last executing test programs: 5.026369877s ago: executing program 3 (id=4031): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.362313983s ago: executing program 4 (id=4036): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xf, 0x0, &(0x7f0000000840)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x80000000, 0x5, 0x2, 0xabc, 0x3ff, 0x3, 0x1, 0x3, 0x1, 0x1, 0x7ff, 0x80000001, 0x8, 0x56, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x800}}) 4.255569444s ago: executing program 2 (id=4038): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 4.150444187s ago: executing program 4 (id=4039): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0xff97, 0x1, 0xbf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x2) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x2c}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) r6 = accept4$phonet_pipe(r5, 0x0, &(0x7f0000000300), 0x80000) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000340)="990f174771ed48f5684517ee9c47723c4a07915bea3dbb6d6c66d680776bef396ddbcd7f4f6a9a34d78f08cf36d8f69539dce129a4", 0x35}, {&(0x7f00000003c0)}, {&(0x7f0000000480)="d29c6b90f126c44f08054b113c2ae7b2d8d9e7c77860eecb896a3c61fcccdd3216175ebaf46a9fbf8e525b64b7abb6424d4ff1cd04e03c332ba89734f0a002448ac3047ee77e84ee29cb416dc8fd", 0x4e}, {&(0x7f0000000500)="0dfa97f1439bf9743338ed34dc9331599d3d04540769b48c514002590868732f98f3e33f34ef47c35f17f1e580962abba3dc75d53ce7e8957b8cd07ae2ea5e4bef105141589091964cbb79a69df3a830f5ac40162d36f592b9f8969109c4266368ef81499ea08d377267b8bca45b36b0", 0x70}, {&(0x7f0000000580)="e24c48b1ae2bc2161b4117dc2f61489b4894844c97322c00fee9b5c9eddd90907e2a86584a96066215a1e5", 0x2b}, {&(0x7f0000000600)="92891c736efeafb2b1c1b839054fd8f11af089483387a5a8a5995606a87d9e7bfd066d930534e97ec8c8fb850d64b8892de74408215d3b679274d9068061a8ec7f3742f2a62a28961bd6a1fc8ef2d8a6ad2b112d4071e5aff19dfdd2f9a43fdc49cc44b3", 0x64}, {&(0x7f0000000740)="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", 0xfa}], 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r8, 0x508, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004884}, 0x4004008) 4.021485272s ago: executing program 3 (id=4041): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) tee(r2, r2, 0x2341, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0x0, 0xf6, 0x0, &(0x7f0000000300)=""/246, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r2, 0x1, 0x25, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r7) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r8, @ANYBLOB="01002b027000ffdbdf25210000000a0001007770616e31000000050020000000000009001f0070687931000000000a0001007770616e330000000500200081"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.79679122s ago: executing program 4 (id=4042): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x40060900) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x3, 0x3, 0x6, 0x0, 0x207fd]}, &(0x7f0000000080)=0x78) 3.523842246s ago: executing program 3 (id=4044): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000700)=0x400, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) getsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x0, 0x2, {0x548ed88f3b813d72, 0x0, 0x1}, {0x0, 0x1, 0x2}, 0xfe, 0x1}, {0x2, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff, 0x3}, 0x1, 0x2}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 3.322062907s ago: executing program 3 (id=4045): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344}, 0x0, 0x10000) syz_emit_ethernet(0x52, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x1c, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x4e22, 0x41424344, r3, 0x0, 0x2, 0x7, 0x70, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bind$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0xc, &(0x7f0000000000)=@ccm_128={{0x304}, "9effe4ad99f7008e", "4d1a267a1d8fa8f4fd9b7eb99e785f84", "799a0e39", "a5e77b58ffac206a"}, 0x28) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.155169127s ago: executing program 0 (id=4046): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x22020600) pwrite64(0xffffffffffffffff, 0x0, 0xfffffe78, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x71}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.920162974s ago: executing program 2 (id=4048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, 0x0, 0x0) listen(r3, 0x5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x3, 0x9, 0x10000, 0x401}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.806123873s ago: executing program 0 (id=4050): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x81000000, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xca, "99d6b252f0218c16b0ef799972bf0e64"}}}]}, 0x48}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)='O', 0x1}], 0x1}}], 0x1, 0x800c081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000008d080000711209000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="08000000010000", 0x7) 2.682323124s ago: executing program 0 (id=4051): r0 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300b4c7cdb091dbabce35838a40961007ddf09b7beaf1060caa241d67b7f8a659ddfe49e92c6c028313310d1724ff9091ae09212381a7b9dd5d1954e2c8715e2db68ed481df5eaf81503a16b38c41cdec0f833ed70bb767e2fa9140f80d03fa1b405b1284786de90a5128e849ded2cd33ee22495db893e7abdc4f61daf787bb51674ae52f7892ac4f9a79883481f86646e3c74e319c82a04453676100f1d20df0103bf3b2c854fa39b568c016ee2ba0936d1bc378352302580044cd2c218661944db69793966f4f4b48", @ANYRES32=r9, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050009000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2.540892452s ago: executing program 1 (id=4052): socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x68}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRESHEX=r3], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0xa, 0x801, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r8, 0x0) close(r8) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.476263306s ago: executing program 2 (id=4053): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a2c", 0xf6}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201", 0xd6}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f475d25203ec0e0dd996b25d908e16539ac6e6086da296964d83ba527dcb6e7de403ef2a089ba3a5e094333a951cb48b75ac346", 0xec}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.271121594s ago: executing program 3 (id=4054): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8000, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa9000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 2.13414188s ago: executing program 4 (id=4055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x2, 0x398, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00ad8430d600fbdfdf250200c40f26e041000008003f889f659d8aa6199400f8b71157efa3b5858d88592d05d0b15cc9a439c76b1de1eabf6d26658d1e60813859c7e2be5e600f6ad8263df52d778053493a9c85a07b6309d92ce165d01df2712b92adfe3c8d7af0ed90412ac96e411ececb5d0799b95e11428027c13cdc25d34c165f87669610d7c04291b7bdc9df106492d828518d36879d6aea982b4a5c3bf7a1c07c7a129b5d917143ac6b433f0e4f97d05da8ddbf369fd5860a439a2163b600"/204], 0x1c}, 0x1, 0x0, 0x0, 0x24048445}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x200000, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x101}, 0x2f) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) r7 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x518, 0x518, 0x518, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00'}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r6) close(r7) 1.875829156s ago: executing program 4 (id=4056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e3900000613f207c4e8ed79bb5e9aa6000000015d2b51e85dc0893f8f8ae201553ec6e4a50f86eff6007772e76e19601ff1a9816108e4b4e8d3ce1b13cf8d59b55cd71c788aa9cfc760ad65c0e5ba06b84e7591d96dfbfced372c1b00253a3b37bca0a3eb46270d249b4ba48e853bdfac49c833fdc58e1b3832", @ANYRES32, @ANYBLOB="0500"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000010000000e00"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.779080411s ago: executing program 4 (id=4057): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@private=0xa010102, @broadcast, 0x1, 0x4, [@private=0xa010100, @loopback, @private=0xa010101, @multicast2]}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.619947079s ago: executing program 0 (id=4058): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 1.553531894s ago: executing program 2 (id=4059): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000000)=0x3) socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private=0xa010102, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000280)={0x6, &(0x7f0000000180)=[{0x9, 0x4, 0x36, 0x1}, {0x1, 0x5, 0xa, 0xbd75}, {0xf12c, 0x4, 0x6, 0x800}, {0x8, 0x6, 0xd, 0x4}, {0xe464, 0x2, 0xf4, 0x2}, {0xffff, 0x6, 0x5, 0x6}]}) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 1.550702633s ago: executing program 1 (id=4060): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x4c}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc4, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x9, 0x3, 0x4, 0x24, 0x5, 0x48, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x36, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.374449668s ago: executing program 1 (id=4061): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1402, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, 0x0) getpid() r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r4, 0x852dd6c070cd7e4d, 0xffdfffff, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x4, 0xfd, 0x0, 0x81}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c01067909f5c90}, 0x4000001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010300000000000000001100000008000300", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {}, {}, 0x0, 0x2, 0xa, 0x1, 0x0, 0x6f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) 1.224135545s ago: executing program 0 (id=4062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000000700000000000000950000000000000000020000c47a74cfb5af100fc4e95d123de5462d8f1b8850821b01feffffffffffff0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 1.18641299s ago: executing program 3 (id=4063): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000240)=0x69a1, 0x4) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x8, 0xbf, 0x4000, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xc, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r2, &(0x7f0000001840)={&(0x7f0000000300)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000001780), 0x0, &(0x7f0000001800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x40041) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r5, &(0x7f0000001480)=""/4096, 0x38) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 781.645897ms ago: executing program 0 (id=4064): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) close(r0) syz_emit_ethernet(0x76, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0xb, "54df942f7e09586180"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0xe, [0x5, 0x5, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) 680.230449ms ago: executing program 1 (id=4065): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x40850}, 0xc814) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x4050) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe0000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff8145}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000000000000000000000010000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d75035"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) socket$nl_xfrm(0x10, 0x3, 0x6) 355.357585ms ago: executing program 2 (id=4066): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=@gettaction={0x178, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x5411, &(0x7f00000007c0)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911071000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e00000000000000000100000009000100"], 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 261.13172ms ago: executing program 1 (id=4067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e3900000613f207c4e8ed79bb5e9aa6000000015d2b51e85dc0893f8f8ae201553ec6e4a50f86eff6007772e76e19601ff1a9816108e4b4e8d3ce1b13cf8d59b55cd71c788aa9cfc760ad65c0e5ba06b84e7591d96dfbfced372c1b00253a3b37bca0a3eb46270d249b4ba48e853bdfac49c833fdc58e1b3832", @ANYRES32, @ANYBLOB="0500"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000010000000e00"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 68.535862ms ago: executing program 2 (id=4068): r0 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300b4c7cdb091dbabce35838a40961007ddf09b7beaf1060caa241d67b7f8a659ddfe49e92c6c028313310d1724ff9091ae09212381a7b9dd5d1954e2c8715e2db68ed481df5eaf81503a16b38c41cdec0f833ed70bb767e2fa9140f80d03fa1b405b1284786de90a5128e849ded2cd33ee22495db893e7abdc4f61daf787bb51674ae52f7892ac4f9a79883481f86646e3c74e319c82a04453676100f1d20df0103bf3b2c854fa39b568c016ee2ba0936d1bc378352302580044cd2c218661944db69793966f4f4b48", @ANYRES32=r9, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050009000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 0s ago: executing program 1 (id=4069): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x4, 0x6db22e68, 0x40, r1, 0x4, '\x00', r5, r6, 0x2, 0x3, 0x5, 0xc, @void, @value, @void, @value}, 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x12, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x40, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0xb, 0x8, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x7, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r8}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) kernel console output (not intermixed with test programs): entered promiscuous mode [ 475.400502][T14061] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 475.455212][T14061] 8021q: adding VLAN 0 to HW filter on device bond11 [ 475.542340][T14064] 8021q: adding VLAN 0 to HW filter on device bond11 [ 475.550535][T14064] bond11: (slave vcan2): The slave device specified does not support setting the MAC address [ 475.599371][T14064] bond11: (slave vcan2): Error -95 calling set_mac_address [ 475.661878][T14065] lo speed is unknown, defaulting to 1000 [ 475.717553][T14065] lo speed is unknown, defaulting to 1000 [ 475.735026][T14065] lo speed is unknown, defaulting to 1000 [ 475.790807][T14072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2255'. [ 476.563087][T14098] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 476.659543][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 477.209672][T14119] syzkaller1: entered promiscuous mode [ 477.215473][T14119] syzkaller1: entered allmulticast mode [ 477.244433][T14119] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 477.353972][T14127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2279'. [ 477.543580][T14133] lo speed is unknown, defaulting to 1000 [ 477.560120][T14133] lo speed is unknown, defaulting to 1000 [ 477.582730][T14133] lo speed is unknown, defaulting to 1000 [ 477.875681][T14149] netlink: 'syz.0.2286': attribute type 10 has an invalid length. [ 477.893463][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2286'. [ 478.589611][T14162] bridge5: entered promiscuous mode [ 478.614791][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2294'. [ 478.723933][T14169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2294'. [ 478.742319][T14173] netlink: 'syz.1.2296': attribute type 10 has an invalid length. [ 478.788458][T14173] bond0: (slave wlan1): refused to change device type [ 478.829543][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2296'. [ 480.101459][T14213] lo speed is unknown, defaulting to 1000 [ 480.119261][T14216] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 480.121546][T14213] lo speed is unknown, defaulting to 1000 [ 480.185418][T14216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 480.224288][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'. [ 480.240369][T14218] lo speed is unknown, defaulting to 1000 [ 480.304803][T14216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 480.325027][T14216] bond7: (slave vcan2): The slave device specified does not support setting the MAC address [ 480.342331][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'. [ 480.346120][T14216] bond7: (slave vcan2): Error -95 calling set_mac_address [ 480.367206][T14213] lo speed is unknown, defaulting to 1000 [ 480.370216][T14226] netlink: 'syz.1.2317': attribute type 10 has an invalid length. [ 480.381498][T14218] lo speed is unknown, defaulting to 1000 [ 480.395335][T14226] bond0: (slave wlan1): refused to change device type [ 480.404791][T14218] lo speed is unknown, defaulting to 1000 [ 480.461629][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 480.620740][T14236] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 480.694167][T14235] lo speed is unknown, defaulting to 1000 [ 480.753851][T14235] lo speed is unknown, defaulting to 1000 [ 480.775996][T14235] lo speed is unknown, defaulting to 1000 [ 481.176666][T14254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.667426][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 481.714699][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 481.748276][T14275] netlink: 'syz.2.2332': attribute type 7 has an invalid length. [ 481.782884][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 481.820173][T14279] : (slave wlan1): Releasing backup interface [ 481.867819][T14281] netlink: 'syz.4.2334': attribute type 10 has an invalid length. [ 481.891816][T14275] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.901099][T14275] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.909639][T14275] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.918214][T14275] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.943543][T14285] netlink: 'syz.0.2335': attribute type 1 has an invalid length. [ 481.983051][T14281] : (slave wlan1): Enslaving as an active interface with an up link [ 482.032471][T14282] lo speed is unknown, defaulting to 1000 [ 482.057115][T14282] lo speed is unknown, defaulting to 1000 [ 482.127335][T14282] lo speed is unknown, defaulting to 1000 [ 482.677981][T14309] lo speed is unknown, defaulting to 1000 [ 482.710453][T14309] lo speed is unknown, defaulting to 1000 [ 482.717838][T14309] lo speed is unknown, defaulting to 1000 [ 483.252346][T14326] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 483.293357][T14326] : (slave wlan1): refused to change device type [ 483.363093][T14326] __nla_validate_parse: 2 callbacks suppressed [ 483.363116][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2350'. [ 483.486589][T14336] netlink: 'syz.3.2353': attribute type 1 has an invalid length. [ 483.542243][T14335] lo speed is unknown, defaulting to 1000 [ 483.590633][T14335] lo speed is unknown, defaulting to 1000 [ 483.597640][T14335] lo speed is unknown, defaulting to 1000 [ 484.169128][T14356] xt_hashlimit: size too large, truncated to 1048576 [ 484.224667][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 484.279670][T14359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2360'. [ 484.368290][T14363] netlink: 'syz.0.2362': attribute type 10 has an invalid length. [ 484.481768][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 484.621775][T14368] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2364'. [ 484.660292][T14368] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 485.201081][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2375'. [ 485.300324][T14396] bridge5: entered promiscuous mode [ 485.366518][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 485.403717][T14394] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 485.634315][T14406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.641794][T14405] netlink: 'syz.1.2378': attribute type 10 has an invalid length. [ 485.668420][T14405] bond0: (slave wlan1): refused to change device type [ 485.705477][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'. [ 485.941281][T14389] netlink: 'syz.3.2372': attribute type 11 has an invalid length. [ 486.103277][T14421] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.282841][T14426] netlink: 'syz.1.2387': attribute type 10 has an invalid length. [ 486.300717][T14426] bond0: (slave wlan1): refused to change device type [ 486.334372][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2387'. [ 486.463982][T14431] lo speed is unknown, defaulting to 1000 [ 486.485466][T14431] lo speed is unknown, defaulting to 1000 [ 486.516997][T14431] lo speed is unknown, defaulting to 1000 [ 487.093803][T14447] netlink: 'syz.1.2396': attribute type 4 has an invalid length. [ 487.146863][T14451] netlink: 'syz.1.2396': attribute type 4 has an invalid length. [ 487.915551][T14467] netlink: 'syz.3.2403': attribute type 10 has an invalid length. [ 487.996766][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2403'. [ 488.010488][T14470] lo speed is unknown, defaulting to 1000 [ 488.017559][T14470] lo speed is unknown, defaulting to 1000 [ 488.086053][T14470] lo speed is unknown, defaulting to 1000 [ 488.139686][T14457] netlink: 'syz.0.2399': attribute type 11 has an invalid length. [ 488.672536][T14484] lo speed is unknown, defaulting to 1000 [ 488.700027][T14484] lo speed is unknown, defaulting to 1000 [ 488.738840][T14484] lo speed is unknown, defaulting to 1000 [ 488.939673][T14504] xt_CT: No such helper "pptp" [ 489.721259][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 489.733487][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2418'. [ 490.321627][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'. [ 490.366635][T14539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2422'. [ 490.907252][T14530] netlink: 'syz.4.2420': attribute type 11 has an invalid length. [ 491.029715][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'. [ 491.050853][T14555] lo speed is unknown, defaulting to 1000 [ 491.057816][T14555] lo speed is unknown, defaulting to 1000 [ 491.115178][T14555] lo speed is unknown, defaulting to 1000 [ 491.837237][T14582] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 491.948398][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 492.336659][T14602] lo speed is unknown, defaulting to 1000 [ 492.344879][T14602] lo speed is unknown, defaulting to 1000 [ 492.352300][T14602] lo speed is unknown, defaulting to 1000 [ 492.390129][T14603] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 492.420576][T14603] 8021q: adding VLAN 0 to HW filter on device bond12 [ 492.450667][T14602] 8021q: adding VLAN 0 to HW filter on device bond12 [ 492.458412][T14602] bond12: (slave vcan3): The slave device specified does not support setting the MAC address [ 492.471119][T14602] bond12: (slave vcan3): Error -95 calling set_mac_address [ 492.753756][T14610] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 492.888471][T14615] ip6tnl2: entered promiscuous mode [ 493.380982][T14628] netlink: 'syz.2.2454': attribute type 3 has an invalid length. [ 493.404618][T14631] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2455'. [ 493.408298][T14628] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2454'. [ 493.428624][T14631] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 493.809481][T14643] syzkaller1: entered promiscuous mode [ 493.822030][T14643] syzkaller1: entered allmulticast mode [ 494.054917][T14653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2463'. [ 494.230764][T14659] lo speed is unknown, defaulting to 1000 [ 494.260079][T14659] lo speed is unknown, defaulting to 1000 [ 494.313601][T14662] : (slave wlan1): Releasing backup interface [ 494.342519][T14666] netlink: 'syz.4.2470': attribute type 10 has an invalid length. [ 494.351075][T14659] lo speed is unknown, defaulting to 1000 [ 494.376672][T14666] : (slave wlan1): Enslaving as an active interface with an up link [ 494.413364][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2470'. [ 494.765518][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'. [ 494.806600][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 495.458866][T14701] bridge0: port 1(vlan4) entered blocking state [ 495.465320][T14701] bridge0: port 1(vlan4) entered disabled state [ 495.497517][T14701] vlan4: entered allmulticast mode [ 495.521026][T14701] bridge0: entered allmulticast mode [ 495.546858][T14701] vlan4: left allmulticast mode [ 495.552508][T14701] bridge0: left allmulticast mode [ 495.584903][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'. [ 495.603734][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'. [ 495.661535][T14709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2482'. [ 495.784901][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 495.845249][T14712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2483'. [ 496.255623][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'. [ 496.292812][T14713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2485'. [ 496.468921][T14727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2486'. [ 497.350322][T14745] lo speed is unknown, defaulting to 1000 [ 497.366693][T14745] lo speed is unknown, defaulting to 1000 [ 497.409690][T14745] lo speed is unknown, defaulting to 1000 [ 498.359447][T14779] IPVS: Unknown mcast interface: team0 [ 498.992269][T14788] lo speed is unknown, defaulting to 1000 [ 499.059663][T14788] lo speed is unknown, defaulting to 1000 [ 499.083703][T14788] lo speed is unknown, defaulting to 1000 [ 499.535591][T14801] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 499.544422][T14801] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 500.144049][T14812] lo speed is unknown, defaulting to 1000 [ 500.219313][T14812] lo speed is unknown, defaulting to 1000 [ 500.226396][T14812] lo speed is unknown, defaulting to 1000 [ 500.854816][T14815] netlink: 'syz.3.2515': attribute type 11 has an invalid length. [ 500.960076][T14838] __nla_validate_parse: 5 callbacks suppressed [ 500.960098][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2522'. [ 501.521610][T14857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.577224][T14857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.630195][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2531'. [ 501.829507][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'. [ 501.875961][T14868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2530'. [ 502.030418][T14874] bridge0: port 1(vlan4) entered blocking state [ 502.078212][T14874] bridge0: port 1(vlan4) entered disabled state [ 502.084723][T14874] vlan4: entered allmulticast mode [ 502.208621][T14874] bridge0: entered allmulticast mode [ 502.253319][T14874] vlan4: left allmulticast mode [ 502.269698][T14874] bridge0: left allmulticast mode [ 503.218614][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 503.312726][T14881] netlink: 'syz.2.2536': attribute type 11 has an invalid length. [ 503.366727][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'. [ 503.486724][T14907] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 503.532092][T14908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.340439][T14911] netlink: 'syz.4.2547': attribute type 9 has an invalid length. [ 504.360792][T14911] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 504.419607][T14913] netlink: 'syz.0.2548': attribute type 11 has an invalid length. [ 504.588362][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2554'. [ 504.907380][T14936] netlink: 'syz.3.2556': attribute type 4 has an invalid length. [ 504.934631][ T26] lo speed is unknown, defaulting to 1000 [ 504.954648][T14936] netlink: 'syz.3.2556': attribute type 4 has an invalid length. [ 504.980968][ T26] lo speed is unknown, defaulting to 1000 [ 505.072541][T14945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2561'. [ 505.290030][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 505.349198][T14947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2558'. [ 506.379430][T14977] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 506.406694][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'. [ 506.858983][T14989] netlink: 'syz.0.2572': attribute type 10 has an invalid length. [ 506.891441][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'. [ 506.976141][T14985] netlink: 'syz.4.2571': attribute type 11 has an invalid length. [ 507.338722][T15003] batadv_slave_1: entered promiscuous mode [ 507.368454][T15002] batadv_slave_1: left promiscuous mode [ 508.332541][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 508.499461][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2583'. [ 509.108396][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2590'. [ 509.201486][T15044] lo speed is unknown, defaulting to 1000 [ 509.227072][T15044] lo speed is unknown, defaulting to 1000 [ 509.245480][T15044] lo speed is unknown, defaulting to 1000 [ 509.698203][T15038] netlink: 'syz.1.2586': attribute type 11 has an invalid length. [ 510.111490][T15057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.865687][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 510.937512][T15075] netlink: 'syz.3.2598': attribute type 10 has an invalid length. [ 511.209246][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 511.730988][T15089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2602'. [ 514.475082][T15091] lo speed is unknown, defaulting to 1000 [ 514.490624][T15091] lo speed is unknown, defaulting to 1000 [ 514.497656][T15091] lo speed is unknown, defaulting to 1000 [ 514.693568][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2604'. [ 514.704847][T15097] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 514.731474][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'. [ 514.893304][T15099] bridge3: entered promiscuous mode [ 514.973961][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2608'. [ 515.064493][T15116] netlink: 'syz.2.2609': attribute type 1 has an invalid length. [ 515.287112][T15116] 8021q: adding VLAN 0 to HW filter on device bond13 [ 515.489391][T15120] 8021q: adding VLAN 0 to HW filter on device bond13 [ 515.496700][T15120] bond13: (slave vcan0): The slave device specified does not support setting the MAC address [ 515.559735][T15120] bond13: (slave vcan0): Error -95 calling set_mac_address [ 515.587262][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 515.615064][T15111] lo speed is unknown, defaulting to 1000 [ 515.662403][T15130] bond8: entered promiscuous mode [ 515.696879][T15130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 515.746903][T15111] lo speed is unknown, defaulting to 1000 [ 515.772518][T15133] vlan0: entered promiscuous mode [ 515.777649][T15133] ip6gretap0: entered promiscuous mode [ 515.836726][T15111] lo speed is unknown, defaulting to 1000 [ 516.686884][T15143] lo speed is unknown, defaulting to 1000 [ 516.695602][T15143] lo speed is unknown, defaulting to 1000 [ 516.721470][T15143] lo speed is unknown, defaulting to 1000 [ 516.900928][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2623'. [ 516.994839][T15155] tipc: Enabled bearer , priority 0 [ 517.066589][T15164] bridge4: entered promiscuous mode [ 517.160848][T15152] tipc: Resetting bearer [ 520.421402][T15152] tipc: Disabling bearer [ 520.807665][T15189] tipc: Enabled bearer , priority 10 [ 520.825631][T15189] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2633'. [ 520.839593][T15189] tipc: Resetting bearer [ 520.955979][T15189] tipc: Disabling bearer [ 520.967848][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2634'. [ 521.194909][T15194] netlink: 'syz.2.2635': attribute type 11 has an invalid length. [ 521.210791][T15194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2635'. [ 521.279963][T15199] lo speed is unknown, defaulting to 1000 [ 521.294427][T15199] lo speed is unknown, defaulting to 1000 [ 521.346209][T15199] lo speed is unknown, defaulting to 1000 [ 521.353226][T15196] netlink: 'syz.4.2630': attribute type 11 has an invalid length. [ 521.394946][T15201] netlink: 'syz.1.2636': attribute type 1 has an invalid length. [ 521.599560][T15201] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.672769][T15206] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.693578][T15206] bond9: (slave vcan4): The slave device specified does not support setting the MAC address [ 521.743355][T15206] bond9: (slave vcan4): Error -95 calling set_mac_address [ 521.814700][T15215] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.2640'. [ 521.825062][T15215] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 522.137369][T15221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2641'. [ 522.341814][T15224] lo speed is unknown, defaulting to 1000 [ 522.437619][T15224] lo speed is unknown, defaulting to 1000 [ 522.547281][T15232] tipc: Enabled bearer , priority 0 [ 522.564505][T15224] lo speed is unknown, defaulting to 1000 [ 522.995504][ T62] tipc: Resetting bearer [ 523.023319][T15226] tipc: Resetting bearer [ 523.063049][T15242] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 523.440330][T15246] netlink: 'syz.2.2646': attribute type 11 has an invalid length. [ 525.945056][T15226] tipc: Disabling bearer [ 526.127196][T15255] syzkaller0: entered promiscuous mode [ 526.133086][T15255] syzkaller0: entered allmulticast mode [ 526.512618][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 529.261171][T15261] pim6reg: entered allmulticast mode [ 529.693870][T15283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.813089][T15287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.913151][T15293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2658'. [ 530.056463][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2662'. [ 530.130581][T15296] netlink: ct family unspecified [ 530.148665][T15296] openvswitch: netlink: Actions may not be safe on all matching packets [ 530.663116][T15304] lo speed is unknown, defaulting to 1000 [ 530.691739][T15304] lo speed is unknown, defaulting to 1000 [ 530.710422][T15304] lo speed is unknown, defaulting to 1000 [ 530.857639][T15307] netlink: 'syz.2.2666': attribute type 10 has an invalid length. [ 530.877564][T15307] : (slave wlan1): refused to change device type [ 530.954779][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 530.968250][T15300] netlink: 'syz.4.2663': attribute type 11 has an invalid length. [ 531.103488][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.138348][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.219571][T15302] netlink: 'syz.0.2664': attribute type 9 has an invalid length. [ 531.261425][T15302] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 531.394682][T15321] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2668'. [ 531.430179][T15321] batadv2: entered promiscuous mode [ 531.463183][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'. [ 531.470137][T15321] batadv2: entered allmulticast mode [ 531.503161][T15326] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2668'. [ 531.646324][T15334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2669'. [ 531.676250][T15326] batadv2: entered promiscuous mode [ 531.681899][T15326] batadv2: entered allmulticast mode [ 532.185053][T15345] lo speed is unknown, defaulting to 1000 [ 532.190392][T15346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2675'. [ 532.222010][T15345] lo speed is unknown, defaulting to 1000 [ 532.254232][T15345] lo speed is unknown, defaulting to 1000 [ 532.849177][T15355] dummy0: entered promiscuous mode [ 532.854731][T15355] vlan4: entered promiscuous mode [ 533.190503][T15361] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 533.324113][T15361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 533.333801][T15372] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2680'. [ 533.386816][T15360] lo speed is unknown, defaulting to 1000 [ 533.455874][T15360] lo speed is unknown, defaulting to 1000 [ 533.466868][T15360] lo speed is unknown, defaulting to 1000 [ 533.492067][T15377] vlan0: entered promiscuous mode [ 533.497304][T15377] batadv0: entered promiscuous mode [ 533.640010][T15380] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2684'. [ 534.293115][T15397] pim6reg: left allmulticast mode [ 534.618690][T15402] lo speed is unknown, defaulting to 1000 [ 534.633799][T15402] lo speed is unknown, defaulting to 1000 [ 534.695760][T15402] lo speed is unknown, defaulting to 1000 [ 534.757033][T15404] netlink: 'syz.2.2692': attribute type 11 has an invalid length. [ 535.233712][T15415] netlink: 'syz.2.2696': attribute type 11 has an invalid length. [ 535.371737][T15419] lo speed is unknown, defaulting to 1000 [ 535.386528][T15419] lo speed is unknown, defaulting to 1000 [ 535.429292][T15419] lo speed is unknown, defaulting to 1000 [ 536.085975][T15424] netlink: 'syz.0.2699': attribute type 11 has an invalid length. [ 536.338152][T15440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 536.863030][T15458] __nla_validate_parse: 2 callbacks suppressed [ 536.863058][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 536.881964][T15458] tipc: Enabling of bearer rejected, failed to enable media [ 537.161211][T15464] lo speed is unknown, defaulting to 1000 [ 537.179199][T15464] lo speed is unknown, defaulting to 1000 [ 537.202640][T15464] lo speed is unknown, defaulting to 1000 [ 537.400974][T15469] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2711'. [ 537.410831][T15469] netlink: 'syz.3.2711': attribute type 1 has an invalid length. [ 537.470761][T15469] syzkaller0: entered promiscuous mode [ 537.476902][T15469] syzkaller0: entered allmulticast mode [ 540.651396][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 541.437583][T15513] lo speed is unknown, defaulting to 1000 [ 541.489692][T15513] lo speed is unknown, defaulting to 1000 [ 541.521386][T15513] lo speed is unknown, defaulting to 1000 [ 541.759222][T15523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2721'. [ 542.032946][T15517] netlink: 'syz.1.2722': attribute type 303 has an invalid length. [ 542.081785][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2722'. [ 542.223839][T15517] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 542.250650][T15517] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 542.496233][T15534] netlink: 'syz.2.2726': attribute type 2 has an invalid length. [ 542.811279][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2729'. [ 542.825386][T15541] veth0: entered promiscuous mode [ 542.860674][T15548] siw: device registration error -23 [ 542.989872][T15541] veth0: left promiscuous mode [ 543.483568][T15571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2737'. [ 543.772848][T15578] lo speed is unknown, defaulting to 1000 [ 543.784243][T15578] lo speed is unknown, defaulting to 1000 [ 543.804605][T15578] lo speed is unknown, defaulting to 1000 [ 544.108330][T15586] netlink: 'syz.0.2741': attribute type 2 has an invalid length. [ 544.132866][T15584] netlink: 'syz.2.2740': attribute type 10 has an invalid length. [ 544.153178][T15584] : (slave wlan1): refused to change device type [ 544.219182][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2740'. [ 545.147602][T15595] netlink: 'syz.3.2744': attribute type 11 has an invalid length. [ 545.490537][T15615] : (slave wlan1): Releasing backup interface [ 545.871801][T15625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2750'. [ 545.914954][T15621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2750'. [ 545.938791][T15627] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2751'. [ 545.949169][T15621] IPv6: Can't replace route, no match found [ 545.992333][T15626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.113519][T15635] netlink: 'syz.0.2753': attribute type 2 has an invalid length. [ 546.386397][T15646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2755'. [ 546.417800][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'. [ 546.508932][T15650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2757'. [ 547.425497][T15671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2763'. [ 547.464165][T15668] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.483729][T15660] netlink: 'syz.1.2761': attribute type 11 has an invalid length. [ 547.798515][T15681] xt_hashlimit: size too large, truncated to 1048576 [ 547.903374][T15685] netlink: 'syz.3.2766': attribute type 2 has an invalid length. [ 547.941299][T15687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.978485][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 548.110025][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2764'. [ 548.221475][T15694] lo speed is unknown, defaulting to 1000 [ 548.245912][T15694] lo speed is unknown, defaulting to 1000 [ 548.258609][T15688] nbd: socks must be embedded in a SOCK_ITEM attr [ 548.299022][T15694] lo speed is unknown, defaulting to 1000 [ 548.859225][T15713] netlink: 'syz.4.2771': attribute type 10 has an invalid length. [ 548.913617][T15713] : (slave wlan1): Enslaving as an active interface with an up link [ 548.944290][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 549.376006][T15728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2773'. [ 549.520545][T15735] No such timeout policy "syz0" [ 550.164377][T15738] netlink: 'syz.4.2777': attribute type 11 has an invalid length. [ 550.404007][T15750] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2779'. [ 550.454038][T15750] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 550.630016][T15755] bpq0: left promiscuous mode [ 550.634915][T15755] bpq0: left allmulticast mode [ 550.704013][T15756] lo speed is unknown, defaulting to 1000 [ 550.739233][T15756] lo speed is unknown, defaulting to 1000 [ 550.778464][T15756] lo speed is unknown, defaulting to 1000 [ 551.095301][T15760] xt_CT: No such helper "snmp" [ 551.146074][T15742] netlink: 'syz.2.2778': attribute type 11 has an invalid length. [ 551.158665][T15767] lo speed is unknown, defaulting to 1000 [ 551.165894][T15767] lo speed is unknown, defaulting to 1000 [ 551.173936][T15767] lo speed is unknown, defaulting to 1000 [ 551.765906][ T9] IPVS: starting estimator thread 0... [ 551.862363][T15774] IPVS: using max 21 ests per chain, 50400 per kthread [ 552.400254][ T13] IPVS: stop unused estimator thread 0... [ 552.441775][T15795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2789'. [ 552.609926][T15803] No such timeout policy "syz0" [ 552.893722][T15812] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2794'. [ 552.906542][T15812] netlink: 'syz.0.2794': attribute type 10 has an invalid length. [ 553.466704][T15822] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2797'. [ 553.516903][T15822] tipc: Can't bind to reserved service type 0 [ 553.551181][T15824] netlink: 'syz.1.2798': attribute type 1 has an invalid length. [ 553.701187][T15824] bond10: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 553.788817][T15824] 8021q: adding VLAN 0 to HW filter on device bond10 [ 553.797476][ T62] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 553.917169][T15824] veth7: entered promiscuous mode [ 553.926715][T15824] bond10: (slave veth7): Enslaving as a backup interface with a down link [ 553.938033][ T62] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 553.988627][T15819] netlink: 'syz.4.2796': attribute type 11 has an invalid length. [ 554.144866][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 554.503830][T15838] lo speed is unknown, defaulting to 1000 [ 554.536033][T15838] lo speed is unknown, defaulting to 1000 [ 554.547598][T15840] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 554.565278][T15838] lo speed is unknown, defaulting to 1000 [ 554.617493][T15840] 8021q: adding VLAN 0 to HW filter on device bond11 [ 554.701579][T15846] 8021q: adding VLAN 0 to HW filter on device bond11 [ 554.715043][T15846] bond11: (slave vcan4): The slave device specified does not support setting the MAC address [ 554.750723][T15846] bond11: (slave vcan4): Error -95 calling set_mac_address [ 554.892232][T15854] tipc: Enabled bearer , priority 0 [ 554.947258][T15858] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 555.021326][T15858] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 555.060736][T15858] tipc: Resetting bearer [ 555.616004][T15866] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2806'. [ 555.973402][T15876] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2808'. [ 556.005155][T15875] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2808'. [ 556.612345][T15884] lo speed is unknown, defaulting to 1000 [ 556.620039][T15884] lo speed is unknown, defaulting to 1000 [ 556.627207][T15884] lo speed is unknown, defaulting to 1000 [ 556.748787][T15887] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2811'. [ 556.773847][T15887] batadv2: entered promiscuous mode [ 556.783779][T15887] batadv2: entered allmulticast mode [ 556.960358][T15887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2811'. [ 557.141204][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 557.484000][T15900] __nla_validate_parse: 1 callbacks suppressed [ 557.484024][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 557.874320][T15895] netlink: 'syz.3.2813': attribute type 9 has an invalid length. [ 557.934998][T15895] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 558.280333][T15913] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.2818'. [ 558.358590][T15916] bridge0: port 1(hsr0) entered blocking state [ 558.365376][T15916] bridge0: port 1(hsr0) entered disabled state [ 558.387120][T15916] hsr0: entered allmulticast mode [ 558.394425][T15916] hsr_slave_0: entered allmulticast mode [ 558.408664][T15916] hsr_slave_1: entered allmulticast mode [ 558.432564][T15916] hsr0: entered promiscuous mode [ 558.453284][T15922] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2819'. [ 558.510101][T15913] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2818'. [ 558.528273][T15913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.552574][T15916] lo: MTU too low for tipc bearer [ 558.564782][T15916] tipc: Enabling of bearer rejected, failed to enable media [ 558.594983][T15916] tipc: Enabling of bearer rejected, failed to enable media [ 559.091145][T15935] lo speed is unknown, defaulting to 1000 [ 559.119486][T15935] lo speed is unknown, defaulting to 1000 [ 559.134798][T15935] lo speed is unknown, defaulting to 1000 [ 559.450493][ T30] audit: type=1800 audit(1742989126.788:7): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2821" name="cgroup.controllers" dev="tmpfs" ino=2754 res=0 errno=0 [ 559.479730][T15955] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2827'. [ 559.503654][T15955] 0ªX¹¦D: renamed from gretap0 (while UP) [ 559.545191][T15955] 0ªX¹¦D: entered allmulticast mode [ 559.564673][T15955] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 560.714547][T15981] netlink: 'syz.2.2832': attribute type 3 has an invalid length. [ 560.722883][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 560.985748][T15968] netlink: 'syz.4.2830': attribute type 9 has an invalid length. [ 561.040055][T15968] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 561.076978][T15989] lo speed is unknown, defaulting to 1000 [ 561.127108][T15989] lo speed is unknown, defaulting to 1000 [ 561.174637][T15989] lo speed is unknown, defaulting to 1000 [ 561.930418][T16012] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 562.805873][T16024] lo speed is unknown, defaulting to 1000 [ 562.864403][T16027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2841'. [ 562.898514][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2841'. [ 562.907741][T16027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2841'. [ 562.944327][T16024] lo speed is unknown, defaulting to 1000 [ 563.008317][T16027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2841'. [ 563.032888][T16030] lo speed is unknown, defaulting to 1000 [ 563.327143][T16024] lo speed is unknown, defaulting to 1000 [ 563.327190][T16030] lo speed is unknown, defaulting to 1000 [ 563.391385][T16030] lo speed is unknown, defaulting to 1000 [ 564.156977][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2845'. [ 564.219758][T16041] veth7: left promiscuous mode [ 564.232843][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 564.714077][T16053] lo speed is unknown, defaulting to 1000 [ 564.773912][T16053] lo speed is unknown, defaulting to 1000 [ 564.799079][T16053] lo speed is unknown, defaulting to 1000 [ 565.170397][T16058] Cannot find set identified by id 0 to match [ 565.171123][T16056] netlink: set zone limit has 4 unknown bytes [ 565.295385][T16058] pim6reg: entered allmulticast mode [ 565.473317][T16061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2848'. [ 566.250017][T16086] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2853'. [ 566.404083][T16089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2853'. [ 566.541852][T16091] lo speed is unknown, defaulting to 1000 [ 566.566458][T16091] lo speed is unknown, defaulting to 1000 [ 566.586909][T16093] syzkaller0: entered promiscuous mode [ 566.639023][T16093] syzkaller0: entered allmulticast mode [ 566.676813][T16091] lo speed is unknown, defaulting to 1000 [ 566.741076][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2855'. [ 567.550754][T16122] lo speed is unknown, defaulting to 1000 [ 567.632534][T16122] lo speed is unknown, defaulting to 1000 [ 567.826245][T16122] lo speed is unknown, defaulting to 1000 [ 567.904043][T16127] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 568.005689][T16127] 8021q: adding VLAN 0 to HW filter on device bond15 [ 568.044628][T16126] lo speed is unknown, defaulting to 1000 [ 568.109089][T16119] netlink: 'syz.0.2860': attribute type 11 has an invalid length. [ 568.130028][T16128] 8021q: adding VLAN 0 to HW filter on device bond15 [ 568.140973][T16128] bond15: (slave vcan0): The slave device specified does not support setting the MAC address [ 568.154909][T16128] bond15: (slave vcan0): Error -95 calling set_mac_address [ 568.213180][T16126] lo speed is unknown, defaulting to 1000 [ 568.238110][T16126] lo speed is unknown, defaulting to 1000 [ 568.857455][T16148] xt_CT: No such helper "snmp" [ 569.389937][T16164] lo speed is unknown, defaulting to 1000 [ 569.407561][T16164] lo speed is unknown, defaulting to 1000 [ 569.471503][T16164] lo speed is unknown, defaulting to 1000 [ 569.858232][T16178] lo speed is unknown, defaulting to 1000 [ 569.865635][T16178] lo speed is unknown, defaulting to 1000 [ 569.873021][T16178] lo speed is unknown, defaulting to 1000 [ 569.981035][T16182] __nla_validate_parse: 5 callbacks suppressed [ 569.981059][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2872'. [ 570.017297][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2872'. [ 570.076293][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2872'. [ 570.096188][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2872'. [ 570.112959][T16190] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2875'. [ 570.331426][T16185] tipc: Resetting bearer [ 570.369019][T16185] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 570.386640][T16185] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 570.421501][T16185] bond8: left promiscuous mode [ 570.449118][ T26] lo speed is unknown, defaulting to 1000 [ 570.506570][T16199] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2876'. [ 571.152194][T16203] xt_CT: No such helper "snmp" [ 571.161415][T16197] netlink: 'syz.0.2877': attribute type 11 has an invalid length. [ 571.934352][T16228] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2883'. [ 571.964176][T16228] openvswitch: netlink: Message has 8 unknown bytes. [ 572.147681][T16233] tipc: New replicast peer: 0.0.0.0 [ 572.166202][T16233] tipc: Enabled bearer , priority 10 [ 572.253358][T16234] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 572.280849][T16238] netlink: 'syz.1.2885': attribute type 2 has an invalid length. [ 572.651572][T16242] lo speed is unknown, defaulting to 1000 [ 572.684004][T16242] lo speed is unknown, defaulting to 1000 [ 572.714874][T16242] lo speed is unknown, defaulting to 1000 [ 572.907492][T16245] lo speed is unknown, defaulting to 1000 [ 572.950175][T16245] lo speed is unknown, defaulting to 1000 [ 572.979791][T16245] lo speed is unknown, defaulting to 1000 [ 573.260225][T16260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2889'. [ 573.661136][T16274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2894'. [ 574.089002][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 574.459115][T16291] netlink: 'syz.3.2901': attribute type 10 has an invalid length. [ 574.628736][T16277] netlink: 'syz.1.2895': attribute type 11 has an invalid length. [ 574.835848][T16301] lo speed is unknown, defaulting to 1000 [ 574.854698][T16301] lo speed is unknown, defaulting to 1000 [ 574.899324][T16301] lo speed is unknown, defaulting to 1000 [ 574.931270][T16309] tipc: Enabled bearer , priority 0 [ 575.183834][T16317] lo speed is unknown, defaulting to 1000 [ 575.183982][T16322] __nla_validate_parse: 1 callbacks suppressed [ 575.183997][T16322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2906'. [ 575.191463][T16317] lo speed is unknown, defaulting to 1000 [ 575.212536][T16317] lo speed is unknown, defaulting to 1000 [ 576.328559][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'. [ 576.449618][T16321] 8021q: adding VLAN 0 to HW filter on device bond9 [ 576.571086][T16335] 8021q: adding VLAN 0 to HW filter on device bond9 [ 576.589150][T16335] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 576.601678][T16335] bond9: (slave wireguard0): Error -95 calling set_mac_address [ 577.158756][T16342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.349698][T16362] netlink: 'syz.0.2916': attribute type 10 has an invalid length. [ 577.376143][T16351] vlan0: left promiscuous mode [ 577.391892][T16351] bridge0: left promiscuous mode [ 577.401004][T16351] bond0: left promiscuous mode [ 577.422444][T16351] batadv1: left promiscuous mode [ 577.427548][T16351] batadv1: left allmulticast mode [ 577.458046][T16351] macsec1: left promiscuous mode [ 577.463087][T16351] macsec1: left allmulticast mode [ 577.471243][T16351] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.480540][T16351] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.489215][T16351] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.497748][T16351] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.530036][ T8407] lo speed is unknown, defaulting to 1000 [ 577.552623][T16366] syzkaller0: left promiscuous mode [ 577.558445][T16366] syzkaller0: left allmulticast mode [ 577.581519][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2916'. [ 577.716295][T16367] xt_CT: No such helper "snmp" [ 578.028482][T16379] lo speed is unknown, defaulting to 1000 [ 578.065965][T16379] lo speed is unknown, defaulting to 1000 [ 578.144946][T16379] lo speed is unknown, defaulting to 1000 [ 578.175053][T16387] lo speed is unknown, defaulting to 1000 [ 578.290209][T16387] lo speed is unknown, defaulting to 1000 [ 578.375910][T16387] lo speed is unknown, defaulting to 1000 [ 578.645598][T16403] lo speed is unknown, defaulting to 1000 [ 578.653974][T16403] lo speed is unknown, defaulting to 1000 [ 578.662885][T16403] lo speed is unknown, defaulting to 1000 [ 579.014453][T16411] lo speed is unknown, defaulting to 1000 [ 579.063669][T16411] lo speed is unknown, defaulting to 1000 [ 579.106902][T16411] lo speed is unknown, defaulting to 1000 [ 579.501370][T16418] lo speed is unknown, defaulting to 1000 [ 579.566520][T16418] lo speed is unknown, defaulting to 1000 [ 579.612447][T16418] lo speed is unknown, defaulting to 1000 [ 580.207496][T16432] xt_CT: No such helper "snmp" [ 580.353397][T16445] netlink: 'syz.3.2934': attribute type 10 has an invalid length. [ 580.451782][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'. [ 580.703825][T16451] wireguard0: entered promiscuous mode [ 580.771349][T16451] wireguard0: entered allmulticast mode [ 581.388165][T16465] lo speed is unknown, defaulting to 1000 [ 581.395234][T16465] lo speed is unknown, defaulting to 1000 [ 581.409413][T16465] lo speed is unknown, defaulting to 1000 [ 581.806525][T16483] hsr0: left allmulticast mode [ 581.811863][T16483] hsr_slave_0: left allmulticast mode [ 581.817403][T16483] hsr_slave_1: left allmulticast mode [ 581.823507][T16483] hsr0: left promiscuous mode [ 581.828951][T16483] bridge0: port 1(hsr0) entered disabled state [ 581.845831][T16483] : (slave wlan1): Releasing backup interface [ 581.895145][T16483] netlink: 'syz.4.2941': attribute type 10 has an invalid length. [ 582.005399][T16483] : (slave wlan1): Enslaving as an active interface with an up link [ 582.080358][T16483] tipc: Resetting bearer [ 582.110468][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2941'. [ 582.219733][T16493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2942'. [ 582.717110][T16498] xt_CT: No such helper "snmp" [ 583.019746][T16494] netlink: 'syz.1.2944': attribute type 11 has an invalid length. [ 583.277294][T16525] xt_CT: No such helper "snmp" [ 583.320854][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'. [ 583.518448][T16535] : (slave wlan1): Releasing backup interface [ 583.541933][T16535] tipc: Resetting bearer [ 583.558793][T16542] netlink: 'syz.4.2953': attribute type 10 has an invalid length. [ 583.573107][T16542] : (slave wlan1): Enslaving as an active interface with an up link [ 583.635079][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 584.204183][T16555] xt_CT: No such helper "snmp" [ 584.391631][T16562] netlink: 'syz.0.2961': attribute type 10 has an invalid length. [ 584.416505][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 584.707150][T16569] xt_CT: No such helper "snmp" [ 584.797235][T16573] lo speed is unknown, defaulting to 1000 [ 584.870061][T16574] netlink: 'syz.0.2966': attribute type 1 has an invalid length. [ 585.201967][T16587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'. [ 585.364375][T16574] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.419114][T16573] lo speed is unknown, defaulting to 1000 [ 585.447290][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'. [ 585.456844][T16573] lo speed is unknown, defaulting to 1000 [ 585.515945][T16598] rdma_rxe: rxe_newlink: failed to add lo [ 585.533349][T16596] xt_CT: No such helper "snmp" [ 585.604869][T16602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 585.631538][T16604] netlink: 'syz.3.2976': attribute type 10 has an invalid length. [ 585.723898][T16606] xt_CT: No such helper "snmp" [ 585.737531][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2976'. [ 585.984444][T16618] lo speed is unknown, defaulting to 1000 [ 585.994566][T16618] lo speed is unknown, defaulting to 1000 [ 586.009274][T16618] lo speed is unknown, defaulting to 1000 [ 586.510564][T16640] tipc: Resetting bearer [ 586.604552][T16635] xt_CT: No such helper "snmp" [ 586.670290][T16651] netlink: 'syz.2.2988': attribute type 10 has an invalid length. [ 586.853024][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 587.082531][T16658] lo speed is unknown, defaulting to 1000 [ 587.149345][T16658] lo speed is unknown, defaulting to 1000 [ 587.250808][T16658] lo speed is unknown, defaulting to 1000 [ 587.259487][T16668] Cannot find del_set index 4 as target [ 587.597610][T16673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2991'. [ 587.692408][T16682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2998'. [ 587.988104][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'. [ 588.015761][T16689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3000'. [ 588.718776][T16695] lo speed is unknown, defaulting to 1000 [ 588.725879][T16695] lo speed is unknown, defaulting to 1000 [ 588.817485][T16695] lo speed is unknown, defaulting to 1000 [ 589.039011][T16705] lo speed is unknown, defaulting to 1000 [ 589.046027][T16705] lo speed is unknown, defaulting to 1000 [ 589.149019][T16705] lo speed is unknown, defaulting to 1000 [ 589.531511][T16721] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 589.672305][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3006'. [ 589.962048][T16729] netlink: 'syz.2.3009': attribute type 1 has an invalid length. [ 589.987581][T16729] netlink: 'syz.2.3009': attribute type 1 has an invalid length. [ 591.083187][T16749] lo speed is unknown, defaulting to 1000 [ 591.091489][T16749] lo speed is unknown, defaulting to 1000 [ 591.103040][T16749] lo speed is unknown, defaulting to 1000 [ 592.030049][T16766] lo speed is unknown, defaulting to 1000 [ 592.049431][T16766] lo speed is unknown, defaulting to 1000 [ 592.056430][T16766] lo speed is unknown, defaulting to 1000 [ 592.269237][T16777] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3023'. [ 592.419496][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 592.493743][T16780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3021'. [ 593.159232][T16777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3023'. [ 593.827265][T16801] lo speed is unknown, defaulting to 1000 [ 593.840203][T16801] lo speed is unknown, defaulting to 1000 [ 593.847783][T16801] lo speed is unknown, defaulting to 1000 [ 594.711112][T16827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3041'. [ 594.829795][T16831] bridge3: entered promiscuous mode [ 595.015418][T16836] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 595.433353][T16847] lo speed is unknown, defaulting to 1000 [ 595.449521][T16847] lo speed is unknown, defaulting to 1000 [ 595.456640][T16847] lo speed is unknown, defaulting to 1000 [ 595.529201][T16851] lo speed is unknown, defaulting to 1000 [ 595.553805][T16851] lo speed is unknown, defaulting to 1000 [ 595.631188][T16851] lo speed is unknown, defaulting to 1000 [ 596.701717][T16886] xt_CT: No such helper "snmp" [ 597.143093][T16905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3069'. [ 597.170626][T16904] tipc: Enabling of bearer rejected, failed to enable media [ 597.265589][T16907] netlink: 'syz.0.3072': attribute type 10 has an invalid length. [ 597.324746][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3072'. [ 598.362389][T16945] netlink: 'syz.4.3087': attribute type 10 has an invalid length. [ 598.385545][T16942] : (slave wlan1): Releasing backup interface [ 598.446896][T16942] tipc: Resetting bearer [ 598.494095][T16945] : (slave wlan1): Enslaving as an active interface with an up link [ 598.526491][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 599.025354][T16966] netlink: 'syz.3.3096': attribute type 2 has an invalid length. [ 599.105510][T16968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3097'. [ 599.803049][T16995] netlink: 'syz.2.3102': attribute type 10 has an invalid length. [ 599.892225][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3102'. [ 600.211767][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 600.232397][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3105'. [ 600.448028][T17004] xt_CT: No such helper "snmp" [ 600.635352][T17020] wg1: entered promiscuous mode [ 600.819320][T17026] netlink: 'syz.1.3111': attribute type 6 has an invalid length. [ 600.840787][T17024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.005604][T17033] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3110'. [ 601.420378][ T26] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/3 [ 601.443848][ T26] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22 [ 601.465292][T17049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3118'. [ 602.092699][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'. [ 602.102945][T17072] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 602.187262][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 602.535915][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 602.662342][T17095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3131'. [ 602.764670][T17101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3137'. [ 602.801725][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 602.841304][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3136'. [ 603.158797][T17108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3139'. [ 603.480263][T17114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3140'. [ 604.034648][T17133] bond10: (slave ip6gretap2): Removing an active aggregator [ 604.047246][T17133] bond10: (slave ip6gretap2): Releasing backup interface [ 604.113529][T17133] bond10: (slave ip6gretap2): the permanent HWaddr of slave - e2:a3:8a:5a:d2:44 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 604.209073][T17135] netlink: 'syz.1.3145': attribute type 10 has an invalid length. [ 604.250505][T17133] bond10: (slave veth7): Releasing backup interface [ 604.329169][T17135] bond0: (slave wlan1): refused to change device type [ 604.357788][T17133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3145'. [ 604.541106][T17145] netlink: 'syz.3.3151': attribute type 2 has an invalid length. [ 604.765171][T17153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3153'. [ 604.901156][T17160] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 604.941011][T17158] lo speed is unknown, defaulting to 1000 [ 605.024723][T17160] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.142553][T17162] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.169315][T17162] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 605.183656][T17162] bond10: (slave vcan0): Error -95 calling set_mac_address [ 605.258810][T17158] lo speed is unknown, defaulting to 1000 [ 605.266849][T17158] lo speed is unknown, defaulting to 1000 [ 605.795914][T17185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3158'. [ 606.066542][T17194] netlink: 'syz.1.3163': attribute type 10 has an invalid length. [ 606.075009][T17194] bond0: (slave wlan1): refused to change device type [ 607.673556][T17235] __nla_validate_parse: 5 callbacks suppressed [ 607.673580][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3174'. [ 607.998078][T17244] lo speed is unknown, defaulting to 1000 [ 608.040293][T17244] lo speed is unknown, defaulting to 1000 [ 608.068315][T17244] lo speed is unknown, defaulting to 1000 [ 609.179270][T17279] netlink: 'syz.4.3192': attribute type 2 has an invalid length. [ 609.363741][T17281] xt_CT: No such helper "snmp" [ 609.551682][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'. [ 609.611404][T17295] netlink: 'syz.3.3198': attribute type 10 has an invalid length. [ 609.620721][T17293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3197'. [ 609.690957][T17293] netlink: 'syz.4.3197': attribute type 7 has an invalid length. [ 609.705986][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3198'. [ 609.758550][T17293] netlink: 'syz.4.3197': attribute type 8 has an invalid length. [ 609.806828][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'. [ 609.850383][T17304] netlink: 'syz.0.3200': attribute type 10 has an invalid length. [ 609.883511][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3200'. [ 609.954714][T17306] lo speed is unknown, defaulting to 1000 [ 610.011693][T17306] lo speed is unknown, defaulting to 1000 [ 610.060211][T17306] lo speed is unknown, defaulting to 1000 [ 610.192258][T17316] netlink: 'syz.1.3205': attribute type 2 has an invalid length. [ 610.495467][T17323] xt_CT: No such helper "snmp" [ 610.759136][T17337] : (slave wlan1): Releasing backup interface [ 610.783220][T17337] tipc: Resetting bearer [ 610.826859][T17337] netlink: 'syz.4.3214': attribute type 10 has an invalid length. [ 610.870592][T17337] : (slave wlan1): Enslaving as an active interface with an up link [ 610.961390][T17337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 611.061275][T17348] netlink: 'syz.1.3218': attribute type 1 has an invalid length. [ 611.152554][T17348] 8021q: adding VLAN 0 to HW filter on device bond12 [ 611.194139][T17347] lo speed is unknown, defaulting to 1000 [ 611.260467][T17352] 8021q: adding VLAN 0 to HW filter on device bond12 [ 611.274602][T17352] bond12: (slave vcan4): The slave device specified does not support setting the MAC address [ 611.350314][T17352] bond12: (slave vcan4): Error -95 calling set_mac_address [ 611.412709][T17347] lo speed is unknown, defaulting to 1000 [ 611.522571][T17359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3222'. [ 611.546994][T17347] lo speed is unknown, defaulting to 1000 [ 611.637487][T17366] bridge5: entered promiscuous mode [ 611.655812][T17338] netlink: 'syz.3.3215': attribute type 11 has an invalid length. [ 612.074309][T17369] xt_CT: No such helper "snmp" [ 612.549562][T17399] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3234'. [ 612.597045][T17399] macvtap1: entered promiscuous mode [ 612.613703][T17399] bond0: entered promiscuous mode [ 612.645089][T17399] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 612.684437][T17399] team0: Device macvtap1 failed to register rx_handler [ 612.729137][T17399] bond0: left promiscuous mode [ 612.794593][T17412] netlink: 'syz.1.3237': attribute type 10 has an invalid length. [ 612.846459][T17412] bond0: (slave wlan1): refused to change device type [ 612.919251][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3237'. [ 613.239583][T17420] xt_CT: No such helper "snmp" [ 613.639685][T17439] lo speed is unknown, defaulting to 1000 [ 613.646713][T17439] lo speed is unknown, defaulting to 1000 [ 613.787358][T17439] lo speed is unknown, defaulting to 1000 [ 615.191236][T17500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3274'. [ 615.452828][T17509] lo speed is unknown, defaulting to 1000 [ 615.461068][T17510] lo speed is unknown, defaulting to 1000 [ 615.467669][T17509] lo speed is unknown, defaulting to 1000 [ 615.476535][T17510] lo speed is unknown, defaulting to 1000 [ 615.483534][T17509] lo speed is unknown, defaulting to 1000 [ 615.491795][T17510] lo speed is unknown, defaulting to 1000 [ 615.964664][T17522] netlink: 'syz.2.3280': attribute type 10 has an invalid length. [ 616.090740][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3280'. [ 616.942248][T17555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'. [ 617.025967][T17558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3291'. [ 617.061436][T17559] bridge4: entered promiscuous mode [ 617.201387][T17564] netlink: 'syz.1.3294': attribute type 10 has an invalid length. [ 617.306452][T17564] bond0: (slave wlan1): refused to change device type [ 617.327592][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3294'. [ 617.727613][T17583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3299'. [ 618.420498][T17605] netlink: 'syz.0.3306': attribute type 2 has an invalid length. [ 618.422164][T17580] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3297'. [ 618.461563][T17580] netlink: 'syz.3.3297': attribute type 9 has an invalid length. [ 618.529289][T17606] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 618.764876][T17622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3313'. [ 618.786222][T17623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3310'. [ 619.287361][T17626] netlink: 'syz.1.3314': attribute type 11 has an invalid length. [ 619.394874][T17628] netlink: 'syz.3.3315': attribute type 11 has an invalid length. [ 619.847489][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3319'. [ 619.898943][T17641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3319'. [ 620.444090][T17663] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 620.628593][T17668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3327'. [ 621.023644][T17673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3329'. [ 621.131817][T17675] bridge3: entered promiscuous mode [ 621.307313][T17676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3325'. [ 621.330918][T17660] netlink: 'syz.1.3325': attribute type 9 has an invalid length. [ 621.372672][T17660] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 621.779996][T17671] netlink: 'syz.3.3328': attribute type 11 has an invalid length. [ 621.835406][T17690] netlink: 'syz.0.3335': attribute type 2 has an invalid length. [ 621.882543][T17691] lo speed is unknown, defaulting to 1000 [ 621.918877][T17691] lo speed is unknown, defaulting to 1000 [ 621.965196][T17691] lo speed is unknown, defaulting to 1000 [ 622.181715][T17706] lo speed is unknown, defaulting to 1000 [ 622.189486][T17706] lo speed is unknown, defaulting to 1000 [ 622.230292][T17706] lo speed is unknown, defaulting to 1000 [ 622.316663][T17712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3340'. [ 622.617437][T17721] lo speed is unknown, defaulting to 1000 [ 622.659370][T17721] lo speed is unknown, defaulting to 1000 [ 622.667006][T17721] lo speed is unknown, defaulting to 1000 [ 622.711595][T17722] netlink: 'syz.3.3344': attribute type 1 has an invalid length. [ 622.899359][T17722] 8021q: adding VLAN 0 to HW filter on device bond8 [ 622.971695][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 623.447493][T17727] 8021q: adding VLAN 0 to HW filter on device bond8 [ 623.455221][T17727] bond8: (slave vcan4): The slave device specified does not support setting the MAC address [ 623.468218][T17727] bond8: (slave vcan4): Error -95 calling set_mac_address [ 623.512205][T17743] __nla_validate_parse: 1 callbacks suppressed [ 623.512226][T17743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3348'. [ 623.538790][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3346'. [ 623.561605][T17740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3346'. [ 623.987632][T17754] netlink: 'syz.4.3350': attribute type 2 has an invalid length. [ 624.384590][T17758] xt_CT: No such helper "snmp" [ 624.744753][T17774] lo speed is unknown, defaulting to 1000 [ 624.795808][T17774] lo speed is unknown, defaulting to 1000 [ 624.836477][T17779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3356'. [ 624.892711][T17774] lo speed is unknown, defaulting to 1000 [ 625.141587][T17756] netlink: 'syz.0.3351': attribute type 11 has an invalid length. [ 625.170426][T17778] lo speed is unknown, defaulting to 1000 [ 625.263551][T17778] lo speed is unknown, defaulting to 1000 [ 625.282931][T17778] lo speed is unknown, defaulting to 1000 [ 625.349410][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 625.379427][T17783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3359'. [ 625.879934][T17793] netlink: 'syz.3.3363': attribute type 2 has an invalid length. [ 626.132704][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3364'. [ 626.522172][T17808] vlan1: entered promiscuous mode [ 626.529761][T17808] bond0: (slave vlan1): Opening slave failed [ 626.548862][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 626.673494][T17820] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 626.969330][T17820] 8021q: adding VLAN 0 to HW filter on device bond11 [ 626.978500][T17830] netlink: 'syz.0.3373': attribute type 10 has an invalid length. [ 627.045051][T17824] 8021q: adding VLAN 0 to HW filter on device bond11 [ 627.093982][T17824] bond11: (slave vcan0): The slave device specified does not support setting the MAC address [ 627.121192][T17824] bond11: (slave vcan0): Error -95 calling set_mac_address [ 627.168847][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 627.188980][T17816] lo speed is unknown, defaulting to 1000 [ 627.235589][T17816] lo speed is unknown, defaulting to 1000 [ 627.267749][T17816] lo speed is unknown, defaulting to 1000 [ 628.016123][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 628.671004][T17888] __nla_validate_parse: 1 callbacks suppressed [ 628.671026][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 628.722144][T17888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3390'. [ 629.410513][T17901] lo speed is unknown, defaulting to 1000 [ 629.417508][T17901] lo speed is unknown, defaulting to 1000 [ 629.454697][T17901] lo speed is unknown, defaulting to 1000 [ 629.469882][T17904] netlink: 'syz.4.3394': attribute type 1 has an invalid length. [ 629.522199][T17904] 8021q: adding VLAN 0 to HW filter on device bond12 [ 629.605934][T17906] 8021q: adding VLAN 0 to HW filter on device bond12 [ 629.613354][T17906] bond12: (slave vcan0): The slave device specified does not support setting the MAC address [ 629.626137][T17906] bond12: (slave vcan0): Error -95 calling set_mac_address [ 629.964165][T17913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3397'. [ 630.116919][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3398'. [ 630.212131][T17917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3398'. [ 630.369258][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3400'. [ 630.624638][T17931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3401'. [ 630.760446][T17937] lo speed is unknown, defaulting to 1000 [ 630.788226][T17937] lo speed is unknown, defaulting to 1000 [ 630.795242][T17937] lo speed is unknown, defaulting to 1000 [ 630.827341][T17940] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 630.921284][T17940] 8021q: adding VLAN 0 to HW filter on device bond13 [ 630.955862][T17943] 8021q: adding VLAN 0 to HW filter on device bond13 [ 630.985801][T17943] bond13: (slave vcan4): The slave device specified does not support setting the MAC address [ 631.001115][T17943] bond13: (slave vcan4): Error -95 calling set_mac_address [ 631.094295][T17948] xt_CT: No such helper "snmp" [ 631.195322][T17953] netlink: 'syz.3.3410': attribute type 10 has an invalid length. [ 631.341738][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'. [ 631.539700][T17964] syzkaller0: entered promiscuous mode [ 631.558058][T17964] syzkaller0: entered allmulticast mode [ 631.666764][T17969] IPVS: Error joining to the multicast group [ 632.006716][T17987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3418'. [ 632.213170][T17984] xt_CT: No such helper "snmp" [ 632.238509][T17996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3423'. [ 635.939804][T18003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3427'. [ 636.004651][T18010] syz.3.3429: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 636.097110][T18010] CPU: 1 UID: 0 PID: 18010 Comm: syz.3.3429 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 636.097151][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 636.097165][T18010] Call Trace: [ 636.097174][T18010] [ 636.097182][T18010] dump_stack_lvl+0x241/0x360 [ 636.097220][T18010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.097244][T18010] ? __pfx__printk+0x10/0x10 [ 636.097272][T18010] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 636.097299][T18010] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 636.097332][T18010] warn_alloc+0x278/0x410 [ 636.097363][T18010] ? __pfx_warn_alloc+0x10/0x10 [ 636.097394][T18010] ? xp_create_and_assign_umem+0x17b/0xc50 [ 636.097422][T18010] ? __get_vm_area_node+0x1c8/0x2d0 [ 636.097452][T18010] ? __get_vm_area_node+0x25c/0x2d0 [ 636.097491][T18010] __vmalloc_node_range_noprof+0x62f/0x1380 [ 636.097545][T18010] ? rcu_is_watching+0x15/0xb0 [ 636.097565][T18010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 636.097585][T18010] ? rcu_is_watching+0x15/0xb0 [ 636.097608][T18010] ? trace_kmalloc+0x1f/0xd0 [ 636.097635][T18010] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 636.097664][T18010] ? __kvmalloc_node_noprof+0x72/0x190 [ 636.097701][T18010] __kvmalloc_node_noprof+0x142/0x190 [ 636.097734][T18010] ? xp_create_and_assign_umem+0x17b/0xc50 [ 636.097764][T18010] xp_create_and_assign_umem+0x17b/0xc50 [ 636.097813][T18010] ? dev_get_by_index+0x23/0x2d0 [ 636.097845][T18010] xsk_bind+0x435/0xfb0 [ 636.097877][T18010] __sys_bind+0x1e4/0x290 [ 636.097901][T18010] ? __pfx___sys_bind+0x10/0x10 [ 636.097934][T18010] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.097966][T18010] ? exc_page_fault+0x590/0x8b0 [ 636.097998][T18010] __x64_sys_bind+0x7a/0x90 [ 636.098018][T18010] do_syscall_64+0xf3/0x230 [ 636.098046][T18010] ? clear_bhb_loop+0x35/0x90 [ 636.098078][T18010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.098113][T18010] RIP: 0033:0x7f5233d8d169 [ 636.098134][T18010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.098152][T18010] RSP: 002b:00007f5231791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 636.098177][T18010] RAX: ffffffffffffffda RBX: 00007f5233fa6240 RCX: 00007f5233d8d169 [ 636.098193][T18010] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 636.098207][T18010] RBP: 00007f5233e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 636.098221][T18010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.098233][T18010] R13: 0000000000000001 R14: 00007f5233fa6240 R15: 00007fffa7627b78 [ 636.098266][T18010] [ 636.381862][T18015] rdma_op ffff888061bf09f0 conn xmit_rdma 0000000000000000 [ 636.424992][T18017] netlink: 'syz.1.3431': attribute type 12 has an invalid length. [ 636.444485][T18010] Mem-Info: [ 636.448188][T18010] active_anon:6865 inactive_anon:0 isolated_anon:0 [ 636.448188][T18010] active_file:1615 inactive_file:38516 isolated_file:0 [ 636.448188][T18010] unevictable:797 dirty:192 writeback:0 [ 636.448188][T18010] slab_reclaimable:13019 slab_unreclaimable:122825 [ 636.448188][T18010] mapped:29834 shmem:1501 pagetables:791 [ 636.448188][T18010] sec_pagetables:0 bounce:0 [ 636.448188][T18010] kernel_misc_reclaimable:0 [ 636.448188][T18010] free:1303310 free_pcp:490 free_cma:0 [ 636.498077][T18010] Node 0 active_anon:27560kB inactive_anon:0kB active_file:6460kB inactive_file:153988kB unevictable:1652kB isolated(anon):0kB isolated(file):0kB mapped:119336kB dirty:768kB writeback:0kB shmem:4468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12384kB pagetables:3064kB sec_pagetables:0kB all_unreclaimable? no [ 636.531512][T18010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 636.562713][T18010] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.592402][T18010] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 636.598720][T18010] Node 0 DMA32 free:1291204kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:27620kB inactive_anon:0kB active_file:6460kB inactive_file:153664kB unevictable:1652kB writepending:768kB present:3129332kB managed:2549656kB mlocked:116kB bounce:0kB free_pcp:1908kB local_pcp:864kB free_cma:0kB [ 636.647941][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 636.652978][T18010] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.729309][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 636.734457][T18010] Node 1 Normal free:3907292kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.777310][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 636.783083][T18010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 636.796763][T18010] Node 0 DMA32: 203*4kB (ME) 366*8kB (UME) 427*16kB (UM) 268*32kB (UME) 411*64kB (UME) 414*128kB (UME) 253*256kB (UME) 67*512kB (UM) 66*1024kB (UM) 3*2048kB (U) 249*4096kB (UM) = 1291148kB [ 636.818890][T18010] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 636.831431][T18010] Node 1 Normal: 187*4kB (U) 48*8kB (UME) 43*16kB (UME) 188*32kB (UME) 83*64kB (UME) 21*128kB (UME) 11*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3907292kB [ 636.851528][T18010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.866864][T18010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 636.878304][T18010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.893149][T18010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 636.903905][T18010] 41636 total pagecache pages [ 636.913164][T18010] 0 pages in swap cache [ 636.917618][T18010] Free swap = 124996kB [ 636.924135][T18010] Total swap = 124996kB [ 636.933607][T18010] 2097051 pages RAM [ 636.938322][T18010] 0 pages HighMem/MovableOnly [ 636.943201][T18010] 427915 pages reserved [ 636.947446][T18010] 0 pages cma reserved [ 637.030798][T18026] tipc: Enabling of bearer rejected, already enabled [ 637.188128][T18029] xt_CT: No such helper "snmp" [ 637.293407][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 637.330542][T18045] netlink: 'syz.2.3437': attribute type 10 has an invalid length. [ 637.358152][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 637.367301][T18040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3438'. [ 637.403619][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 637.475564][ T55] block nbd0: Receive control failed (result -107) [ 637.766125][T18064] IPVS: length: 221 != 14328 [ 637.776514][T18064] netlink: 'syz.2.3444': attribute type 4 has an invalid length. [ 637.855667][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3443'. [ 637.920706][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3443'. [ 637.930915][T18071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3445'. [ 637.944980][T18072] netlink: 'syz.0.3446': attribute type 2 has an invalid length. [ 638.131420][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3448'. [ 638.158491][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3448'. [ 638.175971][T18080] lo speed is unknown, defaulting to 1000 [ 638.184019][T18080] lo speed is unknown, defaulting to 1000 [ 638.233651][T18080] lo speed is unknown, defaulting to 1000 [ 638.416238][T18088] netlink: 'syz.1.3451': attribute type 72 has an invalid length. [ 638.416891][T18087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.485274][T18084] xt_CT: No such helper "snmp" [ 638.903122][T18097] netlink: 'syz.0.3454': attribute type 10 has an invalid length. [ 638.918527][T18097] syzkaller0: left promiscuous mode [ 638.944516][T18097] syzkaller0: left allmulticast mode [ 639.897763][T18131] xt_CT: No such helper "snmp" [ 640.003126][T18135] bridge4: entered promiscuous mode [ 640.641945][T18149] vlan1: entered promiscuous mode [ 641.200714][T18179] __nla_validate_parse: 7 callbacks suppressed [ 641.200738][T18179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3473'. [ 641.251478][T18185] : (slave wlan1): Releasing backup interface [ 641.287430][T18185] tipc: Resetting bearer [ 641.295466][T18178] xt_CT: No such helper "snmp" [ 641.331305][T18185] netlink: 'syz.4.3478': attribute type 10 has an invalid length. [ 641.370739][T18185] : (slave wlan1): Enslaving as an active interface with an up link [ 641.432731][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3478'. [ 641.908682][T18204] lo speed is unknown, defaulting to 1000 [ 641.933178][T18204] lo speed is unknown, defaulting to 1000 [ 641.959017][T18209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3481'. [ 641.989426][T18204] lo speed is unknown, defaulting to 1000 [ 642.013818][T18211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3485'. [ 642.044738][T18210] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 642.074692][T18211] batadv0: entered promiscuous mode [ 642.087741][T18211] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 642.127780][T18211] batadv0: left promiscuous mode [ 642.215059][T18210] 8021q: adding VLAN 0 to HW filter on device bond13 [ 642.246816][T18216] 8021q: adding VLAN 0 to HW filter on device bond13 [ 642.254271][T18216] bond13: (slave vcan0): The slave device specified does not support setting the MAC address [ 642.267652][T18216] bond13: (slave vcan0): Error -95 calling set_mac_address [ 642.286185][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'. [ 642.300424][T18221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3487'. [ 642.476709][T18225] vlan1: entered promiscuous mode [ 642.483552][T18225] batman_adv: batadv0: Adding interface: vlan1 [ 642.490852][T18225] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 642.779205][T18237] : (slave wlan1): Releasing backup interface [ 642.815606][T18237] tipc: Resetting bearer [ 642.836594][T18237] netlink: 'syz.4.3490': attribute type 10 has an invalid length. [ 642.858667][T18237] : (slave wlan1): Enslaving as an active interface with an up link [ 642.892894][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3490'. [ 643.050506][T18245] siw: device registration error -23 [ 643.334496][T18249] pim6reg1: entered promiscuous mode [ 643.368983][T18249] pim6reg1: entered allmulticast mode [ 643.473623][T18257] lo speed is unknown, defaulting to 1000 [ 644.057434][T18252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.751114][T18270] xt_CT: No such helper "snmp" [ 644.833121][T18273] netlink: 'syz.0.3501': attribute type 1 has an invalid length. [ 647.282911][T18257] lo speed is unknown, defaulting to 1000 [ 647.337681][T18273] 8021q: adding VLAN 0 to HW filter on device bond11 [ 647.421914][T18274] 8021q: adding VLAN 0 to HW filter on device bond11 [ 647.429566][T18274] bond11: (slave vcan4): The slave device specified does not support setting the MAC address [ 647.444515][T18274] bond11: (slave vcan4): Error -95 calling set_mac_address [ 647.465638][T18257] lo speed is unknown, defaulting to 1000 [ 647.472718][T18261] siw: device registration error -23 [ 647.488523][T18272] lo speed is unknown, defaulting to 1000 [ 647.517634][T18272] lo speed is unknown, defaulting to 1000 [ 647.570785][T18272] lo speed is unknown, defaulting to 1000 [ 647.615943][T18285] netlink: 'syz.3.3502': attribute type 1 has an invalid length. [ 647.658719][T18285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3502'. [ 647.840524][T18290] batman_adv: batadv0: Removing interface: vlan1 [ 647.905599][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3506'. [ 647.936934][T18294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3507'. [ 647.950584][T18294] IPv6: Can't replace route, no match found [ 647.967341][T18294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3507'. [ 648.248260][T18298] 0ªX¹¦D: left allmulticast mode [ 648.374968][T18298] bridge3: left promiscuous mode [ 648.384376][T18298] bond5: left promiscuous mode [ 648.391611][T18298] batadv1: left allmulticast mode [ 648.391727][T18307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3512'. [ 648.398659][T18298] ip6tnl2: left promiscuous mode [ 648.439848][ T9] lo speed is unknown, defaulting to 1000 [ 648.569870][T18306] xt_CT: No such helper "snmp" [ 648.585667][T18316] bridge6: entered promiscuous mode [ 648.833114][T18328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3515'. [ 648.908249][T18328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3515'. [ 648.947470][T18328] Bluetooth: MGMT ver 1.23 [ 649.034064][T18332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.131771][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3518'. [ 649.394396][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.408613][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.420739][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.444370][T18342] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 649.470590][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.484065][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.495156][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.511050][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.519837][T18342] syzkaller0 speed is unknown, defaulting to 1000 [ 649.876205][T18356] netlink: 'syz.3.3523': attribute type 1 has an invalid length. [ 649.951911][T18356] 8021q: adding VLAN 0 to HW filter on device bond9 [ 649.998788][T18354] lo speed is unknown, defaulting to 1000 [ 650.009451][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 650.093159][T18361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 650.108554][T18361] bond9: (slave vcan4): The slave device specified does not support setting the MAC address [ 650.125437][T18361] bond9: (slave vcan4): Error -95 calling set_mac_address [ 650.166270][T18354] lo speed is unknown, defaulting to 1000 [ 650.207266][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 650.219181][T18354] lo speed is unknown, defaulting to 1000 [ 650.256406][T18354] syzkaller0 speed is unknown, defaulting to 1000 [ 650.640164][T18375] xt_bpf: check failed: parse error [ 651.445416][T18384] lo speed is unknown, defaulting to 1000 [ 651.672256][T18384] lo speed is unknown, defaulting to 1000 [ 651.698407][T18383] lo speed is unknown, defaulting to 1000 [ 651.740587][T18384] lo speed is unknown, defaulting to 1000 [ 651.747540][T18384] syzkaller0 speed is unknown, defaulting to 1000 [ 651.895452][T18383] lo speed is unknown, defaulting to 1000 [ 651.970869][T18394] lo speed is unknown, defaulting to 1000 [ 651.988098][T18383] lo speed is unknown, defaulting to 1000 [ 651.988130][T18394] lo speed is unknown, defaulting to 1000 [ 652.013002][T18394] lo speed is unknown, defaulting to 1000 [ 652.049361][T18383] syzkaller0 speed is unknown, defaulting to 1000 [ 652.163526][T18394] syzkaller0 speed is unknown, defaulting to 1000 [ 652.824968][T18415] __nla_validate_parse: 2 callbacks suppressed [ 652.824989][T18415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3537'. [ 653.441684][T18436] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3540'. [ 653.468813][T18438] No such timeout policy "syz0" [ 653.480859][T18423] : (slave wlan1): Releasing backup interface [ 653.492638][T18423] tipc: Resetting bearer [ 653.563387][ T26] syzkaller0 speed is unknown, defaulting to 1000 [ 653.583741][T18431] pimreg: entered allmulticast mode [ 653.641289][T18440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3543'. [ 653.653784][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3543'. [ 654.123795][T18426] pimreg: left allmulticast mode [ 654.273856][T18450] lo speed is unknown, defaulting to 1000 [ 654.288627][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'. [ 654.342570][T18447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3544'. [ 654.388368][T18450] lo speed is unknown, defaulting to 1000 [ 654.437781][T18450] lo speed is unknown, defaulting to 1000 [ 654.445348][T18450] syzkaller0 speed is unknown, defaulting to 1000 [ 655.079244][T18472] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 655.358908][T18476] syzkaller0: entered promiscuous mode [ 655.387997][T18476] syzkaller0: entered allmulticast mode [ 655.906568][T18490] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3555'. [ 656.188476][T18481] netlink: 'syz.0.3552': attribute type 9 has an invalid length. [ 656.212659][T18481] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 656.547348][T18496] netlink: 'syz.3.3556': attribute type 2 has an invalid length. [ 656.555480][T18496] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3556'. [ 656.864143][T18503] xt_CT: No such helper "snmp" [ 657.003209][T18512] lo speed is unknown, defaulting to 1000 [ 657.032485][T18512] lo speed is unknown, defaulting to 1000 [ 657.067530][T18512] lo speed is unknown, defaulting to 1000 [ 657.089468][T18512] syzkaller0 speed is unknown, defaulting to 1000 [ 657.179554][T18506] netlink: 'syz.2.3558': attribute type 303 has an invalid length. [ 657.298306][T18517] tipc: Resetting bearer [ 657.345691][T18517] netlink: 'syz.4.3562': attribute type 10 has an invalid length. [ 657.403923][T18517] : (slave wlan1): Enslaving as an active interface with an up link [ 657.423330][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 657.469039][T18502] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 657.471623][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3562'. [ 657.487770][T18502] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 657.933680][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'. [ 657.947198][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3567'. [ 657.969110][T18538] SET target dimension over the limit! [ 658.215688][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3568'. [ 658.363507][T18549] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 658.377051][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3570'. [ 658.632019][T18554] xt_CT: No such helper "snmp" [ 659.032791][T18573] netlink: 'syz.2.3575': attribute type 10 has an invalid length. [ 659.106739][T18571] lo speed is unknown, defaulting to 1000 [ 659.161915][T18571] lo speed is unknown, defaulting to 1000 [ 659.170769][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3575'. [ 659.196244][T18571] lo speed is unknown, defaulting to 1000 [ 659.248286][T18571] syzkaller0 speed is unknown, defaulting to 1000 [ 659.715089][T18597] netlink: 'syz.2.3581': attribute type 10 has an invalid length. [ 659.718996][T18593] lo speed is unknown, defaulting to 1000 [ 659.770253][T18593] lo speed is unknown, defaulting to 1000 [ 659.792308][T18593] lo speed is unknown, defaulting to 1000 [ 659.800551][T18593] syzkaller0 speed is unknown, defaulting to 1000 [ 659.800898][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3581'. [ 660.059977][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 660.245921][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'. [ 660.283830][T18617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3585'. [ 660.450184][T18609] xt_CT: No such helper "snmp" [ 660.527691][T18613] syzkaller0: entered allmulticast mode [ 660.579973][T18613] syzkaller0: entered promiscuous mode [ 660.673596][T18613] syzkaller0 (unregistering): left promiscuous mode [ 660.683455][T18613] syzkaller0 (unregistering): left allmulticast mode [ 660.783199][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3586'. [ 661.131987][T18647] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.3590'. [ 661.176009][T18647] openvswitch: netlink: Flow actions attr not present in new flow. [ 661.518785][T18660] lo speed is unknown, defaulting to 1000 [ 661.541277][T18660] lo speed is unknown, defaulting to 1000 [ 661.556957][T18666] netlink: 'syz.1.3595': attribute type 10 has an invalid length. [ 661.564236][T18660] lo speed is unknown, defaulting to 1000 [ 661.572921][T18666] bond0: (slave wlan1): refused to change device type [ 661.624778][T18660] syzkaller0 speed is unknown, defaulting to 1000 [ 661.653608][T18666] syzkaller0: left promiscuous mode [ 661.665010][T18666] syzkaller0: left allmulticast mode [ 661.840235][T18672] xt_CT: No such helper "snmp" [ 662.504287][T18691] openvswitch: netlink: Flow actions attr not present in new flow. [ 662.893664][T18704] lo speed is unknown, defaulting to 1000 [ 662.926479][T18704] lo speed is unknown, defaulting to 1000 [ 662.970211][T18704] lo speed is unknown, defaulting to 1000 [ 662.980663][T18708] bridge0: port 1(gretap0) entered blocking state [ 662.987236][T18708] bridge0: port 1(gretap0) entered disabled state [ 662.997178][T18708] gretap0: entered allmulticast mode [ 663.019780][T18708] gretap0: entered promiscuous mode [ 663.047525][T18704] syzkaller0 speed is unknown, defaulting to 1000 [ 663.066434][T18711] gretap0: left allmulticast mode [ 663.071956][T18711] gretap0: left promiscuous mode [ 663.087692][T18711] bridge0: port 1(gretap0) entered disabled state [ 663.136234][T18713] __nla_validate_parse: 5 callbacks suppressed [ 663.136256][T18713] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3607'. [ 663.222890][T18715] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 663.383864][T18719] : (slave wlan1): Releasing backup interface [ 663.441708][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3612'. [ 663.451791][T18722] netlink: 'syz.4.3611': attribute type 10 has an invalid length. [ 663.481336][T18719] tipc: Resetting bearer [ 663.614971][T18722] : (slave wlan1): Enslaving as an active interface with an up link [ 663.649376][T18726] lo speed is unknown, defaulting to 1000 [ 663.656137][T18726] lo speed is unknown, defaulting to 1000 [ 663.669925][T18726] lo speed is unknown, defaulting to 1000 [ 663.677244][T18726] syzkaller0 speed is unknown, defaulting to 1000 [ 663.756791][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3611'. [ 664.055240][T18745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3618'. [ 664.326221][T18745] bridge3: entered promiscuous mode [ 665.131241][T18781] netlink: 'syz.2.3628': attribute type 10 has an invalid length. [ 665.189267][T18782] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3631'. [ 665.270126][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3628'. [ 665.670192][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 665.781937][T18801] lo speed is unknown, defaulting to 1000 [ 665.797373][T18805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3635'. [ 665.869531][T18801] lo speed is unknown, defaulting to 1000 [ 665.939619][T18801] lo speed is unknown, defaulting to 1000 [ 665.939619][T18808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3635'. [ 665.940617][T18801] syzkaller0 speed is unknown, defaulting to 1000 [ 666.011681][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3635'. [ 666.383088][T18816] lo speed is unknown, defaulting to 1000 [ 666.410201][T18816] lo speed is unknown, defaulting to 1000 [ 666.418269][T18816] lo speed is unknown, defaulting to 1000 [ 666.449228][T18816] syzkaller0 speed is unknown, defaulting to 1000 [ 666.596567][T18824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.953966][T18834] netlink: 'syz.0.3643': attribute type 10 has an invalid length. [ 667.099000][T18840] lo speed is unknown, defaulting to 1000 [ 667.134498][T18840] lo speed is unknown, defaulting to 1000 [ 667.183736][T18840] lo speed is unknown, defaulting to 1000 [ 667.214427][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 667.620886][T18856] netlink: 'syz.1.3651': attribute type 10 has an invalid length. [ 667.630490][T18856] bond0: (slave wlan1): refused to change device type [ 667.654044][T18858] lo speed is unknown, defaulting to 1000 [ 667.688130][T18858] lo speed is unknown, defaulting to 1000 [ 667.705883][T18858] lo speed is unknown, defaulting to 1000 [ 667.727244][T18858] syzkaller0 speed is unknown, defaulting to 1000 [ 667.915424][T18863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 668.174655][T18867] lo speed is unknown, defaulting to 1000 [ 668.220820][T18867] lo speed is unknown, defaulting to 1000 [ 668.244958][T18867] lo speed is unknown, defaulting to 1000 [ 668.254555][T18867] syzkaller0 speed is unknown, defaulting to 1000 [ 669.092197][T18877] lo speed is unknown, defaulting to 1000 [ 669.100101][T18877] lo speed is unknown, defaulting to 1000 [ 669.108206][T18877] lo speed is unknown, defaulting to 1000 [ 669.118473][T18877] syzkaller0 speed is unknown, defaulting to 1000 [ 669.277253][T18885] __nla_validate_parse: 2 callbacks suppressed [ 669.277281][T18885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3660'. [ 669.306061][T18889] netlink: 'syz.1.3659': attribute type 10 has an invalid length. [ 669.333993][T18889] bond0: (slave wlan1): refused to change device type [ 669.335422][T18885] netlink: 'syz.2.3660': attribute type 2 has an invalid length. [ 669.359944][T18889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3659'. [ 669.618458][T18885] fþ: entered promiscuous mode [ 669.711439][T18894] lo speed is unknown, defaulting to 1000 [ 669.734985][T18894] lo speed is unknown, defaulting to 1000 [ 669.816815][T18894] lo speed is unknown, defaulting to 1000 [ 669.849209][T18894] syzkaller0 speed is unknown, defaulting to 1000 [ 669.973772][T18900] tipc: Resetting bearer [ 670.250933][T18908] lo speed is unknown, defaulting to 1000 [ 670.294465][T18908] lo speed is unknown, defaulting to 1000 [ 670.309676][T18908] lo speed is unknown, defaulting to 1000 [ 670.318160][T18911] lo speed is unknown, defaulting to 1000 [ 670.325152][T18911] lo speed is unknown, defaulting to 1000 [ 670.328044][T18908] syzkaller0 speed is unknown, defaulting to 1000 [ 670.446581][T18911] lo speed is unknown, defaulting to 1000 [ 670.744441][T18911] syzkaller0 speed is unknown, defaulting to 1000 [ 671.706225][T18945] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 671.733731][T18941] lo speed is unknown, defaulting to 1000 [ 672.094232][T18945] 8021q: adding VLAN 0 to HW filter on device bond17 [ 672.106524][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 672.182369][T18946] 8021q: adding VLAN 0 to HW filter on device bond17 [ 672.212698][T18946] bond17: (slave vcan0): The slave device specified does not support setting the MAC address [ 672.220246][T18954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3681'. [ 672.252443][T18946] bond17: (slave vcan0): Error -95 calling set_mac_address [ 672.568371][T18941] lo speed is unknown, defaulting to 1000 [ 672.574370][T18939] lo speed is unknown, defaulting to 1000 [ 672.579632][T18941] lo speed is unknown, defaulting to 1000 [ 672.583165][T18939] lo speed is unknown, defaulting to 1000 [ 672.616780][T18939] lo speed is unknown, defaulting to 1000 [ 672.645343][T18939] syzkaller0 speed is unknown, defaulting to 1000 [ 672.706201][T18941] syzkaller0 speed is unknown, defaulting to 1000 [ 672.963123][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3685'. [ 673.086747][T18968] bridge0: entered promiscuous mode [ 673.174395][T18970] lo speed is unknown, defaulting to 1000 [ 673.212716][T18970] lo speed is unknown, defaulting to 1000 [ 673.232143][T18970] lo speed is unknown, defaulting to 1000 [ 673.243452][T18970] syzkaller0 speed is unknown, defaulting to 1000 [ 673.605305][T18980] lo speed is unknown, defaulting to 1000 [ 673.626377][T18980] lo speed is unknown, defaulting to 1000 [ 673.659652][T18980] lo speed is unknown, defaulting to 1000 [ 673.690453][T18980] syzkaller0 speed is unknown, defaulting to 1000 [ 673.773925][T18986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3691'. [ 674.328345][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'. [ 674.341873][T19003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3692'. [ 675.237437][T19018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.498438][T19026] netlink: 'syz.1.3703': attribute type 10 has an invalid length. [ 675.506648][T19026] bond0: (slave wlan1): refused to change device type [ 675.535128][T19026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3703'. [ 675.795192][T19034] netlink: 'syz.3.3707': attribute type 12 has an invalid length. [ 675.842672][T19032] lo speed is unknown, defaulting to 1000 [ 675.881183][T19032] lo speed is unknown, defaulting to 1000 [ 675.905669][T19032] lo speed is unknown, defaulting to 1000 [ 675.954566][T19032] syzkaller0 speed is unknown, defaulting to 1000 [ 676.395473][T19053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3714'. [ 676.448746][T19053] netlink: 'syz.0.3714': attribute type 9 has an invalid length. [ 676.470744][T19053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3714'. [ 676.755277][T19059] netlink: 'syz.1.3717': attribute type 10 has an invalid length. [ 676.794711][T19059] bond0: (slave wlan1): refused to change device type [ 676.829486][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3717'. [ 676.999345][T19070] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.311849][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'. [ 677.324880][T19084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3724'. [ 677.340147][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3727'. [ 677.348410][T19079] xt_CT: No such helper "snmp" [ 677.686496][T19085] bridge0: entered promiscuous mode [ 678.158249][T19102] lo speed is unknown, defaulting to 1000 [ 678.187525][T19102] lo speed is unknown, defaulting to 1000 [ 678.241164][T19102] lo speed is unknown, defaulting to 1000 [ 678.253082][T19102] syzkaller0 speed is unknown, defaulting to 1000 [ 678.628294][T19117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.717196][T19122] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 678.747306][T19122] bond0: (slave wlan1): refused to change device type [ 678.793503][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'. [ 679.317376][T19131] bridge7: entered promiscuous mode [ 679.421411][T19141] netlink: 'syz.3.3746': attribute type 29 has an invalid length. [ 679.451243][T19144] netlink: 'syz.3.3746': attribute type 29 has an invalid length. [ 679.728284][T19155] __nla_validate_parse: 4 callbacks suppressed [ 679.728308][T19155] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3751'. [ 679.836001][T19161] netlink: 'syz.2.3752': attribute type 10 has an invalid length. [ 679.942063][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'. [ 680.010527][T19167] netlink: 'syz.0.3754': attribute type 10 has an invalid length. [ 680.059966][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3754'. [ 680.208720][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3753'. [ 680.308696][T19178] wg1: entered promiscuous mode [ 680.326328][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3753'. [ 680.330745][T19175] lo speed is unknown, defaulting to 1000 [ 680.375919][T19175] lo speed is unknown, defaulting to 1000 [ 680.404012][T19175] lo speed is unknown, defaulting to 1000 [ 680.432566][T19175] syzkaller0 speed is unknown, defaulting to 1000 [ 680.776448][T19171] netlink: 'syz.3.3755': attribute type 9 has an invalid length. [ 680.799785][T19171] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 681.052203][T19192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3758'. [ 681.422896][T19196] syzkaller0: entered promiscuous mode [ 681.428851][T19196] syzkaller0: entered allmulticast mode [ 681.456718][T19196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3760'. [ 681.599536][T19196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.937697][T19218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3765'. [ 682.072909][T19217] xt_CT: No such helper "snmp" [ 682.697912][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.914491][T19229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 683.418408][T18540] Bluetooth: hci4: command 0x0405 tx timeout [ 683.746609][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.501462][T19203] lo speed is unknown, defaulting to 1000 [ 685.557613][T19203] lo speed is unknown, defaulting to 1000 [ 685.588110][T19203] lo speed is unknown, defaulting to 1000 [ 685.596422][T19203] syzkaller0 speed is unknown, defaulting to 1000 [ 685.722499][T19232] : (slave wlan1): Releasing backup interface [ 685.734085][T19232] tipc: Resetting bearer [ 685.742624][T19232] netlink: 'syz.4.3767': attribute type 10 has an invalid length. [ 685.790541][T19232] : (slave wlan1): Enslaving as an active interface with an up link [ 685.846366][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3767'. [ 686.087212][T19247] ipvlan0: entered promiscuous mode [ 686.123114][T19247] ipvlan0: entered allmulticast mode [ 686.168151][T19247] veth0_vlan: entered allmulticast mode [ 686.298151][T19251] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 686.308084][T19251] syzkaller0: linktype set to 769 [ 686.396702][T19253] xt_CT: No such helper "snmp" [ 686.592676][T19267] netlink: 'syz.0.3782': attribute type 29 has an invalid length. [ 686.628108][T19267] netlink: 'syz.0.3782': attribute type 29 has an invalid length. [ 686.695677][T19267] netlink: 'syz.0.3782': attribute type 29 has an invalid length. [ 686.716296][T19267] netlink: 'syz.0.3782': attribute type 29 has an invalid length. [ 686.839340][T19272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3784'. [ 687.050885][T19256] netlink: 'syz.1.3778': attribute type 9 has an invalid length. [ 687.095117][T19256] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 687.411664][T19289] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 687.696494][T19293] xt_CT: No such helper "snmp" [ 688.004838][T19315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3801'. [ 688.055076][T19317] smc: net device bond0 erased user defined pnetid SYZ2 [ 688.129799][T19315] bridge0: entered promiscuous mode [ 688.382643][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3806'. [ 688.496484][T19334] xt_CT: No such helper "snmp" [ 688.826030][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3814'. [ 689.002862][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3817'. [ 689.102381][T19359] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 689.278793][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3820'. [ 689.312237][T19363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3820'. [ 689.594120][T19376] lo speed is unknown, defaulting to 1000 [ 689.604508][T19376] lo speed is unknown, defaulting to 1000 [ 689.614097][T19376] lo speed is unknown, defaulting to 1000 [ 689.621446][T19376] syzkaller0 speed is unknown, defaulting to 1000 [ 690.048795][T19392] IPv6: Can't replace route, no match found [ 690.093195][T19394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3830'. [ 690.227602][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3834'. [ 690.262385][T19399] netlink: 'syz.1.3835': attribute type 5 has an invalid length. [ 690.592678][T19405] lo speed is unknown, defaulting to 1000 [ 690.619151][T19406] netlink: 'syz.3.3838': attribute type 1 has an invalid length. [ 690.694348][T19406] 8021q: adding VLAN 0 to HW filter on device bond11 [ 690.766826][T19414] 8021q: adding VLAN 0 to HW filter on device bond11 [ 690.784682][T19414] bond11: (slave vcan4): The slave device specified does not support setting the MAC address [ 690.800273][T19414] bond11: (slave vcan4): Error -95 calling set_mac_address [ 690.863869][T19405] lo speed is unknown, defaulting to 1000 [ 690.877561][T19405] lo speed is unknown, defaulting to 1000 [ 690.891734][T19422] __nla_validate_parse: 1 callbacks suppressed [ 690.891756][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 690.901220][T19405] syzkaller0 speed is unknown, defaulting to 1000 [ 691.332499][T19439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3845'. [ 691.879239][T19448] lo speed is unknown, defaulting to 1000 [ 691.905409][T19448] lo speed is unknown, defaulting to 1000 [ 691.933615][T19448] lo speed is unknown, defaulting to 1000 [ 691.979582][T19448] syzkaller0 speed is unknown, defaulting to 1000 [ 692.404322][T19468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3854'. [ 692.589811][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'. [ 692.604708][T19471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3855'. [ 692.634167][T19473] lo speed is unknown, defaulting to 1000 [ 692.674449][T19473] lo speed is unknown, defaulting to 1000 [ 692.685928][T19473] lo speed is unknown, defaulting to 1000 [ 692.755182][T19476] netlink: 'syz.3.3856': attribute type 1 has an invalid length. [ 692.797014][T19473] syzkaller0 speed is unknown, defaulting to 1000 [ 692.828844][T19476] 8021q: adding VLAN 0 to HW filter on device bond12 [ 692.910313][T19478] 8021q: adding VLAN 0 to HW filter on device bond12 [ 692.920004][T19478] bond12: (slave vcan4): The slave device specified does not support setting the MAC address [ 692.932378][T19478] bond12: (slave vcan4): Error -95 calling set_mac_address [ 693.566842][T19503] lo speed is unknown, defaulting to 1000 [ 693.597227][T19503] lo speed is unknown, defaulting to 1000 [ 693.606037][T19503] lo speed is unknown, defaulting to 1000 [ 693.625110][T19503] syzkaller0 speed is unknown, defaulting to 1000 [ 693.729394][T19511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3864'. [ 694.175867][T19518] lo speed is unknown, defaulting to 1000 [ 694.207147][T19518] lo speed is unknown, defaulting to 1000 [ 694.252532][T19518] lo speed is unknown, defaulting to 1000 [ 694.282136][T19518] syzkaller0 speed is unknown, defaulting to 1000 [ 694.947446][T19536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3870'. [ 695.022442][T19538] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.3872'. [ 695.045945][T19538] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 695.185019][T19542] xt_hashlimit: size too large, truncated to 1048576 [ 695.243323][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3874'. [ 695.249763][T19544] lo speed is unknown, defaulting to 1000 [ 695.266544][T19544] lo speed is unknown, defaulting to 1000 [ 695.281613][T19544] lo speed is unknown, defaulting to 1000 [ 695.291885][T19546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3874'. [ 695.299361][T19544] syzkaller0 speed is unknown, defaulting to 1000 [ 695.963460][T19564] netlink: 'syz.2.3879': attribute type 1 has an invalid length. [ 696.186579][T19560] lo speed is unknown, defaulting to 1000 [ 696.233621][T19565] __nla_validate_parse: 1 callbacks suppressed [ 696.233648][T19565] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3877'. [ 696.269283][T19571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3878'. [ 696.323710][T19564] 8021q: adding VLAN 0 to HW filter on device bond18 [ 696.332041][T19560] lo speed is unknown, defaulting to 1000 [ 696.341312][T19560] lo speed is unknown, defaulting to 1000 [ 696.358417][T19560] syzkaller0 speed is unknown, defaulting to 1000 [ 697.240953][T19590] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 697.293545][T19589] lo speed is unknown, defaulting to 1000 [ 697.404151][T19590] 8021q: adding VLAN 0 to HW filter on device bond14 [ 697.521819][T19589] lo speed is unknown, defaulting to 1000 [ 697.620717][T19594] 8021q: adding VLAN 0 to HW filter on device bond14 [ 697.698825][T19594] bond14: (slave vcan4): The slave device specified does not support setting the MAC address [ 697.712717][T19594] bond14: (slave vcan4): Error -95 calling set_mac_address [ 697.744308][T19589] lo speed is unknown, defaulting to 1000 [ 697.822316][T19589] syzkaller0 speed is unknown, defaulting to 1000 [ 697.945955][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3888'. [ 698.634189][T19620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3893'. [ 699.417248][T19636] netlink: 'syz.0.3901': attribute type 10 has an invalid length. [ 699.530371][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'. [ 700.564361][T19665] netlink: 'syz.2.3913': attribute type 10 has an invalid length. [ 700.761305][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3913'. [ 700.925547][T19676] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3915'. [ 700.964779][T19676] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3915'. [ 701.228689][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3917'. [ 701.262187][T19686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3917'. [ 701.289238][T19556] Set syz1 is full, maxelem 65536 reached [ 701.449564][T19692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3920'. [ 701.711774][T19702] bridge3: entered promiscuous mode [ 702.037186][T19706] lo speed is unknown, defaulting to 1000 [ 702.054154][T19708] netlink: 'syz.1.3926': attribute type 10 has an invalid length. [ 702.063004][T19708] bond0: (slave wlan1): refused to change device type [ 702.073694][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3926'. [ 702.087719][T19706] lo speed is unknown, defaulting to 1000 [ 702.141239][T19706] lo speed is unknown, defaulting to 1000 [ 702.177589][T19706] syzkaller0 speed is unknown, defaulting to 1000 [ 702.204416][T19714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3927'. [ 702.740247][T19720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3929'. [ 702.788175][ T5933] lo speed is unknown, defaulting to 1000 [ 703.018490][T19723] xt_hashlimit: size too large, truncated to 1048576 [ 703.556221][T19740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.635144][T19740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.707120][T19743] netlink: 'syz.1.3938': attribute type 10 has an invalid length. [ 703.724568][T19743] bond0: (slave wlan1): refused to change device type [ 703.738900][T19743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3938'. [ 703.749684][T19740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.884471][T19750] netlink: 'syz.3.3941': attribute type 10 has an invalid length. [ 703.954342][T19753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3941'. [ 704.392231][T19774] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 704.404264][T19771] lo speed is unknown, defaulting to 1000 [ 704.425413][T19771] lo speed is unknown, defaulting to 1000 [ 704.459014][T19771] lo speed is unknown, defaulting to 1000 [ 704.498858][T19771] syzkaller0 speed is unknown, defaulting to 1000 [ 704.736524][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3954'. [ 704.772422][T19785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3954'. [ 704.950537][T19793] netlink: 'syz.2.3956': attribute type 10 has an invalid length. [ 705.024612][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3956'. [ 705.320573][T19804] lo speed is unknown, defaulting to 1000 [ 705.356191][T19804] lo speed is unknown, defaulting to 1000 [ 705.403498][T19804] lo speed is unknown, defaulting to 1000 [ 705.435031][T19804] syzkaller0 speed is unknown, defaulting to 1000 [ 705.614434][T19815] netlink: 'syz.2.3962': attribute type 1 has an invalid length. [ 705.820304][T19815] 8021q: adding VLAN 0 to HW filter on device bond19 [ 705.851183][T19813] lo speed is unknown, defaulting to 1000 [ 705.875702][T19820] 8021q: adding VLAN 0 to HW filter on device bond19 [ 705.883466][T19820] bond19: (slave vcan0): The slave device specified does not support setting the MAC address [ 705.900687][T19820] bond19: (slave vcan0): Error -95 calling set_mac_address [ 705.920827][T19813] lo speed is unknown, defaulting to 1000 [ 705.928287][T19813] lo speed is unknown, defaulting to 1000 [ 705.941528][T19813] syzkaller0 speed is unknown, defaulting to 1000 [ 705.948515][T19830] lo speed is unknown, defaulting to 1000 [ 705.950244][T19830] lo speed is unknown, defaulting to 1000 [ 706.037540][T19831] netlink: 'syz.4.3967': attribute type 1 has an invalid length. [ 706.049317][T19830] lo speed is unknown, defaulting to 1000 [ 706.074409][T19831] 8021q: adding VLAN 0 to HW filter on device bond14 [ 706.182096][T19836] 8021q: adding VLAN 0 to HW filter on device bond14 [ 706.189894][T19836] bond14: (slave vcan0): The slave device specified does not support setting the MAC address [ 706.201879][T19836] bond14: (slave vcan0): Error -95 calling set_mac_address [ 706.236417][T19830] syzkaller0 speed is unknown, defaulting to 1000 [ 706.409268][T19840] netlink: 'syz.2.3970': attribute type 10 has an invalid length. [ 706.491994][T19844] __nla_validate_parse: 6 callbacks suppressed [ 706.492014][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'. [ 706.785803][T19853] netlink: 'syz.1.3974': attribute type 10 has an invalid length. [ 706.820703][T19853] bond0: (slave wlan1): refused to change device type [ 706.861914][T19853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3974'. [ 707.079683][T19860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 707.191508][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'. [ 707.205397][T19870] netlink: 'syz.3.3980': attribute type 1 has an invalid length. [ 707.216631][T19869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3978'. [ 707.306073][T19870] 8021q: adding VLAN 0 to HW filter on device bond13 [ 707.364276][T19865] lo speed is unknown, defaulting to 1000 [ 707.527409][T19874] 8021q: adding VLAN 0 to HW filter on device bond13 [ 707.537040][T19874] bond13: (slave vcan4): The slave device specified does not support setting the MAC address [ 707.553313][T19874] bond13: (slave vcan4): Error -95 calling set_mac_address [ 707.590157][T19868] lo speed is unknown, defaulting to 1000 [ 707.590254][T19865] lo speed is unknown, defaulting to 1000 [ 707.697120][T19868] lo speed is unknown, defaulting to 1000 [ 707.704866][T19868] lo speed is unknown, defaulting to 1000 [ 707.719233][T19868] syzkaller0 speed is unknown, defaulting to 1000 [ 707.726751][T19865] lo speed is unknown, defaulting to 1000 [ 707.756179][T19865] syzkaller0 speed is unknown, defaulting to 1000 [ 707.837353][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3985'. [ 708.125717][T19899] pim6reg: left allmulticast mode [ 708.213375][T19900] lo speed is unknown, defaulting to 1000 [ 708.240604][T19900] lo speed is unknown, defaulting to 1000 [ 708.294674][T19900] lo speed is unknown, defaulting to 1000 [ 708.458823][T19900] syzkaller0 speed is unknown, defaulting to 1000 [ 708.541934][T19913] netlink: 'syz.2.3991': attribute type 10 has an invalid length. [ 708.576561][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 708.589901][T19915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3993'. [ 708.632439][T19920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3991'. [ 709.268390][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'. [ 709.333834][T19937] netlink: 'syz.2.3998': attribute type 10 has an invalid length. [ 709.359080][T19933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3996'. [ 709.512476][T19941] pim6reg: entered allmulticast mode [ 709.935857][T19955] lo speed is unknown, defaulting to 1000 [ 709.958063][T19955] lo speed is unknown, defaulting to 1000 [ 709.974521][T19955] lo speed is unknown, defaulting to 1000 [ 710.019352][T19955] syzkaller0 speed is unknown, defaulting to 1000 [ 710.330955][T19969] lo speed is unknown, defaulting to 1000 [ 710.409686][T19969] lo speed is unknown, defaulting to 1000 [ 710.458389][T19969] lo speed is unknown, defaulting to 1000 [ 710.496123][T19969] syzkaller0 speed is unknown, defaulting to 1000 [ 710.616735][T19974] netlink: 'syz.0.4003': attribute type 11 has an invalid length. [ 711.227609][T19989] netlink: 'syz.4.4013': attribute type 72 has an invalid length. [ 711.452346][T19995] vlan0: entered promiscuous mode [ 711.468224][T19995] batadv0: entered promiscuous mode [ 711.544817][T19997] __nla_validate_parse: 5 callbacks suppressed [ 711.544839][T19997] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4015'. [ 712.028515][T20011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.300836][T20022] rdma_op ffff888062da91f0 conn xmit_rdma 0000000000000000 [ 712.502489][T20024] block nbd1: not configured, cannot reconfigure [ 712.860128][T20036] netlink: 'syz.3.4031': attribute type 4 has an invalid length. [ 712.924808][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4030'. [ 713.000441][T20017] netlink: 'syz.4.4025': attribute type 11 has an invalid length. [ 713.100149][T20045] lo speed is unknown, defaulting to 1000 [ 713.122628][T20045] lo speed is unknown, defaulting to 1000 [ 713.159440][T20045] lo speed is unknown, defaulting to 1000 [ 713.203490][T20045] syzkaller0 speed is unknown, defaulting to 1000 [ 713.241302][T20048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4034'. [ 713.518690][T20055] siw: device registration error -23 [ 713.677275][T20062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4040'. [ 713.741501][T20062] veth0: entered promiscuous mode [ 713.780840][T20062] veth0: left promiscuous mode [ 714.149608][T20068] lo speed is unknown, defaulting to 1000 [ 714.179740][T20068] lo speed is unknown, defaulting to 1000 [ 714.234573][T20073] netlink: 'syz.1.4043': attribute type 10 has an invalid length. [ 714.260370][T20068] lo speed is unknown, defaulting to 1000 [ 714.270486][T20073] bond0: (slave wlan1): refused to change device type [ 714.289151][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 714.299548][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 714.321786][T20068] syzkaller0 speed is unknown, defaulting to 1000 [ 714.571857][T20078] netlink: 'syz.3.4045': attribute type 1 has an invalid length. [ 714.598796][T20078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4045'. [ 714.909845][T20090] netlink: 'syz.1.4049': attribute type 10 has an invalid length. [ 714.928319][T20090] bond0: (slave wlan1): refused to change device type [ 714.982167][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'. [ 715.038438][T10555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.130033][T10555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.249030][T20102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.263531][T20099] lo speed is unknown, defaulting to 1000 [ 715.278602][T20099] lo speed is unknown, defaulting to 1000 [ 715.293456][T20099] lo speed is unknown, defaulting to 1000 [ 715.405733][T20106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4051'. [ 715.415243][T20099] syzkaller0 speed is unknown, defaulting to 1000 [ 715.732485][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4054'. [ 716.294695][T20127] lo speed is unknown, defaulting to 1000 [ 716.302551][T20127] lo speed is unknown, defaulting to 1000 [ 716.310542][T20127] lo speed is unknown, defaulting to 1000 [ 716.337187][T20127] syzkaller0 speed is unknown, defaulting to 1000 [ 716.800452][T20149] ax25_connect(): syz.3.4063 uses autobind, please contact jreuter@yaina.de [ 717.246406][T20155] netlink: 'syz.1.4065': attribute type 1 has an invalid length. [ 717.298650][T20155] __nla_validate_parse: 1 callbacks suppressed [ 717.298674][T20155] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4065'. [ 717.443948][T20159] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 717.517612][T20162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'. [ 717.668315][T20146] ------------[ cut here ]------------ [ 717.674462][T20146] refcount_t: decrement hit 0; leaking memory. [ 717.739056][T20146] WARNING: CPU: 0 PID: 20146 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 717.749170][T20146] Modules linked in: [ 717.753125][T20146] CPU: 0 UID: 0 PID: 20146 Comm: syz.3.4063 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 717.764334][T20146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 717.774981][T20146] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 717.781238][T20146] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 78 83 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 55 83 31 0b 01 90 48 c7 c7 [ 717.801621][T20146] RSP: 0018:ffffc9000b0e7b68 EFLAGS: 00010246 [ 717.807751][T20146] RAX: 385295edba3ece00 RBX: ffff8880233b664c RCX: ffff88805b7f0000 [ 717.816028][T20146] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 717.824343][T20146] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 717.832889][T20146] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff8880233b6608 [ 717.841118][T20146] R13: 0000000000000000 R14: ffff8880233b664c R15: dffffc0000000000 [ 717.849358][T20146] FS: 000055558c20c500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 717.859151][T20146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.865871][T20146] CR2: 0000000000000000 CR3: 000000005859c000 CR4: 00000000003526f0 [ 717.873996][T20146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 717.882141][T20146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 717.890718][T20146] Call Trace: [ 717.894067][T20146] [ 717.897145][T20146] ? __warn+0x165/0x4d0 [ 717.901761][T20146] ? refcount_warn_saturate+0xfa/0x1d0 [ 717.907288][T20146] ? report_bug+0x2b3/0x500 [ 717.912008][T20146] ? refcount_warn_saturate+0xfa/0x1d0 [ 717.917523][T20146] ? handle_bug+0x60/0x90 [ 717.922264][T20146] ? exc_invalid_op+0x1a/0x50 [ 717.927076][T20146] ? asm_exc_invalid_op+0x1a/0x20 [ 717.932308][T20146] ? __warn_printk+0x292/0x360 [ 717.937165][T20146] ? refcount_warn_saturate+0xfa/0x1d0 [ 717.942900][T20146] ? refcount_warn_saturate+0xf9/0x1d0 [ 717.948716][T20146] ref_tracker_free+0x6af/0x7e0 [ 717.953629][T20146] ? __pfx_ref_tracker_free+0x10/0x10 [ 717.959227][T20146] ? ax25_destroy_socket+0x551/0x5c0 [ 717.964577][T20146] ax25_release+0x368/0x960 [ 717.969379][T20146] sock_close+0xbc/0x240 [ 717.973685][T20146] ? __pfx_sock_close+0x10/0x10 [ 717.979038][T20146] __fput+0x3e9/0x9f0 [ 717.983124][T20146] task_work_run+0x24f/0x310 [ 717.987910][T20146] ? _raw_spin_unlock+0x28/0x50 [ 717.992829][T20146] ? __pfx_task_work_run+0x10/0x10 [ 717.998152][T20146] ? syscall_exit_to_user_mode+0xa3/0x340 [ 718.003941][T20146] syscall_exit_to_user_mode+0x13f/0x340 [ 718.009983][T20146] do_syscall_64+0x100/0x230 [ 718.014645][T20146] ? clear_bhb_loop+0x35/0x90 [ 718.019684][T20146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.025740][T20146] RIP: 0033:0x7f5233d8d169 [ 718.030308][T20146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.050607][T20146] RSP: 002b:00007fffa7627cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 718.059255][T20146] RAX: 0000000000000000 RBX: 00007f5233fa7ba0 RCX: 00007f5233d8d169 [ 718.067340][T20146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 718.075489][T20146] RBP: 00007f5233fa7ba0 R08: 0000000000000284 R09: 0000001ba7627fcf [ 718.083864][T20146] R10: 00007f5233fa7ac0 R11: 0000000000000246 R12: 00000000000af2a0 [ 718.092036][T20146] R13: 00007f5233fa5fa0 R14: ffffffffffffffff R15: 00007fffa7627df0 [ 718.100179][T20146] [ 718.103254][T20146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 718.110590][T20146] CPU: 0 UID: 0 PID: 20146 Comm: syz.3.4063 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 718.121520][T20146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 718.131639][T20146] Call Trace: [ 718.134964][T20146] [ 718.138032][T20146] dump_stack_lvl+0x241/0x360 [ 718.142777][T20146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.148063][T20146] ? __pfx__printk+0x10/0x10 [ 718.152716][T20146] ? _printk+0xd5/0x120 [ 718.156936][T20146] ? __init_begin+0x41000/0x41000 [ 718.162023][T20146] ? vscnprintf+0x5d/0x90 [ 718.166407][T20146] panic+0x349/0x880 [ 718.170749][T20146] ? __warn+0x174/0x4d0 [ 718.175044][T20146] ? __pfx_panic+0x10/0x10 [ 718.179709][T20146] __warn+0x344/0x4d0 [ 718.183742][T20146] ? refcount_warn_saturate+0xfa/0x1d0 [ 718.189263][T20146] report_bug+0x2b3/0x500 [ 718.193673][T20146] ? refcount_warn_saturate+0xfa/0x1d0 [ 718.199200][T20146] handle_bug+0x60/0x90 [ 718.203407][T20146] exc_invalid_op+0x1a/0x50 [ 718.207962][T20146] asm_exc_invalid_op+0x1a/0x20 [ 718.212858][T20146] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 718.219040][T20146] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 78 83 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 55 83 31 0b 01 90 48 c7 c7 [ 718.238843][T20146] RSP: 0018:ffffc9000b0e7b68 EFLAGS: 00010246 [ 718.245181][T20146] RAX: 385295edba3ece00 RBX: ffff8880233b664c RCX: ffff88805b7f0000 [ 718.253248][T20146] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 718.261316][T20146] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 718.269394][T20146] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff8880233b6608 [ 718.277506][T20146] R13: 0000000000000000 R14: ffff8880233b664c R15: dffffc0000000000 [ 718.285695][T20146] ? __warn_printk+0x292/0x360 [ 718.290568][T20146] ? refcount_warn_saturate+0xf9/0x1d0 [ 718.296306][T20146] ref_tracker_free+0x6af/0x7e0 [ 718.301356][T20146] ? __pfx_ref_tracker_free+0x10/0x10 [ 718.306746][T20146] ? ax25_destroy_socket+0x551/0x5c0 [ 718.312139][T20146] ax25_release+0x368/0x960 [ 718.316676][T20146] sock_close+0xbc/0x240 [ 718.320951][T20146] ? __pfx_sock_close+0x10/0x10 [ 718.325820][T20146] __fput+0x3e9/0x9f0 [ 718.329853][T20146] task_work_run+0x24f/0x310 [ 718.334474][T20146] ? _raw_spin_unlock+0x28/0x50 [ 718.339354][T20146] ? __pfx_task_work_run+0x10/0x10 [ 718.344494][T20146] ? syscall_exit_to_user_mode+0xa3/0x340 [ 718.350321][T20146] syscall_exit_to_user_mode+0x13f/0x340 [ 718.355982][T20146] do_syscall_64+0x100/0x230 [ 718.360716][T20146] ? clear_bhb_loop+0x35/0x90 [ 718.365443][T20146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.371414][T20146] RIP: 0033:0x7f5233d8d169 [ 718.375870][T20146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.395764][T20146] RSP: 002b:00007fffa7627cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 718.404204][T20146] RAX: 0000000000000000 RBX: 00007f5233fa7ba0 RCX: 00007f5233d8d169 [ 718.412199][T20146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 718.420202][T20146] RBP: 00007f5233fa7ba0 R08: 0000000000000284 R09: 0000001ba7627fcf [ 718.428315][T20146] R10: 00007f5233fa7ac0 R11: 0000000000000246 R12: 00000000000af2a0 [ 718.436412][T20146] R13: 00007f5233fa5fa0 R14: ffffffffffffffff R15: 00007fffa7627df0 [ 718.444531][T20146] [ 718.447882][T20146] Kernel Offset: disabled [ 718.452378][T20146] Rebooting in 86400 seconds..