ 1752.108653][ T7867] gretap0: entered promiscuous mode [ 1752.119117][ T7867] bond0: left promiscuous mode [ 1752.124620][ T7867] bond_slave_0: left promiscuous mode [ 1752.132205][ T7867] bond_slave_1: left promiscuous mode [ 1752.139510][ T7867] gretap0: left promiscuous mode [ 1752.164415][T27540] bridge_slave_0: left allmulticast mode [ 1752.171115][T27540] bridge_slave_0: left promiscuous mode [ 1752.177021][T27540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.377258][ T5140] Bluetooth: hci1: command tx timeout [ 1752.510585][T27540] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1752.534793][T27540] bond8 (unregistering): (slave gretap2): Releasing active interface [ 1752.837110][T27540] team0: Port device macvlan2 removed [ 1752.848276][T27540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.862879][T27540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.877526][T27540] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1752.887598][T27540] bond0 (unregistering): Released all slaves [ 1752.898498][T27540] bond1 (unregistering): Released all slaves [ 1752.915423][T27540] bond2 (unregistering): Released all slaves [ 1752.931360][T27540] bond3 (unregistering): Released all slaves [ 1752.946550][T27540] bond4 (unregistering): Released all slaves [ 1752.975452][T27540] bond5 (unregistering): Released all slaves [ 1752.990873][T27540] bond6 (unregistering): Released all slaves [ 1753.011461][T27540] bond7 (unregistering): Released all slaves [ 1753.038338][T27540] bond8 (unregistering): Released all slaves [ 1753.058502][T27540] bond9 (unregistering): Released all slaves [ 1753.074441][T27540] bond10 (unregistering): Released all slaves [ 1753.093584][T27540] bond11 (unregistering): Released all slaves [ 1753.345777][ T7900] netlink: 'syz.0.18438': attribute type 5 has an invalid length. [ 1753.355075][ T7900] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18438'. [ 1753.397136][T27540] tipc: Left network mode [ 1753.634169][ T7790] chnl_net:caif_netlink_parms(): no params data found [ 1754.272315][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.303407][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18448'. [ 1754.321907][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.335414][ T7790] bridge_slave_0: entered allmulticast mode [ 1754.364055][ T7790] bridge_slave_0: entered promiscuous mode [ 1754.457020][ T5140] Bluetooth: hci1: command tx timeout [ 1754.507782][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.515527][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.523865][ T7790] bridge_slave_1: entered allmulticast mode [ 1754.535085][ T7790] bridge_slave_1: entered promiscuous mode [ 1754.587330][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18451'. [ 1754.635173][ T7790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.673447][ T7790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.779452][ T7790] team0: Port device team_slave_0 added [ 1754.815625][ T7979] nbd: must specify at least one socket [ 1754.821894][ T7983] nbd: must specify at least one socket [ 1754.837652][ T7790] team0: Port device team_slave_1 added [ 1754.856408][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1754.902573][ T7979] macvtap1: entered promiscuous mode [ 1754.908138][ T7979] macvtap1: entered allmulticast mode [ 1754.916837][ T7979] veth1_vlan: entered allmulticast mode [ 1755.015715][ T7974] macvtap2: entered promiscuous mode [ 1755.030482][ T7974] macvtap2: entered allmulticast mode [ 1755.175702][ T7983] macvtap2: entered promiscuous mode [ 1755.184187][ T7983] macvtap2: entered allmulticast mode [ 1755.234072][ T8003] x_tables: unsorted underflow at hook 2 [ 1755.242802][ T8003] openvswitch: netlink: IP tunnel dst address not specified [ 1755.255679][ T8003] x_tables: unsorted underflow at hook 2 [ 1755.401025][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.427997][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.472115][ T7790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.551216][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.558230][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.609828][ T7790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.817781][ T8026] __nla_validate_parse: 34 callbacks suppressed [ 1755.817801][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1755.878223][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1755.909831][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1755.920004][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1755.960933][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1755.979042][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1755.995182][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1756.004874][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1756.014447][T27540] hsr_slave_0: left promiscuous mode [ 1756.024833][T27540] hsr_slave_1: left promiscuous mode [ 1756.040713][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1756.085720][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1756.425895][ T8016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1756.536899][ T5140] Bluetooth: hci1: command tx timeout [ 1756.879122][T27540] vlan1 (unregistering): left allmulticast mode [ 1756.887344][T27540] veth0_vlan (unregistering): left allmulticast mode [ 1756.999236][T27540] team0 (unregistering): Port device team_slave_1 removed [ 1757.154782][ T7790] hsr_slave_0: entered promiscuous mode [ 1757.165493][ T7790] hsr_slave_1: entered promiscuous mode [ 1757.222712][ T8061] syz_tun: entered allmulticast mode [ 1757.342696][ T8061] syz_tun: left allmulticast mode [ 1757.398755][ T8071] netlink: 'syz.0.18476': attribute type 7 has an invalid length. [ 1757.409255][ T8070] netlink: 'syz.1.18475': attribute type 8 has an invalid length. [ 1757.458642][ T8070] bond0: entered promiscuous mode [ 1757.479913][ T8070] bond_slave_0: entered promiscuous mode [ 1757.508194][ T8070] bond_slave_1: entered promiscuous mode [ 1757.534479][ T8070] gretap0: entered promiscuous mode [ 1757.611296][ T8070] bond0: left promiscuous mode [ 1757.616257][ T8070] bond_slave_0: left promiscuous mode [ 1757.624979][ T8070] bond_slave_1: left promiscuous mode [ 1757.643533][ T8070] gretap0: left promiscuous mode [ 1757.824368][T27540] IPVS: stop unused estimator thread 0... [ 1758.436647][ T8130] netlink: 'syz.3.18492': attribute type 8 has an invalid length. [ 1758.474194][ T8119] xfrm2: entered allmulticast mode [ 1758.540480][ T8130] bond0: entered promiscuous mode [ 1758.554934][ T8137] nbd: must specify at least one socket [ 1758.579729][ T8130] bond_slave_0: entered promiscuous mode [ 1758.594189][ T8130] bond_slave_1: entered promiscuous mode [ 1758.612266][ T8130] gretap0: entered promiscuous mode [ 1758.621820][ T5140] Bluetooth: hci1: command tx timeout [ 1758.654767][ T8130] bond0: left promiscuous mode [ 1758.677125][ T8130] bond_slave_0: left promiscuous mode [ 1758.705020][ T8130] bond_slave_1: left promiscuous mode [ 1758.720516][ T8130] gretap0: left promiscuous mode [ 1758.902208][ T8141] syzkaller0: entered promiscuous mode [ 1758.922895][ T8141] syzkaller0: entered allmulticast mode [ 1759.236481][ T7790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1759.283258][ T7790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1759.319065][ T7790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1759.377119][ T8178] ksmbd: Unknown IPC event: 8, ignore. [ 1759.409335][ T7790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1759.776562][ T8210] netlink: 'syz.3.18506': attribute type 8 has an invalid length. [ 1759.832573][ T8210] bridge2: entered promiscuous mode [ 1760.047845][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1760.163082][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.207700][T18390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.214982][T18390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1760.273283][T18389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.280519][T18389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.331169][ T8236] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1760.360747][ T8236] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1760.502315][ T8247] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1760.596199][ T8252] mac80211_hwsim hwsim156 wlan0: entered promiscuous mode [ 1760.822994][ T8271] __nla_validate_parse: 42 callbacks suppressed [ 1760.823016][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18519'. [ 1760.898485][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18519'. [ 1761.043221][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1761.162281][ T7790] veth0_vlan: entered promiscuous mode [ 1761.195560][ T7790] veth1_vlan: entered promiscuous mode [ 1761.249159][ T7790] veth0_macvtap: entered promiscuous mode [ 1761.291341][ T7790] veth1_macvtap: entered promiscuous mode [ 1761.347584][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18522'. [ 1761.357070][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.385012][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.396434][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1761.412726][T18389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.430791][T18389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.444519][ T8297] netlink: 'syz.3.18522': attribute type 3 has an invalid length. [ 1761.466508][T18389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.492278][T18389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.667223][ T8307] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.18524'. [ 1763.567254][ T8256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1763.715274][T18394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.747622][T18394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.780942][ T8316] netlink: 'syz.3.18526': attribute type 8 has an invalid length. [ 1763.792535][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18526'. [ 1763.814536][ T8316] bond0: entered promiscuous mode [ 1763.823295][ T8316] bond_slave_0: entered promiscuous mode [ 1763.837873][ T8316] bond_slave_1: entered promiscuous mode [ 1763.838859][T18394] tipc: Subscription rejected, illegal request [ 1763.851924][ T8316] gretap0: entered promiscuous mode [ 1763.862423][ T8316] bond0: left promiscuous mode [ 1763.867449][ T8316] bond_slave_0: left promiscuous mode [ 1763.874218][ T8316] bond_slave_1: left promiscuous mode [ 1763.882362][ T8316] gretap0: left promiscuous mode [ 1763.915050][ T8319] vlan1: entered allmulticast mode [ 1763.921478][ T8319] veth0_vlan: entered allmulticast mode [ 1763.951393][T27540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.965065][T27540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.249334][ T8336] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18412'. [ 1764.283147][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18412'. [ 1764.309090][ T8336] Bluetooth: MGMT ver 1.23 [ 1764.468379][T21406] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1764.478685][T21406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1764.491312][T21406] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1764.499547][T21406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1764.508612][T21406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1764.576556][ T8357] netlink: 'syz.2.18537': attribute type 21 has an invalid length. [ 1764.585120][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18537'. [ 1764.730732][ T8357] syzkaller0: entered promiscuous mode [ 1764.736723][ T8357] syzkaller0: entered allmulticast mode [ 1765.173947][ T8339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.540392][ T5140] Bluetooth: hci3: command tx timeout [ 1766.835881][ T8351] ip6_vti0 speed is unknown, defaulting to 1000 [ 1766.946278][T18389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.044251][T18389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.116985][T18389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.341818][ T8341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1767.350526][ T8351] chnl_net:caif_netlink_parms(): no params data found [ 1767.358835][ T8345] netlink: 'syz.1.18535': attribute type 2 has an invalid length. [ 1767.521442][ T8373] netlink: 'syz.3.18539': attribute type 8 has an invalid length. [ 1767.562566][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18539'. [ 1767.605238][T18389] bridge_slave_1: left allmulticast mode [ 1767.625547][T18389] bridge_slave_1: left promiscuous mode [ 1767.642331][T18389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.925826][T18389] gretap0 (unregistering): left promiscuous mode [ 1768.011440][ T8406] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1768.035365][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18545'. [ 1768.062290][ T8406] openvswitch: netlink: Unknown nsh attribute 0 [ 1768.215046][T18389] bond1 (unregistering): Released all slaves [ 1768.232911][T18389]  (unregistering): Released all slaves [ 1768.247944][T18389] bond2 (unregistering): Released all slaves [ 1768.265958][T18389] bond3 (unregistering): Released all slaves [ 1768.294265][T18389] bond4 (unregistering): Released all slaves [ 1768.310452][T18389] bond0 (unregistering): Released all slaves [ 1768.327757][T18389] bond5 (unregistering): Released all slaves [ 1768.347810][ T8373] bond0: entered promiscuous mode [ 1768.353512][ T8373] bond_slave_0: entered promiscuous mode [ 1768.359533][ T8373] bond_slave_1: entered promiscuous mode [ 1768.367746][ T8373] gretap0: entered promiscuous mode [ 1768.378662][ T8373] bond0: left promiscuous mode [ 1768.384479][ T8373] bond_slave_0: left promiscuous mode [ 1768.391304][ T8373] bond_slave_1: left promiscuous mode [ 1768.398747][ T8373] gretap0: left promiscuous mode [ 1768.483138][ T8384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1768.598339][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18547'. [ 1768.611040][ T5140] Bluetooth: hci3: command tx timeout [ 1768.669378][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18547'. [ 1768.688183][T18389] : left promiscuous mode [ 1768.727900][ T8413] netlink: 148 bytes leftover after parsing attributes in process `syz.3.18547'. [ 1768.750515][ T8414] netlink: 148 bytes leftover after parsing attributes in process `syz.3.18547'. [ 1768.811396][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.818733][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.837253][ T8351] bridge_slave_0: entered allmulticast mode [ 1768.846253][ T8351] bridge_slave_0: entered promiscuous mode [ 1768.882179][T18389] tipc: Disabling bearer [ 1768.903342][T18389] tipc: Left network mode [ 1768.909791][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.926708][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.973243][ T8351] bridge_slave_1: entered allmulticast mode [ 1768.996187][ T8351] bridge_slave_1: entered promiscuous mode [ 1769.155594][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.247009][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.426971][ T8443] syzkaller0: entered promiscuous mode [ 1769.435642][ T8443] syzkaller0: entered allmulticast mode [ 1769.485569][ T8351] team0: Port device team_slave_0 added [ 1769.538502][ T8351] team0: Port device team_slave_1 added [ 1769.577892][ T8421] netlink: 'syz.1.18549': attribute type 1 has an invalid length. [ 1769.599387][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18549'. [ 1769.655858][ T8421] netlink: 9 bytes leftover after parsing attributes in process `syz.1.18549'. [ 1769.746205][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18556'. [ 1769.798910][ T8466] tipc: Started in network mode [ 1769.804200][ T8466] tipc: Node identity ba2ac2fc6dd5, cluster identity 4711 [ 1769.815376][ T8466] tipc: Enabled bearer , priority 0 [ 1769.848291][ T8435] bond1: option xmit_hash_policy: invalid value (64) [ 1769.857684][ T8435] bond1 (unregistering): Released all slaves [ 1769.886040][ T8421] 0: renamed from hsr_slave_1 (while UP) [ 1769.894945][ T8421] 0: entered allmulticast mode [ 1769.900608][ T8421] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1769.926324][ T8471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1769.959994][ T8471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.992632][ T8471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.004136][ T8471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.056697][ T8439] tipc: Resetting bearer [ 1770.124212][ T8439] tipc: Disabling bearer [ 1770.160737][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.192706][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.233198][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.361352][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.370010][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18560'. [ 1770.391025][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.474474][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.501795][ T8495] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1770.631403][ T8498] tipc: Started in network mode [ 1770.669696][ T8498] tipc: Node identity ac1414aa, cluster identity 4711 [ 1770.694956][ T5140] Bluetooth: hci3: command tx timeout [ 1770.712478][ T8498] tipc: Enabled bearer , priority 10 [ 1770.948902][ T8351] hsr_slave_0: entered promiscuous mode [ 1770.978380][ T8351] hsr_slave_1: entered promiscuous mode [ 1770.985356][ T8351] debugfs: 'hsr0' already exists in 'hsr' [ 1770.993273][ T8351] Cannot create hsr debugfs directory [ 1771.007740][T18389] bond_slave_0: left promiscuous mode [ 1771.016470][ T8515] netlink: 'syz.3.18567': attribute type 1 has an invalid length. [ 1771.038886][ T8515] netlink: 'syz.3.18567': attribute type 1 has an invalid length. [ 1771.047807][T18389] hsr_slave_0: left promiscuous mode [ 1771.060205][T18389] hsr_slave_1: left promiscuous mode [ 1771.066555][T18389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.096459][T18389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1771.756333][ T5876] tipc: Node number set to 2886997162 [ 1771.914415][ T8544] netlink: 'syz.1.18571': attribute type 11 has an invalid length. [ 1771.945899][ T8543] syzkaller0: entered promiscuous mode [ 1771.951889][ T8543] syzkaller0: entered allmulticast mode [ 1771.964769][ T9135] lec:lec_start_xmit: lec0:No lecd attached [ 1772.127790][ T8552] netlink: 'syz.3.18573': attribute type 1 has an invalid length. [ 1772.228151][ T8543] tipc: Started in network mode [ 1772.233236][ T8543] tipc: Node identity 3eb9d4027b33, cluster identity 4711 [ 1772.241172][ T8543] tipc: Enabled bearer , priority 0 [ 1772.309238][ T8552] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1772.333956][ T8537] tipc: Resetting bearer [ 1772.444373][ T8537] tipc: Disabling bearer [ 1772.468794][ T8561] netlink: 'syz.1.18577': attribute type 8 has an invalid length. [ 1772.558372][ T8561] bond0: entered promiscuous mode [ 1772.564013][ T8561] bond_slave_0: entered promiscuous mode [ 1772.571673][ T8561] bond_slave_1: entered promiscuous mode [ 1772.578802][ T8565] __nla_validate_parse: 2 callbacks suppressed [ 1772.578822][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18578'. [ 1772.582252][ T8561] gretap0: entered promiscuous mode [ 1772.603251][ T8561] bond0: left promiscuous mode [ 1772.608081][ T8561] bond_slave_0: left promiscuous mode [ 1772.616863][ T8561] bond_slave_1: left promiscuous mode [ 1772.623995][ T8561] gretap0: left promiscuous mode [ 1772.684615][ T8559] syzkaller0: entered promiscuous mode [ 1772.706475][ T8559] syzkaller0: entered allmulticast mode [ 1772.770053][ T5140] Bluetooth: hci3: command tx timeout [ 1772.970488][ T8575] netlink: 'syz.3.18580': attribute type 1 has an invalid length. [ 1772.984700][ T8571] syzkaller0: entered promiscuous mode [ 1772.990518][ T8571] syzkaller0: entered allmulticast mode [ 1773.873433][ T8600] netlink: 'syz.2.18585': attribute type 1 has an invalid length. [ 1773.926446][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18585'. [ 1775.194974][ T8600] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1775.285956][ T8605] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1775.574665][ T8612] syzkaller0: entered promiscuous mode [ 1775.581162][ T8620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18592'. [ 1775.582797][ T8612] syzkaller0: entered allmulticast mode [ 1775.656452][ T8612] tipc: Enabled bearer , priority 0 [ 1775.716687][ T8611] tipc: Resetting bearer [ 1775.750367][ T8630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1775.761231][ T8611] tipc: Disabling bearer [ 1775.784922][ T8626] netlink: 'syz.2.18593': attribute type 29 has an invalid length. [ 1775.808062][ T8632] netlink: 'syz.2.18593': attribute type 29 has an invalid length. [ 1775.915770][ T8351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1775.973849][ T8351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1776.035186][ T8351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1776.090711][ T8351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1776.141380][ T8655] netlink: 'syz.0.18599': attribute type 26 has an invalid length. [ 1776.149364][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18599'. [ 1776.449294][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18604'. [ 1776.460613][ T8668] syzkaller0: entered promiscuous mode [ 1776.466339][ T8668] syzkaller0: entered allmulticast mode [ 1777.259639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5290 ms [ 1777.267784][ C0] lec:lec_tx_timeout: lec0 [ 1779.288058][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18607'. [ 1779.368001][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.376279][ T8740] netlink: 'syz.0.18608': attribute type 10 has an invalid length. [ 1779.389279][ T8742] netlink: 'syz.0.18608': attribute type 10 has an invalid length. [ 1779.398521][ T8740] veth0_vlan: left promiscuous mode [ 1779.407911][ T8740] veth0_vlan: entered promiscuous mode [ 1779.433156][ T8740] team0: Device veth0_vlan failed to register rx_handler [ 1779.467108][ T8742] veth0_vlan: left promiscuous mode [ 1779.481371][ T8742] veth0_vlan: entered promiscuous mode [ 1779.491320][ T8742] team0: Device veth0_vlan failed to register rx_handler [ 1779.535986][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.565668][T18405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.573020][T18405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.622369][T18405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.629657][T18405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1779.643404][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18613'. [ 1779.743951][ T8351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1779.852574][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18616'. [ 1779.918395][ T8768] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1779.936663][ T8768] bond1 (unregistering): Released all slaves [ 1779.944431][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18618'. [ 1779.958634][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18618'. [ 1780.208937][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18621'. [ 1780.268857][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18624'. [ 1780.290829][ T8790] vlan2: entered allmulticast mode [ 1780.311145][ T8793] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1780.361997][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.775413][ T8823] veth0: entered promiscuous mode [ 1780.852832][ T8834] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1780.882717][ T8831] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1781.013601][ T8351] veth0_vlan: entered promiscuous mode [ 1781.046996][ T8351] veth1_vlan: entered promiscuous mode [ 1781.123391][ T8351] veth0_macvtap: entered promiscuous mode [ 1781.138724][ T8351] veth1_macvtap: entered promiscuous mode [ 1781.168870][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.198374][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.216872][T27540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.237357][T27540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.272101][T18405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.281866][T18405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.520429][ T8822] veth0: left promiscuous mode [ 1781.526270][ T8822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1783.690091][ T8823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1783.885648][T18390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.898248][ T8873] netlink: 'syz.3.18643': attribute type 1 has an invalid length. [ 1783.910028][T18390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.002584][ T8884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18643'. [ 1784.029605][T18390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.039407][T18390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.786995][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1784.891700][ T8916] netlink: 'syz.0.18653': attribute type 1 has an invalid length. [ 1784.921262][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18653'. [ 1784.940447][ T8916] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 1784.952096][ T8916] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1784.964738][ T8916] bond1: (slave vcan0): making interface the new active one [ 1784.973127][ T8916] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 1786.945043][ T8880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1787.061101][ T8934] xt_recent: Unsupported userspace flags (000000b1) [ 1787.144406][ T8941] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18658'. [ 1787.203634][ T8941] vlan2: entered allmulticast mode [ 1787.211175][ T8941] gretap0: entered allmulticast mode [ 1787.514180][ T8958] netlink: 'syz.1.18663': attribute type 21 has an invalid length. [ 1787.533276][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18663'. [ 1787.570478][ T8972] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20000 [ 1787.596686][ T8970] bridge0: port 3(batadv1) entered blocking state [ 1787.603942][ T8970] bridge0: port 3(batadv1) entered disabled state [ 1787.610918][ T8970] batadv1: entered allmulticast mode [ 1787.618921][ T8974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18667'. [ 1787.631956][ T8970] batadv1: entered promiscuous mode [ 1787.834923][ T8985] syzkaller1: entered promiscuous mode [ 1787.844022][ T8985] syzkaller1: entered allmulticast mode [ 1787.896746][ T8990] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.18673'. [ 1787.959385][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18675'. [ 1788.063901][ T9000] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18675'. [ 1788.100175][T18389] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1788.110191][T18389] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1788.416170][ T9022] netlink: 'syz.0.18682': attribute type 1 has an invalid length. [ 1788.424469][ T9022] netlink: 'syz.0.18682': attribute type 7 has an invalid length. [ 1788.433629][ T9022] netlink: 'syz.0.18682': attribute type 8 has an invalid length. [ 1788.442072][ T9022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18682'. [ 1788.625857][ T9035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18686'. [ 1788.780307][ T9047] tunl0: entered promiscuous mode [ 1788.785592][ T9047] netlink: 'syz.0.18690': attribute type 3 has an invalid length. [ 1788.820745][ T9047] netlink: 9 bytes leftover after parsing attributes in process `syz.0.18690'. [ 1788.890672][ T9048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.957961][ T9059] syzkaller0: entered promiscuous mode [ 1788.974773][ T9059] syzkaller0: entered allmulticast mode [ 1789.221462][ T9074] netem: change failed [ 1789.285572][ T9068] delete_channel: no stack [ 1789.295732][ T9082] xt_TCPMSS: Only works on TCP SYN packets [ 1789.397760][ T9089] syzkaller0: entered promiscuous mode [ 1789.404462][ T9089] syzkaller0: entered allmulticast mode [ 1789.575548][ T5140] Bluetooth: hci0: command 0x0405 tx timeout [ 1790.152696][ T9148] openvswitch: netlink: Missing valid actions attribute. [ 1790.174263][ T9148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1790.346048][ T9160] syz_tun: entered allmulticast mode [ 1790.399349][ T9164] __nla_validate_parse: 1 callbacks suppressed [ 1790.399373][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18727'. [ 1790.608085][ T9181] openvswitch: netlink: Flow key attr not present in new flow. [ 1790.880184][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18734'. [ 1790.889513][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18734'. [ 1790.923495][ T9193] netlink: 83 bytes leftover after parsing attributes in process `syz.0.18735'. [ 1791.247381][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18741'. [ 1791.276905][ T9225] netlink: 'syz.3.18742': attribute type 1 has an invalid length. [ 1791.287425][ T9225] netlink: 'syz.3.18742': attribute type 1 has an invalid length. [ 1791.301562][ T9225] netlink: 'syz.3.18742': attribute type 1 has an invalid length. [ 1791.315079][ T9225] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18742'. [ 1791.426789][ T9230] netlink: 'syz.3.18744': attribute type 15 has an invalid length. [ 1791.739225][ T9252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1791.808233][ T9255] syzkaller1: entered promiscuous mode [ 1791.827191][ T9255] syzkaller1: entered allmulticast mode [ 1791.839281][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18753'. [ 1791.853817][ T9252] syzkaller0: entered promiscuous mode [ 1791.870187][ T9252] syzkaller0: entered allmulticast mode [ 1791.883125][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18754'. [ 1791.913989][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18754'. [ 1792.198463][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18753'. [ 1792.214141][T27540] bridge_slave_1: left allmulticast mode [ 1792.227092][T27540] bridge_slave_1: left promiscuous mode [ 1792.244403][T27540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.276994][T27540] bridge_slave_0: left allmulticast mode [ 1792.287192][T27540] bridge_slave_0: left promiscuous mode [ 1792.303322][T27540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.821983][T27540] erspan0 (unregistering): left promiscuous mode [ 1792.888904][T27540] gretap0 (unregistering): left promiscuous mode [ 1792.957998][T27540] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1793.488376][T27540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.502950][T27540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.517711][T27540] bond0 (unregistering): Released all slaves [ 1793.533538][T27540] bond1 (unregistering): Released all slaves [ 1793.555724][T27540] bond2 (unregistering): Released all slaves [ 1793.576612][T27540] bond3 (unregistering): Released all slaves [ 1793.595308][T27540] bond4 (unregistering): Released all slaves [ 1793.611183][T27540] bond5 (unregistering): (slave veth1): Releasing active interface [ 1793.624197][T27540] bond5 (unregistering): (slave veth3): Releasing active interface [ 1793.639134][T27540] bond5 (unregistering): (slave veth9): Releasing active interface [ 1793.652166][T27540] bond5 (unregistering): (slave veth11): Releasing active interface [ 1793.665979][T27540] bond5 (unregistering): Released all slaves [ 1793.682398][T27540] bond6 (unregistering): (slave veth5): Releasing active interface [ 1793.690711][T27540] veth0_to_bond: entered promiscuous mode [ 1793.700561][T27540] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1793.715235][T27540] bond6 (unregistering): (slave veth7): Releasing active interface [ 1793.737400][T27540] bond6 (unregistering): Released all slaves [ 1793.754945][T27540] bond7 (unregistering): Released all slaves [ 1793.996269][T27540] : left promiscuous mode [ 1794.043049][ T9327] openvswitch: netlink: Unknown key attributes 2 [ 1794.115977][ T9332] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1794.126874][ T9332] netlink: 'syz.2.18765': attribute type 1 has an invalid length. [ 1794.234517][T27540] tipc: Disabling bearer [ 1794.259212][T27540] tipc: Left network mode [ 1794.587505][ T9361] netlink: 'syz.1.18774': attribute type 8 has an invalid length. [ 1794.683615][ T9361] bond0: entered promiscuous mode [ 1794.688734][ T9361] bond_slave_0: entered promiscuous mode [ 1794.726030][ T9361] bond_slave_1: entered promiscuous mode [ 1794.738219][ T9361] gretap0: entered promiscuous mode [ 1794.769172][ T9361] bond0: left promiscuous mode [ 1794.776531][ T9361] bond_slave_0: left promiscuous mode [ 1794.792137][ T9361] bond_slave_1: left promiscuous mode [ 1794.801112][ T9361] gretap0: left promiscuous mode [ 1795.448624][ T9404] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1795.631645][ T9410] netlink: 'syz.1.18791': attribute type 8 has an invalid length. [ 1795.639532][ T9410] __nla_validate_parse: 12 callbacks suppressed [ 1795.670655][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18791'. [ 1795.830143][ T9415] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1795.855984][ T9415] bond1 (unregistering): Released all slaves [ 1795.947093][ T9410] bond0: entered promiscuous mode [ 1795.962953][ T9410] bond_slave_0: entered promiscuous mode [ 1795.971145][ T9410] bond_slave_1: entered promiscuous mode [ 1795.992179][ T9410] gretap0: entered promiscuous mode [ 1796.018595][ T9410] bond0: left promiscuous mode [ 1796.036695][ T9410] bond_slave_0: left promiscuous mode [ 1796.063652][ T9410] bond_slave_1: left promiscuous mode [ 1796.103510][ T9410] gretap0: left promiscuous mode [ 1796.211984][T27540] hsr_slave_0: left promiscuous mode [ 1796.259720][T27540] hsr_slave_1: left promiscuous mode [ 1796.294385][T27540] veth1_macvtap: left promiscuous mode [ 1796.306996][T27540] veth1_vlan: left promiscuous mode [ 1796.313479][T27540] veth0_vlan: left promiscuous mode [ 1796.733911][ T30] audit: type=1107 audit(1771480992.090:29): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';P V' [ 1796.973534][T27540] team0 (unregistering): Port device team_slave_1 removed [ 1797.006247][T27540] team0 (unregistering): Port device team_slave_0 removed [ 1797.164729][ T9430] dvmrp0: entered allmulticast mode [ 1797.177893][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1797.464707][ T9477] tipc: Enabling of bearer rejected, failed to enable media [ 1797.502340][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18807'. [ 1797.503433][ T9477] netlink: 'syz.4.18806': attribute type 12 has an invalid length. [ 1797.550290][ T9480] netlink: 'syz.2.18808': attribute type 8 has an invalid length. [ 1797.570777][ T9477] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.18806'. [ 1797.582415][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18808'. [ 1797.630308][ T9480] bond0: entered promiscuous mode [ 1797.645390][ T9486] netlink: 'syz.1.18810': attribute type 4 has an invalid length. [ 1797.667879][ T9480] bond_slave_0: entered promiscuous mode [ 1797.675119][ T9480] bond_slave_1: entered promiscuous mode [ 1797.699886][ T9486] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18810'. [ 1797.714947][ T9480] gretap0: entered promiscuous mode [ 1797.748245][ T9480] bond0: left promiscuous mode [ 1797.757881][ T9480] bond_slave_0: left promiscuous mode [ 1797.768692][ T9480] bond_slave_1: left promiscuous mode [ 1797.778446][ T9480] gretap0: left promiscuous mode [ 1797.812707][ T9492] netlink: 'syz.0.18812': attribute type 29 has an invalid length. [ 1797.823033][ T9492] netlink: 'syz.0.18812': attribute type 29 has an invalid length. [ 1797.887431][ T9492] netlink: 500 bytes leftover after parsing attributes in process `syz.0.18812'. [ 1797.962649][T27540] IPVS: stop unused estimator thread 0... [ 1798.054690][ T9504] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18815'. [ 1798.097384][ T9507] syzkaller0: entered promiscuous mode [ 1798.114558][ T9507] syzkaller0: entered allmulticast mode [ 1798.189939][ T9507] netlink: 'syz.2.18816': attribute type 2 has an invalid length. [ 1798.213401][ T9508] netlink: 'syz.2.18816': attribute type 2 has an invalid length. [ 1798.615084][ T9521] dvmrp0: left allmulticast mode [ 1799.231812][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18826'. [ 1799.496730][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18827'. [ 1799.511800][ T9576] netlink: 'syz.0.18830': attribute type 25 has an invalid length. [ 1799.525795][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18830'. [ 1799.587659][ T9582] openvswitch: netlink: Flow actions attr not present in new flow. [ 1799.628831][ T9539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1801.788387][ T9541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1802.071251][ T9611] netlink: 'syz.3.18839': attribute type 21 has an invalid length. [ 1802.095632][ T9612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 1802.097272][ T9614] __nla_validate_parse: 2 callbacks suppressed [ 1802.097330][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18840'. [ 1802.126033][ T9615] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.18839'. [ 1802.209652][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1802.217859][ C0] lec:lec_tx_timeout: lec0 [ 1802.246358][ T9611] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1802.271460][ T9611] bond2 (unregistering): Released all slaves [ 1802.350345][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18842'. [ 1802.750027][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18849'. [ 1802.962054][ T9650] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1802.979347][ T9650] team0: Device macvlan3 is already an upper device of the team interface [ 1803.207734][ T9660] netlink: 'syz.4.18854': attribute type 7 has an invalid length. [ 1803.218473][ T9660] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18854'. [ 1803.232064][ T9660] netlink: 'syz.4.18854': attribute type 7 has an invalid length. [ 1803.240467][ T9660] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18854'. [ 1803.397471][ T9671] netlink: 'syz.4.18858': attribute type 10 has an invalid length. [ 1803.421781][ T9671] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1803.448642][ T9676] netlink: 'syz.2.18857': attribute type 12 has an invalid length. [ 1803.471760][ T9676] netlink: 'syz.2.18857': attribute type 29 has an invalid length. [ 1803.500893][ T9676] netlink: 148 bytes leftover after parsing attributes in process `syz.2.18857'. [ 1803.539335][ T9680] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18859'. [ 1803.613623][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18860'. [ 1803.684816][ T9682] netlink: 244 bytes leftover after parsing attributes in process `syz.4.18860'. [ 1803.948093][ T9700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1803.967007][ T9700] : renamed from veth1_vlan (while UP) [ 1804.058503][ T9706] netlink: 'syz.4.18867': attribute type 7 has an invalid length. [ 1804.084276][ T9706] netlink: 'syz.4.18867': attribute type 8 has an invalid length. [ 1804.122513][ T9709] netlink: 'syz.1.18869': attribute type 9 has an invalid length. [ 1804.136938][ T9709] netlink: 'syz.1.18869': attribute type 6 has an invalid length. [ 1804.268370][ T9718] netlink: 'syz.0.18873': attribute type 12 has an invalid length. [ 1804.714732][ T9736] delete_channel: no stack [ 1804.784037][ T9739] tipc: Started in network mode [ 1804.798234][ T9739] tipc: Node identity ac14140f, cluster identity 4711 [ 1804.822509][ T9739] tipc: New replicast peer: 255.255.255.255 [ 1804.830882][ T9739] tipc: Enabled bearer , priority 10 [ 1805.411548][ T9767] syzkaller0: entered promiscuous mode [ 1805.429663][ T9767] syzkaller0: entered allmulticast mode [ 1805.498443][ T9767] tipc: Enabled bearer , priority 0 [ 1805.537523][ T9765] tipc: Resetting bearer [ 1805.627964][ T9765] tipc: Disabling bearer [ 1805.648720][ T9775] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1806.510309][T12288] tipc: Node number set to 2886997007 [ 1806.627596][ T9816] bond1: option xmit_hash_policy: invalid value (64) [ 1806.649353][ T9816] bond1 (unregistering): Released all slaves [ 1806.720106][ T9821] syzkaller0: entered promiscuous mode [ 1806.726454][ T9821] syzkaller0: entered allmulticast mode [ 1806.754363][ T9827] syzkaller0: entered promiscuous mode [ 1806.760248][ T9827] syzkaller0: entered allmulticast mode [ 1806.859496][ T9827] tipc: Enabled bearer , priority 0 [ 1806.890282][ T9826] tipc: Resetting bearer [ 1806.952509][ T9826] tipc: Disabling bearer [ 1807.157997][ T9849] __nla_validate_parse: 21 callbacks suppressed [ 1807.158019][ T9849] netlink: 348 bytes leftover after parsing attributes in process `syz.1.18916'. [ 1807.369435][ T9858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18920'. [ 1807.399093][ T9858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18920'. [ 1807.441842][ T9863] netlink: 356 bytes leftover after parsing attributes in process `syz.2.18921'. [ 1807.465964][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18922'. [ 1807.607645][ T9866] batadv2: entered allmulticast mode [ 1807.691140][ T9872] netem: unknown loss type 0 [ 1807.705309][ T9872] netem: change failed [ 1807.849356][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18926'. [ 1807.871404][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18929'. [ 1807.881349][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18926'. [ 1807.903370][ T9886] bond0: entered promiscuous mode [ 1807.908538][ T9886] bond_slave_0: entered promiscuous mode [ 1807.915538][ T9886] bond_slave_1: entered promiscuous mode [ 1807.924997][ T9886] gretap0: entered promiscuous mode [ 1807.932808][ T9886] ip6gretap0: entered promiscuous mode [ 1807.941674][ T9886] debugfs: 'hsr1' already exists in 'hsr' [ 1807.956329][ T9886] Cannot create hsr debugfs directory [ 1807.962956][ T9886] hsr1: entered promiscuous mode [ 1808.285405][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18934'. [ 1808.305523][ T9911] veth1_macvtap: left promiscuous mode [ 1808.358750][ T9911] macsec0: entered promiscuous mode [ 1808.378699][ T9911] macsec0: entered allmulticast mode [ 1808.439215][ T9905] IPVS: persistence engine module ip_vs_pe_ not found [ 1808.456018][ T9913] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1808.487339][ T9913] bond2: (slave lo): Enslaving as an active interface with an up link [ 1808.496606][ T9913] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1808.515730][ T9915] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1808.563775][ T9926] veth3: entered allmulticast mode [ 1808.700683][ T9935] syzkaller0: entered promiscuous mode [ 1808.706350][ T9935] syzkaller0: entered allmulticast mode [ 1808.738764][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18942'. [ 1808.751491][ T9935] tipc: Enabled bearer , priority 0 [ 1808.774034][ T9934] tipc: Resetting bearer [ 1808.853927][ T9934] tipc: Disabling bearer [ 1809.157750][ T9955] team0: Port device team_slave_0 removed [ 1809.159089][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.421676][ T9987] openvswitch: netlink: Key type 220 is out of range max 32 [ 1809.462728][ T9988] openvswitch: netlink: Key type 220 is out of range max 32 [ 1809.647368][ T9997] validate_nla: 3 callbacks suppressed [ 1809.647392][ T9997] netlink: 'syz.1.18959': attribute type 7 has an invalid length. [ 1809.670933][ T9997] erspan0: entered promiscuous mode [ 1809.680509][ T9997] erspan0: left promiscuous mode [ 1809.875583][T10013] netlink: 'syz.0.18964': attribute type 32 has an invalid length. [ 1809.937907][T10013] bond4: option coupled_control: invalid value (52) [ 1809.951713][T10022] netlink: 'syz.3.18966': attribute type 2 has an invalid length. [ 1809.952764][T10013] bond4 (unregistering): Released all slaves [ 1809.966706][T10022] netlink: 'syz.3.18966': attribute type 8 has an invalid length. [ 1810.602869][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.897566][T10068] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.053277][T10068] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.193445][T10068] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.372001][T10068] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.569418][T10101] bond1 (unregistering): Released all slaves [ 1811.712282][T10108] xfrm1: entered allmulticast mode [ 1811.718701][T18390] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.764233][T18390] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.805456][T27540] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.817905][T10110] xt_hashlimit: size too large, truncated to 1048576 [ 1811.851897][T27540] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.090967][T10113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1812.336633][T10135] __nla_validate_parse: 14 callbacks suppressed [ 1812.336656][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19000'. [ 1812.394428][T10138] netlink: 11 bytes leftover after parsing attributes in process `syz.3.19000'. [ 1812.435455][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19000'. [ 1812.494277][T10145] netlink: 'syz.2.19003': attribute type 1 has an invalid length. [ 1812.552502][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19003'. [ 1812.674353][T10150] bond1: (slave gretap2): making interface the new active one [ 1812.702897][T10150] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1812.897175][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19007'. [ 1812.930484][T10156] netlink: 'syz.1.19007': attribute type 13 has an invalid length. [ 1812.946272][T10156] lec:lec_start_xmit: lec0:No lecd attached [ 1813.295138][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19013'. [ 1813.318543][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19013'. [ 1813.468522][T10187] netlink: 'syz.2.19014': attribute type 64 has an invalid length. [ 1813.500629][T10187] netlink: 5 bytes leftover after parsing attributes in process `syz.2.19014'. [ 1813.522615][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19014'. [ 1813.548024][T10190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19016'. [ 1813.641427][T10193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1813.936429][T10207] netlink: 'syz.1.19020': attribute type 1 has an invalid length. [ 1813.957080][T10207] netlink: 'syz.1.19020': attribute type 1 has an invalid length. [ 1813.986375][T10213] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:21 [ 1814.304127][T10235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1814.314314][T10235] x_tables: duplicate underflow at hook 2 [ 1814.628450][T10271] netlink: ct family unspecified [ 1814.794447][T10280] netlink: 'syz.3.19041': attribute type 3 has an invalid length. [ 1815.567699][T10326] gtp0: entered promiscuous mode [ 1815.574442][T10337] netlink: 'syz.1.19058': attribute type 1 has an invalid length. [ 1815.587293][T10326] gtp0: entered allmulticast mode [ 1815.631963][T10337] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1815.902946][T10332] ip6_vti0 speed is unknown, defaulting to 1000 [ 1816.785079][T10394] netlink: 'syz.3.19070': attribute type 29 has an invalid length. [ 1816.794591][T10394] netlink: 'syz.3.19070': attribute type 29 has an invalid length. [ 1816.816040][T10398] netlink: 'syz.3.19070': attribute type 29 has an invalid length. [ 1816.838869][T10398] netlink: 'syz.3.19070': attribute type 29 has an invalid length. [ 1816.984639][T10396] bond1: Unable to set up delay as MII monitoring is disabled [ 1817.031191][T10396] bond1 (unregistering): Released all slaves [ 1817.130884][T10398] netlink: 'syz.3.19070': attribute type 29 has an invalid length. [ 1817.190658][T10398] netlink: 'syz.3.19070': attribute type 29 has an invalid length. [ 1817.219423][T10398] netlink: 'syz.3.19070': attribute type 29 has an invalid length. [ 1817.692276][T27540] veth5: left allmulticast mode [ 1817.726394][T27540] veth5: left promiscuous mode [ 1817.760221][T27540] bridge3: port 1(veth5) entered disabled state [ 1817.771609][T10440] __nla_validate_parse: 18 callbacks suppressed [ 1817.771629][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19080'. [ 1817.882317][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19080'. [ 1817.900194][T27540] bond2 (unregistering): (slave vti1): Releasing backup interface [ 1817.908264][T27540] vti1 (unregistering): left promiscuous mode [ 1817.955285][T27540] gretap0 (unregistering): left promiscuous mode [ 1818.209748][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1818.217827][ C0] lec:lec_tx_timeout: lec0 [ 1818.223155][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1818.275226][T27540] bond0 (unregistering): left promiscuous mode [ 1818.282579][T27540] bond0 (unregistering): Released all slaves [ 1818.297560][T27540] bond1 (unregistering): Released all slaves [ 1818.314759][T27540] bond2 (unregistering): Released all slaves [ 1818.333036][T27540] bond3 (unregistering): Released all slaves [ 1818.351974][T27540] bond4 (unregistering): Released all slaves [ 1818.371994][T27540] bond5 (unregistering): Released all slaves [ 1818.397104][T27540] bond6 (unregistering): Released all slaves [ 1818.449512][T10444] team0 (unregistering): Port device team_slave_0 removed [ 1818.472486][T10444] team0 (unregistering): Port device team_slave_1 removed [ 1818.525868][T27540] tipc: Left network mode [ 1818.630065][T10450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1818.713933][T10439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1818.872024][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19085'. [ 1819.028743][T10466] netlink: 'syz.1.19086': attribute type 1 has an invalid length. [ 1819.037765][T10466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1819.468145][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19092'. [ 1819.546073][T10492] bond0: entered promiscuous mode [ 1819.551631][T10492] bond_slave_0: entered promiscuous mode [ 1819.557732][T10492] bond_slave_1: entered promiscuous mode [ 1819.579424][T10492] gretap0: entered promiscuous mode [ 1819.590741][T10492] bond0: left promiscuous mode [ 1819.593427][T10501] xt_TCPMSS: Only works on TCP SYN packets [ 1819.595915][T10492] bond_slave_0: left promiscuous mode [ 1819.612236][T10492] bond_slave_1: left promiscuous mode [ 1819.621960][T10492] gretap0: left promiscuous mode [ 1819.672349][T10489] syzkaller0: entered allmulticast mode [ 1820.158600][T10530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19102'. [ 1820.527674][T27540] bond_slave_0: left promiscuous mode [ 1820.872952][T27540] pimreg3 (unregistering): left allmulticast mode [ 1820.941460][T10544] validate_nla: 1 callbacks suppressed [ 1820.941484][T10544] netlink: 'syz.3.19107': attribute type 39 has an invalid length. [ 1820.974622][T10548] netlink: 'syz.3.19107': attribute type 39 has an invalid length. [ 1821.004680][T27540] pim6reg527 (unregistering): left allmulticast mode [ 1821.117638][T10555] netlink: 'syz.1.19108': attribute type 11 has an invalid length. [ 1821.169336][T10559] netlink: 'syz.0.19110': attribute type 8 has an invalid length. [ 1821.186661][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19110'. [ 1821.252927][T10562] netlink: 'syz.2.19109': attribute type 1 has an invalid length. [ 1821.278967][T10563] netlink: 'syz.1.19108': attribute type 1 has an invalid length. [ 1821.488935][T10559] bond0: entered promiscuous mode [ 1821.498750][T10559] bond_slave_0: entered promiscuous mode [ 1821.504936][T10559] bond_slave_1: entered promiscuous mode [ 1821.512359][T10559] gretap0: entered promiscuous mode [ 1821.524218][T10559] bond0: left promiscuous mode [ 1821.529242][T10559] bond_slave_0: left promiscuous mode [ 1821.535250][T10559] bond_slave_1: left promiscuous mode [ 1821.543732][T10559] gretap0: left promiscuous mode [ 1821.607431][T10564] bond2: (slave geneve2): making interface the new active one [ 1821.628406][T10564] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1821.714025][T18393] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1821.751047][T18393] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1821.775012][T10573] netlink: 'syz.3.19113': attribute type 1 has an invalid length. [ 1821.813001][T18393] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1821.822635][T18393] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1821.948958][T10575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19114'. [ 1822.077373][T10586] bridge_slave_0: left allmulticast mode [ 1822.107199][T10586] bridge_slave_0: left promiscuous mode [ 1822.113936][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.152896][T10586] bridge_slave_1: left allmulticast mode [ 1822.159848][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19114'. [ 1822.167565][T10586] bridge_slave_1: left promiscuous mode [ 1822.175184][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.237102][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19120'. [ 1822.268308][T10586] bond0: (slave bond_slave_0): Releasing backup interface [ 1822.361999][T10586] bond0: (slave bond_slave_1): Releasing backup interface [ 1822.426696][T10586] team0: Port device team_slave_0 removed [ 1822.442225][T10609] netlink: 'syz.0.19119': attribute type 1 has an invalid length. [ 1822.495643][T10586] team0: Port device team_slave_1 removed [ 1822.523720][T10586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1822.551465][T10613] netlink: 'syz.4.19121': attribute type 8 has an invalid length. [ 1822.559459][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19121'. [ 1822.644245][T10613] bond0: entered promiscuous mode [ 1822.684203][T10613] bond_slave_0: entered promiscuous mode [ 1822.708116][T10613] bond_slave_1: entered promiscuous mode [ 1822.725099][T10613] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1822.764056][T10613] gretap0: entered promiscuous mode [ 1822.816969][T10613] bond0: left promiscuous mode [ 1822.824005][T10613] bond_slave_0: left promiscuous mode [ 1822.849953][T10613] bond_slave_1: left promiscuous mode [ 1822.861027][T10613] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1822.885507][T10613] gretap0: left promiscuous mode [ 1822.978957][T10606] syzkaller0: entered promiscuous mode [ 1823.024921][T10606] syzkaller0: entered allmulticast mode [ 1823.249752][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1823.258437][ C0] lec:lec_tx_timeout: lec0 [ 1824.850044][T10621] Bluetooth: hci5: command 0x0406 tx timeout [ 1825.544642][T10640] ip6gre1: entered allmulticast mode [ 1825.560362][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19129'. [ 1825.577765][T27540] IPVS: stop unused estimator thread 0... [ 1826.020732][T10678] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.19137'. [ 1826.145951][T10688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19141'. [ 1826.155439][T10688] netlink: 35 bytes leftover after parsing attributes in process `syz.0.19141'. [ 1826.166182][T10688] netlink: 'syz.0.19141': attribute type 5 has an invalid length. [ 1826.178567][T10688] netlink: 'syz.0.19141': attribute type 6 has an invalid length. [ 1826.203936][T10688] netlink: 35 bytes leftover after parsing attributes in process `syz.0.19141'. [ 1826.233761][T10695] s5: renamed from vlan1 (while UP) [ 1826.448875][T10709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19145'. [ 1826.462618][T10711] netlink: 7 bytes leftover after parsing attributes in process `syz.1.19146'. [ 1826.602145][T10715] netlink: 'syz.0.19148': attribute type 1 has an invalid length. [ 1826.611449][T10715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19148'. [ 1826.642007][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19150'. [ 1826.670075][T10720] netlink: 'syz.1.19150': attribute type 3 has an invalid length. [ 1826.698271][T10721] openvswitch: netlink: Tunnel attr 8714 out of range max 16 [ 1826.863202][T10732] netlink: 'syz.1.19152': attribute type 1 has an invalid length. [ 1826.941293][T10735] netlink: 'syz.3.19153': attribute type 8 has an invalid length. [ 1827.204784][T10752] netlink: 'syz.1.19159': attribute type 1 has an invalid length. [ 1827.264250][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19159'. [ 1827.301379][T10758] xt_cgroup: invalid path, errno=-2 [ 1827.826562][T10796] tipc: Trying to set illegal importance in message [ 1828.002157][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1828.050643][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1828.167756][T10812] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1828.527153][T10825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.735558][T10825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.945812][T10858] netlink: 'syz.2.19191': attribute type 1 has an invalid length. [ 1828.975781][T10858] netlink: 'syz.2.19191': attribute type 11 has an invalid length. [ 1829.031934][T10825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.044038][T10860] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1829.100086][T10861] lo: entered promiscuous mode [ 1829.119942][T10861] tunl0: entered promiscuous mode [ 1829.144687][T10861] gre0: entered promiscuous mode [ 1829.205203][T10861] gretap0: entered promiscuous mode [ 1829.222491][T10861] erspan0: entered promiscuous mode [ 1829.239250][T10861] ip_vti0: entered promiscuous mode [ 1829.345953][T10825] bond0: (slave netdevsim0): Releasing backup interface [ 1829.376682][T10825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.525008][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1829.556803][T10886] : entered promiscuous mode [ 1829.638074][T18393] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.678172][T18390] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.712503][T18390] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.740878][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.963355][T10911] syzkaller0: entered promiscuous mode [ 1829.970634][T10911] syzkaller0: entered allmulticast mode [ 1829.993938][T10912] set match dimension is over the limit! [ 1830.389043][T10885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1831.034757][T10934] syzkaller1: entered promiscuous mode [ 1831.041339][T10934] syzkaller1: entered allmulticast mode [ 1831.187933][T10939] __nla_validate_parse: 17 callbacks suppressed [ 1831.187951][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19217'. [ 1831.208045][T10939] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1831.307961][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.318060][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.326232][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.334571][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.342832][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.351021][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.358723][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.366848][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.374692][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1831.382843][T10946] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1832.518713][T10887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1832.827318][T10959] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1832.844311][T10957] netlink: 184 bytes leftover after parsing attributes in process `syz.0.19223'. [ 1832.961966][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19226'. [ 1832.979761][T10967] netlink: 100 bytes leftover after parsing attributes in process `syz.3.19226'. [ 1833.249714][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1833.257877][ C0] lec:lec_tx_timeout: lec0 [ 1833.263800][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1833.418013][T10995] netlink: 'syz.3.19235': attribute type 1 has an invalid length. [ 1833.430231][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19235'. [ 1833.459368][T10987] netlink: 'syz.2.19233': attribute type 10 has an invalid length. [ 1833.517966][T10987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19233'. [ 1833.569822][T10987] dummy0: entered promiscuous mode [ 1833.595529][T10987] bridge0: port 1(dummy0) entered blocking state [ 1833.622428][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19240'. [ 1833.632012][T10987] bridge0: port 1(dummy0) entered disabled state [ 1833.641077][T10987] dummy0: entered allmulticast mode [ 1833.672601][T10987] bridge0: port 1(dummy0) entered blocking state [ 1833.679243][T10987] bridge0: port 1(dummy0) entered forwarding state [ 1833.710976][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19240'. [ 1833.912759][T11019] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1833.941832][T11019] bond3 (unregistering): Released all slaves [ 1833.966722][T11022] syzkaller0: entered promiscuous mode [ 1833.972499][T11022] syzkaller0: entered allmulticast mode [ 1834.109154][T11034] tipc: Started in network mode [ 1834.144194][T11034] tipc: Node identity e0000001, cluster identity 4711 [ 1834.160648][T11034] tipc: Enabling of bearer rejected, failed to enable media [ 1834.203186][T11034] openvswitch: netlink: IP tunnel dst address not specified [ 1834.602839][T11060] veth0_to_bridge: entered promiscuous mode [ 1834.665424][T11067] netlink: 'syz.2.19255': attribute type 64 has an invalid length. [ 1834.734783][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19256'. [ 1834.774832][T11070] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19256'. [ 1834.952522][T11057] veth0_to_bridge: left promiscuous mode [ 1835.025035][T11083] netlink: 'syz.1.19259': attribute type 1 has an invalid length. [ 1835.034441][T11086] netlink: 'syz.0.19260': attribute type 4 has an invalid length. [ 1835.142835][T11094] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1835.327798][T11098] bond4: Unable to set down delay as MII monitoring is disabled [ 1835.338297][T11098] bond4 (unregistering): Released all slaves [ 1835.388047][T11105] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1835.430408][T11102] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1835.447231][T11102] syzkaller1: linktype set to 823 [ 1835.513884][T11109] tipc: Failed to remove unknown binding: 66,1,1/0:2491344326/2491344328 [ 1835.522504][T11109] tipc: Failed to remove unknown binding: 66,1,1/0:2491344326/2491344328 [ 1835.701866][T11120] netlink: 'syz.0.19270': attribute type 8 has an invalid length. [ 1835.747713][T11119] bond1: (slave bond_slave_1): Device is not our slave [ 1835.761781][T11119] bond1: option active_slave: invalid value (bond_slave_1) [ 1835.781892][T11119] bond1 (unregistering): Released all slaves [ 1835.858503][T11120] bond0: entered promiscuous mode [ 1835.891462][T11120] bond_slave_0: entered promiscuous mode [ 1835.909025][T11120] bond_slave_1: entered promiscuous mode [ 1835.936706][T11120] gretap0: entered promiscuous mode [ 1835.947347][T11120] bond0: left promiscuous mode [ 1835.952651][T11120] bond_slave_0: left promiscuous mode [ 1835.958303][T11120] bond_slave_1: left promiscuous mode [ 1835.965565][T11120] gretap0: left promiscuous mode [ 1835.994325][T11135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1836.073148][T11138] bridge0: port 2(batadv1) entered blocking state [ 1836.100380][T11138] bridge0: port 2(batadv1) entered disabled state [ 1836.107188][T11138] batadv1: entered allmulticast mode [ 1836.117732][T11138] batadv1: entered promiscuous mode [ 1836.157047][T11140] syz.0.19279: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1836.196829][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.0.19279 Not tainted syzkaller #0 PREEMPT(full) [ 1836.196858][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1836.196872][T11140] Call Trace: [ 1836.196881][T11140] [ 1836.196890][T11140] dump_stack_lvl+0xe8/0x150 [ 1836.196925][T11140] warn_alloc+0x249/0x340 [ 1836.196954][T11140] ? stack_trace_save+0xa9/0x100 [ 1836.196987][T11140] ? __pfx_warn_alloc+0x10/0x10 [ 1836.197022][T11140] ? kasan_save_track+0x4f/0x80 [ 1836.197046][T11140] ? kasan_save_track+0x3e/0x80 [ 1836.197069][T11140] ? __kasan_kmalloc+0x93/0xb0 [ 1836.197095][T11140] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1836.197121][T11140] ? xskq_create+0x56/0x170 [ 1836.197145][T11140] ? xsk_setsockopt+0x54c/0x990 [ 1836.197163][T11140] ? do_sock_setsockopt+0x17c/0x1b0 [ 1836.197186][T11140] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1836.197209][T11140] ? do_syscall_64+0x14d/0xf80 [ 1836.197240][T11140] __vmalloc_node_range_noprof+0x132/0x1730 [ 1836.197331][T11140] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1836.197368][T11140] ? __kasan_kmalloc+0x93/0xb0 [ 1836.197402][T11140] vmalloc_user_noprof+0xad/0xe0 [ 1836.197430][T11140] ? xskq_create+0xbf/0x170 [ 1836.197454][T11140] xskq_create+0xbf/0x170 [ 1836.197481][T11140] xsk_init_queue+0xad/0x110 [ 1836.197507][T11140] xsk_setsockopt+0x54c/0x990 [ 1836.197532][T11140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1836.197554][T11140] ? __pfx_aa_sk_perm+0x10/0x10 [ 1836.197586][T11140] ? aa_sock_opt_perm+0xff/0x1a0 [ 1836.197619][T11140] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1836.197647][T11140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1836.197671][T11140] do_sock_setsockopt+0x17c/0x1b0 [ 1836.197701][T11140] __x64_sys_setsockopt+0x13d/0x1b0 [ 1836.197733][T11140] do_syscall_64+0x14d/0xf80 [ 1836.197759][T11140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.197780][T11140] ? trace_irq_disable+0x37/0x100 [ 1836.197803][T11140] ? clear_bhb_loop+0x40/0x90 [ 1836.197830][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.197851][T11140] RIP: 0033:0x7fca5159c629 [ 1836.197871][T11140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.197890][T11140] RSP: 002b:00007fca523f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1836.197912][T11140] RAX: ffffffffffffffda RBX: 00007fca51815fa0 RCX: 00007fca5159c629 [ 1836.197928][T11140] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1836.197941][T11140] RBP: 00007fca51632b39 R08: 0000000000000004 R09: 0000000000000000 [ 1836.197954][T11140] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1836.197968][T11140] R13: 00007fca51816038 R14: 00007fca51815fa0 R15: 00007ffcfb93b858 [ 1836.198003][T11140] [ 1836.199023][T11140] Mem-Info: [ 1836.490062][T11140] active_anon:9174 inactive_anon:0 isolated_anon:0 [ 1836.490062][T11140] active_file:2652 inactive_file:41453 isolated_file:0 [ 1836.490062][T11140] unevictable:768 dirty:89 writeback:0 [ 1836.490062][T11140] slab_reclaimable:14730 slab_unreclaimable:145314 [ 1836.490062][T11140] mapped:29668 shmem:1390 pagetables:1253 [ 1836.490062][T11140] sec_pagetables:0 bounce:0 [ 1836.490062][T11140] kernel_misc_reclaimable:0 [ 1836.490062][T11140] free:1257145 free_pcp:20898 free_cma:0 [ 1836.570035][ T6033] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1836.579414][ T6033] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1836.596241][T11140] Node 0 active_anon:37896kB inactive_anon:0kB active_file:10608kB inactive_file:165616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:21468kB dirty:356kB writeback:0kB shmem:5124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14744kB pagetables:4952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1836.632691][T11140] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1836.664710][T11140] Node 0 DMA free:11084kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:104kB free_cma:0kB [ 1836.702481][T11140] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1836.708522][T11140] Node 0 DMA32 free:1340980kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38196kB inactive_anon:0kB active_file:10608kB inactive_file:165616kB unevictable:1536kB writepending:356kB zspages:0kB present:3129332kB managed:2554016kB mlocked:0kB bounce:0kB free_pcp:25900kB local_pcp:6104kB free_cma:0kB [ 1836.748010][T11140] lowmem_reserve[]: 0 0 0 0 0 [ 1836.753198][T11140] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1836.819842][T11140] lowmem_reserve[]: 0 0 0 0 0 [ 1836.831381][T11140] Node 1 Normal free:3676516kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56068kB local_pcp:27820kB free_cma:0kB [ 1836.872398][T11140] lowmem_reserve[]: 0 0 0 0 0 [ 1836.879874][T11140] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11084kB [ 1836.960821][T11140] Node 0 DMA32: 15811*4kB (UM) 13335*8kB (UME) 8859*16kB (UME) 850*32kB (UME) 78*64kB (UME) 28*128kB (UME) 679*256kB (UM) 565*512kB (UME) 334*1024kB (UM) 92*2048kB (UM) 0*4096kB = 1340980kB [ 1837.011007][T11140] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1837.041149][T11140] Node 1 Normal: 5*4kB (UE) 8*8kB (UME) 15*16kB (UME) 15*32kB (UM) 11*64kB (UM) 7*128kB (UM) 8*256kB (UME) 8*512kB (UM) 8*1024kB (UME) 5*2048kB (UE) 891*4096kB (UM) = 3676516kB [ 1837.086761][T11140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.119643][T11140] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1837.157312][T11169] __nla_validate_parse: 3 callbacks suppressed [ 1837.157330][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19286'. [ 1837.176435][T11140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.192924][T11140] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1837.204399][T11169] 8021q: VLANs not supported on ip_vti0 [ 1837.214892][T11140] 45481 total pagecache pages [ 1837.242820][T11140] 0 pages in swap cache [ 1837.243100][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19286'. [ 1837.247039][T11140] Free swap = 124996kB [ 1837.247051][T11140] Total swap = 124996kB [ 1837.247063][T11140] 2097051 pages RAM [ 1837.247072][T11140] 0 pages HighMem/MovableOnly [ 1837.247082][T11140] 426701 pages reserved [ 1837.247091][T11140] 0 pages cma reserved [ 1837.321176][T11182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19288'. [ 1837.355605][T11180] netlink: 'syz.3.19289': attribute type 8 has an invalid length. [ 1837.397908][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19289'. [ 1837.428587][T11180] bond0: entered promiscuous mode [ 1837.434530][T11180] bond_slave_0: entered promiscuous mode [ 1837.442040][T11180] bond_slave_1: entered promiscuous mode [ 1837.448985][T11186] openvswitch: netlink: Missing valid actions attribute. [ 1837.457484][T11186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1837.475517][T11180] bond0: left promiscuous mode [ 1837.481196][T11180] bond_slave_0: left promiscuous mode [ 1837.487183][T11180] bond_slave_1: left promiscuous mode [ 1837.637960][T11198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19295'. [ 1837.648234][T11198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19295'. [ 1837.678919][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19295'. [ 1837.715140][T11204] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1837.741589][T11204] netlink: 'syz.1.19297': attribute type 8 has an invalid length. [ 1837.756965][T11204] netlink: 'syz.1.19297': attribute type 62 has an invalid length. [ 1837.819265][T11163] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1838.023487][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19302'. [ 1838.250044][T11240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19305'. [ 1838.279772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1838.288183][ C0] lec:lec_tx_timeout: lec0 [ 1838.652454][T11261] netlink: 'syz.1.19307': attribute type 8 has an invalid length. [ 1838.661208][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19307'. [ 1839.089725][ T5140] Bluetooth: hci0: command 0x0405 tx timeout [ 1839.216626][T11298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1839.278572][T11295] nbd: device at index 64 is going down [ 1839.295440][T11293] nbd: device at index 64 is going down [ 1839.513201][T11314] netlink: 'syz.3.19322': attribute type 26 has an invalid length. [ 1839.554521][T11321] netlink: 'syz.1.19321': attribute type 1 has an invalid length. [ 1839.622434][T11176] udevd[11176]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1839.670298][T11306] udevd[11306]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1839.755449][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1839.928774][T11340] netlink: 'syz.3.19326': attribute type 1 has an invalid length. [ 1840.090989][T11412] IPVS: starting estimator thread 0... [ 1840.180023][T11351] IPVS: using max 29 ests per chain, 69600 per kthread [ 1840.561660][T11371] netlink: 'syz.4.19339': attribute type 30 has an invalid length. [ 1840.588669][T11371] bond1: option arp_missed_max: invalid value (0) [ 1840.595973][T11371] bond1: option arp_missed_max: allowed values 1 - 255 [ 1840.605761][T11371] bond1 (unregistering): Released all slaves [ 1840.859763][T11382] syzkaller0: entered promiscuous mode [ 1840.865464][T11382] syzkaller0: entered allmulticast mode [ 1840.882272][T11382] 0: reclassify loop, rule prio 0, protocol 800 [ 1841.112053][T11391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1841.251956][T11404] netlink: 'syz.2.19348': attribute type 10 has an invalid length. [ 1841.324522][T11409] syzkaller0: entered allmulticast mode [ 1841.686024][T11440] x_tables: duplicate underflow at hook 4 [ 1842.217520][T11469] __nla_validate_parse: 20 callbacks suppressed [ 1842.217543][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19369'. [ 1842.251038][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19370'. [ 1842.426211][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19375'. [ 1842.446213][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19375'. [ 1842.576722][T11492] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19377'. [ 1842.828631][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19382'. [ 1842.913167][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19386'. [ 1842.924645][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19386'. [ 1843.081673][T11520] netlink: 'syz.3.19388': attribute type 39 has an invalid length. [ 1843.162256][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19389'. [ 1843.171508][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1843.395090][T11519] ip6_vti0 speed is unknown, defaulting to 1000 [ 1843.469053][T11537] netlink: 'syz.4.19395': attribute type 10 has an invalid length. [ 1843.489421][T11535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19394'. [ 1843.524886][T11537] veth0_vlan: left promiscuous mode [ 1843.544157][T11537] veth0_vlan: entered promiscuous mode [ 1843.558862][T11537] team0: Device veth0_vlan failed to register rx_handler [ 1843.718214][T11542] netlink: 'syz.2.19397': attribute type 7 has an invalid length. [ 1843.744620][T11542] netlink: 'syz.2.19397': attribute type 7 has an invalid length. [ 1844.185086][T11571] netlink: 'syz.2.19406': attribute type 1 has an invalid length. [ 1844.474532][T11583] "syz.1.19409" (11583) uses obsolete ecb(arc4) skcipher [ 1844.520510][T11575] bond3: (slave bridge1): making interface the new active one [ 1844.529894][T11575] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1844.608399][T11580] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 1844.671481][T11587] tipc: Enabling of bearer rejected, failed to enable media [ 1844.864712][T11595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1844.896364][T11597] netlink: 'syz.4.19414': attribute type 1 has an invalid length. [ 1844.909203][T11593] syzkaller1: entered promiscuous mode [ 1844.930643][T11593] syzkaller1: entered allmulticast mode [ 1845.074219][T11617] netlink: 'syz.3.19419': attribute type 7 has an invalid length. [ 1845.356767][T11637] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1845.368853][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1845.895359][T11662] Can't find ip_set type bitmap:ip,mac [ 1846.146005][T11654] ip6_vti0 speed is unknown, defaulting to 1000 [ 1846.719346][T11705] syzkaller0: entered promiscuous mode [ 1846.725592][T11705] syzkaller0: entered allmulticast mode [ 1848.219771][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 1848.227923][ C0] lec:lec_tx_timeout: lec0 [ 1848.232731][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1848.947903][T11721] netem: incorrect gi model size [ 1848.960012][T11721] netem: change failed [ 1849.079984][T11726] __nla_validate_parse: 18 callbacks suppressed [ 1849.080004][T11726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19451'. [ 1849.111939][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19451'. [ 1849.138165][T11726] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1850.086694][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19463'. [ 1850.119314][T11772] netlink: 'syz.3.19464': attribute type 8 has an invalid length. [ 1850.136546][T11776] netlink: 156 bytes leftover after parsing attributes in process `syz.0.19465'. [ 1850.161287][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19464'. [ 1850.219638][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19465'. [ 1850.239086][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19465'. [ 1850.260463][T11772] bond0: entered promiscuous mode [ 1850.265952][T11772] bond_slave_0: entered promiscuous mode [ 1850.272223][T11772] bond_slave_1: entered promiscuous mode [ 1850.284167][T11772] bond0: left promiscuous mode [ 1850.289294][T11772] bond_slave_0: left promiscuous mode [ 1850.297609][T11772] bond_slave_1: left promiscuous mode [ 1851.147868][T11826] netlink: 148 bytes leftover after parsing attributes in process `syz.1.19477'. [ 1851.413750][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19478'. [ 1851.609469][T11851] netlink: 72 bytes leftover after parsing attributes in process `syz.2.19484'. [ 1851.789246][T11865] netlink: 'syz.1.19488': attribute type 3 has an invalid length. [ 1851.817957][T11865] netlink: 'syz.1.19488': attribute type 3 has an invalid length. [ 1852.085813][T11884] netlink: 'syz.3.19493': attribute type 12 has an invalid length. [ 1852.259263][T11895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1852.530805][T11913] netlink: zone id is out of range [ 1852.541683][T11915] openvswitch: netlink: Key type 73 is out of range max 32 [ 1852.559770][T11913] netlink: zone id is out of range [ 1852.564950][T11913] netlink: zone id is out of range [ 1852.582019][T11913] netlink: zone id is out of range [ 1852.601754][T11913] netlink: zone id is out of range [ 1852.642756][T11913] netlink: zone id is out of range [ 1852.647949][T11913] netlink: zone id is out of range [ 1852.675983][T11918] syzkaller1: entered promiscuous mode [ 1852.682294][T11913] netlink: zone id is out of range [ 1852.687505][T11918] syzkaller1: entered allmulticast mode [ 1852.700603][T11913] netlink: zone id is out of range [ 1852.797477][T11926] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1852.804987][T11926] netlink: 'syz.2.19509': attribute type 14 has an invalid length. [ 1852.814989][T11926] netlink: 'syz.2.19509': attribute type 13 has an invalid length. [ 1852.973327][T11935] netlink: 'syz.4.19513': attribute type 1 has an invalid length. [ 1852.986877][T11935] set match dimension is over the limit! [ 1853.223060][T11956] warn_alloc: 1 callbacks suppressed [ 1853.223085][T11956] syz.4.19519: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1853.250200][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1853.258324][ C0] lec:lec_tx_timeout: lec0 [ 1853.258474][T11956] CPU: 1 UID: 0 PID: 11956 Comm: syz.4.19519 Not tainted syzkaller #0 PREEMPT(full) [ 1853.258561][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1853.258595][T11956] Call Trace: [ 1853.258617][T11956] [ 1853.258647][T11956] dump_stack_lvl+0xe8/0x150 [ 1853.258743][T11956] warn_alloc+0x249/0x340 [ 1853.258820][T11956] ? stack_trace_save+0xa9/0x100 [ 1853.258914][T11956] ? __pfx_warn_alloc+0x10/0x10 [ 1853.259009][T11956] ? kasan_save_track+0x4f/0x80 [ 1853.259072][T11956] ? kasan_save_track+0x3e/0x80 [ 1853.259145][T11956] ? __kasan_kmalloc+0x93/0xb0 [ 1853.259218][T11956] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1853.259284][T11956] ? xskq_create+0x56/0x170 [ 1853.259347][T11956] ? xsk_setsockopt+0x54c/0x990 [ 1853.259415][T11956] ? do_sock_setsockopt+0x17c/0x1b0 [ 1853.259479][T11956] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1853.259542][T11956] ? do_syscall_64+0x14d/0xf80 [ 1853.259625][T11956] __vmalloc_node_range_noprof+0x132/0x1730 [ 1853.259790][T11956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1853.259916][T11956] ? __kasan_kmalloc+0x93/0xb0 [ 1853.260027][T11956] vmalloc_user_noprof+0xad/0xe0 [ 1853.260099][T11956] ? xskq_create+0xbf/0x170 [ 1853.260170][T11956] xskq_create+0xbf/0x170 [ 1853.260237][T11956] xsk_init_queue+0xad/0x110 [ 1853.260309][T11956] xsk_setsockopt+0x54c/0x990 [ 1853.260380][T11956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1853.260446][T11956] ? __pfx_aa_sk_perm+0x10/0x10 [ 1853.260531][T11956] ? aa_sock_opt_perm+0xff/0x1a0 [ 1853.260617][T11956] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1853.260691][T11956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1853.260753][T11956] do_sock_setsockopt+0x17c/0x1b0 [ 1853.260836][T11956] __x64_sys_setsockopt+0x13d/0x1b0 [ 1853.260918][T11956] do_syscall_64+0x14d/0xf80 [ 1853.260984][T11956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.261038][T11956] ? trace_irq_disable+0x37/0x100 [ 1853.261109][T11956] ? clear_bhb_loop+0x40/0x90 [ 1853.261185][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.261254][T11956] RIP: 0033:0x7f61ee99c629 [ 1853.261329][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.261387][T11956] RSP: 002b:00007f61ef944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1853.261436][T11956] RAX: ffffffffffffffda RBX: 00007f61eec15fa0 RCX: 00007f61ee99c629 [ 1853.261477][T11956] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1853.261517][T11956] RBP: 00007f61eea32b39 R08: 0000000000000004 R09: 0000000000000000 [ 1853.261551][T11956] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1853.261592][T11956] R13: 00007f61eec16038 R14: 00007f61eec15fa0 R15: 00007ffff8435e98 [ 1853.261685][T11956] [ 1853.281540][T11956] Mem-Info: [ 1853.585151][T11956] active_anon:9294 inactive_anon:0 isolated_anon:0 [ 1853.585151][T11956] active_file:2652 inactive_file:41459 isolated_file:0 [ 1853.585151][T11956] unevictable:768 dirty:56 writeback:0 [ 1853.585151][T11956] slab_reclaimable:14999 slab_unreclaimable:147022 [ 1853.585151][T11956] mapped:29706 shmem:1441 pagetables:1287 [ 1853.585151][T11956] sec_pagetables:0 bounce:0 [ 1853.585151][T11956] kernel_misc_reclaimable:0 [ 1853.585151][T11956] free:1244201 free_pcp:31555 free_cma:0 [ 1853.641988][T11956] Node 0 active_anon:37276kB inactive_anon:0kB active_file:10608kB inactive_file:165640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20520kB dirty:224kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15448kB pagetables:4988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1853.702679][T11956] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1853.741398][T11956] Node 0 DMA free:11084kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:104kB free_cma:0kB [ 1853.799975][T11956] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1853.825739][T11956] Node 0 DMA32 free:1291988kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36876kB inactive_anon:0kB active_file:10608kB inactive_file:165640kB unevictable:1536kB writepending:224kB zspages:0kB present:3129332kB managed:2554016kB mlocked:0kB bounce:0kB free_pcp:67428kB local_pcp:46480kB free_cma:0kB [ 1853.862554][T11956] lowmem_reserve[]: 0 0 0 0 0 [ 1853.873891][T11956] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1853.929836][T11956] lowmem_reserve[]: 0 0 0 0 0 [ 1853.939373][T11956] Node 1 Normal free:3673932kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58652kB local_pcp:26988kB free_cma:0kB [ 1854.004055][T11956] lowmem_reserve[]: 0 0 0 0 0 [ 1854.009486][T11956] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11084kB [ 1854.027162][T11956] Node 0 DMA32: 14670*4kB (UME) 13274*8kB (UME) 8990*16kB (UME) 1043*32kB (UME) 77*64kB (UME) 23*128kB (UME) 494*256kB (UM) 565*512kB (UME) 334*1024kB (UM) 90*2048kB (UM) 0*4096kB = 1292040kB [ 1854.048007][T11956] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1854.073666][T11981] netlink: 'syz.2.19525': attribute type 1 has an invalid length. [ 1854.126647][T11956] Node 1 Normal: 5*4kB (UE) 7*8kB (UME) 14*16kB (UME) 15*32kB (UM) 11*64kB (UM) 7*128kB (UM) 10*256kB (UME) 8*512kB (UM) 7*1024kB (UME) 6*2048kB (UE) 890*4096kB (UM) = 3673932kB [ 1854.193599][T11956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.250000][T11956] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1854.273184][T11956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.301691][T11956] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1854.320874][T11956] 45924 total pagecache pages [ 1854.342050][T11956] 0 pages in swap cache [ 1854.369446][T11956] Free swap = 124996kB [ 1854.388314][T11956] Total swap = 124996kB [ 1854.398075][T11956] 2097051 pages RAM [ 1854.408610][T11956] 0 pages HighMem/MovableOnly [ 1854.418749][T11956] 426701 pages reserved [ 1854.427742][T11956] 0 pages cma reserved [ 1854.492936][T11992] netlink: 'syz.1.19526': attribute type 25 has an invalid length. [ 1854.529854][T11992] __nla_validate_parse: 15 callbacks suppressed [ 1854.529877][T11992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19526'. [ 1854.919003][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19535'. [ 1855.203315][T12038] tipc: Enabled bearer , priority 0 [ 1855.226830][T12041] netlink: 'syz.3.19542': attribute type 24 has an invalid length. [ 1855.247267][T12038] netlink: 'syz.1.19541': attribute type 13 has an invalid length. [ 1855.475292][T12038] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1855.483866][T12059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19546'. [ 1855.528680][T12038] syzkaller0: entered promiscuous mode [ 1855.537161][T12038] syzkaller0: entered allmulticast mode [ 1855.550653][T12038] tipc: Resetting bearer [ 1855.573846][T18388] tipc: Resetting bearer [ 1855.660167][T12037] tipc: Resetting bearer [ 1855.717746][T12037] tipc: Disabling bearer [ 1855.795595][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19548'. [ 1855.934376][T12077] syzkaller0: entered promiscuous mode [ 1855.953919][T12077] syzkaller0: entered allmulticast mode [ 1856.053413][T12078] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1856.063876][T12085] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.19555'. [ 1856.139439][T12090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19555'. [ 1856.257841][T12094] netlink: 'syz.3.19558': attribute type 2 has an invalid length. [ 1856.347190][T12094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.453871][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19561'. [ 1856.483554][T12110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19561'. [ 1856.497801][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19561'. [ 1856.516752][T12110] vlan1: entered allmulticast mode [ 1856.538330][T12110] mac80211_hwsim hwsim160 wlan0: entered allmulticast mode [ 1856.575624][T12119] IPVS: length: 39 != 24 [ 1856.777980][T12126] syzkaller0: entered promiscuous mode [ 1856.790123][T12126] syzkaller0: entered allmulticast mode [ 1856.975003][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19569'. [ 1857.034861][T12138] netlink: 'syz.0.19569': attribute type 2 has an invalid length. [ 1858.291703][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1859.592271][T12138] 9: entered promiscuous mode [ 1859.608591][T12163] __nla_validate_parse: 2 callbacks suppressed [ 1859.608613][T12163] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.19572'. [ 1860.692196][T12171] Bluetooth: hci2: command 0x0406 tx timeout [ 1860.698445][T12171] Bluetooth: hci0: command 0x0405 tx timeout [ 1860.878251][T12240] tipc: Enabling of bearer rejected, failed to enable media [ 1860.932098][T12249] netlink: 596 bytes leftover after parsing attributes in process `syz.3.19594'. [ 1861.290440][T12272] tipc: Enabling of bearer rejected, failed to enable media [ 1861.316530][T12277] netlink: 'syz.3.19603': attribute type 1 has an invalid length. [ 1861.522879][T12292] netlink: 'syz.4.19607': attribute type 1 has an invalid length. [ 1861.559630][T12292] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19607'. [ 1861.884485][T12306] netlink: 'syz.3.19610': attribute type 1 has an invalid length. [ 1861.912593][T12306] netlink: 'syz.3.19610': attribute type 2 has an invalid length. [ 1862.089356][T12296] ip6_vti0 speed is unknown, defaulting to 1000 [ 1863.309923][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1863.318067][ C0] lec:lec_tx_timeout: lec0 [ 1863.323305][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1864.654555][T12302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1864.664134][T12314] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1864.677804][T12320] netlink: 'syz.2.19613': attribute type 1 has an invalid length. [ 1864.686760][T12320] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19613'. [ 1864.706921][T12320] netlink: 658 bytes leftover after parsing attributes in process `syz.2.19613'. [ 1864.729240][T12320] netlink: 1 bytes leftover after parsing attributes in process `syz.2.19613'. [ 1864.911815][T12356] net_ratelimit: 56 callbacks suppressed [ 1864.911839][T12356] openvswitch: netlink: Flow key attribute not present in set flow. [ 1865.087467][T12374] netlink: 'syz.0.19624': attribute type 10 has an invalid length. [ 1865.126917][T12377] netlink: 'syz.0.19624': attribute type 10 has an invalid length. [ 1865.197590][T12385] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1865.236440][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19626'. [ 1865.546836][T12401] netlink: zone id is out of range [ 1865.552266][T12401] netlink: zone id is out of range [ 1865.557621][T12401] netlink: zone id is out of range [ 1865.563996][T12401] netlink: zone id is out of range [ 1865.569362][T12401] netlink: zone id is out of range [ 1865.575721][T12401] netlink: zone id is out of range [ 1865.586779][T12401] netlink: zone id is out of range [ 1865.593681][T12401] netlink: set zone limit has 4 unknown bytes [ 1865.723434][T11406] IPVS: starting estimator thread 0... [ 1865.820682][T12414] IPVS: using max 26 ests per chain, 62400 per kthread [ 1865.838287][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19635'. [ 1865.859102][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19637'. [ 1865.886503][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19637'. [ 1865.926458][T12419] hsr_slave_0 (unregistering): left promiscuous mode [ 1865.941265][ T9552] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1865.961074][T18400] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1865.971740][T18400] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1866.006755][T18400] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1866.016988][T12433] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19638'. [ 1866.186012][T12438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1866.574465][T12463] lo: Caught tx_queue_len zero misconfig [ 1866.618647][T12466] netlink: 'syz.3.19648': attribute type 2 has an invalid length. [ 1866.626947][T12466] netlink: 151 bytes leftover after parsing attributes in process `syz.3.19648'. [ 1866.745163][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19649'. [ 1866.821266][T12477] 8021q: VLANs not supported on wg2 [ 1866.838717][T12477] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1866.958294][T12485] sit1: entered promiscuous mode [ 1866.977854][T12485] sit1: entered allmulticast mode [ 1867.009689][T12479] netlink: 'syz.3.19651': attribute type 29 has an invalid length. [ 1867.038004][T12479] netlink: 'syz.3.19651': attribute type 29 has an invalid length. [ 1867.253379][T12497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1867.294926][T12497] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1867.305854][T12497] gretap4: entered promiscuous mode [ 1867.318819][T12497] gretap4: entered allmulticast mode [ 1867.617236][T12477] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1867.896352][T12532] netlink: 'syz.1.19668': attribute type 1 has an invalid length. [ 1867.973926][T12532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1868.329591][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1868.337691][ C0] lec:lec_tx_timeout: lec0 [ 1868.370262][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1868.430890][T12573] netlink: 'syz.4.19680': attribute type 4 has an invalid length. [ 1868.612697][T12566] netlink: 'syz.3.19678': attribute type 4 has an invalid length. [ 1868.632427][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1868.693798][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1868.740525][T12590] netlink: 'syz.0.19683': attribute type 10 has an invalid length. [ 1868.791783][T12574] syzkaller0: entered promiscuous mode [ 1868.797600][T12574] syzkaller0: entered allmulticast mode [ 1869.156326][T12609] siw: device registration error -23 [ 1869.189148][T12613] SET target dimension over the limit! [ 1869.258164][T12618] xt_bpf: check failed: parse error [ 1869.403756][T12628] netlink: 'syz.4.19698': attribute type 142 has an invalid length. [ 1869.519230][T12636] netlink: 'syz.1.19701': attribute type 1 has an invalid length. [ 1869.540594][T12636] netlink: 'syz.1.19701': attribute type 1 has an invalid length. [ 1869.747740][T12653] __nla_validate_parse: 17 callbacks suppressed [ 1869.747762][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19703'. [ 1870.263955][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19711'. [ 1870.301908][T12673] : entered promiscuous mode [ 1870.428525][T12683] syzkaller0: entered promiscuous mode [ 1870.434447][T12683] syzkaller0: entered allmulticast mode [ 1870.534067][T12683] tipc: Enabled bearer , priority 0 [ 1870.551405][T12682] tipc: Resetting bearer [ 1870.618336][T12682] tipc: Disabling bearer [ 1870.662474][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19721'. [ 1870.673327][T12702] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19720'. [ 1871.159628][T12721] 8021q: VLANs not supported on tunl0 [ 1871.349202][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19730'. [ 1871.401125][T12737] team0: Port device team_slave_0 removed [ 1871.460325][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19732'. [ 1871.582808][T12746] syzkaller0: entered promiscuous mode [ 1871.599748][T12746] syzkaller0: entered allmulticast mode [ 1871.621481][T12748] netlink: 17 bytes leftover after parsing attributes in process `syz.1.19734'. [ 1871.919759][T12743] ip6_vti0 speed is unknown, defaulting to 1000 [ 1872.115825][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19740'. [ 1872.153525][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19741'. [ 1872.172640][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19741'. [ 1872.264459][T12785] gre2: entered promiscuous mode [ 1872.278647][T12785] gre2: entered allmulticast mode [ 1872.448957][T12800] validate_nla: 1 callbacks suppressed [ 1872.448978][T12800] netlink: 'syz.0.19745': attribute type 2 has an invalid length. [ 1872.485927][T12800] netlink: 'syz.0.19745': attribute type 1 has an invalid length. [ 1872.581975][T12805] netlink: 'syz.4.19747': attribute type 1 has an invalid length. [ 1872.673333][T12805] bond1: entered promiscuous mode [ 1872.701430][T12805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1872.764478][T12812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1872.773231][T12812] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1872.783866][T12812] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1872.811403][T12812] bond1: (slave vti0): making interface the new active one [ 1872.818671][T12812] vti0: entered promiscuous mode [ 1872.831403][T12812] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1872.841714][T12821] sctp: [Deprecated]: syz.0.19749 (pid 12821) Use of int in maxseg socket option. [ 1872.841714][T12821] Use struct sctp_assoc_value instead [ 1872.880523][T12813] tipc: Enabled bearer , priority 0 [ 1872.887557][T12811] syzkaller0: entered promiscuous mode [ 1872.901127][T12811] syzkaller0: entered allmulticast mode [ 1872.943686][T12813] tipc: Resetting bearer [ 1872.968346][T12810] tipc: Resetting bearer [ 1873.028329][T12810] tipc: Disabling bearer [ 1873.236728][T12830] ip6gretap0 (unregistering): left promiscuous mode [ 1873.370835][T12834] netlink: 'syz.0.19755': attribute type 2 has an invalid length. [ 1873.379647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1873.387713][ C0] lec:lec_tx_timeout: lec0 [ 1873.409955][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1873.952304][ T6033] tipc: Subscription rejected, illegal request [ 1874.345298][T12888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1874.352661][T12888] IPv6: NLM_F_CREATE should be set when creating new route [ 1874.586391][T12906] netlink: 'syz.1.19773': attribute type 3 has an invalid length. [ 1874.755678][T18398] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.819298][T18398] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.848689][T18398] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.859108][T18398] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.906445][T12916] syzkaller0: entered promiscuous mode [ 1874.916785][T12916] syzkaller0: entered allmulticast mode [ 1875.136920][T12925] __nla_validate_parse: 18 callbacks suppressed [ 1875.136941][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19779'. [ 1875.341478][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19782'. [ 1875.425970][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19784'. [ 1875.455795][T12945] netlink: 'syz.2.19785': attribute type 21 has an invalid length. [ 1875.479873][T12945] IPv6: NLM_F_CREATE should be specified when creating new route [ 1875.488206][T12945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1875.495509][T12945] IPv6: NLM_F_CREATE should be set when creating new route [ 1875.502974][T12945] IPv6: NLM_F_CREATE should be set when creating new route [ 1875.510301][T12945] IPv6: NLM_F_CREATE should be set when creating new route [ 1875.547418][T12946] netlink: 13 bytes leftover after parsing attributes in process `syz.2.19785'. [ 1875.559049][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19785'. [ 1875.973279][T12985] x_tables: unsorted underflow at hook 4 [ 1876.047396][T12985] netlink: 'syz.0.19797': attribute type 1 has an invalid length. [ 1876.074604][T12985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1876.085506][T12985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19797'. [ 1876.537025][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19803'. [ 1876.546779][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19803'. [ 1876.557531][T13012] syzkaller0: entered promiscuous mode [ 1876.563695][T13012] syzkaller0: entered allmulticast mode [ 1876.815310][T12860] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1876.827275][T12860] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1876.849651][ C0] ------------[ cut here ]------------ [ 1876.855691][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 1876.862439][ C0] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd1f/0xf90, CPU#0: syz.3.19807/13016 [ 1876.872319][ C0] Modules linked in: [ 1876.876668][ C0] CPU: 0 UID: 0 PID: 13016 Comm: syz.3.19807 Not tainted syzkaller #0 PREEMPT(full) [ 1876.886170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1876.896274][ C0] RIP: 0010:__queue_work+0xd4a/0xf90 [ 1876.901787][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 67 0e a1 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 1876.921472][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010086 [ 1876.927605][ C0] RAX: 1ffff110100a5951 RBX: 0000000000000008 RCX: ffff88802a94dac0 [ 1876.935625][ C0] RDX: ffff888021741178 RSI: ffffffff8a918d50 RDI: ffffffff90138180 [ 1876.943742][ C0] RBP: 0000000000000100 R08: ffffffff90109277 R09: 1ffffffff202124e [ 1876.951760][ C0] R10: dffffc0000000000 R11: ffffffff818c5940 R12: dffffc0000000000 [ 1876.959782][ C0] R13: ffff88808052ca88 R14: ffffffff90138180 R15: ffff888021741178 [ 1876.967800][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1876.976825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1876.983460][ C0] CR2: 0000001b2ed24000 CR3: 00000000aa20a000 CR4: 00000000003526f0 [ 1876.991507][ C0] Call Trace: [ 1876.994832][ C0] [ 1876.997724][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1877.002823][ C0] call_timer_fn+0x192/0x5a0 [ 1877.007561][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1877.013509][ C0] ? call_timer_fn+0xd4/0x5a0 [ 1877.018248][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1877.023425][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1877.028607][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1877.034471][ C0] __run_timer_base+0x67e/0x8b0 [ 1877.039382][ C0] ? ktime_get+0x45/0x200 [ 1877.043780][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1877.049215][ C0] ? sched_clock_cpu+0x74/0x440 [ 1877.054131][ C0] run_timer_softirq+0xb7/0x170 [ 1877.059113][ C0] handle_softirqs+0x22a/0x7c0 [ 1877.063926][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1877.068761][ C0] __irq_exit_rcu+0x5f/0x150 [ 1877.073403][ C0] irq_exit_rcu+0x9/0x30 [ 1877.077712][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1877.083403][ C0] [ 1877.086359][ C0] [ 1877.089315][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1877.095328][ C0] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 1877.100746][ C0] Code: 89 f7 e8 dc e6 83 00 48 c7 c3 58 37 18 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 69 85 6d 11 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 47 9c f7 09 cc e8 41 30 [ 1877.120389][ C0] RSP: 0018:ffffc9000c0a7558 EFLAGS: 00000282 [ 1877.126483][ C0] RAX: 00000000003a4094 RBX: ffff8880b8633758 RCX: 0000000080000003 [ 1877.134486][ C0] RDX: 0000000000000000 RSI: ffffffff8c2764e0 RDI: ffffffff8c2764a0 [ 1877.142497][ C0] RBP: ffffffff82397a9a R08: 0000000000000000 R09: 0000000000000000 [ 1877.150523][ C0] R10: dffffc0000000000 R11: fffff940003b7fa9 R12: 0000000000000002 [ 1877.158616][ C0] R13: ffffffff8e75e160 R14: ffffffff8e197dd0 R15: dffffc0000000000 [ 1877.166619][ C0] ? pfn_valid+0xba/0x480 [ 1877.170997][ C0] ? rcu_is_watching+0x15/0xb0 [ 1877.175790][ C0] lock_acquire+0x5f/0x330 [ 1877.180242][ C0] ? lock_acquire+0x106/0x330 [ 1877.184956][ C0] ? folio_mark_accessed+0x442/0x8c0 [ 1877.190276][ C0] ? pfn_valid+0xba/0x480 [ 1877.194639][ C0] pfn_valid+0xd6/0x480 [ 1877.198911][ C0] ? pfn_valid+0xba/0x480 [ 1877.203445][ C0] page_table_check_clear+0x21/0x5f0 [ 1877.208766][ C0] ? vm_normal_page+0x10d/0x240 [ 1877.213650][ C0] unmap_page_range+0x3294/0x4030 [ 1877.218739][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1877.224151][ C0] ? mas_find+0xb0e/0xd30 [ 1877.228533][ C0] ? unmap_vmas+0x157/0x5c0 [ 1877.233068][ C0] unmap_vmas+0x3c0/0x5c0 [ 1877.237432][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1877.242333][ C0] exit_mmap+0x251/0xb30 [ 1877.246688][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1877.251913][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1877.256708][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1877.262374][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1877.267101][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1877.272347][ C0] __mmput+0x118/0x430 [ 1877.276452][ C0] exit_mm+0x168/0x220 [ 1877.280562][ C0] do_exit+0x62e/0x2310 [ 1877.284758][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1877.290597][ C0] ? __pfx_do_exit+0x10/0x10 [ 1877.295218][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1877.300622][ C0] ? preempt_schedule_common+0x82/0xd0 [ 1877.306106][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1877.311537][ C0] do_group_exit+0x21b/0x2d0 [ 1877.316159][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1877.321207][ C0] x64_sys_call+0x221a/0x2240 [ 1877.325912][ C0] do_syscall_64+0x14d/0xf80 [ 1877.330644][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.336752][ C0] ? trace_irq_disable+0x37/0x100 [ 1877.341817][ C0] ? clear_bhb_loop+0x40/0x90 [ 1877.346530][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.352459][ C0] RIP: 0033:0x7f4fa159c629 [ 1877.356914][ C0] Code: Unable to access opcode bytes at 0x7f4fa159c5ff. [ 1877.363959][ C0] RSP: 002b:00007ffcb9caac28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1877.372578][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fa159c629 [ 1877.380844][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1877.389023][ C0] RBP: 00007ffcb9caac8c R08: 0000000000000000 R09: 00000000000927c0 [ 1877.397109][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000015c [ 1877.405109][ C0] R13: 00000000000927c0 R14: 00000000001ca2ec R15: 00007ffcb9caace0 [ 1877.413121][ C0] [ 1877.416214][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1877.423602][ C0] CPU: 0 UID: 0 PID: 13016 Comm: syz.3.19807 Not tainted syzkaller #0 PREEMPT(full) [ 1877.433075][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1877.443150][ C0] Call Trace: [ 1877.446452][ C0] [ 1877.449315][ C0] vpanic+0x1e0/0x670 [ 1877.453330][ C0] panic+0xc5/0xd0 [ 1877.457081][ C0] ? __pfx_panic+0x10/0x10 [ 1877.461538][ C0] __warn+0x315/0x4a0 [ 1877.465632][ C0] ? __queue_work+0xd1f/0xf90 [ 1877.470332][ C0] ? __queue_work+0xd1f/0xf90 [ 1877.475039][ C0] __report_bug+0x29a/0x540 [ 1877.479578][ C0] ? __queue_work+0xd1f/0xf90 [ 1877.484278][ C0] ? __pfx___report_bug+0x10/0x10 [ 1877.489332][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1877.494654][ C0] ? register_lock_class+0x31/0x2e0 [ 1877.499879][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1877.504852][ C0] report_bug_entry+0x19a/0x290 [ 1877.509818][ C0] ? __queue_work+0xd4a/0xf90 [ 1877.514518][ C0] ? __queue_work+0xd4f/0xf90 [ 1877.519217][ C0] handle_bug+0xca/0x200 [ 1877.523486][ C0] exc_invalid_op+0x1a/0x50 [ 1877.528015][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1877.532886][ C0] RIP: 0010:__queue_work+0xd4a/0xf90 [ 1877.538197][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 67 0e a1 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 1877.557825][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010086 [ 1877.563916][ C0] RAX: 1ffff110100a5951 RBX: 0000000000000008 RCX: ffff88802a94dac0 [ 1877.572003][ C0] RDX: ffff888021741178 RSI: ffffffff8a918d50 RDI: ffffffff90138180 [ 1877.579994][ C0] RBP: 0000000000000100 R08: ffffffff90109277 R09: 1ffffffff202124e [ 1877.587985][ C0] R10: dffffc0000000000 R11: ffffffff818c5940 R12: dffffc0000000000 [ 1877.595982][ C0] R13: ffff88808052ca88 R14: ffffffff90138180 R15: ffff888021741178 [ 1877.603985][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1877.609825][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1877.615148][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1877.620214][ C0] call_timer_fn+0x192/0x5a0 [ 1877.624860][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1877.630694][ C0] ? call_timer_fn+0xd4/0x5a0 [ 1877.635506][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1877.640679][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1877.645818][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1877.651653][ C0] __run_timer_base+0x67e/0x8b0 [ 1877.656526][ C0] ? ktime_get+0x45/0x200 [ 1877.660895][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1877.666293][ C0] ? sched_clock_cpu+0x74/0x440 [ 1877.671173][ C0] run_timer_softirq+0xb7/0x170 [ 1877.676042][ C0] handle_softirqs+0x22a/0x7c0 [ 1877.680831][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1877.685622][ C0] __irq_exit_rcu+0x5f/0x150 [ 1877.690239][ C0] irq_exit_rcu+0x9/0x30 [ 1877.694511][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1877.700170][ C0] [ 1877.703115][ C0] [ 1877.706065][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1877.712064][ C0] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 1877.717455][ C0] Code: 89 f7 e8 dc e6 83 00 48 c7 c3 58 37 18 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 69 85 6d 11 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 47 9c f7 09 cc e8 41 30 [ 1877.737074][ C0] RSP: 0018:ffffc9000c0a7558 EFLAGS: 00000282 [ 1877.743175][ C0] RAX: 00000000003a4094 RBX: ffff8880b8633758 RCX: 0000000080000003 [ 1877.751165][ C0] RDX: 0000000000000000 RSI: ffffffff8c2764e0 RDI: ffffffff8c2764a0 [ 1877.759151][ C0] RBP: ffffffff82397a9a R08: 0000000000000000 R09: 0000000000000000 [ 1877.767136][ C0] R10: dffffc0000000000 R11: fffff940003b7fa9 R12: 0000000000000002 [ 1877.775124][ C0] R13: ffffffff8e75e160 R14: ffffffff8e197dd0 R15: dffffc0000000000 [ 1877.783118][ C0] ? pfn_valid+0xba/0x480 [ 1877.787484][ C0] ? rcu_is_watching+0x15/0xb0 [ 1877.792269][ C0] lock_acquire+0x5f/0x330 [ 1877.796718][ C0] ? lock_acquire+0x106/0x330 [ 1877.801430][ C0] ? folio_mark_accessed+0x442/0x8c0 [ 1877.806764][ C0] ? pfn_valid+0xba/0x480 [ 1877.811121][ C0] pfn_valid+0xd6/0x480 [ 1877.815297][ C0] ? pfn_valid+0xba/0x480 [ 1877.819651][ C0] page_table_check_clear+0x21/0x5f0 [ 1877.824956][ C0] ? vm_normal_page+0x10d/0x240 [ 1877.829831][ C0] unmap_page_range+0x3294/0x4030 [ 1877.834919][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1877.840323][ C0] ? mas_find+0xb0e/0xd30 [ 1877.844674][ C0] ? unmap_vmas+0x157/0x5c0 [ 1877.849222][ C0] unmap_vmas+0x3c0/0x5c0 [ 1877.853591][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1877.858500][ C0] exit_mmap+0x251/0xb30 [ 1877.862795][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1877.868018][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1877.872805][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1877.878472][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1877.883176][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1877.888410][ C0] __mmput+0x118/0x430 [ 1877.892506][ C0] exit_mm+0x168/0x220 [ 1877.896617][ C0] do_exit+0x62e/0x2310 [ 1877.900809][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1877.906662][ C0] ? __pfx_do_exit+0x10/0x10 [ 1877.911282][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1877.916682][ C0] ? preempt_schedule_common+0x82/0xd0 [ 1877.922167][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1877.927562][ C0] do_group_exit+0x21b/0x2d0 [ 1877.932188][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1877.937242][ C0] x64_sys_call+0x221a/0x2240 [ 1877.941967][ C0] do_syscall_64+0x14d/0xf80 [ 1877.946593][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.952766][ C0] ? trace_irq_disable+0x37/0x100 [ 1877.957811][ C0] ? clear_bhb_loop+0x40/0x90 [ 1877.962514][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.968425][ C0] RIP: 0033:0x7f4fa159c629 [ 1877.972864][ C0] Code: Unable to access opcode bytes at 0x7f4fa159c5ff. [ 1877.979899][ C0] RSP: 002b:00007ffcb9caac28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1877.988364][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fa159c629 [ 1877.996483][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1878.004472][ C0] RBP: 00007ffcb9caac8c R08: 0000000000000000 R09: 00000000000927c0 [ 1878.012469][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000015c [ 1878.020466][ C0] R13: 00000000000927c0 R14: 00000000001ca2ec R15: 00007ffcb9caace0 [ 1878.028473][ C0] [ 1878.032121][ C0] Kernel Offset: disabled [ 1878.036451][ C0] Rebooting in 86400 seconds..