last executing test programs: 4.302650756s ago: executing program 0 (id=4550): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x800) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x3, 0x0, [0x7fffffffffffffff, 0xfffffffffffffbff, 0x1, 0x8, 0x8], [0x3ff, 0x4, 0x8000000000000001, 0xea, 0x7c8000000, 0x5, 0x3, 0x8, 0x6, 0x6, 0xd, 0xfffffffff0eb858d, 0x8000, 0x1, 0x87a, 0xf8, 0x18, 0x5, 0x1, 0xc, 0x4, 0x410, 0x7, 0x78, 0x6, 0xffffffffffff8b90, 0x3, 0x5, 0x1, 0x401, 0xe3b, 0x6, 0x400000000, 0x2, 0xf, 0x8, 0x8, 0x6, 0x3, 0x4860000000000000, 0x80000000, 0x0, 0x0, 0x2, 0x81, 0x2, 0x201, 0x1000, 0x7fffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x101, 0x5, 0x7, 0x9, 0x5, 0xc2f, 0x6, 0x5, 0x77, 0x3, 0x2, 0x4, 0x100000001, 0x8, 0x7, 0x100000001, 0xfffffffffffffff9, 0x800000000, 0x0, 0x6, 0x3ff, 0x1, 0x0, 0x9, 0x1, 0x1, 0x4b2, 0x9, 0x3, 0x0, 0x401, 0x81, 0x3, 0x5, 0xf, 0x5, 0xc, 0x61, 0x7, 0xb, 0xc, 0x800, 0xfffffffffffffffc, 0x13, 0x9, 0xfffffffffffffffc, 0x7, 0x9, 0x180000000, 0xd, 0xd6, 0x100, 0x2, 0x9, 0xe, 0x2, 0x0, 0x9, 0x6, 0x7, 0x23b2, 0x3, 0x5, 0x6, 0x6, 0x7, 0x4, 0xe3, 0x6]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000004c0)={{r1}, {@val={r2}, @max}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004005) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001900)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)='%pI4 \x00'}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001a40)={r1, 0x0, 0x99, 0xffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x29, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x6f}, @printk={@d}, @alu={0x7, 0x0, 0xb, 0x2, 0x6, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000008c0)='GPL\x00', 0xb53368a6, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x12, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x0, 0xa, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001a80)=[0xffffffffffffffff, r9, r10], &(0x7f0000001ac0)=[{0x4, 0x5, 0x5, 0xb}], 0x10, 0x1ff}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001c00)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)=@newtclass={0x44, 0x28, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x19, 0x2}, {0x0, 0x7}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x4c, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x7d}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r12, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, r13, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8804) (async) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001ec0)=@generic={&(0x7f0000001e80)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r14, 0x0, 0x2d, 0xbd, &(0x7f0000001f00)="10ae90c2bc593ff5a265b068bb477b776776bcb97ed5e523ab127d9a29cab45ba9ee367e74778f226b044c5c7d", &(0x7f0000001f40)=""/189, 0xfffffff4, 0x0, 0xd5, 0xb8, &(0x7f0000002000)="8303b6fd1b89a185767b35b45b9cacd2881c8302d135f37028083c8050ac1144e002fbbf268d1d5ccdb71446395107384fd6ac9c4c0e1dcee1d89b54a7a8a500193ab3c7cc6e18be278384c36440d00649dfed349f5346b06498f749bb8ed27d8482ca0a23eb1e1ff0cffd59ba7013d6167cdaee8d45b36b4b28949b6d72a6b3b586edf4cdcd59af2966f7fed48c9e78965726533e76a1c54370593194214ee1e2325e93bcc6be5961ee84af804895227c7a2852e59c3073643de7203157c7960451580619fcf5fa9f51e070ba4aa2ccdbbed85188", &(0x7f0000002100)="b9683c156ca904e460c68c88c137cb8ceb718b558d1f4bb3145c258f6dc57e5b9f58463622dc5942e48839f781036653f0917e61d6d3a0958c3e8a61e7e675846bf401a8176d9c66e96a5a5f2334a86d7b1f0802f6c298fed91348a98ec08b7e55b5eb42ce2ae81bc8c0b73b605d68bfc8c1b9e5c9ca0ef4472a90d42154ba5ba735117421ed79ba174ff2c7d2d1f07a42d2c6374751b48bf883c44f0ac731478f2b1885af52d63ca6406237c15038ab1d520404e50401de", 0x1, 0x0, 0xbb}, 0x50) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000022c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, r15, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x4e, 0x4a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002500)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x64, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4044800}, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000005340)=[{{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002640)=""/165, 0xa5}, {&(0x7f0000002700)=""/89, 0x59}, {&(0x7f0000002780)=""/211, 0xd3}, {&(0x7f0000002880)=""/173, 0xad}], 0x4}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002a00)=""/176, 0xb0}, {&(0x7f0000002ac0)=""/131, 0x83}, {&(0x7f0000002b80)=""/234, 0xea}, {&(0x7f0000002c80)=""/51, 0x33}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/162, 0xa2}, {&(0x7f0000003d80)=""/214, 0xd6}], 0x7}}, {{&(0x7f0000003f00)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004040)=""/194, 0xc2}, {&(0x7f0000004140)=""/78, 0x4e}], 0x3}}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1, &(0x7f0000005240)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x4, 0x40000002, &(0x7f0000005440)={0x0, 0x989680}) ioctl$sock_SIOCSPGRP(r18, 0x8902, &(0x7f0000005480)=r17) (async) syz_genetlink_get_family_id$smc(&(0x7f00000054c0), 0xffffffffffffffff) readv(r10, &(0x7f0000005780)=[{&(0x7f0000005500)=""/47, 0x2f}, {&(0x7f0000005540)=""/111, 0x6f}, {&(0x7f00000055c0)=""/235, 0xeb}, {&(0x7f00000056c0)=""/140, 0x8c}], 0x4) 4.295973503s ago: executing program 4 (id=4551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="54ae1f82387f8ae18d9f19560625", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8000}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x4, 0x1, 0xb1052909a280e7a3, 0x5, 0x4, 0x0, 0xfffffffffffffff0}, @generic={0x2, 0x1, 0x1, 0x5, 0x5}, @jmp={0x5, 0x1, 0x5, 0xa, 0x6, 0xc, 0x8}], &(0x7f0000000180)='syzkaller\x00', 0xd, 0x10, &(0x7f0000000240)=""/16, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x7, 0xd}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0x9, 0x9}, {0x1, 0x3, 0x9, 0xb}, {0x3, 0x3, 0x1, 0xc}, {0x3, 0x4, 0x3, 0x6}, {0x1, 0x4, 0x8, 0x9}], 0x10, 0x6}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x186, 0x186, 0x7, [@typedef={0x3}, @enum64={0x7, 0x4, 0x0, 0x13, 0x0, 0x3, [{0x9, 0x8, 0x30}, {0x7, 0x0, 0x80000001}, {0xa, 0x367, 0x7}, {0xf, 0x7, 0x80}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x2}}, @datasec={0x9, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x5, 0x70c734ab}, {0x1, 0x7fffffff, 0x6}, {0x4}, {0x3, 0x7, 0x400}], "213506"}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x1, 0xffff0001, 0x3}, {0x1, 0x8, 0x4}, {0x4, 0xfff, 0x6}], "a36a"}, @datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x7, 0xacb2}], 'd'}, @union={0x8, 0x9, 0x0, 0x5, 0x0, 0x8, [{0xa, 0x0, 0x1000}, {0x2, 0x4, 0x7f}, {0x2, 0x5, 0x2}, {0x4, 0x5, 0x20}, {0x5, 0x3, 0x4}, {0x2, 0x5, 0x5}, {0x7, 0x4, 0x2}, {0xf, 0x3}, {0xf, 0x4, 0x1427b18c}]}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000001ac0)=""/212, 0x1a7, 0xd4, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r4, 0x3, 0x5, 0x4}, 0x50) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x5, 0x0, @void}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e00)=@generic={&(0x7f0000001dc0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0x10, &(0x7f0000001c80)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, @ldst={0x3, 0x0, 0x3, 0xb, 0x7, 0x18, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func, @jmp={0x5, 0x0, 0x2, 0x5, 0x5, 0x100, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000001d00)='GPL\x00', 0xce2, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001d40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x3, 0xa, 0x7c, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001e40)=[0xffffffffffffffff, r9, r7], &(0x7f0000001e80)=[{0x5, 0x2, 0x9, 0x3}, {0x0, 0x3, 0x9, 0x6}, {0x0, 0x5, 0xa, 0x2}, {0x1, 0x1, 0x9, 0x8}], 0x10, 0x4}, 0x94) close(r8) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r5, 0x0, 0x1000, 0xc6, &(0x7f0000000680)="70c0e7d20a58fe2e70a51ec56218a42f416f5f13024323a6a4eb2261676db9671ed503ea6b2c79b8bfd2d1295207240fc85fd4a02945b3114f8a730baa448d316f2759e3648278b02f70087ca9756dca0c894bd6791c46fe27b56750b27cb2e92a4c6bf57ab5c2d39da49f8c72f8f8c1f44c6a23dd6f7039cfd0c82a2e08ae3f4e2463a96b345a610e069b42ce9c6600d3f686b25564423115358f40f896a17a2b2a49ae123d8db2cf06981c9e4deae899431885ad952a461d86c4d221f88dc020d8e6df3c7552e4d48a479b31d293439e449c4f9acdc7c2924d42ec19e93f338ac3277815463d425ed9531c393e0f751c80866b3b5c5e0bda1d6516b52d84e8589507f040523559a7efbe64b75f222314ac55a13b132131546699d06cc154f4bd8664ca8959d9f7cd7a294a96f4124df56d50426b558db46af72681d0b824e88c4f22cdcbc314c31755d4160b3454450b648a36e16dbee7770e3cee92cac54befa9bab7971dd0f197573013177f7749a4655bc04636d344378f020f7ba4d416686fe7bcd55225f9a3144b3d5ccc0ef07fd8d250770c096e698c332a1bdf61c98f0c7fdf14dfdaf23a8a5392068dcfe6a464091d01971ac663eb338497ac83a878205135c457551d3a9b2f28fc15d1b6b2fd4a9c526b37061ccd6c36d900f111f0e8ac7f3481de7fb9c4328e5adaf707114e8bbce802cd3ca4b435378462e4bb2539edeb8e84bdcf6046f3444f0f0814f0b7c9017737b711c09e6dd940825453a889d25afaf0227356ed42d7c69ab23d2e75b13531e58f1c702bd634923b6e7300b6b78ad45f6d0e4e5f794b5b4b8d7d26a284e0a55dd2ef32da8dd4631e0cc506f236948fdf9b2e8d95d39e0636fa07bb4fbcbdfbbbc475ddbab89880d1e6951ea74fc7edc0ee921608b955169fb39d753d0f110288647583171ff682eafd7e18d8bc37d3efbc38df7108dd9f89a96d52dae2f8fc5bdd01a7a2da060eb977fa330f5a84d2c46ab76b0277a57c8f6e78f5e2442ea5359025ee03c65e30aa5420db16a7b6d1accd450db70f3bd24000c507779a01e377b3f4b448042a25fc5423325bfd9efa76b49d423dd1d3846f4a7efe3ebe9a81b8cbda562419143ddcd029edd7960677ca1c8b9b07399eabd3c6f29845d96c27c2b2b4c199da5cc105ce3d0156eec77b6f28edf5c4480f73a2b18af48722f2e7326b472cb4752e79e034e5122d92c533dbb779dff13e4534864121715b9472a7b111ef952666405f5b2bb78d1f194516d5b292ef06044f8c931edb036fe9ba1c7b74598a3d8a890e3b873fec970adbd5174c7bcb572d2b2ad62f09e2a30e9da492d633461b609ba865d499170d927a16cc4d7458d8b5f28586021b5f8fd0a1bba508a2466d11f24951a6d6e7dd9f1981ca2e34393a40232a3f9bd3f8ae671fc3da1b36d140e12b1a340990d28656afe1bd69ee7e08da0bb8f4e3f8883c78fe35143c188875c1687f0818c29e507383f2d6d60676854c15290e9383273874e972aed13859083e139f9de5b6da45c50ded05416b79f3273536b90de08b8d12d6c949abcda22afbcd72575dd7c4e172b176a501cb8e1ff9c53e81f5259ddc2f0afdeaec77184cca7fc888daeaaa43b68f62ca2467ddd7fd2cda1298592c3e554b2ba5f123bec53a968bfa071f92bafabe198989c3b80388e6d59bb8ade27078b039a7067e56592c9049379c35fc19379d7d3fc063c91aba66d2a26c8fe8d3ca8d35db422a2f117036c36c1c21c2ae56bd61a9371fabffc32891fdee1b14f7efa1a2e53fb14b5930c20d27bdb4acb4e53a0e7f13faa8da1e81b4c3a15c6bb57f520bbebf1190590fe9c42fef1707e2c04bc2a0cba71bff1b3df8ee810da5e37f18b883fbc4093ce37dc07e2e6f99ceef459640f3deef68431153a063ec2d7547a885a1f9f5b47d1e4d328bdc403b882b0d4c7ee6ee0a74fe803cbcd55c15827cf46a428057f0a73436a10fabe2fd34e3a6d51976887f51ea76538e7a723084b0dd51147ee601b833be32a94f9aaf1a06d0ba5393e7e706d5ae383c85fba6b5ade1f085d1b5782e3201c60a81cbdb7536ab8bf021e56f959e60178b580e91918bdf4e8e2f568a2f5a1ac2fd59faaf0219e062e86d32303360fccae1471f90ac697238d502c25d3689d263193ddab31ed3c4b9ee610a0979845b993c31a057ba528acce5b35a160875c6e6885db969fe30961f583318e9464b946fc74b4ea6d8837bf0cb4312152df2658f9ec468ea44fd01e3e7b835fe4a5f0dbd5c52271d00edb220b177c51ed1935e455d30357384242866ee8f78fe8f89d7411684647cb487612189966e64cbdc7e88547f74ad88066fcb4048f6dd3dbd5d443593d21a711d5655a651cf90bd658914384555b8f5929ee39380f7da29ee6a784089db27c2f0cf1a66213612e3d34706961349dd19662487f2505fd571f37183bb2f1ea80a7f3395786739323a1566e8f17603514720eea973f60d2e875c352c5a578539044d4486540b2bf76bcaebf7d100dada8a6a83fcc299bbc5e51c5e6e1cc7204b2bce0c6cbf6db863350acd9236712db98f58d0ca8d497d75d06f47685318458c348b657162826229597c0e018be80dfdfc95e52528ebee12d95583637dbad960dae69fe62399048e2f0c6c357b10fedc033bfc3233ac1f9f3c524821e7ba9ceaf3d62fe626ff1fd10d784e07302d8b473cff4a02ed31b26e7f09d46c096224582da1bff2c7045133c0ba7ddc73a42da109b7b39648844138d4ceb829772573cbff9e173fdc893475f87620f55480c56453cf3d4e00542baa10631004dcf328cc5a0dd066074a400709a795802f9d2d528cb0544c0c00e68b1cb069f56364a68702247202285af7c561468edf7cf5069f3fd507981a3bf332cd1903277dcda68f876c5b08ce7711e9f7e7e268efe8a29581d65afc8da5dd4e02952159ea4402be456ea75ffae4d3accfea3145c14dc747a615ee4edf94b296895546f048ab78b9676fcebb27eb48249babb99da0576df7339e9f8e482ea27d128aa6a9661b67b92f8e08e2e68ec228150339d07ea0249a1b89f6871a3ee8651ca2e815527fd364cbb7f01645ff47df60e5987331724d69552e85a6aafc029b92ce78d92e9ac22d8fbcd7640e0ea313cc3214165aad98f7ef270405ce5487c4ffcfb73679b8fc7aebb4f1c7e46fb9f7868eeb648350a1b1d3c9d910aefd277ec567ebca1301b89f6fe305fa9edb91a4f0a6c5a23ab81c9b19a0070583203421b3ccbecf68571cc9900fef6eb9504dd605141f9a3bc7abc0f5acf34e592e4d82dc696b9d980e91ad14b46cd263c7d71863697e13cfed964adf33181b5607125b0905168c9c4787cc95eb9b435a0b8c1d60754d18f122860323ea6c9054e2b02e41fa19d665c1a399c63f0a5ffc0091d887e01ddc1a94d5f612ff58962c630392985c6b8ce8c42d582680fb580a7c6841e22ba373fe5f7dd0f9b0dc180134122035e448162d0ad2274ff415a83fae8a32a8ff03f3ea2c77c6698bee0b102dade0661454fbd0f6988bce1f0e2a04ee25953c4dd7e8640500387935b6def897de39005bfbf5c6a8a9ce5392bba014ff30e83942435f6f40a2c25623794e7edf146573a9d03cc7ae831b3930dfe48eb7962c97d4c1134f2ebb6f98ce5df0c2e5fa5e391519fb8e639405cdc612fa989a36562a71e99a3bc6611d5e690178d34a52f4c9cd5ee1777575986e513641754ecc74a297e49281a3e6c6a19d84b67e4d3d5937649ccae598b20e6f7ef33a0866cba815236309be07562470203b9805d94e946ea83908211d531a65b95f527aff10d37ccaa12ddab00cd36d15cfdbecbc12f297291bec1f7719e440c86b04044a59adccee82e96d9a0105c5ef835dd6e22b9dbd4ea86a0f51e5a654726dd499d256c2e39fe5d29cf491b315c5a72869ed544237256229683769cbf0694bfcde3f763f1e99cf2c671411fefdd839669d179bc3b6b11c71fa326e327e2e87885c22f3e09787c02be95fa573433e35ae39157c95fc4f0a3bcc4ba8a724899542607cdc81ec257a9c4c2f1567cea7d6c0f7c018fbbe163cfd9bf465d10064639f5464ee439b8e6f999994118e397656b962a96f804061664dea9e6c77d6910b3e06cc23436e56fed7919158a7ba62cc4c6956e9a81181c1fb1750b56ad9dcf29f5fddf2b2fdecbb08f6b767334d7ed5b5598c5b19d893573e74617ca1bf095829e678da7367e5420d0fa57a3ccfac59c0e7b4789aa8e6c5e7aa1033c745d04e7f5e68bbb37dda2bc3ffe448f7a6ad089a379c65ef1f4f2ccd97c94db734101db1a4d22f366ddb986189e508637bcd824d30f060ab2367affc373a3b61f312817914274a43c2b9a4079e71f8d8bd6c3998b50a0259f4eb82902281eb749251693a9c5fabb8e3d3376e41cc8422ddda688ed93eb5dddde81a4145f5fe68fa8a47ebc028a9513e0175ab3e3eb6bcf47ab2e27f69c961ed6cca37471daf4bbf195ae571f8d606540274b67ca60e05453382ce23012a5c5987528c3b2596266ecc5c65e69fad131afb1bfdc2796d13d4db55c5e9b2d2bb7f5bce337e6b4fd68484bf4b032600fdb1bd25d9e15b281d3e43bfd77723d211d704af28a5c1b3eabbc2e76227b35d8ebe0bef84ef0135a3e881695359adfc2a5cb6e24ce152ffadb1050082994870e1b9c17c067da39dbbcc03eb0a6eb7c4c66089c8b8d8a2ca482be7d286978a9d2c9aa6501d9738400150766f575c40c407926b24b35883184d4a2b41d36b0ccde5f8d9be1f85b33500393a79d228f0a1e3de46fda0a6aa97758b29d746cd4f7dd377ad14825556f3fb4034f0e4035beb5f025b736fddac7034ea7b020f04724961e8ad97b497ec91f389f5c793faed8ed3555f3d4002254d328fdb75e24a00831782d3249ebc508d65cd448c5426fe9a6b2956f8b7f1274a6e77377aaa2ad8f66d49eff468c790fa894cdb3d21f472a6415f180b10774dd3feaf4a81c6a39b664068d5dc41b9fd696d4c880e51b8105b6e0f7f0707d4a46c0f80da20c8314b5ffa1718bfd90348864d2b87ba590ff561487411fff167fa455cc4252dd183492a2caba296d75d53df99f585a8ba3b0f2446125f8dfb2ecb0085d29ff5cdc018f341e2be2e2398a17bbffa52c57970d0fbec3424a756e8d36b691157eb1ea457270fbe77a78686ae0e13430e7608362efba13b27a94bbd91b8e70dc1ad040c4d9fae19a76211e1d6852ea12414b81906cb3e4d6b3eba3682612344f23063f3a5a672a78dcd7f0d87472a0df7694e20ffdd61ff9c156994bab888ef15304c7ccf50d86d9f0236f6a7e33ee92a1afa13f439e3da14263b8577dbb9a2a7c0ae1acb78fb43d3ce87b6855319313118a4c8cef8bfc8ba6218674f24d739a9eef5f06524756a2a7dc98041b740ead6a00a7b0306df56e54b3d44531e0ad1ebd2bd8010f313069aeae04c8f17849f84fca4f5555a01305bca3c99103d9a5bdce7cf6d989ee35102e37dfc646fe8073bf34e7bbc424ff8c50a0f76974e2dc4fad55fc1e0b1b5adb12b25fa868e386cfc615ad5691e8798872f802950f739fb16950d92d45a95478b454184fd92085d7d190a45d15531193d5bba95fa23cf5ae2f87fc5e7ecc4170c8ac36d6b829b5ebec55854948884b8a42d7429a4fdd353e43d379e9ed3550e141f6bbf88b6f9bce0fa33a8682f5333e00fdfe366dccebaeb391e6d5c55229072c8bd28166a64ae693bbb9ba99ece5a8114d1ac04b8e2f4a61463a54ce57a93ec591e68f4b5", &(0x7f0000000500)=""/198, 0x972c, 0x0, 0xf0, 0xc5, &(0x7f0000001680)="cab02e776580cae271714fce4a4d13cd3edc6be60e0cc7302751522b11aa622e208dc7cf214ba03f5c96c3d70d9c833a027e8a236a2d9fdfc907ad62580ab7216873f0c32704249adab75a68b79e0e58fce57ab47f54e555232926c6ada2921f3fe3525d9acee5a30095ca2a2f5e8cd308eaecbea3d0d01db71a6df5d587730c858364a7524bd922381237ef4761f45b11b91e221f5b684fc1d321e9bf627396d8d494f24add69af7ba347fb602bb42337b840e1caed74659a3f0e7cb85fdcfc776fc4bb6ae50681471648fa95f2f0b668957df3cea45325399ba38ece2cff3f8a3aaf57decd2e61411b455b28002158", &(0x7f0000001780)="d95ef5346382aee516a955eed9217ca4074c137be444643eedce99d816d4099958916094be1c544b63f586d38aa8f87f12a7bd2792a9229526fa9961e88139bff9e7c6146f371c5e7e392504d35edab734115f1e05043f72d8e0228bf9d9a85ec664327f27a0ba0d40b3f4e2627707b665873dd5f5483630c0b18def2237c483d75a3fc43afe02c625f56bf89d10a345c9a6723d69bc9a6c70d95283d87c6e8aa09aa1c69665880bfcfa57d78baa3e7d19f87f1c49017781d214e45cfa2411419054a4b3d3", 0x0, 0x0, 0x9}, 0x50) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000480)=0xc74123807cdba392) 4.244343368s ago: executing program 0 (id=4552): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, '\x00', {0x4}, 0x508}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, '\x00', {0x4}, 0x508}) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) 3.818282218s ago: executing program 0 (id=4557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, 0xffffffffffffffff, &(0x7f00000003c0)=0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000007000000000000000100000041000000", @ANYRES32, @ANYBLOB="00b251c900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000020000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) bind$packet(r9, &(0x7f0000000380)={0x11, 0x8, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e20, @local}], 0x20) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.929304908s ago: executing program 0 (id=4561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0xd}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x81}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 2.630233907s ago: executing program 0 (id=4564): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001c80)="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", 0x382}, {0x0}], 0x2}}], 0x2, 0x8014) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x14, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r12) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000129bd7000fedbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="10000000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4040000) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r11], 0x4) 1.64522577s ago: executing program 0 (id=4569): close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6a2fcc52a15b6426a085c270a38df90770f601f9cada584f8e5ac3d67a32e8a17662ab0c94db0f6a72e14e56c59ff7ee528aea1d4de5cdcc77112c78c1440005ceb0af8f439a2364ab604970e228ae5e49661718668a347b8aec2f9e91a6721bdbf687e89c74677449defdad0ad8fb8c6835a988838ad64d027a0f4e21a5cdd712896b", @ANYRES16=r1, @ANYBLOB="01032abd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000250009012cbd7000f9ffffff02000000080003004700000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x400, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x881}, 0x20008002) 1.44226039s ago: executing program 2 (id=4572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) (async) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 32) recvmsg(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@ax25={{0x3, @bcast}, [@rose, @rose, @default, @default, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/160, 0xa0}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000100)}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/76, 0x4c}], 0x8, &(0x7f0000000140)=""/15, 0xf}, 0x2000) 1.427105786s ago: executing program 3 (id=4573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000023c0), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000e40)={{0xffffffffffffffff, &(0x7f00000009c0)='%+9llu \x00', 0x2, &(0x7f0000000a00)={@align=0x6, {0xa, 0xf80, 0x0, 0x5}}, 0x0, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000dc0)=0xffff5d79}, {[0x4, 0x3, 0x0, 0x7]}, 0x2, 0x14, &(0x7f0000000e00)=""/20}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0xa, 0x5, 0x102, 0x7, 0x0, 0x1}, 0x50) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f0000000040)={{0x3, @null, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) (async) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) recvmmsg$unix(r5, &(0x7f0000000c80)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000000)=""/10, 0xa}], 0x2, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000780)=""/154, 0x9a}], 0x3, &(0x7f0000000840)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000940)=""/34, 0x22}], 0x2, &(0x7f00000009c0)}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/221, 0xdd}], 0x1, &(0x7f0000000c40)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x60, &(0x7f0000000d80)={0x77359400}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r10, 0x1, 0x71bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4, 0x1, 0x2}}}}, 0x30}}, 0xc044084) (async) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x1c, r10, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) (async, rerun: 64) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x4c, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) 1.301290359s ago: executing program 2 (id=4574): sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) socket$key(0xf, 0x3, 0x2) (async) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x1000) close(r0) 1.222187143s ago: executing program 1 (id=4575): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$key(r0, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="02054f000d000000000000000000000000001a00fce8ff000000000000000000000000010a01010300000000000000000000000014000000010014005c00000004cf3ef21f0000000a004e2400000006fc010000000000000000000000000000feffffff000000000000070033a000"/128, @ANYRESDEC=r1], 0x68}, 0x1, 0x7}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES8=r1], 0xd8}], 0x1, 0x0, 0x0, 0x20000084}, 0x300) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x20, 0x30, 0x4}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x3}}, 0xe8) sendmmsg$inet6(r2, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r3, @ANYRES8=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r5, &(0x7f0000000100), 0xa, 0x0, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000f80), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r6}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r7, &(0x7f0000000fc0)=0x2, 0x12) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a00280007800c000180080001400a0101020c00148008000140ac1414100c000280080001800040ffff00"/80], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)) 1.195721162s ago: executing program 2 (id=4576): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x5, 0xcc, 0x1, 0x4, 0x1}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3501, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000200)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff, 0xff], [0xffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'wlan0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0xf, 0x2, 0x3, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10b840, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000240), 0x4) 1.190330592s ago: executing program 3 (id=4577): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f", 0x10}], 0x1}}], 0x1, 0x2090) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8042) (async) syz_emit_ethernet(0xbe, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaea0180c20000000800450000b00000000000119078000003000000020000000000000090780100000001000000717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe38dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c667241716bfb541ae96fd6321aabb617c72097b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd3c287cd8bdc5cb100705e0032bb769f2581b5b6ae81bd7bad00000000004099ec2548873f7b0cdc4326af7a60561414d5dff2c1fcde19b01766c8b7a12b9afe47253a0d1cba2939f1df1705b57082d4fea01b99d3fb0d9eb9"], 0x0) 1.062153993s ago: executing program 4 (id=4578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x8070bd28, 0x25dfdbfc, {0x7, r3}, ["", ""]}, 0x18}}, 0x440080c4) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f00000000c0)={'ipvlan0\x00'}) 1.019426403s ago: executing program 1 (id=4579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYRES32=r4], 0x104}}, 0x0) 1.001102487s ago: executing program 3 (id=4580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xe, 0x9, 0x6361, 0x1, 0xfffffffd}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xb029e4e9ccf284d6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 910.862187ms ago: executing program 2 (id=4581): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1c, 0x0, 0x80, 0x2, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000085}, 0x40) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) (async, rerun: 64) write(r1, 0x0, 0x0) (rerun: 64) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f000025e000/0x4000)=nil, 0x4000, 0x2, 0x4020031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = socket(0x15, 0x5, 0x0) (rerun: 64) getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) 876.83417ms ago: executing program 1 (id=4582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001a00010028bd7000fedbdf24818000000000000000000000140002"], 0x30}}, 0x884) r1 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2a, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x4e24, 0x3, 'lblc\x00', 0x30, 0x0, 0x7b}, 0x2c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x1064, 0x12, 0x100, 0x70bd27, 0x25dfdbfb, {0x23, 0x7, 0xac, 0x9, {0x4e21, 0x4e21, [0x8, 0x6, 0x4, 0x793], [0xfd, 0x9, 0x80000000, 0x10000], r2, [0xeb6d, 0x2]}, 0x1, 0xd}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "125b974df2694c64d6f8a64a0b"}]}, 0x1064}, 0x1, 0x0, 0x0, 0x4004014}, 0x4048000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6, r2}, 0xc) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYRESOCT=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) 812.513499ms ago: executing program 4 (id=4583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2d}, @empty, [0xffffffff, 0xff, 0xffffffff, 0xffffffff], [0xff, 0x0, 0xff, 0xff], 'syzkaller1\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x8, 0xc, 0x20}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x1], 0x0, 0x44, 0x2}}, @inet=@rpfilter={{0x28}, {0x18}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @private1, [0xff, 0xff, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'team0\x00', 'veth0\x00', {}, {0xff}, 0xc4, 0x7, 0x4, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 662.238624ms ago: executing program 1 (id=4584): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}}, 0x0) 575.578863ms ago: executing program 3 (id=4585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x38}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x80, 0x800) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) (async) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) (async) listen(r8, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x4c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x1dc, r12, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe090abe014001176}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xaeb89efd7dbb98db}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6b739daf378f99e6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x61d24871022fa861}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x44890}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000970000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@delqdisc={0x120, 0x25, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xa, 0xb}, {0xa, 0xd}, {0xd, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2ad8}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x7, 0xfff8, 0x401, 0x0, 0x8001, 0x9, 0x2}}, {0x8, 0x2, [0x0, 0x9]}}, {{0x1c, 0x1, {0x81, 0x5, 0xffff, 0x8001, 0x1, 0x0, 0xff, 0x2}}, {0x8, 0x2, [0x2000, 0x5]}}, {{0x1c, 0x1, {0x2, 0x1, 0x82, 0x1, 0x1, 0x1, 0xa, 0x8}}, {0x14, 0x2, [0x3, 0xc, 0xe000, 0x9, 0x44, 0x7, 0x81, 0x2]}}, {{0x1c, 0x1, {0x4, 0x28, 0x1, 0x100, 0x2, 0x6, 0xfffffffe, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xd, 0x40, 0xc4f, 0x9, 0x1, 0xf1, 0x8, 0x8}}, {0x14, 0x2, [0x6, 0x3, 0x9, 0x4, 0x4, 0x960e, 0xfffe, 0x6]}}, {{0x1c, 0x1, {0x5, 0x8, 0x4, 0x6, 0x2, 0xfffffffd, 0x8a31, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x4840) (async) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000007440)={0x0, 0x0, &(0x7f0000007400)={&(0x7f00000072c0)=ANY=[@ANYBLOB="14107e00", @ANYRES16=r14, @ANYBLOB="e36127bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x2044854}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206050000000000000000004074c990050004d8000000000900020073797a320000000014000780050015000200000008001240000000000500050002000000050001000600000011000300683a69702c6d617288000000000000007cb154166395bf58cb2b93f5eb9e1979a390a552a7454dca38"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010) 475.669765ms ago: executing program 1 (id=4586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x657}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x404c000) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000300)=""/110, &(0x7f0000000380)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x5d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ef4b3ac8e091d7ad87890f0b44012ac1"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="ea77257de4e3feb7264d27c5cbfb4d42bd99ef4ad0f1585c6cee2da34b93"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}, @NL80211_ATTR_BSSID={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000580)={'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x4, 0x10000, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r8, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x101, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc010}, 0x1) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000007c0)={0xb4f, 0x3, 0x2}) socket$inet6(0xa, 0x4, 0x9) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4004050) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r10, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x91e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000980) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r1, 0x8, 0x7fff, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81, 0x4b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0xc041}, 0x4008005) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000c40)={0x0, 0x7}, &(0x7f0000000c80)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000cc0)={0x0, 0xfff8, 0x200, 0x6, 0x0, 0x6f04, 0x5, 0x5, r12}, 0x20) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_RCVMTU(r13, 0x112, 0xd, &(0x7f0000000e00)=0xd, 0x2) setsockopt$CAIFSO_LINK_SELECT(r9, 0x116, 0x7f, &(0x7f0000000e40)=0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x1404, 0x8, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x4040800) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r14, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8040000) 410.933114ms ago: executing program 4 (id=4587): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x200000}, {0xa, 0x0, 0x0, @local}, 0x0, {[0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xffffff1b, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x98, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x1, 0x5, 0x0, {0x7ff, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x5, 0x2}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x1, 0x4, 0x0, {0x0, 0x6, 0x0, 0x4b, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x83}}, @NL80211_ATTR_HIDDEN_SSID={0x13, 0x7e, @random="2789cd37b85c35e4cbffdb26e059dd"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc1b00400007012bbd700000000000027c00000400c2800c000180060006008035a32d4814921afe29f1e51f3b933a112d2edd7ba36dc0ddd07f3ad4c55cc923eeb01d9969144a56a381a50bf18325e2dcdb1b056d99cfdbc4845b19c803207fbe421b2b11bd72284c982f6e187d7467151c216202380c40e8ba54"], 0x1bbc}, 0x1, 0x0, 0x0, 0x1}, 0x4c815) socket$alg(0x26, 0x5, 0x0) 336.338345ms ago: executing program 2 (id=4588): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040), 0x4) 328.896758ms ago: executing program 3 (id=4589): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000006c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32=r2], 0x1c}}, 0x44004) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r3, 0x8919, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x2, 0x4e21, @loopback}, 0x6d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0xc34}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) 246.735295ms ago: executing program 4 (id=4590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000033000000b4d19cafb0039ea27e467ff04cc73ff9ccc5a74d54f93d1a5aca0de154d39fc5c4e3bb865b2196cef1b2f9097c38088fe2f4f0c3a704537f4d154c549dbf28c92e84007909082fb0c5584f6b6a15a65219345882ee8c0eef2797d2a188f70d6b929cad74e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005d07350081000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000de4a12390000000000000000007ec656269beb10949fbeda7120c07f7465155638a94f9699531c47131bb2c4e28dd4bb98c74684a905d39e37241287d30ca879bf0018c92b11ab628c8987a013e88fcb6a46742d1a19d33e5272d74ba7a93167b36ca80214247b9dd74d7a1d62e277241eaa324ea74ff26464c92afb48fa5490dfe8b0b401ee56b031a0c900"/238], 0xb8}}, 0x2c000010) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000103afffe800000000000000000000000000000000007000000000186009078ff00f802fcffffff000000000000000000000000fe66c85b172ab434dda81fdb7e401644633b79dc555c4a4a74b4103da974dd663a50c1a1771215c960a8e333a1d8b89d829e29b34dcdac21e27f085a9241192b92ffe7eacdf3cbe6b2c2f1419e2712f09862dc8463ebde1cfeeb6fbefcc53b67155fd608439459e92a89544ad760be3e7ae29d8fb4a83df6e7d88ced64d2fa0698b29e10a11338fa6b6abaa150e27ac69bd8ee4f366a55c837"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000002001000000000000000000000000000000000000000000000000000003000000000000007f000001000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff000000000000000000000000000000002001000000000000000000000000000100000000330000000400"], 0x23c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="200000002e000900fefffffffddbdf25020000000c00018008004d00e0000036"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r4, &(0x7f0000000340)=""/131, 0x83, 0x2001, &(0x7f00000000c0)={0x23, 0xb6, 0x3}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000000)={0x8, 'bond_slave_1\x00', {'pimreg0\x00'}, 0xffa4}) 178.728641ms ago: executing program 2 (id=4591): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x1) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000000)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}], 0x20}}], 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x8943, &(0x7f0000000040)={'syzkaller0\x00', @ifru_ivalue=0x7}) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/10, 0xa}], 0x1, 0x402, 0x32c) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000100)) close(r2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, 0x0, 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x35612000) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e23, 0x3, 0x4e22, 0x0, 0x2, 0xa0, 0x20, 0x3a, 0x0, r11}, {0x1, 0x14, 0x2, 0xffff, 0x101, 0x5, 0x101, 0x9}, {0x10001, 0x4, 0x3f2, 0x3}, 0x200, 0x6e6bbb, 0x2, 0x1, 0x2, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3505, 0x4, 0x0, 0x7, 0x2, 0x4, 0x5}}, 0xe8) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) clock_gettime(0x3, &(0x7f0000000000)) 88.929796ms ago: executing program 1 (id=4592): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{0x0, 0x18}, {&(0x7f0000001100)="b35ba3", 0x3}], 0x2}}], 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000011dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000012380)={&(0x7f0000012080)=@generic={0x1e, "3c8d3b4d83b69172b85c60d54a5faa2fdee7af0b69f3ee83d14731ce8d03eccfd7fa67526f73f7445d55147fedac962d6f5d4eacd05ad23808ad770c3078fac37af7ddacd9a7aaee6bc7b134a8f387148861475187fc20355b56d582e97851a29f1d82d195aea4e29f75a7294256a2c0890ceff90596246c07bb3378b1c3"}, 0x80, 0x0}, 0x150) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x4048010) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000240)="4ead23be01bca3162f1db01e17f3ca23dd6ee92eb3210ae35e00c3dc0963d9a4912f0d03c852762afbecb9409883888549ac323f54631cdf9ea6b8776ab0904b59a2efeaa3a9dec4b47c56", &(0x7f0000001380)=""/4096}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{0x0, 0x18}, {&(0x7f0000001100)="b35ba3", 0x3}], 0x2}}], 0x4, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000011dc0)) (async) sendmsg$sock(r3, &(0x7f0000012380)={&(0x7f0000012080)=@generic={0x1e, "3c8d3b4d83b69172b85c60d54a5faa2fdee7af0b69f3ee83d14731ce8d03eccfd7fa67526f73f7445d55147fedac962d6f5d4eacd05ad23808ad770c3078fac37af7ddacd9a7aaee6bc7b134a8f387148861475187fc20355b56d582e97851a29f1d82d195aea4e29f75a7294256a2c0890ceff90596246c07bb3378b1c3"}, 0x80, 0x0}, 0x150) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x4048010) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000240)="4ead23be01bca3162f1db01e17f3ca23dd6ee92eb3210ae35e00c3dc0963d9a4912f0d03c852762afbecb9409883888549ac323f54631cdf9ea6b8776ab0904b59a2efeaa3a9dec4b47c56", &(0x7f0000001380)=""/4096}, 0x20) (async) 42.787147ms ago: executing program 4 (id=4593): socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x11, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xe8, 0x8, 0xfa04, 0xe8, 0x6c02, 0x200, 0x194, 0x194, 0x200, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'virt_wifi0\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0xc, 'syz0\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\t\x00'/20, @ANYBLOB="7b90cdaf5dcfa2053cd546dc5561eaaed18153ca311fb2d7bd2c6d5657e7605522668f0a6430fb096d9ad7d6a026cc1eba84da6f3e1d73a99e59be3280c3c03c8965fd2259cdd0da8cd99c2a45a8b13b4cbd4edfa5f207544c61f3c488312def297223e9f37835958c1c1048f624f8e335552ef1dfaab7fb034c80c8031ca873601d3b41d58aa1f6d83caa6b4951a5b65acc20b646ab2fe9166ba20e76bf022f839a8efbba5e02cd", @ANYBLOB='\x00\x00\x00\x00\x00\x00RU'], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0xc0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x8000, 0x24}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3e, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x3, 0xb, 0x2, 0x6, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ffeaff0001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r8}, 0x38) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r11, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c000380060001000000000008000200020000a5df148d5a0f4db500080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r9) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000340)="a9", &(0x7f00000004c0)=""/43}, 0x20) 0s ago: executing program 3 (id=4594): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c001880"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYRES8], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a200100000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004) kernel console output (not intermixed with test programs): ][T17894] batadv0 speed is unknown, defaulting to 1000 [ 377.148407][T17950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3182'. [ 377.903638][T17894] batadv0 speed is unknown, defaulting to 1000 [ 378.236166][ T77] net_ratelimit: 21 callbacks suppressed [ 378.236186][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 378.311189][T17894] batadv0 speed is unknown, defaulting to 1000 [ 378.347155][T17992] netlink: 'syz.1.3191': attribute type 13 has an invalid length. [ 378.397109][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 378.506129][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 378.561802][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.638838][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 378.754074][T18013] netlink: 'syz.1.3196': attribute type 12 has an invalid length. [ 378.784181][T18013] netlink: 'syz.1.3196': attribute type 5 has an invalid length. [ 378.807834][T18013] netlink: 'syz.1.3196': attribute type 2 has an invalid length. [ 378.825398][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 378.908471][T17894] batadv0 speed is unknown, defaulting to 1000 [ 378.916226][T18027] syzkaller1: entered promiscuous mode [ 378.922529][T18027] syzkaller1: entered allmulticast mode [ 378.958556][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 379.168226][T18037] __nla_validate_parse: 4 callbacks suppressed [ 379.168246][T18037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3200'. [ 381.834882][T17894] batadv0 speed is unknown, defaulting to 1000 [ 382.019882][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 382.136195][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 382.235074][T18058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3209'. [ 382.257438][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 382.331148][T18067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.481963][T18058] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 382.518744][T17894] batadv0 speed is unknown, defaulting to 1000 [ 382.536367][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 382.663614][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3214'. [ 382.826247][T17894] batadv0 speed is unknown, defaulting to 1000 [ 383.066370][T18095] xt_CONNSECMARK: invalid mode: 0 [ 383.251144][ T7144] net_ratelimit: 5 callbacks suppressed [ 383.251163][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 383.376702][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 383.516250][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 383.623060][T18105] tipc: Enabled bearer , priority 0 [ 383.637203][T18105] syzkaller0: entered promiscuous mode [ 383.648130][T18105] syzkaller0: entered allmulticast mode [ 383.687045][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.697900][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.714261][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.746544][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 383.762981][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.781527][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.909027][T18119] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3225'. [ 383.929881][T18107] tipc: Resetting bearer [ 383.962107][T18104] tipc: Resetting bearer [ 383.985019][T18104] tipc: Disabling bearer [ 383.998129][T18111] lo speed is unknown, defaulting to 1000 [ 383.998180][T18123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3227'. [ 384.018799][T18111] wlan1 speed is unknown, defaulting to 1000 [ 384.025302][T18127] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3227'. [ 384.027078][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 384.046666][T18111] wg1 speed is unknown, defaulting to 1000 [ 384.054832][T18111] lo speed is unknown, defaulting to 1000 [ 384.066871][T18111] batadv0 speed is unknown, defaulting to 1000 [ 384.158619][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 384.277464][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 384.322028][T18139] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3233'. [ 384.386297][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 384.407450][T18143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3234'. [ 384.516251][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 384.553801][T18148] netlink: 'syz.2.3234': attribute type 10 has an invalid length. [ 384.566778][T18148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.601421][T18148] team0: Port device bond0 added [ 384.726235][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3239'. [ 384.767711][T18070] udevd[18070]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 384.906108][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 385.153005][T18111] chnl_net:caif_netlink_parms(): no params data found [ 385.224572][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3244'. [ 385.249753][T18175] syzkaller1: entered promiscuous mode [ 385.255268][T18175] syzkaller1: entered allmulticast mode [ 385.494645][T18196] syzkaller0: entered promiscuous mode [ 385.504753][T18196] syzkaller0: entered allmulticast mode [ 385.516969][T18179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3245'. [ 385.529383][T18111] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.540072][T18111] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.550294][T18111] bridge_slave_0: entered allmulticast mode [ 385.560566][T18111] bridge_slave_0: entered promiscuous mode [ 385.580650][T18111] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.588221][T18111] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.601090][T18180] netlink: 211192 bytes leftover after parsing attributes in process `syz.2.3245'. [ 385.601614][T18179] netlink: 211192 bytes leftover after parsing attributes in process `syz.2.3245'. [ 385.633339][T18111] bridge_slave_1: entered allmulticast mode [ 385.660352][T18111] bridge_slave_1: entered promiscuous mode [ 385.808743][T18210] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 385.809387][T18111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.822525][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3249'. [ 385.832259][T18111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.855060][ T5837] Bluetooth: hci4: command tx timeout [ 385.925616][T18208] tipc: Started in network mode [ 385.933557][T18208] tipc: Node identity 5640efa0b0fa, cluster identity 4711 [ 385.952769][T18208] tipc: Enabled bearer , priority 0 [ 385.983647][T18111] team0: Port device team_slave_0 added [ 385.993520][T18213] syzkaller0: entered promiscuous mode [ 385.999274][T18213] syzkaller0: entered allmulticast mode [ 386.009251][T18111] team0: Port device team_slave_1 added [ 386.059822][T18208] tipc: Resetting bearer [ 386.070755][T18207] tipc: Resetting bearer [ 386.100043][T18207] tipc: Disabling bearer [ 386.114553][T18111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.126066][T18111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.154432][T18111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.159883][T18226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3254'. [ 386.211856][T18111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.219841][T18227] netlink: 'syz.4.3255': attribute type 13 has an invalid length. [ 386.227764][T18111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.286507][T18111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.401731][T18229] IPVS: set_ctl: invalid protocol: 61 172.30.0.2:20001 [ 386.412179][T18229] netlink: 'syz.1.3256': attribute type 28 has an invalid length. [ 386.446563][T18229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3256'. [ 386.467197][T18229] bond0: ARP target 170.170.170.170 is already present [ 386.481996][T18229] bond0: option arp_ip_target: invalid value (2863311530) [ 386.498110][T18227] syzkaller0: entered promiscuous mode [ 386.503618][T18227] syzkaller0: entered allmulticast mode [ 386.563652][T18111] hsr_slave_0: entered promiscuous mode [ 386.571528][T18111] hsr_slave_1: entered promiscuous mode [ 386.587049][T18111] debugfs: 'hsr0' already exists in 'hsr' [ 386.596436][T18111] Cannot create hsr debugfs directory [ 386.724413][T18242] netlink: 'syz.1.3258': attribute type 4 has an invalid length. [ 386.734915][T18241] netlink: 'syz.1.3258': attribute type 4 has an invalid length. [ 386.903650][T18111] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.025526][T18111] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.102333][T18111] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.157016][T18258] syzkaller0: entered promiscuous mode [ 387.162507][T18258] syzkaller0: entered allmulticast mode [ 387.208150][T18111] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.335926][T18262] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.367586][T18258] tipc: Enabled bearer , priority 0 [ 387.386641][T18266] tipc: Resetting bearer [ 387.428940][T18266] tipc: Disabling bearer [ 387.538332][T18262] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.574654][T18271] tipc: Enabled bearer , priority 0 [ 387.588975][T18271] syzkaller0: entered promiscuous mode [ 387.602583][T18271] syzkaller0: entered allmulticast mode [ 387.638533][T18262] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.678987][T18271] tipc: Resetting bearer [ 387.692039][T18269] tipc: Resetting bearer [ 387.711013][T18269] tipc: Disabling bearer [ 387.754354][T18262] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.774644][T18281] lo: Caught tx_queue_len zero misconfig [ 387.793988][T18278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 387.869825][T18111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.896255][T18111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.916121][ T5837] Bluetooth: hci4: command tx timeout [ 387.983379][T18111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.054518][T18111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.120265][ T7134] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.149345][ T7134] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.222178][ T7134] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.271108][ T7134] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.320469][T18310] team_slave_0: entered promiscuous mode [ 388.326621][T18310] team_slave_1: entered promiscuous mode [ 388.332412][T18310] bond_slave_0: entered promiscuous mode [ 388.338417][T18310] bond_slave_1: entered promiscuous mode [ 388.367568][T18310] team0: Device macsec1 is already an upper device of the team interface [ 388.384229][T18310] team_slave_0: left promiscuous mode [ 388.389685][T18310] team_slave_1: left promiscuous mode [ 388.395103][T18310] bond_slave_0: left promiscuous mode [ 388.400543][T18310] bond_slave_1: left promiscuous mode [ 388.415447][T18314] siw: device registration error -23 [ 388.457146][T18319] tipc: Enabled bearer , priority 0 [ 388.467302][ T7144] net_ratelimit: 9 callbacks suppressed [ 388.467318][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 388.497924][T18319] syzkaller0: entered promiscuous mode [ 388.506437][T18319] syzkaller0: entered allmulticast mode [ 388.576929][T18319] tipc: Resetting bearer [ 388.611720][T18318] tipc: Resetting bearer [ 388.668511][T18318] tipc: Disabling bearer [ 388.685842][T18317] Bluetooth: MGMT ver 1.23 [ 388.706436][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 389.996272][ T5837] Bluetooth: hci4: command tx timeout [ 390.269008][T18341] netlink: 'syz.0.3283': attribute type 15 has an invalid length. [ 390.277687][T18341] __nla_validate_parse: 3 callbacks suppressed [ 390.277698][T18341] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3283'. [ 390.302638][T18343] geneve2: entered promiscuous mode [ 390.308259][T18343] geneve2: entered allmulticast mode [ 390.331698][T18111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.346614][ T7148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.366198][ T7148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.391813][ T7148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.431426][ T7148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.455328][T18111] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.558784][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.566048][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.604032][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.611227][ T7148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.714321][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 390.820788][T18368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3292'. [ 390.867738][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 390.976121][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 391.091529][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 391.100207][T18381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3297'. [ 391.130013][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3297'. [ 391.177484][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3297'. [ 391.251533][T18111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.325116][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 391.419946][T18111] veth0_vlan: entered promiscuous mode [ 391.437632][T18111] veth1_vlan: entered promiscuous mode [ 391.447399][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 391.501420][T18111] veth0_macvtap: entered promiscuous mode [ 391.529127][T18111] veth1_macvtap: entered promiscuous mode [ 391.558106][T18111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.581024][T18111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.623252][ T7148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.639895][ T7148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.692081][ T7148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.721832][ T7148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.889649][ T7144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.902578][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 391.926547][ T7144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.037136][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 392.045078][ T7134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.076571][ T5837] Bluetooth: hci4: command tx timeout [ 392.093019][ T7134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.176224][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 392.304057][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 392.336471][T18434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3309'. [ 392.359421][T18436] netlink: 'syz.3.3311': attribute type 11 has an invalid length. [ 392.367785][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3311'. [ 392.377452][T18436] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 392.443719][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3311'. [ 393.142852][T18450] bond1: option arp_interval: invalid value (18446744073709551615) [ 393.151317][T18450] bond1: option arp_interval: allowed values 0 - 2147483647 [ 393.201450][T18450] bond1 (unregistering): Released all slaves [ 393.488374][ T7150] net_ratelimit: 7 callbacks suppressed [ 393.488394][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 393.806247][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 393.966117][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 394.037418][T18485] vxcan3: entered promiscuous mode [ 394.073357][T18492] netlink: 'syz.1.3324': attribute type 1 has an invalid length. [ 394.089131][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 394.116102][T18492] netlink: 'syz.1.3324': attribute type 3 has an invalid length. [ 394.136465][T18492] netlink: 'syz.1.3324': attribute type 1 has an invalid length. [ 394.153529][T18496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.206452][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 394.219633][T18496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.329198][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 394.452536][T18511] pim6reg99999999: entered allmulticast mode [ 394.496975][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 394.631828][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 395.278582][T18562] netlink: 'syz.2.3340': attribute type 11 has an invalid length. [ 395.451521][T18573] __nla_validate_parse: 11 callbacks suppressed [ 395.451540][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'. [ 395.537816][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 395.562062][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 395.565788][T18573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.661365][T18584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3346'. [ 395.701089][T18578] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 395.713993][T18578] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 395.782946][T18585] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 395.800593][T18585] bond2 (unregistering): Released all slaves [ 395.954105][T18610] »»»»»»: renamed from vlan1 [ 396.014966][T18615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3354'. [ 396.042421][T18612] lo speed is unknown, defaulting to 1000 [ 396.065879][T18615] pim6reg99999999: entered allmulticast mode [ 396.115246][T18612] wlan1 speed is unknown, defaulting to 1000 [ 396.171191][T18621] batadv0: entered promiscuous mode [ 396.194868][T18612] wg1 speed is unknown, defaulting to 1000 [ 396.252952][T18612] lo speed is unknown, defaulting to 1000 [ 396.333517][T18634] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3360'. [ 396.379227][T18612] batadv0 speed is unknown, defaulting to 1000 [ 396.458599][T18638] netlink: 'syz.1.3363': attribute type 1 has an invalid length. [ 396.478877][T18639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3362'. [ 396.488439][T18638] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3363'. [ 396.495863][T18643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3365'. [ 396.603313][T18649] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 396.622599][T18653] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 396.896510][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 397.033622][T18676] pim6reg: entered allmulticast mode [ 397.040973][T18676] netlink: 'syz.2.3373': attribute type 3 has an invalid length. [ 397.049651][T18676] netlink: 'syz.2.3373': attribute type 3 has an invalid length. [ 397.138318][T18684] lo speed is unknown, defaulting to 1000 [ 397.146153][T18684] wlan1 speed is unknown, defaulting to 1000 [ 397.174821][T18691] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 397.195136][T18684] wg1 speed is unknown, defaulting to 1000 [ 397.214478][T18684] lo speed is unknown, defaulting to 1000 [ 397.288434][T18684] batadv0 speed is unknown, defaulting to 1000 [ 397.432651][T18701] gre0: entered promiscuous mode [ 397.438090][T18701] gre0: entered allmulticast mode [ 398.529037][T18738] lo speed is unknown, defaulting to 1000 [ 398.540647][T18738] wlan1 speed is unknown, defaulting to 1000 [ 398.560823][T18738] wg1 speed is unknown, defaulting to 1000 [ 398.566240][ T7134] net_ratelimit: 31 callbacks suppressed [ 398.566257][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 398.584997][T18738] lo speed is unknown, defaulting to 1000 [ 398.634539][T18738] batadv0 speed is unknown, defaulting to 1000 [ 398.687000][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 398.796204][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 398.906130][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 399.045733][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 399.219391][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 399.347996][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 399.456720][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 399.586458][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 399.706207][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 399.939519][T18676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.972562][T18673] pim6reg: left allmulticast mode [ 400.463304][T18773] __nla_validate_parse: 2 callbacks suppressed [ 400.463325][T18773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'. [ 400.562999][T18777] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 400.627383][T18777] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 400.704006][T18782] bond0: Caught tx_queue_len zero misconfig [ 400.710249][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'. [ 400.751457][T18773] macvlan2: entered promiscuous mode [ 400.786163][T18773] macvlan2: entered allmulticast mode [ 400.806910][T18773] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 401.082449][T18791] syzkaller1: entered promiscuous mode [ 401.090899][T18791] syzkaller1: entered allmulticast mode [ 401.098589][T18795] syzkaller1: entered allmulticast mode [ 401.115234][T18804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3402'. [ 401.278405][T18809] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3404'. [ 401.304344][T18812] geneve2: entered promiscuous mode [ 401.339714][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 401.405668][T18821] tipc: Failed to remove unknown binding: 66,1,1/0:3672054360/3672054362 [ 401.457373][T18821] tipc: Failed to remove unknown binding: 66,1,1/0:3672054360/3672054362 [ 401.511741][T18821] tipc: Failed to remove unknown binding: 66,1,1/0:3672054360/3672054362 [ 402.215282][T18858] netlink: 'syz.0.3414': attribute type 3 has an invalid length. [ 402.690060][T18894] syzkaller0: entered promiscuous mode [ 402.709944][T18894] syzkaller0: entered allmulticast mode [ 402.944787][T18914] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 402.961430][T18914] syzkaller1: linktype set to 270 [ 403.138443][T18921] syzkaller0: entered promiscuous mode [ 403.143958][T18921] syzkaller0: entered allmulticast mode [ 403.197733][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'. [ 403.222236][T18931] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 403.233269][T18931] bond0: (slave sit0): Error -95 calling set_mac_address [ 403.235218][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 403.250866][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 403.260590][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 403.270005][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 403.479316][T18957] netlink: 'syz.0.3442': attribute type 4 has an invalid length. [ 403.622490][T18940] vetN_macvtap: renamed from veth0_vlan [ 403.640614][ T7148] net_ratelimit: 27 callbacks suppressed [ 403.640627][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 403.800270][T18969] netlink: 'syz.2.3444': attribute type 30 has an invalid length. [ 403.896253][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.016164][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.136093][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.153495][T18994] netlink: 'syz.2.3449': attribute type 15 has an invalid length. [ 404.193220][T18990] xt_CT: No such helper "pptp" [ 404.248637][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.386406][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.510225][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.641333][T19022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.676686][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.851387][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 404.993054][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 405.147472][T19045] netlink: 'syz.1.3461': attribute type 11 has an invalid length. [ 405.284327][ T5485] vetN_macvtap: left promiscuous mode [ 405.333045][ T5485] vetN_macvtap: entered promiscuous mode [ 405.811042][T19076] syzkaller1: entered promiscuous mode [ 405.826134][T19076] syzkaller1: entered allmulticast mode [ 405.923440][T19083] netlink: 'syz.2.3470': attribute type 15 has an invalid length. [ 406.145895][T19093] netlink: 'syz.2.3473': attribute type 1 has an invalid length. [ 406.179964][T19094] lo speed is unknown, defaulting to 1000 [ 406.193594][T19099] __nla_validate_parse: 8 callbacks suppressed [ 406.193612][T19099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3474'. [ 406.249602][T19094] wlan1 speed is unknown, defaulting to 1000 [ 406.253143][T19096] IPVS: length: 24 != 412316858520 [ 406.259263][T19094] wg1 speed is unknown, defaulting to 1000 [ 406.280715][T19093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3473'. [ 406.302336][T19097] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.324247][T19097] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 406.374275][T19094] lo speed is unknown, defaulting to 1000 [ 406.410002][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3476'. [ 406.428326][T19093] bond4: (slave bridge0): Enslaving as an active interface with a down link [ 406.443663][T19110] syzkaller0: entered promiscuous mode [ 406.456137][T19110] syzkaller0: entered allmulticast mode [ 406.559738][T19094] batadv0 speed is unknown, defaulting to 1000 [ 406.751531][T19125] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3475'. [ 406.893117][T19128] macvlan0: entered promiscuous mode [ 406.938990][T19128] batadv0: entered promiscuous mode [ 406.946949][T19128] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 407.016750][T19119] syzkaller0: entered allmulticast mode [ 407.519567][T19157] batadv_slave_0: entered promiscuous mode [ 407.537469][T19157] batman_adv: batadv0: Adding interface: macsec1 [ 407.562574][T19162] xt_HMARK: proto mask must be zero with L3 mode [ 407.567460][T19157] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.593278][T19162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'. [ 407.626481][T19162] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3487'. [ 407.646112][T19157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.676161][T19157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.695116][T19157] batman_adv: batadv0: Interface activated: macsec1 [ 407.756918][T19162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'. [ 408.105284][T19188] netlink: 'syz.1.3495': attribute type 1 has an invalid length. [ 408.161262][T19191] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3494'. [ 408.215688][T19186] sctp: [Deprecated]: syz.3.3494 (pid 19186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.215688][T19186] Use struct sctp_sack_info instead [ 408.285027][T19188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3495'. [ 408.335156][T19192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3495'. [ 408.511046][T19202] block nbd0: reconnected socket [ 408.526835][ T5837] block nbd0: Receive control failed (result -32) [ 408.572819][ T7142] bridge_slave_0: left allmulticast mode [ 408.580788][ T7142] bridge_slave_0: left promiscuous mode [ 408.589028][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.850224][ T7142] bond9 (unregistering): (slave bridge10): Releasing backup interface [ 409.858975][ T7142] bridge10 (unregistering): left promiscuous mode [ 409.910857][ T7142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.921258][ T7142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.931449][ T7142] bond0 (unregistering): (slave bond8): Releasing backup interface [ 409.940172][ T7142] bond0 (unregistering): Released all slaves [ 409.951972][ T7142] bond1 (unregistering): Released all slaves [ 409.964946][ T7142] bond2 (unregistering): Released all slaves [ 409.977363][ T7142] bond3 (unregistering): Released all slaves [ 409.990705][ T7142] bond4 (unregistering): Released all slaves [ 410.012698][ T7142] bond5 (unregistering): Released all slaves [ 410.025725][ T7142] bond6 (unregistering): Released all slaves [ 410.038134][ T7142] bond7 (unregistering): Released all slaves [ 410.051593][ T7142] bond8 (unregistering): Released all slaves [ 410.071493][ T7142] bond9 (unregistering): Released all slaves [ 410.146096][ T13] net_ratelimit: 20 callbacks suppressed [ 410.146115][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 410.281744][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 410.326099][ T7142] : left promiscuous mode [ 410.426647][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 410.456084][ T7142] : left promiscuous mode [ 410.670613][T19242] netem: change failed [ 410.675205][ T7142] tipc: Left network mode [ 410.686422][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 410.838780][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 410.976443][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 411.034000][T19262] netlink: 'syz.1.3516': attribute type 10 has an invalid length. [ 411.045012][T19262] veth1_vlan: entered allmulticast mode [ 411.052285][T19262] veth1_vlan: left promiscuous mode [ 411.080880][T19262] team0: Device veth1_vlan failed to register rx_handler [ 411.134187][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 411.266172][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 411.361123][T19286] __nla_validate_parse: 6 callbacks suppressed [ 411.361140][T19286] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3524'. [ 411.378801][T19286] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3524'. [ 411.393049][T19288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3524'. [ 411.402614][T19288] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3524'. [ 411.407328][T19289] netlink: 'syz.0.3520': attribute type 13 has an invalid length. [ 411.420258][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 411.420519][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3524'. [ 411.451240][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3520'. [ 411.566959][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 411.966822][T19313] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3530'. [ 412.007615][T19313] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3530'. [ 412.246076][T19324] veth0_to_bridge: entered promiscuous mode [ 412.533695][ T7142] hsr_slave_0: left promiscuous mode [ 412.550821][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.590312][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.608892][ T7142] batman_adv: batadv0: Removing interface: dummy0 [ 412.631333][T19335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3534'. [ 412.669057][T19339] netlink: 'syz.3.3535': attribute type 3 has an invalid length. [ 412.853866][ T7142] pim6reg (unregistering): left allmulticast mode [ 413.079158][T19354] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3539'. [ 413.271938][T19323] veth0_to_bridge: left promiscuous mode [ 413.294923][T19325] syzkaller0: entered promiscuous mode [ 413.300784][T19325] syzkaller0: entered allmulticast mode [ 413.469277][T19365] team0 (unregistering): Port device team_slave_0 removed [ 413.493237][T19365] team0 (unregistering): Port device team_slave_1 removed [ 413.534134][T19369] veth0_to_team: entered promiscuous mode [ 413.586677][T19372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.600217][T19370] netlink: 'syz.3.3540': attribute type 1 has an invalid length. [ 413.754983][T19391] team0: Device gtp0 is of different type [ 413.884430][ T7142] IPVS: stop unused estimator thread 0... [ 414.042990][T19413] sch_tbf: burst 240 is lower than device lo mtu (9223) ! [ 414.173127][T19420] wg1: entered promiscuous mode [ 414.191070][T19420] wg1: entered allmulticast mode [ 414.292923][T19426] syz_tun: entered allmulticast mode [ 414.347917][T19425] syz_tun: left allmulticast mode [ 414.537786][T19438] tipc: Enabled bearer , priority 0 [ 414.545541][T19438] syzkaller0: entered promiscuous mode [ 414.552249][T19438] syzkaller0: entered allmulticast mode [ 414.941127][T19433] tipc: Resetting bearer [ 415.007207][T19433] tipc: Disabling bearer [ 415.166127][ T7152] net_ratelimit: 19 callbacks suppressed [ 415.166145][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 415.196968][T19477] netlink: 'syz.1.3570': attribute type 1 has an invalid length. [ 415.392476][T19477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.422355][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 415.548957][T19500] netlink: 'syz.0.3578': attribute type 1 has an invalid length. [ 415.566676][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 415.757289][T19509] bond1 (unregistering): Released all slaves [ 415.831142][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 415.969456][T19530] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.978192][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 416.106276][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 416.127302][T19534] netlink: 'syz.0.3585': attribute type 13 has an invalid length. [ 416.226596][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 416.391894][T19550] __nla_validate_parse: 26 callbacks suppressed [ 416.391912][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.409248][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.422448][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.446050][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 416.476224][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.490835][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.530515][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.551652][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.561650][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.572392][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.587490][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 416.600350][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 416.627081][T19560] tipc: Started in network mode [ 416.633347][T19560] tipc: Node identity e244d932bf42, cluster identity 4711 [ 416.653694][T19560] tipc: Enabled bearer , priority 0 [ 416.673103][T19560] syzkaller0: entered promiscuous mode [ 416.686103][T19560] syzkaller0: entered allmulticast mode [ 416.698193][T19564] bond0: entered promiscuous mode [ 416.703411][T19564] bond_slave_0: entered promiscuous mode [ 416.737134][T19564] bond_slave_1: entered promiscuous mode [ 416.747879][T19567] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 416.788353][T19560] tipc: Resetting bearer [ 416.855180][T19558] tipc: Resetting bearer [ 416.899679][T19558] tipc: Disabling bearer [ 416.962051][T19576] netlink: 'syz.4.3598': attribute type 1 has an invalid length. [ 417.499716][T19616] netlink: 'syz.0.3607': attribute type 10 has an invalid length. [ 417.580768][T19618] lo speed is unknown, defaulting to 1000 [ 417.630138][T19618] wlan1 speed is unknown, defaulting to 1000 [ 417.672808][T19618] wg1 speed is unknown, defaulting to 1000 [ 417.746305][T19618] lo speed is unknown, defaulting to 1000 [ 417.820515][T19618] batadv0 speed is unknown, defaulting to 1000 [ 417.966699][T19642] netlink: 'syz.0.3610': attribute type 1 has an invalid length. [ 418.026168][T19642] netlink: 'syz.0.3610': attribute type 2 has an invalid length. [ 418.723278][T19671] netlink: 'syz.2.3614': attribute type 7 has an invalid length. [ 418.731642][T19671] netlink: 'syz.2.3614': attribute type 8 has an invalid length. [ 419.335719][T19701] lo speed is unknown, defaulting to 1000 [ 419.402026][T19701] wlan1 speed is unknown, defaulting to 1000 [ 419.440618][T19701] wg1 speed is unknown, defaulting to 1000 [ 419.508588][T19701] lo speed is unknown, defaulting to 1000 [ 419.544145][T19701] batadv0 speed is unknown, defaulting to 1000 [ 419.794939][T19733] bond4: option arp_interval: invalid value (18446744073709551615) [ 419.804146][T19733] bond4: option arp_interval: allowed values 0 - 2147483647 [ 419.814358][T19733] bond4 (unregistering): Released all slaves [ 420.192277][T19756] siw: device registration error -23 [ 420.346138][ T7150] net_ratelimit: 28 callbacks suppressed [ 420.346158][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 420.466091][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 420.587415][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 420.716833][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 420.826375][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 420.845679][T19796] Cannot find set identified by id 2 to match [ 420.972314][T19798] bond5: option min_links: invalid value (18446744073709551612) [ 421.006707][T19798] bond5: option min_links: allowed values 0 - 2147483647 [ 421.033285][T19798] bond5 (unregistering): Released all slaves [ 421.117013][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 421.223178][T19819] bond0: option arp_validate: invalid value (55553) [ 421.237570][T19819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.296966][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 421.416448][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 421.437653][T19826] lo speed is unknown, defaulting to 1000 [ 421.447957][T19831] __nla_validate_parse: 23 callbacks suppressed [ 421.447976][T19831] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3655'. [ 421.450336][T19826] wlan1 speed is unknown, defaulting to 1000 [ 421.492377][T19834] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3656'. [ 421.514214][T19831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.546851][T19831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.569043][T19831] bond0 (unregistering): Released all slaves [ 421.585129][T19826] wg1 speed is unknown, defaulting to 1000 [ 421.586297][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 421.602085][T19826] lo speed is unknown, defaulting to 1000 [ 421.617925][T19826] batadv0 speed is unknown, defaulting to 1000 [ 421.862345][T19846] lo speed is unknown, defaulting to 1000 [ 421.903418][T19846] wlan1 speed is unknown, defaulting to 1000 [ 421.938079][T19846] wg1 speed is unknown, defaulting to 1000 [ 421.945555][T19846] lo speed is unknown, defaulting to 1000 [ 422.045282][T19846] batadv0 speed is unknown, defaulting to 1000 [ 422.203491][T19854] batadv_slave_1: entered promiscuous mode [ 422.214373][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 422.228606][T19854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.257856][T19854] batadv_slave_1 (unregistering): left promiscuous mode [ 422.281332][T19854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.428993][T19869] netlink: 'syz.4.3667': attribute type 8 has an invalid length. [ 422.647627][T19876] IPVS: length: 132 != 8 [ 422.726305][T19876] pimreg: entered allmulticast mode [ 422.765157][T19847] pimreg: left allmulticast mode [ 423.157988][T19903] lo speed is unknown, defaulting to 1000 [ 423.168790][T19903] wlan1 speed is unknown, defaulting to 1000 [ 423.310259][T19903] wg1 speed is unknown, defaulting to 1000 [ 423.319339][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 423.334718][T19903] lo speed is unknown, defaulting to 1000 [ 423.341928][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3678'. [ 423.344224][T19903] batadv0 speed is unknown, defaulting to 1000 [ 424.539141][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.561761][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.619015][T19958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.644596][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3692'. [ 424.685372][ T29] audit: type=1800 audit(1771288209.935:13): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3687" name="memory.events" dev="tmpfs" ino=971 res=0 errno=0 [ 424.736188][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3692'. [ 424.885197][T19973] syzkaller1: entered promiscuous mode [ 424.891584][T19973] syzkaller1: entered allmulticast mode [ 424.911774][T19975] ip6_vti0: Caught tx_queue_len zero misconfig [ 424.920790][T19975] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 424.972812][T19972] syzkaller0: entered promiscuous mode [ 424.978680][T19972] syzkaller0: entered allmulticast mode [ 427.045396][T20006] tipc: Enabling of bearer rejected, failed to enable media [ 427.066106][ T7150] net_ratelimit: 21 callbacks suppressed [ 427.066123][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 427.198684][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 427.325744][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 427.374662][T20049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3717'. [ 427.406103][T20049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3717'. [ 427.456986][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 427.466958][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 427.506485][T20054] chnl_net:caif_netlink_parms(): no params data found [ 427.567819][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 427.577349][T20054] chnl_net:caif_netlink_parms(): no params data found [ 427.653299][T20064] tipc: Enabled bearer , priority 14 [ 427.665732][T20064] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3721'. [ 427.676379][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 427.687684][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 427.697557][T20054] chnl_net:caif_netlink_parms(): no params data found [ 427.724630][T20064] 0ªX¹¦À: renamed from caif0 [ 427.742132][T20064] tipc: Disabling bearer [ 427.748237][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 427.776501][T20064] 0ªX¹¦À: entered allmulticast mode [ 427.781733][T20064] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 427.818535][T20054] chnl_net:caif_netlink_parms(): no params data found [ 427.866730][T20068] tipc: Enabled bearer , priority 0 [ 427.877983][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 427.900107][T20067] tipc: Resetting bearer [ 427.907962][T20066] tipc: Disabling bearer [ 427.917012][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 427.928799][T20054] chnl_net:caif_netlink_parms(): no params data found [ 427.943554][T20072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3723'. [ 428.007231][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 428.017763][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 428.025480][T20054] chnl_net:caif_netlink_parms(): no params data found [ 428.109554][T20054] chnl_net:caif_netlink_parms(): no params data found [ 428.172402][T20079] lo speed is unknown, defaulting to 1000 [ 428.181066][T20079] wlan1 speed is unknown, defaulting to 1000 [ 428.186165][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 428.199198][T20054] chnl_net:caif_netlink_parms(): no params data found [ 428.223975][T20079] wg1 speed is unknown, defaulting to 1000 [ 428.232614][T20079] lo speed is unknown, defaulting to 1000 [ 428.241582][T20079] batadv0 speed is unknown, defaulting to 1000 [ 428.267350][T20054] chnl_net:caif_netlink_parms(): no params data found [ 428.316911][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 428.583409][T20104] batadv2: entered promiscuous mode [ 428.597467][T20104] batadv2: entered allmulticast mode [ 428.603983][T20104] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 429.013343][T20114] bond4: entered promiscuous mode [ 429.020719][T20114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 429.052382][T20118] netlink: 'syz.3.3737': attribute type 4 has an invalid length. [ 431.407120][T20095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.571235][T20135] bond0: Caught tx_queue_len zero misconfig [ 431.841984][T20155] siw: device registration error -23 [ 432.146094][ T7142] net_ratelimit: 32 callbacks suppressed [ 432.146113][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 432.266607][T20183] lo speed is unknown, defaulting to 1000 [ 432.272852][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 432.287720][T20183] wlan1 speed is unknown, defaulting to 1000 [ 432.305874][T20180] lo speed is unknown, defaulting to 1000 [ 432.308517][T20183] wg1 speed is unknown, defaulting to 1000 [ 432.320819][T20180] wlan1 speed is unknown, defaulting to 1000 [ 432.338683][T20183] lo speed is unknown, defaulting to 1000 [ 432.505173][T20187] syzkaller0: entered promiscuous mode [ 432.553528][T20187] syzkaller0: entered allmulticast mode [ 432.571677][T20183] batadv0 speed is unknown, defaulting to 1000 [ 432.572725][T20180] wg1 speed is unknown, defaulting to 1000 [ 432.586602][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 432.612971][T20180] lo speed is unknown, defaulting to 1000 [ 432.707030][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 432.836999][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 432.839984][T20214] __nla_validate_parse: 9 callbacks suppressed [ 432.840002][T20214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3762'. [ 432.893040][T20217] netlink: 'syz.1.3763': attribute type 10 has an invalid length. [ 432.915481][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'. [ 433.340880][ T29] audit: type=1804 audit(1771288218.595:14): pid=20226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3765" name="memory.events" dev="tmpfs" ino=710 res=1 errno=0 [ 433.342931][T20226] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3765'. [ 433.362089][ T29] audit: type=1800 audit(1771288218.595:15): pid=20226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3765" name="memory.events" dev="tmpfs" ino=710 res=0 errno=0 [ 433.393209][T20226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3765'. [ 434.568866][T20220] bridge3: entered promiscuous mode [ 434.615909][T20180] batadv0 speed is unknown, defaulting to 1000 [ 434.846226][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 435.088012][T20255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3770'. [ 435.098171][T20249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3771'. [ 435.126236][T20249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3771'. [ 435.148044][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3771'. [ 435.179826][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3771'. [ 435.190543][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3771'. [ 435.416241][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 435.546688][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 435.583737][T20282] netlink: 'syz.0.3777': attribute type 10 has an invalid length. [ 435.937390][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 436.034495][T20293] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.043161][T20293] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.172155][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 436.313285][T20305] syzkaller0: entered promiscuous mode [ 436.329029][T20305] syzkaller0: entered allmulticast mode [ 436.360608][T20312] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 436.473494][T20319] xt_TCPMSS: Only works on TCP SYN packets [ 436.778987][T20339] lo: Caught tx_queue_len zero misconfig [ 437.246132][ T7142] net_ratelimit: 9 callbacks suppressed [ 437.246151][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 437.365124][T20393] netlink: 'syz.2.3799': attribute type 2 has an invalid length. [ 437.421124][T20393] !: entered promiscuous mode [ 437.507218][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 437.616913][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 437.740768][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 437.849323][T20356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.858369][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 437.977782][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 438.098149][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 438.221674][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 438.350715][T20433] tipc: Enabled bearer , priority 0 [ 438.358385][T20433] syzkaller0: entered promiscuous mode [ 438.363975][T20433] syzkaller0: entered allmulticast mode [ 438.376127][T20433] tipc: Resetting bearer [ 438.393042][T20432] tipc: Resetting bearer [ 438.418744][T20432] tipc: Disabling bearer [ 438.431201][T20435] __nla_validate_parse: 17 callbacks suppressed [ 438.431217][T20435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 438.447777][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 438.455284][T20435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 438.566129][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 438.792460][T20450] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 438.813420][T20450] : renamed from bond_slave_0 (while UP) [ 438.816440][ T8126] IPVS: starting estimator thread 0... [ 438.922306][T20451] IPVS: using max 37 ests per chain, 88800 per kthread [ 439.010712][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.029835][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.212867][T20473] tunl0: Caught tx_queue_len zero misconfig [ 439.286818][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3823'. [ 439.310918][T20479] macvtap1: entered promiscuous mode [ 439.316718][T20479] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 439.460348][T20492] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3827'. [ 439.476403][T20493] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3826'. [ 439.485471][T20493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3826'. [ 439.506233][T20493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3826'. [ 439.525473][T20493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3826'. [ 439.649875][T20499] tunl0: Caught tx_queue_len zero misconfig [ 439.666048][T20499] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3828'. [ 439.743324][T20504] sctp: [Deprecated]: syz.1.3828 (pid 20504) Use of int in max_burst socket option deprecated. [ 439.743324][T20504] Use struct sctp_assoc_value instead [ 439.874476][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 439.900079][T20512] syzkaller0: entered promiscuous mode [ 439.908238][T20512] syzkaller0: entered allmulticast mode [ 440.000604][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.266111][T20532] netlink: 'syz.0.3839': attribute type 32 has an invalid length. [ 440.300705][T20532] bond0: option coupled_control: invalid value (6) [ 440.322037][T20532] bond0 (unregistering): Released all slaves [ 440.752411][T20554] lo speed is unknown, defaulting to 1000 [ 440.790534][T20554] wlan1 speed is unknown, defaulting to 1000 [ 440.827290][T20554] wg1 speed is unknown, defaulting to 1000 [ 440.856750][T20554] lo speed is unknown, defaulting to 1000 [ 440.874353][T20554] batadv0 speed is unknown, defaulting to 1000 [ 440.911937][T20566] netlink: 'syz.0.3848': attribute type 1 has an invalid length. [ 441.257079][T20588] netlink: 'syz.2.3856': attribute type 6 has an invalid length. [ 441.285290][T20588] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.818657][T20616] tipc: Enabled bearer , priority 0 [ 442.147211][T20614] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.154733][T20614] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.200393][T20614] 0ªX¹¦À: left allmulticast mode [ 442.387653][T20614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.411687][T20614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.754406][T20612] syzkaller0: entered promiscuous mode [ 442.766104][T20612] syzkaller0: entered allmulticast mode [ 442.776038][T20604] lo speed is unknown, defaulting to 1000 [ 442.776466][ T7134] net_ratelimit: 24 callbacks suppressed [ 442.776485][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 442.824995][T20628] tipc: Resetting bearer [ 442.850799][T20611] tipc: Resetting bearer [ 442.872492][T20611] tipc: Disabling bearer [ 442.878712][T20635] netlink: 'syz.0.3864': attribute type 10 has an invalid length. [ 442.890309][ T7142] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.899659][ T7142] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.909532][T20604] wlan1 speed is unknown, defaulting to 1000 [ 442.917720][T20635] veth0_vlan: left promiscuous mode [ 442.924377][T20635] veth0_vlan: entered promiscuous mode [ 442.932584][T20635] team0: Device veth0_vlan failed to register rx_handler [ 442.954604][ T7142] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.964445][ T7142] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.975473][T20604] wg1 speed is unknown, defaulting to 1000 [ 442.983330][T20604] lo speed is unknown, defaulting to 1000 [ 442.989967][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 443.000693][T20604] batadv0 speed is unknown, defaulting to 1000 [ 443.014147][T20639] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 443.023555][T20639] netlink: 'syz.0.3865': attribute type 2 has an invalid length. [ 443.106434][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 443.218754][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 443.248703][T20655] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 443.284998][T20620] siw: device registration error -23 [ 443.307181][T20618] lo speed is unknown, defaulting to 1000 [ 443.321007][T20618] wlan1 speed is unknown, defaulting to 1000 [ 443.342220][T20618] wg1 speed is unknown, defaulting to 1000 [ 443.349167][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 443.359134][T20618] lo speed is unknown, defaulting to 1000 [ 443.369035][T20618] batadv0 speed is unknown, defaulting to 1000 [ 443.477423][T20658] bridge_slave_1: left allmulticast mode [ 443.484083][T20658] bridge_slave_1: left promiscuous mode [ 443.490595][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.526270][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 443.620913][T20668] netlink: 'syz.2.3871': attribute type 2 has an invalid length. [ 443.636174][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 443.702454][T20672] __nla_validate_parse: 13 callbacks suppressed [ 443.702472][T20672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3873'. [ 443.736212][T20672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3873'. [ 443.927073][T20677] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3875'. [ 444.056563][T20677] geneve2: entered promiscuous mode [ 444.061906][T20677] geneve2: entered allmulticast mode [ 444.073840][ T7134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.111338][ T7134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.203275][ T7134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.222681][ T7134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.231825][T20683] netlink: 'syz.2.3877': attribute type 46 has an invalid length. [ 444.268831][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 444.416488][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 444.547936][T20687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3879'. [ 444.659925][T20687] geneve3: entered promiscuous mode [ 445.475122][T17011] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 445.533263][T17011] CPU: 1 UID: 0 PID: 17011 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 445.533290][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.533304][T17011] Call Trace: [ 445.533312][T17011] [ 445.533319][T17011] dump_stack_lvl+0xe8/0x150 [ 445.533345][T17011] dump_header+0xd3/0x4c0 [ 445.533367][T17011] oom_kill_process+0x3ab/0x970 [ 445.533394][T17011] out_of_memory+0x106c/0x1410 [ 445.533414][T17011] ? percpu_ref_put+0x19/0x180 [ 445.533437][T17011] ? __pfx___mutex_lock+0x10/0x10 [ 445.533465][T17011] ? __pfx_out_of_memory+0x10/0x10 [ 445.533482][T17011] ? do_raw_spin_unlock+0xf5/0x210 [ 445.533514][T17011] try_charge_memcg+0xc53/0x1560 [ 445.533556][T17011] ? __pfx_try_charge_memcg+0x10/0x10 [ 445.533573][T17011] ? xa_load+0x60/0x210 [ 445.533598][T17011] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 445.533622][T17011] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 445.533647][T17011] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 445.533673][T17011] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 445.533698][T17011] __read_swap_cache_async+0x212/0x480 [ 445.533726][T17011] swap_cluster_readahead+0x358/0x680 [ 445.533751][T17011] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 445.533783][T17011] ? get_vma_policy+0x27b/0x3c0 [ 445.533809][T17011] swapin_readahead+0x196/0xc50 [ 445.533826][T17011] ? finish_task_switch+0x161/0x920 [ 445.533845][T17011] ? swap_table_get+0x1e/0x260 [ 445.533866][T17011] ? __pfx_swapin_readahead+0x10/0x10 [ 445.533886][T17011] ? swap_table_get+0x1e/0x260 [ 445.533901][T17011] ? swap_table_get+0x1e/0x260 [ 445.533915][T17011] ? swap_table_get+0x1e/0x260 [ 445.533932][T17011] ? swap_table_get+0x216/0x260 [ 445.534007][T17011] ? swap_cache_get_folio+0x513/0x520 [ 445.534032][T17011] do_swap_page+0x8ce/0x5e10 [ 445.534049][T17011] ? do_raw_spin_unlock+0xf5/0x210 [ 445.534084][T17011] ? __pte_offset_map+0x29/0x240 [ 445.534104][T17011] ? __pte_offset_map+0x29/0x240 [ 445.534122][T17011] ? do_swap_page+0x18b/0x5e10 [ 445.534138][T17011] ? __pfx_do_swap_page+0x10/0x10 [ 445.534155][T17011] ? __lock_acquire+0x6b5/0x2cf0 [ 445.534172][T17011] ? __pfx_default_wake_function+0x10/0x10 [ 445.534192][T17011] ? __pte_offset_map+0x1ae/0x240 [ 445.534213][T17011] ? pte_offset_map_rw_nolock+0xea/0x160 [ 445.534235][T17011] handle_mm_fault+0x12d2/0x32a0 [ 445.534269][T17011] ? handle_mm_fault+0xee/0x32a0 [ 445.534295][T17011] ? __pfx_handle_mm_fault+0x10/0x10 [ 445.534311][T17011] ? lock_vma_under_rcu+0x45a/0x500 [ 445.534357][T17011] do_user_addr_fault+0xa73/0x1360 [ 445.534384][T17011] ? rcu_is_watching+0x15/0xb0 [ 445.534403][T17011] ? trace_page_fault_user+0x84/0x1c0 [ 445.534425][T17011] exc_page_fault+0x6a/0xc0 [ 445.534446][T17011] asm_exc_page_fault+0x26/0x30 [ 445.534469][T17011] RIP: 0033:0x7f0beef5c84e [ 445.534485][T17011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.534500][T17011] RSP: 002b:00007ffde16bbab8 EFLAGS: 00010246 [ 445.534516][T17011] RAX: 0000000000000000 RBX: 000055558c6b2500 RCX: 00007f0beef5c84e [ 445.534528][T17011] RDX: 00007ffde16bbb10 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.534538][T17011] RBP: 00007ffde16bbb7c R08: 0000000000000000 R09: 0000000000000000 [ 445.534549][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 445.534559][T17011] R13: 00000000000927c0 R14: 000000000006cadb R15: 00007ffde16bbbd0 [ 445.534590][T17011] [ 445.534597][T17011] memory: usage 307200kB, limit 307200kB, failcnt 712 [ 445.754170][T20736] mac80211_hwsim hwsim34 wlan0: Caught tx_queue_len zero misconfig [ 445.786061][T17011] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 445.851232][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3894'. [ 445.891746][T17011] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 445.934947][T20740] 8021q: VLANs not supported on nlmon0 [ 445.971051][T17011] Memory cgroup stats for /syz1: [ 445.971373][T17011] cache 0 [ 446.000076][T17011] rss 0 [ 446.016087][T17011] rss_huge 0 [ 446.019326][T17011] shmem 0 [ 446.066308][T17011] mapped_file 0 [ 446.069810][T17011] dirty 0 [ 446.072753][T17011] writeback 0 [ 446.099517][T17011] workingset_refault_anon 0 [ 446.104151][T17011] workingset_refault_file 0 [ 446.166873][T17011] swap 208896 [ 446.170303][T17011] swapcached 0 [ 446.173681][T17011] pgpgin 158055 [ 446.216429][T17011] pgpgout 158055 [ 446.220020][T17011] pgfault 243144 [ 446.223574][T17011] pgmajfault 5 [ 446.244710][T17011] inactive_anon 0 [ 446.259411][T17011] active_anon 0 [ 446.262911][T17011] inactive_file 0 [ 446.289600][T17011] active_file 0 [ 446.293098][T17011] unevictable 0 [ 446.330048][T17011] hierarchical_memory_limit 314572800 [ 446.335550][T17011] hierarchical_memsw_limit 9223372036854771712 [ 446.381273][T17011] total_cache 0 [ 446.384786][T17011] total_rss 0 [ 446.416104][T17011] total_rss_huge 0 [ 446.430132][T17011] total_shmem 0 [ 446.433630][T17011] total_mapped_file 0 [ 446.446058][T17011] total_dirty 0 [ 446.449613][T17011] total_writeback 0 [ 446.454552][T20765] dummy0: entered promiscuous mode [ 446.459601][T17011] total_workingset_refault_anon 0 [ 446.464861][T17011] total_workingset_refault_file 0 [ 446.474006][T20765] macsec1: entered allmulticast mode [ 446.487320][T17011] total_swap 208896 [ 446.491171][T17011] total_swapcached 0 [ 446.494395][T20765] dummy0: entered allmulticast mode [ 446.495062][T17011] total_pgpgin 158055 [ 446.518058][T17011] total_pgpgout 158055 [ 446.528356][T17011] total_pgfault 243144 [ 446.537468][T17011] total_pgmajfault 5 [ 446.538240][T20765] dummy0: left allmulticast mode [ 446.545263][T17011] total_inactive_anon 0 [ 446.555847][T17011] total_active_anon 0 [ 446.564433][T17011] total_inactive_file 0 [ 446.573603][T17011] total_active_file 0 [ 446.574978][T20765] dummy0: left promiscuous mode [ 446.582880][T17011] total_unevictable 0 [ 446.592623][T17011] anon_cost 0 [ 446.602891][T17011] file_cost 0 [ 446.609608][T17011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3879,pid=20686,uid=0 [ 446.645638][T17011] Memory cgroup out of memory: Killed process 20686 (syz.1.3879) total-vm:102412kB, anon-rss:1224kB, file-rss:23388kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 446.670283][T20764] tap0: tun_chr_ioctl cmd 2148553947 [ 446.863393][T20783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3905'. [ 446.978613][T20790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3906'. [ 447.102905][T20793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3909'. [ 447.300950][T20806] lo speed is unknown, defaulting to 1000 [ 447.335065][T20806] wlan1 speed is unknown, defaulting to 1000 [ 447.379545][T20806] wg1 speed is unknown, defaulting to 1000 [ 447.397179][T20806] lo speed is unknown, defaulting to 1000 [ 447.412560][T20806] batadv0 speed is unknown, defaulting to 1000 [ 447.612929][T20825] netlink: 'syz.1.3918': attribute type 13 has an invalid length. [ 447.629651][T20825] netlink: 'syz.1.3918': attribute type 17 has an invalid length. [ 447.640117][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 447.661008][T14876] IPVS: starting estimator thread 0... [ 447.668693][T20825] gre0: left promiscuous mode [ 447.677974][T20825] gre0: left allmulticast mode [ 447.769026][ T7142] bond0: (slave bond_slave_0): interface is now down [ 447.777503][T20826] IPVS: using max 28 ests per chain, 67200 per kthread [ 447.784687][T20825] bond0: left promiscuous mode [ 447.792783][T20825] bond_slave_0: left promiscuous mode [ 447.798953][ T7142] bond0: (slave bond_slave_1): interface is now down [ 447.809336][T20825] bond_slave_1: left promiscuous mode [ 447.821991][T20825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.837061][ T7142] bond0: (slave bond_slave_0): interface is now down [ 447.853190][T20825] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.860478][ T7142] bond0: (slave bond_slave_1): interface is now down [ 447.880851][T20825] 0ªX¹¦À: left allmulticast mode [ 447.885908][T20825] net_ratelimit: 24 callbacks suppressed [ 447.885920][T20825] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 447.909282][ T7142] bond0: (slave bond_slave_0): interface is now down [ 447.916197][ T7142] bond0: (slave bond_slave_1): interface is now down [ 447.946139][ T7142] bond0: (slave bond_slave_0): interface is now down [ 447.953244][ T7142] bond0: (slave bond_slave_1): interface is now down [ 447.960110][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 447.979703][ T77] bond0: (slave bond_slave_0): interface is now down [ 447.997971][ T77] bond0: (slave bond_slave_1): interface is now down [ 448.017384][ T7142] bond0: (slave bond_slave_0): interface is now down [ 448.030871][ T7142] bond0: (slave bond_slave_1): interface is now down [ 448.054747][T20821] lo speed is unknown, defaulting to 1000 [ 448.067779][ T7142] bond0: now running without any active interface! [ 448.106820][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 448.126203][T20821] wlan1 speed is unknown, defaulting to 1000 [ 448.162061][T20821] wg1 speed is unknown, defaulting to 1000 [ 448.216192][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 448.225212][T20821] lo speed is unknown, defaulting to 1000 [ 448.351507][T20838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3922'. [ 448.370994][T20821] batadv0 speed is unknown, defaulting to 1000 [ 448.509707][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 448.521382][T20838] netlink: 'syz.1.3922': attribute type 18 has an invalid length. [ 448.581731][T20839] lo speed is unknown, defaulting to 1000 [ 448.626349][T20839] wlan1 speed is unknown, defaulting to 1000 [ 448.666153][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 448.704356][T20839] wg1 speed is unknown, defaulting to 1000 [ 448.718101][T20839] lo speed is unknown, defaulting to 1000 [ 448.787720][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 448.802932][T20839] batadv0 speed is unknown, defaulting to 1000 [ 449.136227][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 449.332356][T20856] team0: entered promiscuous mode [ 449.347883][T20856] team_slave_0: entered promiscuous mode [ 449.371990][T20861] IPv6: Can't replace route, no match found [ 449.378375][T20856] team_slave_1: entered promiscuous mode [ 449.385086][T20861] __nla_validate_parse: 2 callbacks suppressed [ 449.385102][T20861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3928'. [ 449.404221][T20856] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 449.716121][T20863] vlan1: entered allmulticast mode [ 449.721282][T20863] bond6: entered allmulticast mode [ 449.876120][T10398] bond5: (slave macvlan5): failed to get link speed/duplex [ 450.277640][T20893] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 450.475784][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3937'. [ 451.854658][T20897] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 451.867042][T20902] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 451.888724][T20902] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 451.916360][T20902] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 452.079870][T20915] netlink: 'syz.2.3944': attribute type 1 has an invalid length. [ 452.098228][T20918] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3943'. [ 452.136570][T20915] bond5: entered promiscuous mode [ 452.153678][T20915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.158553][T20925] IPv6: Can't replace route, no match found [ 452.172592][T20925] IPv6: Can't replace route, no match found [ 452.397033][ T29] audit: type=1800 audit(1771288237.645:16): pid=20937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3947" name="memory.events" dev="tmpfs" ino=837 res=0 errno=0 [ 452.400340][T20937] netlink: 'syz.4.3947': attribute type 1 has an invalid length. [ 452.477840][ T29] audit: type=1804 audit(1771288237.655:17): pid=20937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3947" name="/newroot/160/memory.events" dev="tmpfs" ino=837 res=1 errno=0 [ 452.513981][T20939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3949'. [ 452.601682][T20943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.908807][ T7142] net_ratelimit: 14 callbacks suppressed [ 452.908826][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 453.058023][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 453.208942][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 453.224473][T20990] sock: sock_set_timeout: `syz.2.3962' (pid 20990) tries to set negative timeout [ 453.241507][T20994] syzkaller0: entered promiscuous mode [ 453.247222][T20994] syzkaller0: entered allmulticast mode [ 453.247921][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 453.260984][T20994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3964'. [ 453.501931][T21009] netlink: 'syz.0.3965': attribute type 2 has an invalid length. [ 453.522580][T21009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3965'. [ 453.534699][T21010] netlink: 'syz.2.3966': attribute type 10 has an invalid length. [ 453.994645][T21007] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.006357][T21007] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.075582][T21014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3967'. [ 454.108379][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 454.156757][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 454.254820][T21007] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.262937][T21022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3970'. [ 454.276407][T21022] netlink: 'syz.0.3970': attribute type 1 has an invalid length. [ 454.278698][T21007] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.284632][T21022] netlink: 'syz.0.3970': attribute type 2 has an invalid length. [ 454.313304][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3972'. [ 454.324692][T21021] ip6tnl0: Caught tx_queue_len zero misconfig [ 454.364169][T21007] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.379555][T21007] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.399090][T10398] bond5: (slave macvlan5): failed to get link speed/duplex [ 454.431970][T21007] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.443081][T21007] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.519742][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 454.574605][ T7150] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.602082][ T7150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.637462][ T7150] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.648499][ T7150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.670151][ T7134] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.686153][ T7134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.753804][ T7150] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.779639][ T7150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.480626][T21069] netlink: 'syz.1.3985': attribute type 10 has an invalid length. [ 456.588832][T21069] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.601034][T21069] bond0: (slave team0): Enslaving as an active interface with a down link [ 456.622771][T21080] __nla_validate_parse: 2 callbacks suppressed [ 456.622788][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3989'. [ 456.639740][ T7134] ip6gretap0: left allmulticast mode [ 456.639800][ T7134] ip6gretap0: left promiscuous mode [ 456.639997][ T7134] bridge0: port 1(ip6gretap0) entered disabled state [ 456.688562][T21082] xt_bpf: check failed: parse error [ 456.694862][ T7134] tipc: Resetting bearer [ 456.772002][T21089] ipt_REJECT: TCP_RESET invalid for non-tcp [ 456.779720][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3989'. [ 456.893561][T21095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3993'. [ 457.170809][ T7134] bond4 (unregistering): (slave bridge3): Releasing active interface [ 457.249021][ T7134] tipc: Disabling bearer [ 457.310832][ T7134] bond6 (unregistering): (slave bridge5): Releasing active interface [ 457.324661][ T7134] bridge5 (unregistering): left promiscuous mode [ 457.331174][ T7134] bridge5 (unregistering): left allmulticast mode [ 457.504345][ T7134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.514311][ T7134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.524830][ T7134] bond0 (unregistering): Released all slaves [ 457.537895][ T7134] bond1 (unregistering): Released all slaves [ 457.550183][ T7134] bond2 (unregistering): left allmulticast mode [ 457.558276][ T7134] team0: Port device bond2 removed [ 457.564961][ T7134] bond2 (unregistering): Released all slaves [ 457.581177][ T7134] bond3 (unregistering): Released all slaves [ 457.593540][ T7134] bond4 (unregistering): Released all slaves [ 457.606316][ T7134] bond5 (unregistering): Released all slaves [ 457.622990][ T7134] bond6 (unregistering): Released all slaves [ 457.645039][ T7134] bond7 (unregistering): Released all slaves [ 457.659877][ T7134] bond8 (unregistering): (slave veth5): Releasing active interface [ 457.667893][ T7134] dummy0: entered promiscuous mode [ 457.675338][ T7134] bond8 (unregistering): (slave dummy0): Releasing active interface [ 457.694649][ T7134] bond8 (unregistering): Released all slaves [ 457.707746][ T7134] bond9 (unregistering): Released all slaves [ 457.795012][T21104] tipc: Started in network mode [ 457.802201][T21104] tipc: Node identity a6b8d69478b9, cluster identity 4711 [ 457.814955][T21104] tipc: Enabled bearer , priority 0 [ 457.823053][T21105] syzkaller0: entered promiscuous mode [ 457.833157][T21105] syzkaller0: entered allmulticast mode [ 457.887091][T21109] tipc: Resetting bearer [ 457.906595][ T7134] !: left promiscuous mode [ 457.974559][T21101] tipc: Resetting bearer [ 458.021663][T21101] tipc: Disabling bearer [ 458.076246][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 458.103493][ T7134] tipc: Left network mode [ 458.186208][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 458.261859][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 458.319340][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 458.432441][T21152] syzkaller0: entered promiscuous mode [ 458.465383][T21152] syzkaller0: entered allmulticast mode [ 458.509259][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4008'. [ 458.672573][T21160] netlink: 'syz.3.4010': attribute type 5 has an invalid length. [ 458.746539][T21166] veth1_to_hsr: entered promiscuous mode [ 458.768461][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 458.970990][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 459.208728][ T7134] hsr_slave_0: left promiscuous mode [ 459.233999][T21171] xt_bpf: check failed: parse error [ 459.244745][ T7134] hsr_slave_1: left promiscuous mode [ 459.266283][ T7134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.541230][ T7134] team_slave_1 (unregistering): left allmulticast mode [ 459.548992][ T7134] team0 (unregistering): Port device team_slave_1 removed [ 459.567534][ T7134] team_slave_0 (unregistering): left allmulticast mode [ 459.591359][ T7134] team0 (unregistering): Port device team_slave_0 removed [ 459.672381][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'. [ 459.741622][T21179] batadv_slave_0: Caught tx_queue_len zero misconfig [ 459.784283][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 459.839702][T21192] team0: Port device bond0 removed [ 459.855618][T21192] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 460.036695][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 460.139582][T21225] syzkaller0: entered promiscuous mode [ 460.145087][T21225] syzkaller0: entered allmulticast mode [ 460.175150][T21227] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4025'. [ 460.211499][T21227] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4025'. [ 460.287875][T21233] netlink: 'syz.0.4027': attribute type 20 has an invalid length. [ 460.298275][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4027'. [ 460.354833][ T77] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.354919][T21233] netlink: 'syz.0.4027': attribute type 20 has an invalid length. [ 460.365635][ T77] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.380935][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4027'. [ 460.407601][ T77] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.418142][ T77] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.431774][T21240] lo speed is unknown, defaulting to 1000 [ 460.447875][ T7152] bond5: (slave macvlan5): failed to get link speed/duplex [ 460.508141][T21243] netlink: 'syz.1.4026': attribute type 14 has an invalid length. [ 460.655720][T21240] wlan1 speed is unknown, defaulting to 1000 [ 460.664211][ T7134] IPVS: stop unused estimator thread 0... [ 463.606955][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 463.637640][T21263] __nla_validate_parse: 1 callbacks suppressed [ 463.637656][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4033'. [ 463.652952][T21240] wg1 speed is unknown, defaulting to 1000 [ 463.655692][T21263] block nbd3: Unsupported socket: should be TCP or UNIX. [ 463.663338][T21240] lo speed is unknown, defaulting to 1000 [ 463.682333][T21240] batadv0 speed is unknown, defaulting to 1000 [ 463.726311][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 463.856546][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 463.987736][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 464.086871][T21292] syzkaller0: entered promiscuous mode [ 464.089926][T21293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.092556][T21292] syzkaller0: entered allmulticast mode [ 464.126094][ T7134] bond5: (slave macvlan5): failed to get link speed/duplex [ 464.239451][T21299] netlink: 'syz.1.4043': attribute type 1 has an invalid length. [ 464.389127][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 464.454387][T21313] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 464.534702][T21313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4047'. [ 464.621218][ T77] bond5: (slave macvlan5): failed to get link speed/duplex [ 464.639880][T21313] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.700735][T21320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.749521][T21320] bond6: (slave geneve3): making interface the new active one [ 464.790631][T21320] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 464.815780][ T7142] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.824716][ T7142] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.872609][T21331] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4048'. [ 464.896797][ T7148] bond5: (slave macvlan5): failed to get link speed/duplex [ 464.946124][ T7142] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.954595][ T7142] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 465.106495][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 465.184224][T21333] syzkaller0: entered allmulticast mode [ 465.448768][T21363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4057'. [ 465.558005][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4059'. [ 465.912527][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4066'. [ 465.935189][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4066'. [ 465.968845][T21389] netlink: 'syz.3.4066': attribute type 12 has an invalid length. [ 465.979118][T21389] netlink: 'syz.3.4066': attribute type 11 has an invalid length. [ 466.030017][T21395] lo speed is unknown, defaulting to 1000 [ 466.043277][T21395] wlan1 speed is unknown, defaulting to 1000 [ 466.047640][T21404] tipc: Enabling of bearer rejected, failed to enable media [ 466.068567][T21395] wg1 speed is unknown, defaulting to 1000 [ 466.086267][T21395] lo speed is unknown, defaulting to 1000 [ 466.093871][T21395] batadv0 speed is unknown, defaulting to 1000 [ 466.260825][T21408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4072'. [ 466.280572][T21407] netlink: 'syz.3.4072': attribute type 3 has an invalid length. [ 466.299059][T21407] netlink: 772 bytes leftover after parsing attributes in process `syz.3.4072'. [ 466.319490][T21407] netlink: 'syz.3.4072': attribute type 3 has an invalid length. [ 466.352113][T21407] netlink: 772 bytes leftover after parsing attributes in process `syz.3.4072'. [ 466.392866][T21411] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 466.407414][T14877] IPVS: starting estimator thread 0... [ 466.507738][T21412] IPVS: using max 35 ests per chain, 84000 per kthread [ 467.819110][T21496] gtp0: entered promiscuous mode [ 467.824276][T21496] team0: Device gtp0 is of different type [ 468.009632][T21513] tipc: Enabling of bearer rejected, failed to enable media [ 468.107157][T21513] tipc: Failed to remove unknown binding: 66,1,1/0:1237782569/1237782571 [ 468.656903][T21536] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 468.747672][T21541] __nla_validate_parse: 8 callbacks suppressed [ 468.747691][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4108'. [ 469.041869][T21549] xt_hashlimit: size too large, truncated to 1048576 [ 469.110740][ T7142] net_ratelimit: 27 callbacks suppressed [ 469.110761][ T7142] bond5: (slave macvlan5): failed to get link speed/duplex [ 469.267940][T21565] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4112'. [ 469.277391][ T7144] bond5: (slave macvlan5): failed to get link speed/duplex [ 469.311684][T21569] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4114'. [ 469.335131][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4114'. [ 469.356533][T21569] openvswitch: netlink: Missing key (keys=40, expected=80) [ 469.386117][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 469.524335][T21589] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 469.551674][T21589] bond1 (unregistering): Released all slaves [ 469.586946][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 469.684643][T21602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4120'. [ 469.727551][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 469.729973][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4122'. [ 469.736898][T21610] netlink: 'syz.1.4123': attribute type 30 has an invalid length. [ 469.755851][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4120'. [ 469.819960][T21602] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 469.842977][T21602] bond1 (unregistering): Released all slaves [ 469.875222][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 469.884408][T21610] netlink: 'syz.1.4123': attribute type 30 has an invalid length. [ 469.936156][T21576] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.947116][T21576] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.978155][T21576] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.006859][T21576] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.036384][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 470.146254][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 470.227571][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 470.242042][T21645] openvswitch: netlink: Missing key (keys=40, expected=80) [ 470.276179][T21644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.376313][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 470.464391][T21653] hsr_slave_1 (unregistering): left promiscuous mode [ 470.546596][T21659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 470.580397][T21661] nbd: must specify a device to reconfigure [ 470.842123][T21678] tipc: Enabled bearer , priority 0 [ 471.128585][T21699] SET target dimension over the limit! [ 471.852776][T21704] gretap1: entered allmulticast mode [ 471.991962][T21708] syzkaller1: entered promiscuous mode [ 472.003789][T21708] syzkaller1: entered allmulticast mode [ 472.197752][T21677] tipc: Disabling bearer [ 472.243698][ T8137] tipc: Node number set to 102120290 [ 472.336577][T21728] lo speed is unknown, defaulting to 1000 [ 472.344260][T21728] wlan1 speed is unknown, defaulting to 1000 [ 472.353994][T21728] wg1 speed is unknown, defaulting to 1000 [ 472.362535][T21728] lo speed is unknown, defaulting to 1000 [ 472.372073][T21728] batadv0 speed is unknown, defaulting to 1000 [ 474.136412][T21576] net_ratelimit: 23 callbacks suppressed [ 474.136432][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.256167][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.366145][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.476560][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.586112][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.696443][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.806229][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.916214][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 474.986450][T21717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.034471][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 475.135451][T21756] __nla_validate_parse: 10 callbacks suppressed [ 475.135470][T21756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4161'. [ 475.166682][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 475.411983][T21767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.432521][T21780] netlink: 'syz.2.4167': attribute type 1 has an invalid length. [ 475.443003][T21783] netlink: 'syz.0.4163': attribute type 10 has an invalid length. [ 475.453585][T21767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.498786][T21780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.520004][T21783] team0: Port device netdevsim0 added [ 475.558347][T21767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.610889][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4169'. [ 475.629865][T21767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.702303][ T8137] IPVS: starting estimator thread 0... [ 475.788702][T21767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.806920][T21795] IPVS: using max 35 ests per chain, 84000 per kthread [ 475.812054][T21767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.903462][T21806] netlink: 'syz.3.4172': attribute type 1 has an invalid length. [ 475.964732][T21802] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4172'. [ 476.014142][T21767] team0: Port device netdevsim0 removed [ 476.024040][T21767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.034576][T21767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 476.104221][T21821] batadv_slave_0: Caught tx_queue_len zero misconfig [ 476.276940][T21561] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.289773][T21561] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.310625][T21561] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.320298][T21561] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.343529][T21561] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.353070][T21561] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.378494][T21561] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.387305][T21561] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.457159][T21832] netlink: 'syz.0.4180': attribute type 2 has an invalid length. [ 476.465363][T21832] netlink: 'syz.0.4180': attribute type 5 has an invalid length. [ 476.480953][T21830] ip6t_rpfilter: unknown options [ 476.637351][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4182'. [ 476.646629][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4182'. [ 476.914309][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4186'. [ 476.937801][T21851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4186'. [ 477.081311][T21864] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 477.163099][T21868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4190'. [ 477.172993][T21869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 477.185755][T21869] bridge_slave_1: left allmulticast mode [ 477.194940][T21869] bridge_slave_1: left promiscuous mode [ 477.200884][T21869] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.214449][T21869] bridge_slave_0: left allmulticast mode [ 477.221117][T21869] bridge_slave_0: left promiscuous mode [ 477.227871][T21869] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.591379][T21894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4198'. [ 477.605528][T21894] netlink: 'syz.1.4198': attribute type 3 has an invalid length. [ 477.713907][T21900] lo speed is unknown, defaulting to 1000 [ 477.731441][T21886] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 477.742588][T21900] wlan1 speed is unknown, defaulting to 1000 [ 477.762968][T21900] wg1 speed is unknown, defaulting to 1000 [ 477.775348][T21900] lo speed is unknown, defaulting to 1000 [ 477.783431][T21900] batadv0 speed is unknown, defaulting to 1000 [ 477.785771][T21906] tipc: Enabled bearer , priority 0 [ 477.804965][T21906] syzkaller0: entered promiscuous mode [ 477.812559][T21906] syzkaller0: entered allmulticast mode [ 477.825589][T21905] tipc: Resetting bearer [ 477.855839][T21905] tipc: Disabling bearer [ 478.020469][T21912] gre1: entered allmulticast mode [ 479.187113][T21996] vlan2: entered allmulticast mode [ 479.192689][T21996] team0: entered allmulticast mode [ 479.202080][T21996] team_slave_0: entered allmulticast mode [ 479.208034][T21996] team_slave_1: entered allmulticast mode [ 479.224349][T21997] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 479.230745][T21997] syzkaller1: linktype set to 768 [ 479.236339][T21998] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 479.242314][T21998] syzkaller1: linktype set to 768 [ 479.286668][T21561] net_ratelimit: 29 callbacks suppressed [ 479.286688][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 479.409275][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 479.522857][T22023] netlink: 'syz.0.4234': attribute type 10 has an invalid length. [ 479.531526][T22023] dummy0: entered promiscuous mode [ 479.537996][T22023] bridge0: port 2(dummy0) entered blocking state [ 479.544930][T22023] bridge0: port 2(dummy0) entered disabled state [ 479.552693][T22023] dummy0: entered allmulticast mode [ 479.576446][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 479.670768][T22033] tipc: Enabled bearer , priority 0 [ 479.687273][T22033] syzkaller0: entered promiscuous mode [ 479.693028][T22033] syzkaller0: entered allmulticast mode [ 479.703676][T22033] netlink: 'syz.1.4239': attribute type 13 has an invalid length. [ 479.711810][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 479.731141][T22032] tipc: Resetting bearer [ 479.753840][T22032] tipc: Disabling bearer [ 479.818379][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 479.850885][T22035] netlink: 'syz.4.4240': attribute type 1 has an invalid length. [ 479.908666][T22035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.918227][T22035] bond1: (slave bond2): making interface the new active one [ 479.926758][T22035] bond1: (slave bond2): Enslaving as an active interface with an up link [ 479.949996][T22035] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 479.962806][T22035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.978236][T22035] gretap2: entered promiscuous mode [ 480.006996][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 480.116755][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 480.214277][T22047] __nla_validate_parse: 9 callbacks suppressed [ 480.214294][T22047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4244'. [ 480.226496][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 480.366097][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 480.541226][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 480.669712][T22074] syzkaller0: entered promiscuous mode [ 480.675611][T22074] syzkaller0: entered allmulticast mode [ 480.954569][T22093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4255'. [ 481.241856][T22106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4261'. [ 481.745735][T22124] xt_connbytes: Forcing CT accounting to be enabled [ 481.856909][T22124] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 483.037803][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 483.039693][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 483.092908][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'. [ 483.153825][T22141] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4267'. [ 483.327093][T22148] gretap1: entered promiscuous mode [ 483.439830][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4270'. [ 483.487026][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 483.585354][T22172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4275'. [ 483.763708][T22181] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4278'. [ 483.764781][T22183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4277'. [ 483.944222][T22190] batadv0: entered promiscuous mode [ 484.306064][T21571] net_ratelimit: 13 callbacks suppressed [ 484.306083][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 484.456192][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 484.604582][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 484.736365][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 484.942045][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 485.000911][T22244] netlink: 'syz.4.4297': attribute type 10 has an invalid length. [ 485.045287][T22244] geneve0: entered promiscuous mode [ 485.057219][T22244] team0: Port device geneve0 added [ 485.066370][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 485.079686][T22243] syzkaller0: entered promiscuous mode [ 485.085186][T22243] syzkaller0: entered allmulticast mode [ 485.253299][T22257] __nla_validate_parse: 5 callbacks suppressed [ 485.253316][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'. [ 485.268676][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 485.286982][T22255] tipc: Enabled bearer , priority 0 [ 485.307854][T22255] syzkaller0: entered promiscuous mode [ 485.313361][T22255] syzkaller0: entered allmulticast mode [ 485.374241][T22260] ieee802154 phy1 wpan1: encryption failed: -22 [ 485.549567][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4305'. [ 485.560995][T22272] tipc: Resetting bearer [ 485.603486][T22254] tipc: Resetting bearer [ 485.659433][T22254] tipc: Disabling bearer [ 485.706224][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 485.754077][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'. [ 485.806965][T22284] netlink: 'syz.3.4313': attribute type 1 has an invalid length. [ 485.814864][T22284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4313'. [ 485.883157][T22291] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4312'. [ 485.964152][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 486.009563][T22304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4316'. [ 486.045585][T22304] netlink: 'syz.2.4316': attribute type 4 has an invalid length. [ 486.106226][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 486.335559][T22335] netlink: 'syz.4.4322': attribute type 7 has an invalid length. [ 486.356824][T22335] netlink: 'syz.4.4322': attribute type 8 has an invalid length. [ 486.374840][T22335] netlink: 'syz.4.4322': attribute type 8 has an invalid length. [ 486.393911][T22335] netlink: 'syz.4.4322': attribute type 4 has an invalid length. [ 486.424891][T22335] netlink: 'syz.4.4322': attribute type 7 has an invalid length. [ 486.456208][T22335] netlink: 207236 bytes leftover after parsing attributes in process `syz.4.4322'. [ 486.477242][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4324'. [ 486.743089][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'. [ 486.918559][T22333] lec:lec_atm_close: lec0: Shut down! [ 487.003616][T22373] syzkaller0: entered promiscuous mode [ 487.023083][T22373] syzkaller0: entered allmulticast mode [ 487.255252][T21571] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.273359][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 487.286478][T21571] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 487.339646][T21571] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.360179][T21571] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 487.386605][T21571] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.394997][T21571] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 487.404283][T21571] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.416939][T21571] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 487.432715][T22394] syzkaller0: entered promiscuous mode [ 487.438985][T22394] syzkaller0: entered allmulticast mode [ 487.656346][ T8137] lec:lec_start_xmit: lec0:No lecd attached [ 488.207268][T22443] ipt_REJECT: TCP_RESET invalid for non-tcp [ 489.336101][ T7140] net_ratelimit: 27 callbacks suppressed [ 489.336121][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 489.456162][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 489.566352][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 489.676214][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 489.786268][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 489.896106][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 490.006163][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 490.116194][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 490.226297][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 490.346304][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 490.760943][T22414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.787373][T22457] __nla_validate_parse: 2 callbacks suppressed [ 490.787391][T22457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4349'. [ 490.919534][T22486] netlink: 'syz.4.4355': attribute type 5 has an invalid length. [ 490.964233][T22486] netlink: 'syz.4.4355': attribute type 5 has an invalid length. [ 491.005810][T22486] netlink: 'syz.4.4355': attribute type 5 has an invalid length. [ 491.041089][T22495] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4357'. [ 491.045108][T22486] netlink: 'syz.4.4355': attribute type 5 has an invalid length. [ 491.062327][T22496] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4357'. [ 491.100250][T22495] gretap0: entered promiscuous mode [ 491.540866][T22531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 491.612586][ T5834] Bluetooth: hci4: link tx timeout [ 491.619535][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 491.630564][ T5834] Bluetooth: hci4: link tx timeout [ 491.635794][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.752970][T22555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4370'. [ 491.883227][T22566] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4373'. [ 492.072801][T22582] dvmrp6: entered allmulticast mode [ 492.114918][T22585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4377'. [ 492.124148][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4377'. [ 493.115996][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 493.124525][ C1] lec:lec_tx_timeout: lec0 [ 493.129250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 493.276278][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 493.686160][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 494.376213][ T3503] net_ratelimit: 35 callbacks suppressed [ 494.376235][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 494.496121][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 494.606093][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 494.704635][T22550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.726956][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 494.842970][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 494.969996][T22605] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4381'. [ 494.998101][T22605] netlink: 'syz.2.4381': attribute type 3 has an invalid length. [ 495.016368][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 495.028874][T22605] netlink: 'syz.2.4381': attribute type 3 has an invalid length. [ 495.041093][T22613] sctp: [Deprecated]: syz.1.4383 (pid 22613) Use of int in maxseg socket option. [ 495.041093][T22613] Use struct sctp_assoc_value instead [ 495.062971][T22612] syzkaller1: entered promiscuous mode [ 495.069161][T22605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4381'. [ 495.080898][T22613] openvswitch: netlink: Missing valid actions attribute. [ 495.082810][T22612] syzkaller1: entered allmulticast mode [ 495.094803][T22613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.155187][ T7140] bond5: (slave macvlan5): failed to get link speed/duplex [ 495.276301][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 495.301036][T22641] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 495.313922][T22633] lo speed is unknown, defaulting to 1000 [ 495.335003][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4386'. [ 495.345619][T22633] wlan1 speed is unknown, defaulting to 1000 [ 495.372258][T22633] wg1 speed is unknown, defaulting to 1000 [ 495.422813][T22633] lo speed is unknown, defaulting to 1000 [ 495.439917][T22633] batadv0 speed is unknown, defaulting to 1000 [ 495.761074][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 495.858051][T22667] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 496.037029][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4394'. [ 496.081525][T22672] 8021q: adding VLAN 0 to HW filter on device bond9 [ 496.095452][T22684] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4397'. [ 496.133109][T22672] bond8: (slave bond9): making interface the new active one [ 496.146624][T22686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4395'. [ 496.180493][T22672] bond8: (slave bond9): Enslaving as an active interface with an up link [ 496.282907][T22680] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 496.325301][T22673] macvtap0: entered promiscuous mode [ 496.332048][T22673] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 496.535382][T22705] IPVS: Unknown mcast interface: nicvf0 [ 496.559660][T22703] netlink: 'syz.2.4399': attribute type 10 has an invalid length. [ 496.596062][T22703] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4399'. [ 496.757787][T22719] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4404'. [ 496.885422][T22728] Unknown options in mask b7f2 [ 496.889109][T22729] netlink: 'syz.2.4408': attribute type 2 has an invalid length. [ 497.281607][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4419'. [ 497.410776][T22771] ip6tnl1: entered promiscuous mode [ 497.482025][T22773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4421'. [ 497.491524][T22773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4421'. [ 497.504762][T22773] netlink: 'syz.0.4421': attribute type 7 has an invalid length. [ 497.570447][T22778] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 497.865829][T22804] syzkaller0: entered promiscuous mode [ 497.873078][T22804] syzkaller0: entered allmulticast mode [ 497.943599][T22804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4432'. [ 498.013461][T22813] lo speed is unknown, defaulting to 1000 [ 498.048018][T22813] wlan1 speed is unknown, defaulting to 1000 [ 498.058627][T22813] wg1 speed is unknown, defaulting to 1000 [ 498.066424][T22813] lo speed is unknown, defaulting to 1000 [ 498.074172][T22813] batadv0 speed is unknown, defaulting to 1000 [ 498.220079][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 498.240880][T22822] netlink: 'syz.2.4436': attribute type 4 has an invalid length. [ 498.420843][T22838] tipc: Enabled bearer , priority 0 [ 498.440240][T22838] syzkaller0: entered promiscuous mode [ 498.455883][T22838] syzkaller0: entered allmulticast mode [ 498.492593][T22836] tipc: Resetting bearer [ 498.524596][T22836] tipc: Disabling bearer [ 498.555212][T22839] lo speed is unknown, defaulting to 1000 [ 498.598269][T22839] wlan1 speed is unknown, defaulting to 1000 [ 498.645213][T22839] wg1 speed is unknown, defaulting to 1000 [ 498.666556][T22839] lo speed is unknown, defaulting to 1000 [ 498.691992][T22839] batadv0 speed is unknown, defaulting to 1000 [ 498.875954][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 498.884009][ C1] lec:lec_tx_timeout: lec0 [ 498.889651][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 499.377468][T22891] gretap0: left promiscuous mode [ 499.394686][T22891] batadv0: left promiscuous mode [ 499.401139][T22891] geneve2: left promiscuous mode [ 499.558504][T22891] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.600093][ T7150] net_ratelimit: 29 callbacks suppressed [ 499.600113][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 499.776182][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 499.906467][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 499.921698][T22908] lo speed is unknown, defaulting to 1000 [ 499.953553][T22908] wlan1 speed is unknown, defaulting to 1000 [ 499.972824][T22908] wg1 speed is unknown, defaulting to 1000 [ 499.998424][T22908] lo speed is unknown, defaulting to 1000 [ 500.007816][T22908] batadv0 speed is unknown, defaulting to 1000 [ 500.026391][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 500.147481][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 500.277037][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 500.296846][T22934] netlink: 'syz.4.4463': attribute type 21 has an invalid length. [ 500.308101][T22929] netlink: 'syz.2.4462': attribute type 21 has an invalid length. [ 500.324334][T22929] netlink: 'syz.2.4462': attribute type 4 has an invalid length. [ 500.374133][T22937] netlink: 'syz.4.4463': attribute type 3 has an invalid length. [ 500.386327][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 500.444798][T22929] netlink: 'syz.2.4462': attribute type 1 has an invalid length. [ 500.496125][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 500.547683][T22935] rdma_rxe: rxe_newlink: failed to add wg1 [ 500.650909][T22949] netlink: 'syz.4.4467': attribute type 12 has an invalid length. [ 500.806070][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 500.880190][T22957] lo speed is unknown, defaulting to 1000 [ 500.909326][T22957] wlan1 speed is unknown, defaulting to 1000 [ 500.926950][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 501.046832][T22957] wg1 speed is unknown, defaulting to 1000 [ 501.102637][T22957] lo speed is unknown, defaulting to 1000 [ 501.136287][T22957] batadv0 speed is unknown, defaulting to 1000 [ 501.299184][T22984] tipc: Enabled bearer , priority 0 [ 501.330747][T22984] syzkaller0: entered promiscuous mode [ 501.346996][T22984] syzkaller0: entered allmulticast mode [ 501.561059][T22984] tipc: Resetting bearer [ 501.643537][T22989] lo speed is unknown, defaulting to 1000 [ 501.675621][T22989] wlan1 speed is unknown, defaulting to 1000 [ 501.741412][T22989] wg1 speed is unknown, defaulting to 1000 [ 501.787218][T22989] lo speed is unknown, defaulting to 1000 [ 501.821542][T22989] batadv0 speed is unknown, defaulting to 1000 [ 501.831913][T23008] __nla_validate_parse: 10 callbacks suppressed [ 501.831931][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4479'. [ 502.029379][T22980] tipc: Resetting bearer [ 502.081161][T22980] tipc: Disabling bearer [ 502.246916][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4480'. [ 502.344547][T23024] tipc: Enabled bearer , priority 0 [ 502.372110][T23028] validate_nla: 2 callbacks suppressed [ 502.372126][T23028] netlink: 'syz.3.4485': attribute type 5 has an invalid length. [ 502.389252][T23024] syzkaller0: entered promiscuous mode [ 502.398604][T23024] syzkaller0: entered allmulticast mode [ 502.416757][T23024] tipc: Resetting bearer [ 502.454561][T23022] tipc: Resetting bearer [ 502.494480][T23022] tipc: Disabling bearer [ 502.876758][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 503.246524][T23081] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 503.304307][T23082] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4498'. [ 503.318237][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4496'. [ 503.322085][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4499'. [ 503.341564][T23085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4500'. [ 503.896208][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 503.904276][ C1] lec:lec_tx_timeout: lec0 [ 503.908953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 504.405307][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4505'. [ 504.414804][T23106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4505'. [ 504.492784][T23121] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4511'. [ 504.560646][T23118] gre1: entered allmulticast mode [ 504.704174][T23127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4513'. [ 504.726261][ T3503] net_ratelimit: 27 callbacks suppressed [ 504.726280][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 504.874460][T23141] bond10: entered allmulticast mode [ 504.893966][T23141] bridge4: entered promiscuous mode [ 504.899474][T23141] bridge4: entered allmulticast mode [ 504.913135][T23141] bond10: (slave bridge4): making interface the new active one [ 504.923904][T23141] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 504.958850][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.076533][ T3503] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.186446][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.260809][T23158] netlink: 'syz.0.4518': attribute type 10 has an invalid length. [ 505.296094][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.328736][T23159] netlink: 'syz.0.4518': attribute type 2 has an invalid length. [ 505.407137][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.518718][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.594737][T23179] netlink: 'syz.3.4525': attribute type 4 has an invalid length. [ 505.608801][T23182] lo speed is unknown, defaulting to 1000 [ 505.621560][T23182] wlan1 speed is unknown, defaulting to 1000 [ 505.635183][T23179] SET target dimension over the limit! [ 505.641000][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.653544][T23182] wg1 speed is unknown, defaulting to 1000 [ 505.664291][T23182] lo speed is unknown, defaulting to 1000 [ 505.673626][T23182] batadv0 speed is unknown, defaulting to 1000 [ 505.756640][ T7150] bond5: (slave macvlan5): failed to get link speed/duplex [ 505.879841][T23189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.888911][T21561] bond5: (slave macvlan5): failed to get link speed/duplex [ 506.502462][T23237] netlink: 'syz.4.4536': attribute type 1 has an invalid length. [ 506.598588][T23242] netlink: 'syz.2.4538': attribute type 142 has an invalid length. [ 506.742184][T23240] can: request_module (can-proto-4) failed. [ 507.064561][T23263] bond0: option mode: invalid value (254) [ 507.080774][T23263] bond0 (unregistering): Released all slaves [ 507.375506][T23285] lo speed is unknown, defaulting to 1000 [ 507.399595][T23285] wlan1 speed is unknown, defaulting to 1000 [ 507.411595][T23285] wg1 speed is unknown, defaulting to 1000 [ 507.508281][T23285] lo speed is unknown, defaulting to 1000 [ 507.515809][T23285] batadv0 speed is unknown, defaulting to 1000 [ 507.733340][T23301] lo speed is unknown, defaulting to 1000 [ 507.757956][T23301] wlan1 speed is unknown, defaulting to 1000 [ 507.812622][T23301] wg1 speed is unknown, defaulting to 1000 [ 507.857998][T23301] lo speed is unknown, defaulting to 1000 [ 507.877085][T23321] __nla_validate_parse: 7 callbacks suppressed [ 507.877104][T23321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4557'. [ 508.130110][T23324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4557'. [ 508.198235][T23321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4557'. [ 508.232634][T23321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4557'. [ 508.573693][T23301] batadv0 speed is unknown, defaulting to 1000 [ 508.641609][ T5837] Bluetooth: hci5: command 0x0405 tx timeout [ 508.791504][T23350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4560'. [ 508.915963][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 508.924023][ C1] lec:lec_tx_timeout: lec0 [ 508.928704][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 509.384545][T23391] netlink: 'syz.3.4565': attribute type 11 has an invalid length. [ 509.400164][T23389] tipc: Enabled bearer , priority 0 [ 509.411351][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 509.423593][T23389] syzkaller0: entered promiscuous mode [ 509.438719][T23389] syzkaller0: entered allmulticast mode [ 509.651520][T23389] tipc: Resetting bearer [ 509.747198][T23387] tipc: Resetting bearer [ 509.849486][T23387] tipc: Disabling bearer [ 510.099259][T21566] net_ratelimit: 16 callbacks suppressed [ 510.099278][T21566] bond5: (slave macvlan5): failed to get link speed/duplex [ 510.282307][T23419] 8021q: adding VLAN 0 to HW filter on device bond11 [ 510.299837][T23419] team0: Port device bond11 added [ 510.305093][T23416] lo speed is unknown, defaulting to 1000 [ 510.316837][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 510.368980][T23416] wlan1 speed is unknown, defaulting to 1000 [ 510.395328][T23416] wg1 speed is unknown, defaulting to 1000 [ 510.426200][T23416] lo speed is unknown, defaulting to 1000 [ 510.436329][T21566] bond5: (slave macvlan5): failed to get link speed/duplex [ 510.447531][T23416] batadv0 speed is unknown, defaulting to 1000 [ 510.496832][T23441] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 510.518895][T23443] netlink: 'syz.1.4575': attribute type 1 has an invalid length. [ 510.536069][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4575'. [ 510.545380][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4576'. [ 510.556649][T21566] bond5: (slave macvlan5): failed to get link speed/duplex [ 510.575877][T23442] netlink: 'syz.2.4576': attribute type 21 has an invalid length. [ 510.686579][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 510.807321][T21571] bond5: (slave macvlan5): failed to get link speed/duplex [ 510.851550][T23465] pim6reg: entered allmulticast mode [ 510.916891][T23460] syzkaller0: entered promiscuous mode [ 510.922524][T23460] syzkaller0: entered allmulticast mode [ 511.109919][T23471] gtp1: entered promiscuous mode [ 511.115168][T23471] gtp1: entered allmulticast mode [ 511.154875][T21576] bond5: (slave macvlan5): failed to get link speed/duplex [ 511.277071][T21566] bond5: (slave macvlan5): failed to get link speed/duplex [ 511.396456][T21566] bond5: (slave macvlan5): failed to get link speed/duplex [ 511.449257][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4590'. [ 511.478665][T23492] netlink: 'syz.4.4590': attribute type 11 has an invalid length. [ 511.517128][ T13] bond5: (slave macvlan5): failed to get link speed/duplex [ 511.679794][ C1] ------------[ cut here ]------------ [ 511.685800][ C1] ODEBUG: free active (active state 0) object: ffff8880588b1c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 511.698760][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz-executor/18111 [ 511.709689][ C1] Modules linked in: [ 511.713906][ C1] CPU: 1 UID: 0 PID: 18111 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 511.723553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 511.733684][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 511.740091][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 511.759776][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 511.765871][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a48cff8 RCX: 0000000000000000 [ 511.773914][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 511.781951][ C1] RBP: ffffffff8bcf4a00 R08: ffff8880588b1c90 R09: ffffffff8bcf5d20 [ 511.790008][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880588b1e00 [ 511.798036][ C1] R13: ffffffff901b4570 R14: ffff8880588b1000 R15: ffff8880588b1c90 [ 511.806068][ C1] FS: 000055556a3b2500(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 511.815009][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.821678][ C1] CR2: 00007effa27e42f8 CR3: 0000000065f70000 CR4: 00000000003526f0 [ 511.829704][ C1] Call Trace: [ 511.833008][ C1] [ 511.835861][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 511.841608][ C1] kfree+0x13a/0x610 [ 511.845523][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 511.850699][ C1] rose_timer_expiry+0x4cb/0x600 [ 511.855662][ C1] ? call_timer_fn+0x178/0x5a0 [ 511.860497][ C1] call_timer_fn+0x192/0x5a0 [ 511.865101][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 511.870808][ C1] ? call_timer_fn+0xd4/0x5a0 [ 511.875499][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 511.880701][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.885944][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 511.891426][ C1] __run_timer_base+0x652/0x8b0 [ 511.896344][ C1] ? ktime_get+0x45/0x200 [ 511.900703][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 511.906154][ C1] ? sched_clock_cpu+0x74/0x440 [ 511.911042][ C1] run_timer_softirq+0xb7/0x170 [ 511.916013][ C1] handle_softirqs+0x22a/0x7c0 [ 511.920802][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 511.925593][ C1] __irq_exit_rcu+0x5f/0x150 [ 511.930260][ C1] irq_exit_rcu+0x9/0x30 [ 511.934524][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 511.940260][ C1] [ 511.943198][ C1] [ 511.946180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.952178][ C1] RIP: 0010:lock_release+0x2d7/0x3a0 [ 511.957534][ C1] Code: b7 76 11 00 00 00 00 eb b5 e8 25 b4 fd 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 71 76 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8a 98 00 0a cc 48 8d 3d c2 51 73 [ 511.977198][ C1] RSP: 0018:ffffc9000212f7c0 EFLAGS: 00000286 [ 511.983291][ C1] RAX: a00918747f8faf00 RBX: 0000000000000202 RCX: 0000000000000046 [ 511.991333][ C1] RDX: 0000000000000000 RSI: ffffffff8e151802 RDI: ffffffff8c276500 [ 511.999355][ C1] RBP: ffff888031b52948 R08: ffffc9000212ff38 R09: 0000000000000000 [ 512.007379][ C1] R10: ffffc9000212f918 R11: fffff52000425f25 R12: 0000000000000000 [ 512.015361][ C1] R13: 0000000000000000 R14: ffffffff8e75e0a0 R15: ffff888031b51e40 [ 512.023412][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 512.028569][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 512.033676][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 512.038825][ C1] ? do_syscall_64+0x14d/0xf80 [ 512.043600][ C1] ? __d_alloc+0x37/0x6f0 [ 512.047955][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.054129][ C1] arch_stack_walk+0x11b/0x150 [ 512.058956][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.065037][ C1] stack_trace_save+0xa9/0x100 [ 512.069830][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 512.075216][ C1] kasan_save_track+0x3e/0x80 [ 512.079924][ C1] ? kasan_save_track+0x3e/0x80 [ 512.084783][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 512.089833][ C1] ? kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 512.095817][ C1] ? __d_alloc+0x37/0x6f0 [ 512.100175][ C1] ? d_alloc_pseudo+0x21/0xc0 [ 512.104859][ C1] ? alloc_file_pseudo+0xdd/0x240 [ 512.109923][ C1] ? sock_alloc_file+0xb8/0x2e0 [ 512.114786][ C1] ? __sys_socket+0x13c/0x1b0 [ 512.119485][ C1] ? __x64_sys_socket+0x7a/0x90 [ 512.124342][ C1] ? do_syscall_64+0x14d/0xf80 [ 512.129172][ C1] __kasan_slab_alloc+0x6c/0x80 [ 512.134030][ C1] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 512.139863][ C1] ? __d_alloc+0x37/0x6f0 [ 512.144197][ C1] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 512.150208][ C1] __d_alloc+0x37/0x6f0 [ 512.154382][ C1] d_alloc_pseudo+0x21/0xc0 [ 512.158931][ C1] alloc_file_pseudo+0xdd/0x240 [ 512.163785][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 512.169268][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 512.174387][ C1] ? _raw_spin_unlock+0x28/0x50 [ 512.179294][ C1] sock_alloc_file+0xb8/0x2e0 [ 512.183985][ C1] ? __sys_socket+0x12b/0x1b0 [ 512.188707][ C1] __sys_socket+0x13c/0x1b0 [ 512.193214][ C1] __x64_sys_socket+0x7a/0x90 [ 512.197918][ C1] do_syscall_64+0x14d/0xf80 [ 512.202520][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.208613][ C1] ? trace_irq_disable+0x37/0x100 [ 512.213654][ C1] ? clear_bhb_loop+0x40/0x90 [ 512.218880][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.224776][ C1] RIP: 0033:0x7effa259d807 [ 512.229214][ C1] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.248938][ C1] RSP: 002b:00007ffff71e9ea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 512.257383][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007effa259d807 [ 512.265358][ C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 512.273369][ C1] RBP: 00007ffff71ea5ac R08: 0000000000000000 R09: 0000000000000000 [ 512.281389][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000fa [ 512.289387][ C1] R13: 00000000000927c0 R14: 000000000007ce70 R15: 00007ffff71ea600 [ 512.297405][ C1] [ 512.300435][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 512.307706][ C1] CPU: 1 UID: 0 PID: 18111 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 512.317239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.327276][ C1] Call Trace: [ 512.330541][ C1] [ 512.333370][ C1] vpanic+0x1e0/0x670 [ 512.337351][ C1] panic+0xc5/0xd0 [ 512.341071][ C1] ? __pfx_panic+0x10/0x10 [ 512.345529][ C1] __warn+0x315/0x4a0 [ 512.349519][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 512.355248][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 512.360960][ C1] __report_bug+0x29a/0x540 [ 512.365466][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 512.371287][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 512.377011][ C1] ? __pfx___report_bug+0x10/0x10 [ 512.382022][ C1] ? kfree+0x1c1/0x610 [ 512.386076][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 512.391171][ C1] ? call_timer_fn+0x192/0x5a0 [ 512.395917][ C1] ? __run_timer_base+0x652/0x8b0 [ 512.400934][ C1] ? run_timer_softirq+0xb7/0x170 [ 512.405943][ C1] ? handle_softirqs+0x22a/0x7c0 [ 512.410885][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 512.415664][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.421579][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.427719][ C1] ? lock_release+0x2d7/0x3a0 [ 512.432383][ C1] ? unwind_next_frame+0x1aaa/0x23c0 [ 512.437676][ C1] ? arch_stack_walk+0x11b/0x150 [ 512.442601][ C1] report_bug_entry+0x19a/0x290 [ 512.447445][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 512.453152][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 512.458866][ C1] handle_bug+0xca/0x200 [ 512.463100][ C1] exc_invalid_op+0x1a/0x50 [ 512.467590][ C1] asm_exc_invalid_op+0x1a/0x20 [ 512.472437][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 512.478758][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 512.498353][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 512.504408][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a48cff8 RCX: 0000000000000000 [ 512.512372][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 512.520361][ C1] RBP: ffffffff8bcf4a00 R08: ffff8880588b1c90 R09: ffffffff8bcf5d20 [ 512.528318][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880588b1e00 [ 512.536280][ C1] R13: ffffffff901b4570 R14: ffff8880588b1000 R15: ffff8880588b1c90 [ 512.544241][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 512.549604][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 512.555228][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 512.560855][ C1] kfree+0x13a/0x610 [ 512.564736][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 512.569839][ C1] rose_timer_expiry+0x4cb/0x600 [ 512.574764][ C1] ? call_timer_fn+0x178/0x5a0 [ 512.579515][ C1] call_timer_fn+0x192/0x5a0 [ 512.584084][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.589533][ C1] ? call_timer_fn+0xd4/0x5a0 [ 512.594205][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 512.599304][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.604485][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.609938][ C1] __run_timer_base+0x652/0x8b0 [ 512.614784][ C1] ? ktime_get+0x45/0x200 [ 512.619116][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 512.624484][ C1] ? sched_clock_cpu+0x74/0x440 [ 512.629333][ C1] run_timer_softirq+0xb7/0x170 [ 512.634177][ C1] handle_softirqs+0x22a/0x7c0 [ 512.638942][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 512.643693][ C1] __irq_exit_rcu+0x5f/0x150 [ 512.648272][ C1] irq_exit_rcu+0x9/0x30 [ 512.652504][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.658128][ C1] [ 512.661058][ C1] [ 512.663970][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.669933][ C1] RIP: 0010:lock_release+0x2d7/0x3a0 [ 512.675202][ C1] Code: b7 76 11 00 00 00 00 eb b5 e8 25 b4 fd 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 71 76 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8a 98 00 0a cc 48 8d 3d c2 51 73 [ 512.694791][ C1] RSP: 0018:ffffc9000212f7c0 EFLAGS: 00000286 [ 512.700844][ C1] RAX: a00918747f8faf00 RBX: 0000000000000202 RCX: 0000000000000046 [ 512.708803][ C1] RDX: 0000000000000000 RSI: ffffffff8e151802 RDI: ffffffff8c276500 [ 512.716759][ C1] RBP: ffff888031b52948 R08: ffffc9000212ff38 R09: 0000000000000000 [ 512.724715][ C1] R10: ffffc9000212f918 R11: fffff52000425f25 R12: 0000000000000000 [ 512.732698][ C1] R13: 0000000000000000 R14: ffffffff8e75e0a0 R15: ffff888031b51e40 [ 512.740685][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 512.745796][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 512.750903][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 512.756010][ C1] ? do_syscall_64+0x14d/0xf80 [ 512.760784][ C1] ? __d_alloc+0x37/0x6f0 [ 512.765101][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.771248][ C1] arch_stack_walk+0x11b/0x150 [ 512.776003][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.782054][ C1] stack_trace_save+0xa9/0x100 [ 512.786804][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 512.792168][ C1] kasan_save_track+0x3e/0x80 [ 512.796833][ C1] ? kasan_save_track+0x3e/0x80 [ 512.801670][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 512.806683][ C1] ? kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 512.812651][ C1] ? __d_alloc+0x37/0x6f0 [ 512.816961][ C1] ? d_alloc_pseudo+0x21/0xc0 [ 512.821628][ C1] ? alloc_file_pseudo+0xdd/0x240 [ 512.826660][ C1] ? sock_alloc_file+0xb8/0x2e0 [ 512.831518][ C1] ? __sys_socket+0x13c/0x1b0 [ 512.836185][ C1] ? __x64_sys_socket+0x7a/0x90 [ 512.841020][ C1] ? do_syscall_64+0x14d/0xf80 [ 512.845814][ C1] __kasan_slab_alloc+0x6c/0x80 [ 512.850652][ C1] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 512.856463][ C1] ? __d_alloc+0x37/0x6f0 [ 512.860828][ C1] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 512.866799][ C1] __d_alloc+0x37/0x6f0 [ 512.870943][ C1] d_alloc_pseudo+0x21/0xc0 [ 512.875429][ C1] alloc_file_pseudo+0xdd/0x240 [ 512.880259][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 512.885693][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 512.890788][ C1] ? _raw_spin_unlock+0x28/0x50 [ 512.895623][ C1] sock_alloc_file+0xb8/0x2e0 [ 512.900287][ C1] ? __sys_socket+0x12b/0x1b0 [ 512.904942][ C1] __sys_socket+0x13c/0x1b0 [ 512.909426][ C1] __x64_sys_socket+0x7a/0x90 [ 512.914084][ C1] do_syscall_64+0x14d/0xf80 [ 512.918658][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.924705][ C1] ? trace_irq_disable+0x37/0x100 [ 512.929716][ C1] ? clear_bhb_loop+0x40/0x90 [ 512.934373][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.940248][ C1] RIP: 0033:0x7effa259d807 [ 512.944643][ C1] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.964232][ C1] RSP: 002b:00007ffff71e9ea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 512.972630][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007effa259d807 [ 512.980596][ C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 512.988562][ C1] RBP: 00007ffff71ea5ac R08: 0000000000000000 R09: 0000000000000000 [ 512.996523][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000fa [ 513.004482][ C1] R13: 00000000000927c0 R14: 000000000007ce70 R15: 00007ffff71ea600 [ 513.012455][ C1] [ 513.015837][ C1] Kernel Offset: disabled [ 513.020150][ C1] Rebooting in 86400 seconds..