last executing test programs: 9.621344269s ago: executing program 0 (id=4162): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, 0x0, 0x0, 0x200008c0}], 0x1, 0x44840) recvmsg$can_j1939(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0xfe60}], 0x1}, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) r6 = accept4$nfc_llcp(r4, &(0x7f0000000180), &(0x7f0000000240)=0x60, 0x80800) shutdown(r6, 0x1) bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, r5, 0x1, 0x4, 0x6, 0x7, "5ebdecec37dad013046fc3f799853e8d73ec743631afc6f869265565fff955df3c64a72f5675cb81163f90f20c494c7e08d5e97d97d6537cc7c02d22655cfd", 0x3e}, 0x60) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) 9.2520506s ago: executing program 0 (id=4166): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="100000000514010028bd7000fedbdf255efc3e193e2ad1703d6550187f7c333ba3cf6a4e3c9fa3876c595e33baf32d"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x4814) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x2, 0x3, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4095, 0xfff}, {&(0x7f0000000300)=""/63, 0x3f}], 0x2}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r11, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x20, @empty}, 0x10, 0x0}}], 0x1, 0x800) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 7.146883649s ago: executing program 0 (id=4173): unshare(0x6020480) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x32, &(0x7f0000001000)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001100)=""/132, &(0x7f00000011c0)=0x84) sendmsg$IPSET_CMD_RENAME(r3, 0x0, 0x900) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000000)={{r2}, "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"}) close(r2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x4, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000080000000000000001c6eefa1598b81542f9293664f267b0d2743f6f34b780007911b5787ffbca8894d5a4120503c141b590650bb343da25722c8e02bc370e4ac631bd1a5aff0e923f69a0c416cf9213d5e3d817af766dd01d5929a065c0d3cf41ccf1459889843033191e8770747782a7d1bfb3d8a388b04c560bd857ff3d71219a4c51429a68ffe874b72eb06abb211e936d7f7fc55852f15741f4c8b3e92c4fb2a2d7da46f7f55234ad2f9cbf254b5473f2f91a2850d37788f7e760a00000000000000000000eb9cde2671544ce8907967", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) unshare(0x600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x80000000, 0x8800ac5]}, &(0x7f00000003c0)=0x44) 3.012410237s ago: executing program 1 (id=4209): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socket$kcm(0x29, 0x7, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000480), &(0x7f00000014c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007f00000000000000da41000018110000", @ANYRES32=r0, @ANYRES8=r1], &(0x7f0000000140)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2.906680933s ago: executing program 1 (id=4212): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1410, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}}, 0x40010) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 2.591492444s ago: executing program 1 (id=4215): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000780)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'gre0\x00', 0x13}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x30, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) socket$inet6(0xa, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095", @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) 2.530564701s ago: executing program 3 (id=4217): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2804) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x16, 0x7e, @random="82249c4a84a9ace194aa96ad11c2501cfe2f"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="fefa651ca430d57d4601c0081f9b0048112f2a23f77b74e4c1fcfcf146f68ffebeec7c19a21958e0935f1b9861d928d1cde0e503b9f545b17ffe68e7541ad47e477b363908634c974fa1fad4deb0bc832c047b49f88f024f8f3994c65d3dd5977defe2e8077f8422238398d527bb99a417454a7d6840c0b242f6ed7b1eb14a051c972365d93d6afd11bd7c955171b70b912a1ec9", @ANYBLOB="90b7547d582bc52f8a1b13ebef702fdc0d8626f9be64f5c4c672a3a881ef961044b64f96accac695d1b6dc6f277806096b150648414e8d52e340d7feb6e67a476125562df535c87ea84e43c30e650c8ff883d7784a52cd3a80c08d6383d2a5fd726e4fe79508d2f0362962f4ce00dede1f6f1cde0b2ccf5ec103ca7b131197501903e3aaadf69a65edb78aa3c1a5113858f24b92ef2d4eb5633fb1062695f3844ea85486e3b438c71f3c8a2e13d31a07bf658040de7801ab3e62860a6a5add6daaa87ec98d2c528f495d31c34751fab4354c4f4db42d7304c0aa"], 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0x8, 0x6}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r12, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="dc00000000010108000000000000000001000000140001800600034000030000060003400003000008000c4000000001140016407fe0000000000001000001f00000000014000f8008000240000000010800014000000005100016400000000400001000000000073c0010800800024000000001080001400000c9a8080002400000ff250800014000000007080002400000e9cd080003400000004008000340000008973000028014000180080001000a01010008000200e00000020c000280050001000000000000000000050001002f0000000800084000000006"], 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 2.382759362s ago: executing program 3 (id=4219): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) 2.235513063s ago: executing program 0 (id=4220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32, @ANYBLOB="040013001400030017"], 0x68}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 2.126341681s ago: executing program 2 (id=4222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x13) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0000e427d8ffbdc4b637c4addf1900", @ANYRES16=r2, @ANYBLOB="02002abd7000fbdbdf253e000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0xdc}, 0x1, 0x0, 0x0, 0x2004c040}, 0x4050) (async) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'hsr0\x00'}) 1.962462095s ago: executing program 4 (id=4224): syz_init_net_socket$ax25(0x3, 0x2, 0x3) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x3) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000280)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 1.906071573s ago: executing program 4 (id=4225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.455524362s ago: executing program 2 (id=4226): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000017c0)={0x0, 0x0, "7db46d5408a4297fc5ca0682b7c8d3365957082c3cbf0e11f690c68369d4025b3d1945255945151cbe3c9efdb4ee3cce7a9fb64e0e6d7af88c9daf0ac5841e0f0444dce1495cfb24d51604f2907d6d6b8c6cb353dd32d2378e8be3f4056e5c87cb02f985315eb7ad74dd4c1098ddc78df1021fa22132b54a1d8108d787576a4ceb00a617a04363bb6600a46af7b8229d6a187d1a193e08b9bb6ff8a8a9e60f7fe2d3942a7bf883b82797ed0d47d5b5ed3bb8525abbb9b65759a579f3b146dd83de7bdc6bd4e07dfd8d417ae6799cb4a58b8706817845d2f381b92275ca4353da4f84fd2b3d486e333c7dffe3e9ad2a141cfa9764a838eb76af925b9c0329961e", "9875a060dae632cf8d422c022bf5c9c52f3721646405eadd948451a46302faf1b0f9083be6c221f37fa7186b6765095bf6ed1e83270afd21b4160e757732e1826645ca71583cde0c6accca1701f86ee54a25fd384fdf12a66e0882fbdb6969e9ce4a6a8ee58eb72c63692d23e0a5269b451d8d56a246963b4003b678b5192f3b5c7d0779d9a21f0f9fc9581c78e81ba2994afd8607510ddf18c960ea28135bafc2ca73c292b9e4df441b617cfbf07fea75bce16ea0c5cf145bf8cce4e0cb2011cffc4c33548743d17cf325135675a7e8740be655c7b4db37f83ecf6492798abfc93a87e11ca7edf428556513ebff1bcbf7c36a308b359b8bbe00396912d3f537c1a3e6d61a410cc5d3e670d204cf3f6b6813f27d4395eb07658376bb049b0534ddb13e62d48420627703e741fc9a466f4c29d82ebe7558472f5a17b0af1d8efff716595291ab58f6100411a77b339a6a6df58cf7a441202820a617b794b666c2edef4f7dfe1ae6945d37dbb855337296268e587b8575543b95376b8960faea4bf48a33a914dee493f02f4084f254d07d49caf8ff0576522ad423e86721bdc4fdebf546225c1e5500709536cb7695c6ae8df59cab511d9cd8e4b278e947feea051cd4738fe37d12e0ad38bf59d6e2ebc33201b19751d68f1b59d45e72ff561bbe88b86ea1bbc759462fb0616dcfabf6a5d80743409d8ba0969e0f65e4f6be934547f04723572223a9d293b526a5cb254ff37a593e2fbfba00761ac3f4b07facaa3f4990ef0a8410d18001381b478ca186ac228332e48ea7962dba56c291819771ad94980b6b3b753b30dc842bcca9b5f3a82f02d0022406f4f93a9b2fc7819632df0e5567ddd610ae6b4ca943ad5e7b95f90e54b382e9f77b19afdb3ebb4f25238f2ec93f3ea669d4e2ada2d2ee6955e138130d5ab412ff99a9fea4b7b7d3d736c2133b503be383bcf69f3aea608fa20f22e92e96026ec4c408f2911235e07f95f8f88381390849004112d5588e6e992f22a92b16d579b952e363b07573051e4740397a8b3a70e62ee4b1f0d75a1af8b409863f75f3c9a7710f8f9b8a802a5ab9704ccad5fa816be4b1008b60d576a90901295ee7e927377ea19e7895f2c6dcf44b40aeaec5739037f39b2d1a69586721b5269e58a4e6bc08105066cb95d24b6bc03404a0dad183d0ec93ce42c1ac4d8f3518c5234107c7333c694697ffc1e176968e061c110eeadada6a0d9fff06ecff46d28b98fcc9de7531e107addeb292594738712838a34b6f7e00f0d7d901bf714c685c87b496ee992efa5e51f07d694cf792659f050c08109dbaa520ea513e452c4f0bdf915c0ca3630e57cfa0c65290fe72662db0e80321fbe3abe746a876a523517309f78e43df37ad9b365279b98eb9565340f4ba0ca98223e8a2c944826712383980018c9abb52cd1912941e17e4aa4fa89b9349c91807465b121f47d9e8ae0df71bf3975a4f9629e9d35ebf7bc6de75b84265fb07e5b761f84e78dd890ff6fdd7ff85558eea0b520e2d708516f0d923c75a20fd2cebb971bd35768b7724730474a12c7a6722df5178c50154f1947f7c3b1c4664b099c7f190ec622411d4f0f0cc35dccc0e61f59e5ebd1fabb12c49d7c2961d0c9a5f766afd4f3a80383f7bcb6b55b7df397929d5c3825970726c06e474c7c32ad21e76b2262afba571117cfa6367c40c00014a38ea6ca281831e5381b6e8b6a10a77ef0c52042d1c5c4c9e5225e816a8641cd0d72266376bcb06d3ec90b1af6162268dda808aa0a75af2a1c7b00752f453b5a727db9f76a17b457b4d8975638548915a8cb779a1372d3acdd8e6ab0a580dd20a995991f29edcd2e0328f31243d979b626b827841f8ef9e70098b8ebb1e4eeb4967d66c549625c949718811706b84739bfc296847693a1f761899ba24c76e3c7b54fb3d60d144e8703dd96f23975e19236bb24d3cab5ef2bdde6425437de35238408782b23f195c159f9e91a96d0302fd22b8c81586cd6652e82f667dd914aaafdd35922185ebf9737f6b45273baf250cf818842ea6ffa885cb08b5ce8a5e0e88bc4a25ecdc1c089f82167476aee7db6c57d8ea738e81c9f0df1ab3b194173c58f7ba31b6c075a485107b5e8c6217e21dc1affb68f6dd186e2f7445489efa9120eb2c700809f451850767b6145a05f1704d48c6f0b5e6a795862d1ad16f28aba0b15c5840f4c72cac330697930d7909b6b6809f3968430024543b86bf681cce48fea1d4f1fb86a9f4c34a8048c8c8d00f310aa0b0d6fe370283f18a9d0b27d641b50ebd865f4de46f1fb42d03ede07683d6661b8439baf3f56759cd067de7f4430c3f110db7713c677620ca204b629ab4308f005f3b4f1059ec9f23e738570f540b50294d2c77a68a1a435063aac4cd1c6c12ac1d99aa5efee82197bf8f5d8f7784be1ad91f3a7f25c0e84e1a7f24250018a8ac4afeb10cf86cb8f341840fdc79ca15f79524bbcaa0b37637c04cf48ea65546f4b1effff16ff066333dc6db41b8e043086cdb63e3fce3f7376f1bbd704346162716791a704ce86f2bc3145c4f2a5bbaea4774d33a294b6fe4bcdce717b8f3b589749d40667fd21c1c3ff72949e1d81cb70b046f17edb406ebe7228fa9a9c989417c4bed2770a5cb9c749c7e70f8ead181422b1c7a858bf8550fe69d8163f82faff5b49a1bbd55cabe8511c0ea0fdc6759ba610c9a2584987e0a9d194960c5858009fd55e246f304dce96e36ab028b9ce39685059881e2fe0f8f6bacf30b7d739892874bedbf23d56717d2e63f2217a9727d62811a9bd857452e1ea880fb29d2fac53812f85d89e62bccfdd25c66879a5bec635ac6ac97fe626044870cff32932b7e628b0eb3d019f310d5f7a36bdce7687a9ce97371da358d6eedece73ad16472ae6c83e8ae0498c6c2ce29452c8d6c03043281baf2635de5d9aaf0c8a702452d78c83ec41a43ff2179d4183f0e72246c4ae941c576fa31a97e57da460b90d485aee81cde4761fa4e89e1b3af94d539914a709d732ed85cdff67a8deebd40b0c23628d3b101b3a6cac437923e33bf5070a4bce0474ec3ec5ecbfe1b76a08f7ca1c1fe6230ef610a58e7266c6248029a767b8fa649a690734ca4b13f45dd0c2c4dba95bd081b736c9c1bb642eda8193bfaf7e06cbb0d7450d955f748691689332eac37567681f5a55ec31613ec8d3a3ae0b237747a6e7e5406762f98868df587fa973b74b4b34bbae59ab754db174f5be158f5091528f6207d9dd5a313107d88050124fbe75c9272f51ccb7c636cf9eb3e92e9eba8a99653b346e6f32a5ed53ab601b63e7a26ab569e6ae9876993bdfada523493df77907bc06e6d62bf955566d65c4adbb0b5dc2e6e6f599893264e99406012cb19c13f996a694751f7f6abfd4f0b65e0e95b9d031ff453c9b749772af8370a63fcfc719763a7ac4f4a31e949c50de4235f1a6bdf2c56f548fd4ebd4787a631154fe5f54df27b76d0162bd14416c169b617ef712de8e82221382faf8d6e78d60f439414c87c83b938a5e5d8c930ae92fb2911d732d6eb15e257467ee2ed90b9d27bfa1a73affbdc6074b212ba43dd0719bb6d735a3d75addb9a122ad91e809cd3f697b25b4a5146ab5f598ae7ed69a3e3c938fd5d384f8314c52bbaf00668833e97bfb3d8a114c54c788c3ff3b076a4e1493190c21fb118435ab1f830271a5c7cea11240db6e3f1f5869b26e9783ddd4247b091838b956510cd9c7dbde07345bd4c8beb6a9c5c5b41d2648bc047ace3fb7a1e5a055b38938c7e8562ae01818c20d34cb983ddcae51b71ba8ea5a3c175cf7d40fc931037bfeb5dbc565693ae4fa99a5a4b145e83313b538e2342f66fc30f5cb0e044d7d42e2665eb64628f875edce5ef4b5124627611de78e071c4974c8711f63bdf8db415f76c6536486ded8fda4aedfe36fed4078b83e7c21fa3ebf2e9c1dd05735ad6683ea8764c8836d38351bf4ce1c0ffefb5f2b8a73e7793b33da5ef69044f7601933354799484dfcdd55ff03d89d6b23098ed2a4e5ee89d3ebefac08c64119bb727b1d9b2c71fa5e7eb1f50c88696394e499fd04f39f3c7628e103036cc0aa86e37cd0dd5f708416e47f26a3dd00e20603879204b2482bf046e2c19dffde18668d9beaecb50ca5230988ba511720d4c412cbdea54c019afb7c007467fa357eec6514eae2eb469f7d75455470dbbbc017d9a7f80b3222db2de8a005f7688ba83b81bc462a22763a2083bdcd09b494aad1e26261c10e9b46ef467483883f26a46772c2e5a56a3d8a8cefa4884828d9e8639035f2955affb565211eff4b5cc2a8cf31d04da412f49c5d50141cfb62bf8efd0a67e6a79ba634aa08a9a403179caa92110ee226835acf069c38139033180d22f3939192c43c53372c9ff70c8705fc1c713ef34a8304b7956103af5db00140d78179c64ec6d0afcad01a78dc422c30ce629e4b1fb295873643684a8e391165bee1a972698bde471e451112b689b095da475fea4da3c2bea424205eccdb79ef64cb4514bedbf0040f712e2bc35d491be6484876fe384e7330c34ab186b8c5a3adfbcd7ead5172da7d5199c05d8914752678e681bfe7002a0f79cd68c4be12516dff9ee29ee636f108503b5fb2aa1a48341aaa5ab7fbfeb36fb153b95f106cf342b929ee8e9fb46991e9d788980159dd64625611b80ab43aaa6fcab493fca2baebe2f7192fd8425b988e45df2affb02cc1ef70c6acfdc49eaa97d6f898c839d2c1f32ef6602d9f9443df0d57774e3be34e727a59e4f75b1b3c24c13ec6efe6e34c95396d7f6c8d4376c3fd217fa4e5aea76b7c012b075a4dd80fec0f36e8422b2c2d9e28bef73bc0cb10926edac320717ef226e10bb1c9cb24744414fb43e4d39f692a04d03c3d969a83c039250df52561efd8e03120c65e82c1663aa43cc0de0080355d7a9d64c4ac11d65e1e47635c972adc9ade1dd589befc784d9d5e7b2a88be0afb340802f070f24b6b5892d678eef9da8ba79b8b69fa910a8c76d38ede6b0ff95f96c986fa3f7025bba3849f496867a41cc9d52f21eee73e586443d161b70c5a6143ead5e2134a75c21d2fa4de3ca839114ba61262df465b4f93bfaa921f344141d53834a3e52f2b5f37cf6ca15594d8d450ada82c73f857457051369f8374651fb4d4bcc03c4b140c8b9998b6251cd2dd806408ea938ae0f8943f33d2b91f4213acc14c044671b3ff26d382d43c3b0fb4bc19c6425d032432a1f2c043751283b9a5380500e7b46b409bf1400154ce6c6497e4e3d3079e231de9264edcb6dba617b711c0912e9d3a327cd06d8f40aecb45100014ab08046c54873fbd124e309d3616ac64f3dec00f3ec74df45561d898589f06b6b724a1510836c2823b34340e8957a7af9adb28bcdde"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000027c0)={{r1, 0x40cd, 0x0, 0x1, 0x4, 0xffffffffffff4747, 0x1e, 0x0, 0x347, 0x3, 0x3, 0x6, 0x731c, 0xfffffffffffffff4, 0x5}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x9, 0x71, 0x30, @private0, @loopback, 0x8000, 0x10, 0x9, 0x9}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', r3, r2, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008b000000000000000b20800018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000bd0a0600000000007500f4fffcffffff18000000ff01000000000000411f0000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x1001, &(0x7f0000000780)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.423545199s ago: executing program 0 (id=4227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x8918, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc000000000000000000000000000001fe80000000000000000000000000002b0000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2d, 'rlimit'}]}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.420354032s ago: executing program 3 (id=4228): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r6) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1.39290495s ago: executing program 1 (id=4229): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r11, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000400), &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.238463478s ago: executing program 2 (id=4230): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x88, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x58}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xa2, 0x5}}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x88}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x340, 0x3a8, 0x3a8, 0x340, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x268, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x8, 0x103, 0x33, 0x871004, 0x20000a, 0x80001, 0x7fffffff, 0x5, 0x90, 0xe0}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8, 0x96e6, 0x9, 'pptp\x00', 'syz0\x00', {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) unshare(0x2c060000) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r4, 0x952de000) socket(0x1, 0x5, 0x0) r5 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r10], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x260, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 1.237963603s ago: executing program 3 (id=4231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x240020c0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f00000001c0), &(0x7f0000000300), 0x2}, 0x20) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) recvmsg$kcm(r2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x21) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0xcec5af8c90a88475, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x20, 0x7, @udp='udp:syz1\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48004) 1.06129695s ago: executing program 3 (id=4232): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41095}, 0x80) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x1}, {0xffffffffffffffff, 0x502}, {r1, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00", 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) shutdown(r0, 0x2) 1.041204539s ago: executing program 0 (id=4233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@rthdrdstopts={{0x18}}], 0x18}, 0x922bac8576bdadce) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x2}]}, 0x34}}, 0xc000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x210, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e6f6bc113a38e922b4a2687de20e0b4e"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x138, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1621faac4026064cbdecff3ddb419ff9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "071bc991ef9b87aca7587675086751c208398728736926d3727008097265885b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4e57d7ef38650f54914a0f6398e7f844"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "387b165806941b5ebcd492937d0d7c3a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8d69f2a7174b76b8bb598d0a37164b07d8ffbce66ce46686e449af101962c716"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "07020c217a5f0a83544e56927268907b0b73013110454193438c86d3119533a8"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9a00fe00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYRESHEX=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r11, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0xe, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000800}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9fdd01e3170000000000000008ebcfee4e0168"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28) 1.039295128s ago: executing program 1 (id=4234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400210000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000034000000280012800b00010065727370616e000058ff02800400120006000e000000000006000f0000000000"], 0x48}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r5 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$netlink(r5, 0x10e, 0x9, 0x0, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f800000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 923.206893ms ago: executing program 4 (id=4235): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f", 0x4f}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d8", 0x25}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}], 0x4}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x20004804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 677.081486ms ago: executing program 2 (id=4236): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r3 = socket(0x1a, 0x800, 0x5) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20051090}, 0x8000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x38}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x1}], 0x1}, 0xc854) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB="f3766a4d"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 647.711162ms ago: executing program 4 (id=4237): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116300000000008510000002000000850000001f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10001) write(r1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000009ae78c09eedc3a3ef0c7e1d86e8da2968adbe97ec8a10da49cec17cb4ff4350bced0651d024ba19583916c31e0ba97f02a936c5ab68735dac0c5c9d4bb410fa46079357b83474a3f14811c1f864710094285bfc74a21163a30b4d96f14b23a5d59f8889af2a11249f28784551e3a4312a8131a859644f3843ea9aad2032cc7dbb67839efb97f80e48034f19e8dd695eb8815ad0205a9e04f7341b993d8e1051813728bbc055d7b", @ANYRES16=r4, @ANYBLOB="00032abd7000fddbdf250a0000005f000300a6af18897677a1f9fbd7fcf20ef22f18bd15524d366a89bc3727421cb397824cb468ec6d11ebff6a9db061cfe8fc2597fb60f8a7f55951dff84a27875fecb7d3d51987ec160624bee3cc3f3d99df7b828e41607de1b2755574fdc600180001801400020076657468305f766972745f776966690014000280100003800c0001800400030004000300"], 0xa0}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116300000000008510000002000000850000001f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) (async) pipe(&(0x7f0000000440)) (async) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10001) (async) write(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000009ae78c09eedc3a3ef0c7e1d86e8da2968adbe97ec8a10da49cec17cb4ff4350bced0651d024ba19583916c31e0ba97f02a936c5ab68735dac0c5c9d4bb410fa46079357b83474a3f14811c1f864710094285bfc74a21163a30b4d96f14b23a5d59f8889af2a11249f28784551e3a4312a8131a859644f3843ea9aad2032cc7dbb67839efb97f80e48034f19e8dd695eb8815ad0205a9e04f7341b993d8e1051813728bbc055d7b", @ANYRES16=r4, @ANYBLOB="00032abd7000fddbdf250a0000005f000300a6af18897677a1f9fbd7fcf20ef22f18bd15524d366a89bc3727421cb397824cb468ec6d11ebff6a9db061cfe8fc2597fb60f8a7f55951dff84a27875fecb7d3d51987ec160624bee3cc3f3d99df7b828e41607de1b2755574fdc600180001801400020076657468305f766972745f776966690014000280100003800c0001800400030004000300"], 0xa0}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) (async) 461.564492ms ago: executing program 2 (id=4238): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300030e0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005002b00000002004e22ac14140a00000000000000000100140002"], 0x70}, 0x1, 0x7}, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'veth1_macvtap\x00', @broadcast}) 342.881954ms ago: executing program 4 (id=4239): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000001080)={{0x33, @multicast2, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@broadcast, 0x2, 0x10000, 0x7ffffff, 0xfffffffb, 0x20100}}, 0x44) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x20040801}}], 0x1, 0x0) (async) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="30000000000000000000000007000000070b07000000000000000044140901"], 0x30}, 0x0) (async) accept4$unix(r1, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaa2aaaabaaa0900eb8c44a10800455502496099b7ffbd59891b40b5cc00"/39], 0x0) 305.416059ms ago: executing program 2 (id=4240): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a30000000028008000140000000020c0001800800014000000004080008400000005c050005000200000005000100060000001a000000000000"], 0x6c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x10, 0x12) socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8054a0000fa24bd7000fddbdf25"], 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x110, 0xffffffffffffffff, 0x0) 191.664152ms ago: executing program 4 (id=4241): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x40000008}) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="4db003d30f145704d6e0d606892fb9a5efc333b61997cb67b55c3abc8bfe7eac5c5700cd829137845779669566c8eada1e2548212852fa441ce79bd203c6ec45f287629bd81d229f3eac2f5a6b33d339c4a1fbe5e5c7396206c45cc9a5f8c81f3c224afe770633a58c58db18c00d6f2efc3d22cc304c96b84cfc49eb86851d2676f8e8b3e345bc137cb13de62f52d2f375afa27fcccca5336a1f93e72f"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) socket(0x22, 0x5, 0x4) connect(r6, &(0x7f0000000080)=@hci={0x1f, 0x4}, 0x80) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) 6.198221ms ago: executing program 1 (id=4242): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r3, 0x0) (async) recvmmsg(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) (async) unshare(0x6a040000) r4 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) (async) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c0004803869617465000000240002800800014000000000180002801400028008000180fffffffc08000340000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="60000000100003040003", @ANYRES32=0x0, @ANYBLOB="fb605959fd5104274cedf825502da81335b62f6ea95d66fd504b2823e05de9079952ad7221eb817931354e71f78bc0c14cfbc58eb781ef9bcd8b0e23bdcde5c3b9ffc7193e80bbf85b6208b73a6459452ea6496dd17550c5f82cfec47d4b8333b068a70c5daf4628e0c055e368b3fe1463", @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB], 0x60}}, 0x8000) (async) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000680)) (async) sendto(r5, &(0x7f0000000780)="ad3f1887b6f0ef02a9dfa43e0c1eb86b7688f4f476a5f24fc68988feace4e2ef85dcf345604170ea2bb00147c93609ec9e3e94c77654ddf6794633a724a46bc325469320d3414b5420bea607cb9826a03fc00b3ad97cb5e44d740200bb617a7ee3a319adba91022e38d922c6d318b10ddaf01d14f2ac3ccd28655b3ad0377ff4acad3e76b6838e72f7cd217d25f4e99bf98c8674f6bacd7d453a93fda386c081e9561f74cac7c21df0da1278d209a9796f3f0c283d08e9ff11fe95854a095aa753e638079ca567343592ef1d0dad067b86dc658e1993b4d990e515fd846bb56360ec6cda11be8e0a6ca2d07dc3bce3a61c7a75da63b525b40f7817e3ac448b9a382da51a29ad3af958e7b785726fe5a53c07977f193312f153243186a90d934f969aef34acdf1ca16aafc959a252d3268592144b6590fddd0352f4", 0x13b, 0x400c044, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 3 (id=4243): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0xc004) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x59}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$ax25(r2, 0x0, 0x0, 0xaae60ab96162348f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0xc814) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x20, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x400000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000bac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): ode [ 391.980791][T17720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 392.021279][T17880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2977'. [ 392.172870][T17720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 392.213856][T17861] wg1 speed is unknown, defaulting to 1000 [ 392.233408][T17861] lo speed is unknown, defaulting to 1000 [ 392.300795][T17720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 392.348949][T17890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.377331][T17890] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.395094][T17890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.812956][T17904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.877310][T17720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.918861][T17913] tipc: Enabled bearer , priority 0 [ 392.925899][T17720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.949272][T17720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.974039][T17917] syzkaller0: entered promiscuous mode [ 392.979588][T17917] syzkaller0: entered allmulticast mode [ 393.047929][T17720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.154796][T17913] tipc: Resetting bearer [ 393.180365][T17912] tipc: Resetting bearer [ 393.249576][T17912] tipc: Disabling bearer [ 393.302212][ T5831] Bluetooth: hci3: command tx timeout [ 393.547635][T17720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.725940][T17720] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.852775][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.860036][T10288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.908199][T17959] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 393.915078][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.923244][T10279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.977455][T17939] delete_channel: no stack [ 394.379823][T17720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.458829][T17720] veth0_vlan: entered promiscuous mode [ 394.477588][T17720] veth1_vlan: entered promiscuous mode [ 394.650997][T17720] veth0_macvtap: entered promiscuous mode [ 394.700606][T17720] veth1_macvtap: entered promiscuous mode [ 394.758172][T17720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.777680][T17968] ip6gre3: entered promiscuous mode [ 394.789170][T17968] ip6gre3: entered allmulticast mode [ 394.817118][T17720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.836242][T17970] syzkaller0: entered promiscuous mode [ 394.847337][T10272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.856851][T10272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.883856][T10272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.916399][T10275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.937221][T17975] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3000'. [ 394.972322][T17974] bond10: entered allmulticast mode [ 394.992732][T17977] bridge11: entered promiscuous mode [ 394.998067][T17977] bridge11: entered allmulticast mode [ 395.102376][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 395.110459][ C0] lec:lec_tx_timeout: lec0 [ 395.115684][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.192467][T10275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.206152][T10275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.346970][T10275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.366171][T10275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.383230][T10280] batadv1: left promiscuous mode [ 395.389711][ T5831] Bluetooth: hci3: command tx timeout [ 395.505042][T17996] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 395.620587][T17996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.905894][T18004] x_tables: unsorted entry at hook 2 [ 395.954027][T18005] x_tables: unsorted entry at hook 2 [ 395.958573][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 395.996343][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 396.512790][ T6497] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.587204][T18029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.598971][T18029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.609911][T18029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.619195][T18029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.627217][T18029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.734238][ T6497] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.792046][T10275] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.829233][T18025] lo speed is unknown, defaulting to 1000 [ 396.857195][T18025] batadv0 speed is unknown, defaulting to 1000 [ 397.077697][T18045] lo speed is unknown, defaulting to 1000 [ 397.585839][T18045] batadv0 speed is unknown, defaulting to 1000 [ 397.594896][T18025] wg1 speed is unknown, defaulting to 1000 [ 397.619472][T18025] lo speed is unknown, defaulting to 1000 [ 397.866062][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.992457][T10272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.022461][T10272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.102578][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.210491][T18079] bridge_slave_1: left allmulticast mode [ 398.216861][T18079] bridge_slave_1: left promiscuous mode [ 398.222861][T18079] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.239031][T18079] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 398.266190][T18080] netlink: 'syz.0.3027': attribute type 3 has an invalid length. [ 398.275282][T18045] wg1 speed is unknown, defaulting to 1000 [ 398.295516][T18045] lo speed is unknown, defaulting to 1000 [ 398.450926][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3029'. [ 398.501910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.577135][T18089] netlink: 'syz.0.3031': attribute type 10 has an invalid length. [ 398.633613][T18089] team0: Cannot enslave team device to itself [ 398.669717][T18086] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 398.681792][T18090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3030'. [ 398.741688][T18029] Bluetooth: hci0: command tx timeout [ 398.827849][T18100] veth1_macvtap: left promiscuous mode [ 398.834225][T18100] macsec0: entered allmulticast mode [ 398.869998][T18100] veth1_macvtap: entered promiscuous mode [ 398.879893][T18100] veth1_macvtap: entered allmulticast mode [ 398.888025][T18100] macsec0: left allmulticast mode [ 398.893497][T18100] veth1_macvtap: left allmulticast mode [ 398.903092][ T5905] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.913878][T18085] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 399.008637][T18025] chnl_net:caif_netlink_parms(): no params data found [ 399.147528][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.156902][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.169778][T18104] bond0: (slave bond_slave_1): Releasing backup interface [ 399.182318][T18108] netlink: 'syz.0.3034': attribute type 1 has an invalid length. [ 399.194966][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3034'. [ 399.284509][T18113] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3036'. [ 399.520236][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.561922][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.583286][T18025] bridge_slave_0: entered allmulticast mode [ 399.603625][T18025] bridge_slave_0: entered promiscuous mode [ 399.642764][T18120] netem: incorrect ge model size [ 399.653410][T18120] netem: change failed [ 399.673690][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.694419][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.725097][T18025] bridge_slave_1: entered allmulticast mode [ 399.796944][T18025] bridge_slave_1: entered promiscuous mode [ 400.060823][T18025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.097699][T18025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.132182][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 400.140280][ C0] lec:lec_tx_timeout: lec0 [ 400.146324][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.177554][T18025] team0: Port device team_slave_0 added [ 400.185075][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.198844][T18025] team0: Port device team_slave_1 added [ 400.304999][T18025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.320541][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.350742][T18025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.370671][T18025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.378991][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.413136][T18025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.576999][T18025] hsr_slave_0: entered promiscuous mode [ 400.587532][T18025] hsr_slave_1: entered promiscuous mode [ 400.607053][T18025] debugfs: 'hsr0' already exists in 'hsr' [ 400.613154][T18025] Cannot create hsr debugfs directory [ 400.821704][T18029] Bluetooth: hci0: command tx timeout [ 400.886816][T18179] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3045'. [ 400.920067][T18025] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.034087][T18025] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.092327][T18025] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.155250][T18025] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.225786][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.181731][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 402.191068][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.262401][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.597912][T18128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.670006][T18025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.715979][T18025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.754199][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 402.796023][T18025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.816951][T18199] netlink: 'syz.0.3047': attribute type 1 has an invalid length. [ 402.893232][T18195] bond10: entered promiscuous mode [ 402.902521][T18029] Bluetooth: hci0: command tx timeout [ 402.912476][T18195] bond10: entered allmulticast mode [ 402.934607][T18195] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.956468][T18025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.068793][T18211] netlink: 'syz.1.3051': attribute type 30 has an invalid length. [ 403.093141][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3052'. [ 403.107630][T18220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.117515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.129565][T18211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3051'. [ 403.130665][T18220] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 403.193458][T18220] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3052'. [ 403.230833][T18211] bond11: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 403.244721][T18211] bond11 (unregistering): Released all slaves [ 403.302179][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.477482][T18025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.490127][T18235] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3055'. [ 403.550779][T18025] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.603669][T10279] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.610870][T10279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.682603][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.690293][T10279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.829257][T18251] tipc: Enabled bearer , priority 0 [ 403.850624][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3059'. [ 403.980749][T18250] tipc: Disabling bearer [ 404.103146][T18265] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 404.154173][T18265] 8021q: adding VLAN 0 to HW filter on device bond11 [ 404.175587][T18264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.193032][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 404.302339][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3062'. [ 404.328762][T18265] bond11 (unregistering): Released all slaves [ 404.346585][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.459959][T18276] macvlan1: entered promiscuous mode [ 404.476453][T18276] macvlan1: entered allmulticast mode [ 404.504287][T18276] veth1_vlan: entered allmulticast mode [ 404.526964][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 404.567465][T18287] "syz.1.3065" (18287) uses obsolete ecb(arc4) skcipher [ 404.717755][T18025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.808235][T18025] veth0_vlan: entered promiscuous mode [ 404.845871][T18025] veth1_vlan: entered promiscuous mode [ 404.885489][T18025] veth0_macvtap: entered promiscuous mode [ 404.898883][T18025] veth1_macvtap: entered promiscuous mode [ 404.959238][T18025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.982327][T18029] Bluetooth: hci0: command tx timeout [ 404.990597][T18025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.026142][T18300] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1 [ 405.038443][T10278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.056249][T10278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.076833][T10278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.104253][T10278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.224396][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.250931][T10275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.262962][T10275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.309182][T18308] netlink: 'syz.0.3070': attribute type 30 has an invalid length. [ 405.341632][T10280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.350288][T10280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.384291][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.502748][T18320] netlink: 'syz.0.3072': attribute type 2 has an invalid length. [ 405.515398][T18320] netlink: 'syz.0.3072': attribute type 7 has an invalid length. [ 405.794713][T18333] netlink: 'syz.0.3074': attribute type 2 has an invalid length. [ 405.890349][T18333] hmac(sha224: entered promiscuous mode [ 405.951539][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 405.959612][ C0] lec:lec_tx_timeout: lec0 [ 405.972067][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.987679][T18346] __nla_validate_parse: 5 callbacks suppressed [ 405.987698][T18346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3075'. [ 406.027461][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'. [ 406.269057][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'. [ 406.308326][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.322384][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.333675][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.347100][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.355105][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.412576][T18351] lo speed is unknown, defaulting to 1000 [ 406.420387][T18351] batadv0 speed is unknown, defaulting to 1000 [ 406.433596][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.461245][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 406.606290][T18360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3080'. [ 406.663078][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3080'. [ 406.672528][T18366] SET target dimension over the limit! [ 406.986583][T18351] wg1 speed is unknown, defaulting to 1000 [ 407.017052][T18351] lo speed is unknown, defaulting to 1000 [ 407.427482][T18396] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3089'. [ 407.465298][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.162093][ T6485] net_ratelimit: 1 callbacks suppressed [ 408.162114][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.263900][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.422386][ T5831] Bluetooth: hci1: command tx timeout [ 408.518748][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.901165][ T12] team0: Port device bridge9 removed [ 408.989817][ T12] bond8 (unregistering): (slave bridge11): Releasing active interface [ 409.039028][ T12] team0: Port device bond0 removed [ 409.049988][ T12] bond0 (unregistering): (slave bond9): Releasing backup interface [ 409.058706][ T12] bond9 (unregistering): left promiscuous mode [ 409.065527][ T12] bond0 (unregistering): Released all slaves [ 409.078574][ T12] bond1 (unregistering): Released all slaves [ 409.097274][ T12] bond2 (unregistering): Released all slaves [ 409.116871][ T12] bond3 (unregistering): Released all slaves [ 409.132004][ T12] bond4 (unregistering): Released all slaves [ 409.151803][ T12] bond5 (unregistering): (slave batadv1): Releasing active interface [ 409.160981][ T12] bond5 (unregistering): Released all slaves [ 409.187671][ T12] bond6 (unregistering): Released all slaves [ 409.203537][ T12] bond7 (unregistering): Released all slaves [ 409.219285][ T12] bond8 (unregistering): Released all slaves [ 409.234954][ T12] bond9 (unregistering): Released all slaves [ 409.253020][ T12] bond10 (unregistering): Released all slaves [ 409.544058][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.573027][T18450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.594163][T18450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.705658][T18458] syzkaller0: entered promiscuous mode [ 409.711199][T18458] syzkaller0: entered allmulticast mode [ 409.849889][T18464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.858789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.965993][T18471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3099'. [ 410.081881][T18468] veth1: entered promiscuous mode [ 410.111872][T18468] veth1: entered allmulticast mode [ 410.172538][T18481] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3102'. [ 410.205544][T18351] chnl_net:caif_netlink_parms(): no params data found [ 410.288894][T18485] netlink: 'syz.0.3103': attribute type 29 has an invalid length. [ 410.350888][T18488] veth15: entered allmulticast mode [ 410.502978][ T5831] Bluetooth: hci1: command tx timeout [ 410.593617][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.662521][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 410.694358][T18351] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.703881][T18351] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.713744][T18351] bridge_slave_0: entered allmulticast mode [ 410.722744][T18351] bridge_slave_0: entered promiscuous mode [ 410.740922][T18351] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.750098][T18351] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.758113][T18351] bridge_slave_1: entered allmulticast mode [ 410.780255][T18351] bridge_slave_1: entered promiscuous mode [ 410.849438][T18511] wg1: Caught tx_queue_len zero misconfig [ 410.937185][T18351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.965868][T18351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.981525][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 410.989647][ C0] lec:lec_tx_timeout: lec0 [ 410.994972][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 411.158013][T18525] dvmrp0: entered allmulticast mode [ 411.311037][ T6486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.332689][T18527] netlink: 'syz.1.3110': attribute type 1 has an invalid length. [ 411.342732][T18527] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3110'. [ 411.410438][ T12] IPVS: stopping backup sync thread 12784 ... [ 411.433572][T18351] team0: Port device team_slave_0 added [ 411.441189][T18539] netlink: 'syz.0.3112': attribute type 21 has an invalid length. [ 411.453412][T18351] team0: Port device team_slave_1 added [ 411.531037][T18537] netlink: 'syz.3.3113': attribute type 29 has an invalid length. [ 411.557250][T18541] netlink: 'syz.3.3113': attribute type 29 has an invalid length. [ 411.580594][T18546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3114'. [ 411.590941][T18537] netlink: 548 bytes leftover after parsing attributes in process `syz.3.3113'. [ 411.958184][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3115'. [ 412.030426][T18351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.056252][T18351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.108627][T18351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.202753][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 412.377421][T18579] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3120'. [ 412.378914][T18351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.448965][T18351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.543571][T18351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.593266][ T5831] Bluetooth: hci1: command tx timeout [ 412.691078][T18595] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 412.922359][T18351] hsr_slave_0: entered promiscuous mode [ 412.944504][T18351] hsr_slave_1: entered promiscuous mode [ 412.966586][T18351] debugfs: 'hsr0' already exists in 'hsr' [ 413.001656][T18351] Cannot create hsr debugfs directory [ 413.137468][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 413.230653][ T6486] net_ratelimit: 2 callbacks suppressed [ 413.230673][ T6486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.377552][T18624] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 413.390577][T18626] Bluetooth: MGMT ver 1.23 [ 413.396271][T18624] syzkaller1: linktype set to 778 [ 413.567889][T18624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.602562][T18632] sch_tbf: burst 0 is lower than device tunl0 mtu (68) ! [ 413.862855][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.918174][ T12] macvlan1: left promiscuous mode [ 414.345019][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.505796][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.516589][ T6486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.671913][T18029] Bluetooth: hci1: command tx timeout [ 414.753901][ T12] IPVS: stop unused estimator thread 0... [ 414.902557][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.142518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.944449][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.002097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 416.010194][ C0] lec:lec_tx_timeout: lec0 [ 416.015177][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 416.099731][T18611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.124073][T18351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.155055][T18351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.253414][T18351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.329431][T18351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.339256][T18647] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3136'. [ 416.371503][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.380878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.630527][T18666] netlink: 56487 bytes leftover after parsing attributes in process `syz.1.3138'. [ 416.857337][T18351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.973074][T18351] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.058042][T10272] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.065364][T10272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.100092][T18678] syzkaller0: entered promiscuous mode [ 417.105909][T18678] syzkaller0: entered allmulticast mode [ 417.180717][T10272] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.188026][T10272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.567114][T18707] "syz.2.3149" (18707) uses obsolete ecb(arc4) skcipher [ 418.018911][T18351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.092908][T18725] lo speed is unknown, defaulting to 1000 [ 418.147470][ T5902] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 418.149215][T18725] batadv0 speed is unknown, defaulting to 1000 [ 418.276032][T18743] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.303494][T18743] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.349879][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'. [ 418.496809][T18743] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.537339][T18742] fido_id[18742]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 418.550005][T18743] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.773819][T18743] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.802768][T18743] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.934036][T18743] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.954442][T18743] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.155019][T18765] lo speed is unknown, defaulting to 1000 [ 419.194808][T18725] wg1 speed is unknown, defaulting to 1000 [ 419.205313][T18765] batadv0 speed is unknown, defaulting to 1000 [ 419.268001][T18725] lo speed is unknown, defaulting to 1000 [ 419.305102][T18351] veth0_vlan: entered promiscuous mode [ 419.340518][T10277] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.349166][T10277] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.424481][T10272] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.443710][T10272] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.477229][T18351] veth1_vlan: entered promiscuous mode [ 419.609221][T10278] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.623099][T10278] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.733863][T18351] veth0_macvtap: entered promiscuous mode [ 419.772879][T18351] veth1_macvtap: entered promiscuous mode [ 419.807316][T18351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.837828][T18351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.883863][T10275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.903326][T10275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.933526][T10275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.950701][T10275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.980538][T18765] wg1 speed is unknown, defaulting to 1000 [ 420.035635][T18765] lo speed is unknown, defaulting to 1000 [ 420.335415][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.357300][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.442703][T10278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.461032][T10278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.611405][T18812] netlink: 'syz.4.3076': attribute type 32 has an invalid length. [ 420.639237][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 420.720785][T18812] bond1: option coupled_control: invalid value (27) [ 420.736842][T18812] bond1 (unregistering): Released all slaves [ 421.015898][T18821] netlink: 'syz.2.3161': attribute type 1 has an invalid length. [ 421.032079][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 421.040137][ C0] lec:lec_tx_timeout: lec0 [ 421.042440][T18821] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3161'. [ 421.052082][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 421.123135][T18821] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3161'. [ 421.182998][T18821] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3161'. [ 421.388853][T18746] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.412287][T18746] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.587496][T18746] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.616577][T18840] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 421.639326][T18746] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.764257][T18746] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.785292][T18746] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.071219][T18855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3164'. [ 422.104825][T18849] syzkaller1: entered promiscuous mode [ 422.110365][T18849] syzkaller1: entered allmulticast mode [ 422.433142][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 422.535466][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 422.559180][ T24] IPVS: starting estimator thread 0... [ 422.595672][T10280] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.615128][T10280] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.651627][T18875] IPVS: using max 24 ests per chain, 57600 per kthread [ 422.687269][T18874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3169'. [ 422.701864][T18874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3169'. [ 422.855131][T10278] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.878871][T10278] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.941045][T18857] lo speed is unknown, defaulting to 1000 [ 422.941997][T10277] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.978768][T18894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3172'. [ 422.993472][T10277] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.032803][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3172'. [ 423.092241][T10272] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.093172][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3173'. [ 423.118833][T10272] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.166006][T18857] batadv0 speed is unknown, defaulting to 1000 [ 423.502360][T18913] netlink: 'syz.4.3177': attribute type 1 has an invalid length. [ 423.531926][T18913] sctp: [Deprecated]: syz.4.3177 (pid 18913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.531926][T18913] Use struct sctp_sack_info instead [ 423.602702][T18916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3178'. [ 423.794149][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 423.805261][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 423.816218][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 423.825124][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 423.839173][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.135748][T18921] lo speed is unknown, defaulting to 1000 [ 424.354359][T18924] net_ratelimit: 2 callbacks suppressed [ 424.354381][T18924] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 424.588965][T18921] batadv0 speed is unknown, defaulting to 1000 [ 424.597575][T18939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3181'. [ 424.609275][T18857] wg1 speed is unknown, defaulting to 1000 [ 424.617099][T18939] netlink: 'syz.4.3181': attribute type 74 has an invalid length. [ 424.627384][T18950] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 424.712478][T18857] lo speed is unknown, defaulting to 1000 [ 425.440759][T18921] wg1 speed is unknown, defaulting to 1000 [ 425.567374][T18921] lo speed is unknown, defaulting to 1000 [ 425.823285][T18979] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 425.945576][ T5831] Bluetooth: hci4: command tx timeout [ 426.061524][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 426.069654][ C0] lec:lec_tx_timeout: lec0 [ 426.075102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 426.217289][T18993] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 426.262040][T18993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.662265][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 426.760868][T19007] lo speed is unknown, defaulting to 1000 [ 426.769045][T19007] batadv0 speed is unknown, defaulting to 1000 [ 426.973924][T19026] ip6gre1: entered promiscuous mode [ 426.999991][T19026] ip6gre1: entered allmulticast mode [ 427.062237][T19031] netlink: 'syz.2.3197': attribute type 6 has an invalid length. [ 427.205509][T19034] __nla_validate_parse: 5 callbacks suppressed [ 427.205530][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 427.237418][T18921] chnl_net:caif_netlink_parms(): no params data found [ 427.278198][T19034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.297949][T19038] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3199'. [ 427.504489][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 427.533666][T19007] wg1 speed is unknown, defaulting to 1000 [ 427.545926][T19007] lo speed is unknown, defaulting to 1000 [ 427.554539][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 427.635984][T18921] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.652179][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.659518][T18921] bridge_slave_0: entered allmulticast mode [ 427.669707][T18921] bridge_slave_0: entered promiscuous mode [ 427.712079][T18921] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.719285][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.775717][T18921] bridge_slave_1: entered allmulticast mode [ 427.785402][T18921] bridge_slave_1: entered promiscuous mode [ 427.908104][T18921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.947903][T18921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.023834][ T5831] Bluetooth: hci4: command tx timeout [ 428.048248][T18921] team0: Port device team_slave_0 added [ 428.075982][T18921] team0: Port device team_slave_1 added [ 428.190310][T19060] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3206'. [ 428.219960][T18921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.230443][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.264668][T18921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.287734][T19066] lo speed is unknown, defaulting to 1000 [ 428.294670][T18921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.312296][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.359451][T18921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.405613][T19066] batadv0 speed is unknown, defaulting to 1000 [ 428.549009][T19068] lo speed is unknown, defaulting to 1000 [ 428.624024][T18921] hsr_slave_0: entered promiscuous mode [ 428.641227][T18921] hsr_slave_1: entered promiscuous mode [ 428.654039][T18921] debugfs: 'hsr0' already exists in 'hsr' [ 428.659839][T18921] Cannot create hsr debugfs directory [ 428.770766][T19068] batadv0 speed is unknown, defaulting to 1000 [ 428.890782][T18921] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.911932][T18921] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.998002][T18921] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.015995][T18921] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.037135][T19076] lo speed is unknown, defaulting to 1000 [ 429.039829][T19068] wg1 speed is unknown, defaulting to 1000 [ 429.049736][T19076] batadv0 speed is unknown, defaulting to 1000 [ 429.058814][T19066] wg1 speed is unknown, defaulting to 1000 [ 429.065929][T19068] lo speed is unknown, defaulting to 1000 [ 429.083775][T18921] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.113666][T18921] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.193945][T18921] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.211921][T18921] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.483646][T19066] lo speed is unknown, defaulting to 1000 [ 429.531898][T18921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.548736][T18921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 429.565401][T19076] wg1 speed is unknown, defaulting to 1000 [ 429.619124][T18921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 429.720662][T18921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 429.879312][T18921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.902084][T18921] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.915550][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.922759][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.961575][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.968797][T10279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.006224][T19076] lo speed is unknown, defaulting to 1000 [ 430.102047][ T5831] Bluetooth: hci4: command tx timeout [ 430.335869][T18921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.554414][T18921] veth0_vlan: entered promiscuous mode [ 430.937234][T18921] veth1_vlan: entered promiscuous mode [ 431.082055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 431.090130][ C0] lec:lec_tx_timeout: lec0 [ 431.095762][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 431.424442][T18921] veth0_macvtap: entered promiscuous mode [ 431.452264][T18921] veth1_macvtap: entered promiscuous mode [ 431.490659][T18921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.528227][T18921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.578265][T10280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.612540][T10280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.627814][T10280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.647900][T10280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.898060][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.906509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.018052][T10280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.035255][T10280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.050274][T19099] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 432.124480][T19099] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3214'. [ 432.181743][ T5831] Bluetooth: hci4: command tx timeout [ 432.196161][T19099] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3214'. [ 432.217232][T19099] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 432.670659][T19127] netlink: 'syz.3.3222': attribute type 8 has an invalid length. [ 432.925163][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.936489][T19142] netem: unknown loss type 0 [ 432.952331][T19142] netem: change failed [ 433.096394][T19148] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3229'. [ 433.190985][T19152] netlink: 'syz.0.3232': attribute type 1 has an invalid length. [ 433.249737][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 433.261862][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 433.310645][T19152] bond3: entered promiscuous mode [ 433.332007][T19152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.422704][T19152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.430178][T19152] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 433.447984][T19152] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 433.466392][T19152] bond3: (slave vcan1): making interface the new active one [ 433.474115][T19152] vcan1: entered promiscuous mode [ 433.481296][T19152] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 433.689340][T19177] netlink: 'syz.3.3238': attribute type 13 has an invalid length. [ 433.763966][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 433.776659][T19177] netlink: 'syz.3.3238': attribute type 13 has an invalid length. [ 433.777608][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 433.844898][T10278] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.856491][T10278] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.875519][T10278] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.921722][T10278] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.096216][T19196] x_tables: duplicate underflow at hook 2 [ 434.146773][T19202] bond0: Error: Cannot enslave bond to itself. [ 434.209262][T19207] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 434.459875][T19220] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3249'. [ 434.634418][T19227] netlink: 'syz.3.3250': attribute type 7 has an invalid length. [ 434.655876][T19202] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.663663][T19202] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.664771][T19227] netlink: 'syz.3.3250': attribute type 8 has an invalid length. [ 434.684136][T19227] netlink: 'syz.3.3250': attribute type 8 has an invalid length. [ 434.760154][T19227] netlink: 'syz.3.3250': attribute type 4 has an invalid length. [ 434.799780][T19227] netlink: 'syz.3.3250': attribute type 7 has an invalid length. [ 434.830629][T19227] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.3250'. [ 435.335711][T19202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.386333][T19202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.855664][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'. [ 435.927408][T10277] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.961592][T10277] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.012952][T10277] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.054465][T10277] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.107716][T19248] geneve2: entered promiscuous mode [ 436.113752][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 436.121858][ C0] lec:lec_tx_timeout: lec0 [ 436.127011][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 436.143608][T19204] lo speed is unknown, defaulting to 1000 [ 436.160891][T10277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.192828][T19204] batadv0 speed is unknown, defaulting to 1000 [ 436.199153][T10277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.220442][T10277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.239791][T10277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.407633][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 436.549459][T19276] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 436.753972][T10272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.767030][T10272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.823996][T19204] wg1 speed is unknown, defaulting to 1000 [ 436.845027][T19204] lo speed is unknown, defaulting to 1000 [ 437.016695][T19293] !©9: entered promiscuous mode [ 437.440473][T19310] xt_l2tp: missing protocol rule (udp|l2tpip) [ 437.762222][T19293] validate_nla: 1 callbacks suppressed [ 437.762243][T19293] netlink: 'syz.1.3265': attribute type 1 has an invalid length. [ 437.774426][T19318] netlink: 'syz.3.3270': attribute type 21 has an invalid length. [ 437.776971][T19293] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3265'. [ 438.055581][T19330] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 438.134775][T19329] netlink: 'syz.3.3273': attribute type 9 has an invalid length. [ 438.505337][T19353] __nla_validate_parse: 3 callbacks suppressed [ 438.505359][T19353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3278'. [ 438.640204][T19363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3279'. [ 438.727516][T19367] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3280'. [ 438.888481][T19374] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3282'. [ 439.035939][T19380] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3283'. [ 439.049733][T19381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3284'. [ 439.058356][T19380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3283'. [ 439.081159][T19381] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3284'. [ 439.237073][T19391] netlink: 'syz.2.3286': attribute type 3 has an invalid length. [ 439.546331][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 439.678535][T19409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3292'. [ 439.692454][T19406] gretap0: entered promiscuous mode [ 439.836659][T19416] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 439.857627][T19417] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 440.181961][T19429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.189281][T19429] IPv6: NLM_F_CREATE should be set when creating new route [ 440.196639][T19429] IPv6: NLM_F_CREATE should be set when creating new route [ 441.142331][T18029] Bluetooth: hci4: command 0x0405 tx timeout [ 441.142347][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 441.156515][ C0] lec:lec_tx_timeout: lec0 [ 441.161805][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 441.484699][T19420] : renamed from bond_slave_0 (while UP) [ 441.769492][T19445] bond1: entered promiscuous mode [ 441.787880][T19445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.810450][T19445] bond1 (unregistering): Released all slaves [ 441.861342][T19452] netlink: 'syz.2.3303': attribute type 3 has an invalid length. [ 442.489847][T19490] ip6gretap1: entered allmulticast mode [ 442.921318][T19504] lo speed is unknown, defaulting to 1000 [ 442.939241][T19504] batadv0 speed is unknown, defaulting to 1000 [ 443.063837][T19515] netlink: 'syz.4.3316': attribute type 1 has an invalid length. [ 443.317610][T19515] bond1: (slave geneve2): making interface the new active one [ 443.394384][T19515] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 443.590950][T10280] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.608679][T10280] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.646931][T10280] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.678660][T10280] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.739353][T19504] wg1 speed is unknown, defaulting to 1000 [ 443.770205][T19504] lo speed is unknown, defaulting to 1000 [ 443.917697][T19540] __nla_validate_parse: 3 callbacks suppressed [ 443.917718][T19540] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3324'. [ 444.097758][T19542] syzkaller1: entered promiscuous mode [ 444.131634][T19542] syzkaller1: entered allmulticast mode [ 444.284292][T19546] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 444.307922][T19546] bond2 (unregistering): Released all slaves [ 445.585550][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3341'. [ 445.858353][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3344'. [ 445.894195][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3344'. [ 445.972365][T19598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3344'. [ 446.097821][T19598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3344'. [ 446.742150][T19628] pim6reg1: entered promiscuous mode [ 446.748411][T19628] pim6reg1: entered allmulticast mode [ 446.829071][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3352'. [ 446.877778][T19630] syzkaller0: entered promiscuous mode [ 446.884671][T19630] syzkaller0: entered allmulticast mode [ 446.953560][T19630] tipc: Started in network mode [ 446.963106][T19630] tipc: Node identity 1e02f1ffa2aa, cluster identity 4711 [ 446.981627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 446.989687][ C0] lec:lec_tx_timeout: lec0 [ 446.995414][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 447.004410][T19630] tipc: Enabled bearer , priority 0 [ 447.044342][T19630] tipc: Resetting bearer [ 447.054329][T19639] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3354'. [ 447.099765][T19629] tipc: Resetting bearer [ 447.192078][T19629] tipc: Disabling bearer [ 447.209685][T19646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3356'. [ 447.447801][T19655] netlink: 'syz.2.3359': attribute type 1 has an invalid length. [ 447.533104][T19655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.585935][T19664] vlan2: entered promiscuous mode [ 447.615189][T19664] bond1: entered promiscuous mode [ 447.637990][T19664] vlan2: entered allmulticast mode [ 447.650557][T19664] bond1: entered allmulticast mode [ 447.904588][T19675] syzkaller0: entered promiscuous mode [ 447.910254][T19675] syzkaller0: entered allmulticast mode [ 448.188861][T19211] IPVS: starting estimator thread 0... [ 448.239590][T19679] IPVS: fo: FWM 3 0x00000003 - no destination available [ 448.301998][T19680] IPVS: using max 30 ests per chain, 72000 per kthread [ 448.500787][T19693] IPVS: ip_vs_add_dest(): server weight less than zero [ 448.585842][T19699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 448.675679][T19699] batadv1: entered promiscuous mode [ 448.706048][T19699] batadv1: entered allmulticast mode [ 448.732983][T19699] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 448.986473][T19715] __nla_validate_parse: 3 callbacks suppressed [ 448.986494][T19715] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3379'. [ 449.282114][T19729] lo speed is unknown, defaulting to 1000 [ 449.289955][T19729] batadv0 speed is unknown, defaulting to 1000 [ 449.320362][T19740] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3386'. [ 449.459488][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3387'. [ 449.496920][T19746] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3389'. [ 449.508258][T19746] 0ªî{X¹¦: renamed from gretap0 [ 449.540245][T19746] 0ªî{X¹¦: entered allmulticast mode [ 449.561107][T19746] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 449.683209][T19754] netlink: 'syz.3.3391': attribute type 2 has an invalid length. [ 449.717073][T19754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3391'. [ 449.859552][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'. [ 449.889090][T19757] openvswitch: netlink: Flow actions attr not present in new flow. [ 449.972337][T19757] netlink: 'syz.2.3392': attribute type 33 has an invalid length. [ 449.980218][T19757] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3392'. [ 450.119665][T19762] tipc: Started in network mode [ 450.132611][T19762] tipc: Node identity aaa7b03b79f3, cluster identity 4711 [ 450.139953][T19762] tipc: Enabled bearer , priority 0 [ 450.166764][T19729] wg1 speed is unknown, defaulting to 1000 [ 450.177880][T19761] tipc: Disabling bearer [ 450.196205][T19729] lo speed is unknown, defaulting to 1000 [ 450.304569][T19770] netlink: 65173 bytes leftover after parsing attributes in process `syz.2.3395'. [ 450.556765][T19752] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 451.016802][T19798] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 451.255768][T19807] macsec1: entered promiscuous mode [ 451.261134][T19807] macsec1: entered allmulticast mode [ 451.696736][T19831] netlink: 556 bytes leftover after parsing attributes in process `syz.3.3410'. [ 451.797309][T19833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.857878][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3412'. [ 451.985623][T19836] xfrm1: entered allmulticast mode [ 452.002020][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 452.010220][ C0] lec:lec_tx_timeout: lec0 [ 452.015367][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 452.333806][T19850] syzkaller0: entered promiscuous mode [ 452.354200][T19850] syzkaller0: entered allmulticast mode [ 452.396335][T19850] geneve2: entered allmulticast mode [ 453.082288][T19882] tc_dump_action: action bad kind [ 453.343670][T19895] pimreg: entered allmulticast mode [ 453.488958][T19910] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 453.770059][T19923] bridge_slave_1: left allmulticast mode [ 453.791328][T19923] bridge_slave_1: left promiscuous mode [ 453.799205][T19923] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.816480][T19923] bridge_slave_0: left allmulticast mode [ 453.822596][T19923] bridge_slave_0: left promiscuous mode [ 453.828564][T19923] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.943243][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 453.993672][T19928] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 454.005530][T19928] team0 (unregistering): Port device team_slave_0 removed [ 454.035801][T19928] team0 (unregistering): Failed to send options change via netlink (err -105) [ 454.063793][T19928] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 454.119138][T19928] team0 (unregistering): Port device team_slave_1 removed [ 454.487515][T19931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.524496][T19931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.818009][T19931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.843957][T19931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.868549][T19958] syzkaller0: entered promiscuous mode [ 454.875135][T19958] syzkaller0: entered allmulticast mode [ 454.942912][T19931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.954012][T19931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.999492][T19974] tipc: Started in network mode [ 455.015839][T19974] tipc: Node identity 8ae4c328f897, cluster identity 4711 [ 455.029975][T19974] tipc: Enabled bearer , priority 0 [ 455.119506][T19931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.143153][T19931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.183337][T19985] lo speed is unknown, defaulting to 1000 [ 455.189491][T19957] tipc: Resetting bearer [ 455.209402][T19957] tipc: Disabling bearer [ 455.240244][T19982] netlink: 'syz.4.3444': attribute type 12 has an invalid length. [ 455.255331][T19982] __nla_validate_parse: 8 callbacks suppressed [ 455.255351][T19982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3444'. [ 455.273000][T19985] batadv0 speed is unknown, defaulting to 1000 [ 455.728833][T10275] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.745542][T10275] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.828078][T20002] syzkaller1: entered promiscuous mode [ 455.843156][T20002] syzkaller1: entered allmulticast mode [ 455.872648][T10275] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.901503][T10275] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.030840][T10275] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.060269][T10275] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.114123][T10275] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.150871][T10275] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.338266][T19985] wg1 speed is unknown, defaulting to 1000 [ 456.378597][T19985] lo speed is unknown, defaulting to 1000 [ 457.022050][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 457.030164][ C0] lec:lec_tx_timeout: lec0 [ 457.035265][T20053] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 457.070260][T20050] lo speed is unknown, defaulting to 1000 [ 457.240072][T20062] ipvlan2: entered promiscuous mode [ 457.354398][T20050] batadv0 speed is unknown, defaulting to 1000 [ 457.989391][T20050] wg1 speed is unknown, defaulting to 1000 [ 458.005364][T20050] lo speed is unknown, defaulting to 1000 [ 458.021817][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 458.837368][T20093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3463'. [ 458.846926][T20093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3463'. [ 459.256469][T20098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 459.269040][T20098] netlink: 'syz.1.3464': attribute type 1 has an invalid length. [ 459.277181][T20098] netlink: 'syz.1.3464': attribute type 2 has an invalid length. [ 460.263664][T20065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.513407][T20121] geneve2: entered promiscuous mode [ 460.519171][T20121] geneve2: entered allmulticast mode [ 460.734567][T20130] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3474'. [ 460.758380][T20134] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 460.975587][T20144] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 461.022989][T20144] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 461.088058][T20144] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 461.325505][T20154] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 461.338079][T20154] syzkaller1: linktype set to 772 [ 462.084633][T20182] lo speed is unknown, defaulting to 1000 [ 462.093908][T20182] batadv0 speed is unknown, defaulting to 1000 [ 462.136838][T20185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3489'. [ 462.283120][T20185] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.290896][T20185] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.507526][T20185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.522297][T20185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.697647][T10288] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.715249][T20194] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3491'. [ 462.725189][T10288] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 462.735972][T20182] wg1 speed is unknown, defaulting to 1000 [ 462.761905][T10288] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.770854][T10288] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 462.802511][T20182] lo speed is unknown, defaulting to 1000 [ 462.820457][T10288] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.861951][T10288] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 462.882698][T10288] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.899960][T10288] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 463.003828][T20210] netlink: 'syz.3.3495': attribute type 1 has an invalid length. [ 463.042387][T20201] syzkaller0: entered promiscuous mode [ 463.058169][T20201] syzkaller0: entered allmulticast mode [ 463.193494][T20215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3495'. [ 463.306942][T20212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.316080][T20212] bond4: (slave bond5): making interface the new active one [ 463.324831][T20212] bond4: (slave bond5): Enslaving as an active interface with an up link [ 463.346265][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3495'. [ 463.396282][T20213] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 463.446808][T20215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.477949][T20210] vlan2: entered promiscuous mode [ 463.483971][T20210] bond4: entered promiscuous mode [ 463.489196][T20210] bond5: entered promiscuous mode [ 463.505750][T20203] netlink: 'syz.2.3494': attribute type 11 has an invalid length. [ 463.869249][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3501'. [ 463.872465][T20235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3501'. [ 464.203250][T20244] lo speed is unknown, defaulting to 1000 [ 464.210945][T20244] batadv0 speed is unknown, defaulting to 1000 [ 464.357412][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3506'. [ 464.474326][T20258] netlink: 'syz.0.3506': attribute type 39 has an invalid length. [ 464.586249][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'. [ 464.865937][T20275] netlink: 'syz.2.3510': attribute type 10 has an invalid length. [ 464.914645][T20275] team0: Port device dummy0 added [ 464.953962][T20281] x_tables: unsorted entry at hook 3 [ 464.964942][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 464.995976][T20244] wg1 speed is unknown, defaulting to 1000 [ 465.004890][T20244] lo speed is unknown, defaulting to 1000 [ 465.049305][T20285] netlink: 'syz.4.3512': attribute type 13 has an invalid length. [ 465.091647][T20285] netlink: 'syz.4.3512': attribute type 17 has an invalid length. [ 465.128391][T20285] gretap0: left promiscuous mode [ 465.183734][ T5831] block nbd1: Receive control failed (result -32) [ 465.369775][T20285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.400655][T20285] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.448796][T20285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.180141][T20317] syzkaller0: entered promiscuous mode [ 466.221672][T20317] syzkaller0: entered allmulticast mode [ 466.508844][T20320] netlink: 'syz.1.3522': attribute type 3 has an invalid length. [ 466.516941][T20320] __nla_validate_parse: 1 callbacks suppressed [ 466.516958][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 466.533318][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 466.542934][T20320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3522'. [ 466.585017][T20321] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 466.593759][T20321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.745800][T20328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 467.023830][T20336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3525'. [ 467.040953][T20337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3525'. [ 467.065145][T20337] netlink: 'syz.1.3525': attribute type 7 has an invalid length. [ 467.083787][T20337] netlink: 'syz.1.3525': attribute type 8 has an invalid length. [ 467.102215][T20337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3525'. [ 467.151722][T20336] Unsupported ieee802154 address type: 0 [ 467.307478][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 468.587635][T20343] netlink: 'syz.1.3527': attribute type 1 has an invalid length. [ 468.645643][T20343] bond1: entered promiscuous mode [ 468.651139][T20343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.686436][T20345] gtp0: entered promiscuous mode [ 468.692040][T20345] gtp0: entered allmulticast mode [ 468.759883][T10279] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.771636][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 468.780831][T10279] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.802345][T10279] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.811131][T10279] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.898914][T20355] bond3: option tlb_dynamic_lb: invalid value (5) [ 468.957897][T20355] bond3 (unregistering): Released all slaves [ 468.993789][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3533'. [ 469.170159][T20369] lo speed is unknown, defaulting to 1000 [ 469.182723][T20369] batadv0 speed is unknown, defaulting to 1000 [ 469.480067][T20387] syzkaller0: entered promiscuous mode [ 469.485836][T20387] syzkaller0: entered allmulticast mode [ 469.997690][T20413] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20004 [ 470.076481][T20413] vlan2: entered promiscuous mode [ 470.110940][T20413] bond0: entered promiscuous mode [ 470.157829][T20413] bond_slave_0: entered promiscuous mode [ 470.203677][T20413] bond_slave_1: entered promiscuous mode [ 470.951362][T20369] wg1 speed is unknown, defaulting to 1000 [ 470.998645][T20369] lo speed is unknown, defaulting to 1000 [ 471.031254][ T10] IPVS: starting estimator thread 0... [ 471.132450][T20455] IPVS: using max 28 ests per chain, 67200 per kthread [ 471.462715][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.492887][T20471] tipc: Started in network mode [ 471.509038][T20471] tipc: Node identity 9ed5c01ea756, cluster identity 4711 [ 471.533373][T20471] tipc: Enabled bearer , priority 0 [ 471.606906][T20475] syzkaller0: entered promiscuous mode [ 471.613442][T20475] syzkaller0: entered allmulticast mode [ 471.627944][T20475] tipc: Resetting bearer [ 471.658068][T20471] __nla_validate_parse: 3 callbacks suppressed [ 471.658091][T20471] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3564'. [ 471.759770][T10277] tipc: Resetting bearer [ 471.816956][T20470] tipc: Resetting bearer [ 472.467502][T20491] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3568'. [ 473.574714][T20470] tipc: Disabling bearer [ 473.605053][ T10] tipc: Node number set to 964935710 [ 473.661444][T11446] lec:lec_start_xmit: lec0:No lecd attached [ 473.745552][T20490] lo speed is unknown, defaulting to 1000 [ 473.773538][T20490] batadv0 speed is unknown, defaulting to 1000 [ 473.948514][T20507] bridge0: entered allmulticast mode [ 474.023820][T10280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.211157][T20490] wg1 speed is unknown, defaulting to 1000 [ 474.224009][T20490] lo speed is unknown, defaulting to 1000 [ 474.396293][T20519] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 474.427241][T20519] pim6reg1: linktype set to 805 [ 474.524774][T20496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.613684][T20522] netlink: 'syz.4.3575': attribute type 11 has an invalid length. [ 474.749280][T20528] netlink: 'syz.4.3578': attribute type 29 has an invalid length. [ 474.763067][T20524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3576'. [ 474.791825][T20529] netlink: 'syz.2.3577': attribute type 3 has an invalid length. [ 474.801873][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 474.810794][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 474.835432][T20529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3577'. [ 474.849320][T20528] netlink: 'syz.4.3578': attribute type 29 has an invalid length. [ 474.887547][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 475.032666][T20526] lo speed is unknown, defaulting to 1000 [ 475.046288][T20526] batadv0 speed is unknown, defaulting to 1000 [ 475.432979][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 475.465206][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 475.481163][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3585'. [ 475.680905][T20563] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 475.763063][T20526] wg1 speed is unknown, defaulting to 1000 [ 475.794174][T20526] lo speed is unknown, defaulting to 1000 [ 476.404002][T20599] syzkaller0: entered promiscuous mode [ 476.409679][T20599] syzkaller0: entered allmulticast mode [ 476.583611][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.065637][T20627] __nla_validate_parse: 6 callbacks suppressed [ 478.065659][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3605'. [ 478.082418][T20628] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003 [ 478.259519][T20627] bond3: entered promiscuous mode [ 478.300989][T20638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.308415][T20638] IPv6: NLM_F_CREATE should be set when creating new route [ 478.315719][T20638] IPv6: NLM_F_CREATE should be set when creating new route [ 478.319845][T20627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.357796][T20638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.406131][T20633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.425644][T20633] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 478.438244][T20633] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 478.534245][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 478.544990][T20649] lo speed is unknown, defaulting to 1000 [ 478.559467][T20649] batadv0 speed is unknown, defaulting to 1000 [ 478.586274][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3610'. [ 478.611288][T20652] netlink: 'syz.0.3610': attribute type 6 has an invalid length. [ 478.667303][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 478.667722][T10280] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.696247][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3610'. [ 478.723860][T10280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.744137][T20652] netlink: 'syz.0.3610': attribute type 6 has an invalid length. [ 478.762286][T10280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.782460][T10280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.804910][T20657] netlink: 'syz.3.3612': attribute type 10 has an invalid length. [ 478.818327][T20656] syzkaller1: entered promiscuous mode [ 478.824528][T20657] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3612'. [ 478.841645][T20656] syzkaller1: entered allmulticast mode [ 478.860197][T20657] hsr0: entered promiscuous mode [ 478.883648][T20657] bridge0: port 3(hsr0) entered blocking state [ 478.897050][T20657] bridge0: port 3(hsr0) entered disabled state [ 478.942031][T20657] hsr0: entered allmulticast mode [ 478.948183][T20657] hsr_slave_0: entered allmulticast mode [ 478.961557][T20657] hsr_slave_1: entered allmulticast mode [ 478.981573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 478.989642][ C0] lec:lec_tx_timeout: lec0 [ 478.992315][T20657] bridge0: port 3(hsr0) entered blocking state [ 479.000547][T20657] bridge0: port 3(hsr0) entered forwarding state [ 479.293558][T20677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3616'. [ 479.510180][T20685] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3619'. [ 479.590550][T20691] netlink: 'syz.3.3618': attribute type 1 has an invalid length. [ 479.606510][T20691] netlink: 'syz.3.3618': attribute type 2 has an invalid length. [ 479.783023][T10280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.841155][T20649] wg1 speed is unknown, defaulting to 1000 [ 479.848324][T20686] netlink: 'syz.3.3618': attribute type 6 has an invalid length. [ 479.892192][T20649] lo speed is unknown, defaulting to 1000 [ 480.054551][T20714] xt_l2tp: invalid flags combination: 0 [ 480.315978][T20729] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3629'. [ 480.464170][T20732] netlink: 'syz.1.3631': attribute type 3 has an invalid length. [ 480.472114][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'. [ 480.790599][T20738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.802803][T20738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.843066][T20736] bond7: option packets_per_slave: invalid value (1048582) [ 480.850493][T20736] bond7: option packets_per_slave: allowed values 0 - 65535 [ 480.859904][T20736] bond7 (unregistering): Released all slaves [ 480.901320][T20745] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 480.914299][T20745] bond2 (unregistering): Released all slaves [ 481.060152][T20738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.071674][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.083849][T20738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.474806][T20738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.489214][T20738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.654108][T20738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.691664][T20738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.878289][T10288] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.887052][T10288] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.896177][T10288] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.905089][T10288] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.923470][T20774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.939785][T20777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.976171][T10279] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.991658][T10279] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.076997][T20780] Cannot find add_set index 0 as target [ 482.117330][T10275] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.132590][T10275] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.341921][T10278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.727811][T20817] ip6gretap2: entered promiscuous mode [ 483.025868][T20833] nbd: must specify at least one socket [ 483.052601][T20834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.230342][T20838] bond2: ARP target 9.0.0.0 is already present [ 483.244644][T20838] bond2: option arp_ip_target: invalid value (9) [ 483.257096][T20850] __nla_validate_parse: 6 callbacks suppressed [ 483.257115][T20850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3662'. [ 483.276119][T20838] bond2 (unregistering): Released all slaves [ 483.541167][T20861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3669'. [ 483.563519][T20863] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 483.640511][T20872] netlink: 'syz.2.3669': attribute type 16 has an invalid length. [ 483.649108][T20873] netlink: 'syz.4.3666': attribute type 16 has an invalid length. [ 483.660219][T20873] netlink: 'syz.4.3666': attribute type 17 has an invalid length. [ 483.893333][T20857] bridge0: port 3(hsr0) entered disabled state [ 483.899785][T20857] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.907480][T20857] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.332827][T20857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.393067][T20857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.158711][T20873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.179242][T20873] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.219747][T20873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.241260][T10278] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.264470][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'. [ 485.278417][T10278] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.288638][T10278] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.299376][T10278] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.330820][T20880] team0 (unregistering): Port device team_slave_0 removed [ 485.340704][T20880] team0 (unregistering): Port device team_slave_1 removed [ 485.386822][T20880] team0 (unregistering): Port device dummy0 removed [ 485.430064][T10288] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.472732][T10288] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.481950][T10288] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.499974][T20895] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3675'. [ 485.513812][T10288] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.542749][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.548749][T20882] lo speed is unknown, defaulting to 1000 [ 485.579543][T20882] batadv0 speed is unknown, defaulting to 1000 [ 485.616056][T20900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3676'. [ 485.646120][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3676'. [ 485.950371][T20910] sock: sock_set_timeout: `syz.2.3680' (pid 20910) tries to set negative timeout [ 486.024741][T20882] wg1 speed is unknown, defaulting to 1000 [ 486.052358][T20882] lo speed is unknown, defaulting to 1000 [ 486.075401][T20910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3680'. [ 486.570143][T20925] syzkaller0: entered promiscuous mode [ 486.582040][T20925] syzkaller0: entered allmulticast mode [ 487.078154][T20953] syzkaller0: left promiscuous mode [ 487.107857][T20953] syzkaller0: left allmulticast mode [ 487.183575][T20954] siw: device registration error -23 [ 487.372986][T20964] netlink: 'syz.3.3694': attribute type 5 has an invalid length. [ 487.817081][T20982] xt_hashlimit: size too large, truncated to 1048576 [ 487.825902][T20982] xt_hashlimit: max too large, truncated to 1048576 [ 487.864802][T20982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 487.911085][T20980] syzkaller0: entered promiscuous mode [ 487.927474][T20980] syzkaller0: entered allmulticast mode [ 488.144198][T10280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.620783][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'. [ 488.630885][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'. [ 488.649237][T20996] netlink: 'syz.2.3704': attribute type 14 has an invalid length. [ 489.985963][T20987] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3701'. [ 490.135270][T21006] syzkaller1: entered promiscuous mode [ 490.158152][T21006] syzkaller1: entered allmulticast mode [ 490.279662][T21011] lo speed is unknown, defaulting to 1000 [ 490.322316][T21003] netlink: 'syz.0.3706': attribute type 12 has an invalid length. [ 490.333744][T21003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3706'. [ 490.349927][T21011] batadv0 speed is unknown, defaulting to 1000 [ 490.349951][T21019] lo speed is unknown, defaulting to 1000 [ 490.407202][T21022] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 490.434327][T21022] bond2 (unregistering): Released all slaves [ 490.630094][T21031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3711'. [ 490.654291][T21031] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 490.671116][ T5902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.703176][T21019] batadv0 speed is unknown, defaulting to 1000 [ 490.719965][T21011] wg1 speed is unknown, defaulting to 1000 [ 490.745988][T21011] lo speed is unknown, defaulting to 1000 [ 490.974836][T21044] ip6gre1: entered allmulticast mode [ 491.255618][T21019] wg1 speed is unknown, defaulting to 1000 [ 491.303906][T10288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.397232][T21019] lo speed is unknown, defaulting to 1000 [ 492.224667][T21073] netlink: 'syz.1.3725': attribute type 13 has an invalid length. [ 492.376002][T21076] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 492.392766][T21076] syzkaller0: entered promiscuous mode [ 492.402569][T21076] syzkaller0: entered allmulticast mode [ 492.902149][T18029] Bluetooth: hci4: command 0x0405 tx timeout [ 493.033453][T21091] netlink: 'syz.3.3730': attribute type 10 has an invalid length. [ 493.161299][T21095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3731'. [ 493.208484][T21087] tipc: Enabling of bearer rejected, failed to enable media [ 493.256627][T21099] netlink: 'syz.1.3732': attribute type 1 has an invalid length. [ 493.402080][T21104] netlink: 'syz.2.3734': attribute type 4 has an invalid length. [ 493.410120][T21104] netlink: 'syz.2.3734': attribute type 1 has an invalid length. [ 493.420926][T21104] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3734'. [ 493.495854][T21110] netlink: 'syz.4.3735': attribute type 1 has an invalid length. [ 493.512901][T21110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3735'. [ 493.663046][T21121] Bluetooth: MGMT ver 1.23 [ 493.794869][T21127] macsec2: entered promiscuous mode [ 493.800156][T21127] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 493.863464][T10288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.934539][T21135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3743'. [ 494.046760][T21128] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 494.072351][T21142] lo speed is unknown, defaulting to 1000 [ 494.086469][T21142] batadv0 speed is unknown, defaulting to 1000 [ 494.482124][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'. [ 494.524732][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.561064][T21158] hsr0: left allmulticast mode [ 494.572810][T21169] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.581647][T21158] hsr_slave_0: left allmulticast mode [ 494.587162][T21158] hsr_slave_1: left allmulticast mode [ 494.603579][T21158] hsr0: left promiscuous mode [ 494.608632][T21158] bridge0: port 3(hsr0) entered disabled state [ 494.639634][T21158] bridge_slave_1: left allmulticast mode [ 494.646884][T21158] bridge_slave_1: left promiscuous mode [ 494.655397][T21158] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.666571][T21158] bridge_slave_0: left promiscuous mode [ 494.672585][T21158] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.868026][T21179] netlink: 'syz.0.3754': attribute type 21 has an invalid length. [ 494.903060][T21142] wg1 speed is unknown, defaulting to 1000 [ 494.903736][T21179] netlink: 'syz.0.3754': attribute type 22 has an invalid length. [ 494.921229][T21142] lo speed is unknown, defaulting to 1000 [ 494.935722][T21179] netlink: 'syz.0.3754': attribute type 23 has an invalid length. [ 494.944392][T21179] netlink: 'syz.0.3754': attribute type 25 has an invalid length. [ 494.955803][T21179] netlink: 'syz.0.3754': attribute type 26 has an invalid length. [ 494.964308][T21179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3754'. [ 496.426093][T10279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.598983][T21194] ip6gretap0: entered promiscuous mode [ 496.605600][T21194] macsec1: entered promiscuous mode [ 496.611066][T21194] macsec1: entered allmulticast mode [ 496.617094][T21194] ip6gretap0: entered allmulticast mode [ 496.629885][T21194] ip6gretap0: left allmulticast mode [ 496.636344][T21194] ip6gretap0: left promiscuous mode [ 497.148961][T21225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3768'. [ 498.462205][T21214] bond0: Caught tx_queue_len zero misconfig [ 498.550570][T21232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.603364][T21235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3769'. [ 498.653546][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3769'. [ 498.694173][T21241] ipvlan2: entered promiscuous mode [ 498.843199][T21248] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 498.903326][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.999433][T21262] lo speed is unknown, defaulting to 1000 [ 499.017869][T21262] batadv0 speed is unknown, defaulting to 1000 [ 499.250004][T21280] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3784'. [ 499.660188][T21295] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1806) ! [ 499.766311][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3790'. [ 499.777820][T21262] wg1 speed is unknown, defaulting to 1000 [ 499.797044][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3790'. [ 499.801886][T21295] syzkaller0: entered promiscuous mode [ 499.828591][T21295] syzkaller0: entered allmulticast mode [ 499.844676][T21262] lo speed is unknown, defaulting to 1000 [ 499.914820][T21300] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.962323][T21300] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.148799][T21300] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.187766][T21300] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.203933][T21325] netlink: 'syz.2.3794': attribute type 2 has an invalid length. [ 500.219523][T21326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3794'. [ 500.282828][T21325] : entered promiscuous mode [ 500.315908][T21300] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.329910][T21315] lo speed is unknown, defaulting to 1000 [ 500.335930][T21300] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.366643][T21315] batadv0 speed is unknown, defaulting to 1000 [ 500.444033][T21300] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.471676][T21300] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.672784][T10278] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.681164][T10278] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.718748][T10278] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.736964][T10278] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.768869][T10278] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.785175][T10278] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.821374][T10278] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.830510][T10278] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.854715][T21315] wg1 speed is unknown, defaulting to 1000 [ 500.872485][T21340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3798'. [ 500.945594][T21315] lo speed is unknown, defaulting to 1000 [ 501.085257][T21348] tipc: Enabling not permitted [ 501.090999][T21348] tipc: Enabling of bearer rejected, failed to enable media [ 501.210720][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3801'. [ 501.226499][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3801'. [ 501.455555][T21363] netlink: 'syz.1.3802': attribute type 1 has an invalid length. [ 501.538088][T21364] bond3: entered promiscuous mode [ 501.579755][T21364] bond3: entered allmulticast mode [ 501.597637][T21364] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.857611][T21373] netlink: 'syz.4.3805': attribute type 2 has an invalid length. [ 501.872655][T21373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3805'. [ 501.890487][T21370] lo: Caught tx_queue_len zero misconfig [ 502.168198][T21384] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3807'. [ 502.186410][T10278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.704579][T21408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3813'. [ 502.865377][T21414] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 503.514934][T21457] vti0: entered promiscuous mode [ 503.617711][T21463] netlink: 'syz.3.3829': attribute type 9 has an invalid length. [ 503.632057][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 503.657262][T21463] netlink: 'syz.3.3829': attribute type 11 has an invalid length. [ 503.668928][T21463] netlink: 'syz.3.3829': attribute type 12 has an invalid length. [ 504.022164][T10275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.189054][T21508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.219048][T21504] lo speed is unknown, defaulting to 1000 [ 504.241609][T21499] pim6reg1: entered promiscuous mode [ 504.246977][T21499] pim6reg1: entered allmulticast mode [ 504.304531][T21504] batadv0 speed is unknown, defaulting to 1000 [ 504.724405][T21537] __nla_validate_parse: 7 callbacks suppressed [ 504.724424][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'. [ 504.771588][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'. [ 504.857882][T21504] wg1 speed is unknown, defaulting to 1000 [ 504.867135][T21504] lo speed is unknown, defaulting to 1000 [ 505.012672][T21544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3846'. [ 505.056234][T21546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.112199][T21547] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 505.121183][T21546] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 505.407599][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3851'. [ 505.878258][T21579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3857'. [ 506.297243][T21611] blkio.reset_stats is deprecated [ 506.346304][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 506.363359][T21608] netlink: 'syz.2.3864': attribute type 21 has an invalid length. [ 506.377316][T21608] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3864'. [ 506.516056][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3867'. [ 506.531341][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3867'. [ 506.541319][T21617] netlink: 'syz.0.3867': attribute type 14 has an invalid length. [ 506.553954][T21617] netlink: 'syz.0.3867': attribute type 13 has an invalid length. [ 506.639396][T21621] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 506.694473][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 506.818153][T21625] netlink: 'syz.4.3868': attribute type 2 has an invalid length. [ 506.906173][T21636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.927585][T21636] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3872'. [ 506.963439][T21638] netlink: 'syz.0.3871': attribute type 2 has an invalid length. [ 507.203051][T21650] netlink: 'syz.2.3876': attribute type 1 has an invalid length. [ 507.262484][T21654] syzkaller0: entered promiscuous mode [ 507.268160][T21654] syzkaller0: entered allmulticast mode [ 507.329460][T21651] netlink: 'syz.1.3875': attribute type 13 has an invalid length. [ 507.350481][T21651] tipc: Enabled bearer , priority 0 [ 507.480575][ T12] tipc: Subscription rejected, illegal request [ 507.579506][T21647] tipc: Resetting bearer [ 507.637818][T21647] tipc: Disabling bearer [ 507.698883][T21670] netlink: 'syz.3.3880': attribute type 7 has an invalid length. [ 507.729729][T21670] netlink: 'syz.3.3880': attribute type 5 has an invalid length. [ 507.767020][ T29] audit: type=1107 audit(1771404472.364:8): pid=21666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 507.781693][T21670] netlink: 'syz.3.3880': attribute type 2 has an invalid length. [ 507.950015][T10285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.390697][T21711] tc_dump_action: action bad kind [ 509.040691][T21745] geneve3: entered promiscuous mode [ 509.223212][T10280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.588397][T21771] sctp: [Deprecated]: syz.3.3907 (pid 21771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.588397][T21771] Use struct sctp_sack_info instead [ 509.992042][T21787] syzkaller1: tun_chr_ioctl cmd 35108 [ 510.394869][T21805] openvswitch: netlink: IP tunnel dst address not specified [ 511.380087][T21828] __nla_validate_parse: 10 callbacks suppressed [ 511.380108][T21828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'. [ 511.569247][T21838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3928'. [ 511.709698][T21842] validate_nla: 2 callbacks suppressed [ 511.709720][T21842] netlink: 'syz.2.3930': attribute type 6 has an invalid length. [ 511.728733][T21842] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.3930'. [ 511.948461][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 511.956585][ C0] lec:lec_tx_timeout: lec0 [ 512.396834][T21855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.517748][T21858] tipc: Enabled bearer , priority 0 [ 512.555781][T21858] syzkaller0: MTU too low for tipc bearer [ 512.589925][T21858] tipc: Disabling bearer [ 512.628225][T21858] netlink: 'syz.4.3937': attribute type 3 has an invalid length. [ 512.650960][T21858] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3937'. [ 512.802256][T21872] sctp: [Deprecated]: syz.2.3940 (pid 21872) Use of int in maxseg socket option. [ 512.802256][T21872] Use struct sctp_assoc_value instead [ 513.178480][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'. [ 513.313440][ T6486] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 513.537229][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3945'. [ 513.572601][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3945'. [ 513.622634][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3945'. [ 513.702850][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.862368][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e1be400: rx timeout, send abort [ 513.875837][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 514.110782][T10288] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 514.217361][T21918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3956'. [ 514.298332][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'. [ 514.339893][T21926] ip6tnl0: Caught tx_queue_len zero misconfig [ 514.346552][ T6486] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 514.361521][T10285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.373462][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e1be400: abort rx timeout. Force session deactivation [ 514.483067][T21929] syzkaller0: entered promiscuous mode [ 514.489782][T21929] syzkaller0: entered allmulticast mode [ 515.023408][T21970] netlink: 'syz.3.3971': attribute type 1 has an invalid length. [ 515.055372][T21969] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 515.107757][T21964] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 515.173334][T21970] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 515.185720][T21970] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 515.216078][T21981] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 515.231560][T21981] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 515.267179][T21983] bond7: (slave bridge0): Enslaving as an active interface with a down link [ 515.277370][T10280] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 515.289230][T10280] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 515.335342][T21969] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 515.387054][T21990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.436677][T21994] netlink: 'syz.3.3975': attribute type 1 has an invalid length. [ 515.584066][T22000] syzkaller0: entered promiscuous mode [ 515.597707][T22000] syzkaller0: entered allmulticast mode [ 515.715674][ T5925] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 515.997586][T22030] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 516.111759][T22039] netlink: 'syz.1.3987': attribute type 15 has an invalid length. [ 516.172254][T22043] xt_ecn: cannot match TCP bits for non-tcp packets [ 516.194055][T22041] nbd: socks must be embedded in a SOCK_ITEM attr [ 516.202524][T22041] block nbd3: shutting down sockets [ 516.262096][T22043] geneve2: entered promiscuous mode [ 516.267532][T22043] geneve2: entered allmulticast mode [ 516.277474][T10280] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.289028][T10280] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.300586][T10280] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.309363][T10280] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.651241][T22050] syzkaller0: entered promiscuous mode [ 516.657485][T22050] syzkaller0: entered allmulticast mode [ 516.708899][T22053] geneve3: entered promiscuous mode [ 516.737670][T22054] netlink: 'syz.2.3993': attribute type 5 has an invalid length. [ 516.963390][T22068] netlink: zone id is out of range [ 516.963600][T22069] __nla_validate_parse: 12 callbacks suppressed [ 516.963672][T22069] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3997'. [ 516.982686][T22068] netlink: zone id is out of range [ 517.006466][T22068] netlink: zone id is out of range [ 517.106103][T22071] syzkaller0: entered promiscuous mode [ 517.111922][T22071] syzkaller0: entered allmulticast mode [ 517.172934][T22080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'. [ 517.250378][T22088] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4004'. [ 517.315716][T22088] vlan4: entered allmulticast mode [ 517.335547][T22088] gretap0: entered allmulticast mode [ 517.440402][T22089] netlink: 'syz.0.4005': attribute type 2 has an invalid length. [ 517.753255][T22119] netem: incorrect ge model size [ 517.758808][T22119] netem: change failed [ 517.770662][T22119] batman_adv: batadv0: Adding interface: macvlan2 [ 517.780105][T22119] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.808335][T22119] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 517.845466][T22121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4011'. [ 517.886816][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4014'. [ 517.903735][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4014'. [ 517.913621][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4014'. [ 517.923377][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4014'. [ 517.933207][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4014'. [ 517.943702][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4014'. [ 518.184694][T22133] syzkaller0: entered promiscuous mode [ 518.190407][T22133] syzkaller0: entered allmulticast mode [ 518.340326][ T29] audit: type=1800 audit(1771404482.944:9): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4019" name="memory.events" dev="tmpfs" ino=908 res=0 errno=0 [ 518.981730][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 519.462832][T10272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.945486][T22161] netlink: 'syz.3.4024': attribute type 1 has an invalid length. [ 519.954867][T22161] netlink: 'syz.3.4024': attribute type 2 has an invalid length. [ 519.971053][T22161] netlink: 'syz.3.4024': attribute type 1 has an invalid length. [ 519.979506][T22161] netlink: 'syz.3.4024': attribute type 2 has an invalid length. [ 520.037033][T22165] syz_tun: entered allmulticast mode [ 520.103936][T10272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.655899][T22109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.863574][T22164] syz_tun: left allmulticast mode [ 521.136463][T22191] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 521.157278][T22191] bond8 (unregistering): Released all slaves [ 521.427604][T22209] lo speed is unknown, defaulting to 1000 [ 521.538832][T22209] batadv0 speed is unknown, defaulting to 1000 [ 521.776586][T22227] bond8: option lacp_rate: invalid value (192) [ 521.799234][T22227] bond8 (unregistering): Released all slaves [ 521.906430][T22235] netlink: 'syz.2.4042': attribute type 39 has an invalid length. [ 521.969481][T22235] netlink: 'syz.2.4042': attribute type 83 has an invalid length. [ 522.025087][T22209] wg1 speed is unknown, defaulting to 1000 [ 522.034013][T22209] lo speed is unknown, defaulting to 1000 [ 522.087602][T22237] tipc: Started in network mode [ 522.112229][T22237] tipc: Node identity 62fbee901797, cluster identity 4711 [ 522.136153][T22237] tipc: Enabled bearer , priority 0 [ 522.160787][T22243] syzkaller0: entered promiscuous mode [ 522.172200][T22243] syzkaller0: entered allmulticast mode [ 522.221729][T22237] tipc: Resetting bearer [ 522.265983][T22236] tipc: Resetting bearer [ 522.305004][T22236] tipc: Disabling bearer [ 522.543505][T22261] batadv_slave_0: entered promiscuous mode [ 522.558296][T22261] __nla_validate_parse: 67 callbacks suppressed [ 522.558318][T22261] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4049'. [ 522.576952][T22261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 522.621000][T22260] batadv_slave_0: left promiscuous mode [ 522.743920][T22265] batadv2: entered promiscuous mode [ 522.778679][T22264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'. [ 522.790801][T22264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'. [ 522.990627][T22279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4055'. [ 523.262054][T22292] : entered promiscuous mode [ 523.284398][T22293] Bluetooth: MGMT ver 1.23 [ 523.344267][T22295] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4061'. [ 523.396969][T22295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4061'. [ 523.448104][T22297] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 523.715122][T22308] netlink: 'syz.3.4065': attribute type 83 has an invalid length. [ 524.253508][T22310] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 524.639320][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4073'. [ 524.649017][T22332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4073'. [ 524.735032][T22339] netlink: 'syz.4.4074': attribute type 18 has an invalid length. [ 525.223450][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.559733][T22350] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4077'. [ 525.863289][T10272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.501610][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 527.699630][T22368] bond2 (unregistering): Released all slaves [ 527.730588][T22380] netlink: 'syz.0.4085': attribute type 1 has an invalid length. [ 527.906338][T22388] lo speed is unknown, defaulting to 1000 [ 527.949870][T22388] batadv0 speed is unknown, defaulting to 1000 [ 528.181112][T22405] sctp: [Deprecated]: syz.3.4089 (pid 22405) Use of int in max_burst socket option. [ 528.181112][T22405] Use struct sctp_assoc_value instead [ 528.319127][T22409] __nla_validate_parse: 5 callbacks suppressed [ 528.319148][T22409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'. [ 528.345490][T22409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4091'. [ 528.550508][T22388] wg1 speed is unknown, defaulting to 1000 [ 528.580743][T22388] lo speed is unknown, defaulting to 1000 [ 529.076628][T22438] syzkaller0: entered promiscuous mode [ 529.090678][T22438] syzkaller0: entered allmulticast mode [ 529.373081][T22440] netlink: 'syz.2.4097': attribute type 10 has an invalid length. [ 529.390707][T22440] netlink: 'syz.2.4097': attribute type 10 has an invalid length. [ 529.439996][T22440] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 529.991632][ T29] audit: type=1800 audit(1771404494.584:10): pid=22462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4106" name="memory.events" dev="tmpfs" ino=1281 res=0 errno=0 [ 530.053183][ T29] audit: type=1804 audit(1771404494.654:11): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4106" name="/newroot/247/memory.events" dev="tmpfs" ino=1281 res=1 errno=0 [ 530.095808][T22459] lo speed is unknown, defaulting to 1000 [ 530.114265][T22459] batadv0 speed is unknown, defaulting to 1000 [ 530.166923][T22462] lo speed is unknown, defaulting to 1000 [ 530.357426][T22469] lo speed is unknown, defaulting to 1000 [ 530.499883][T22462] batadv0 speed is unknown, defaulting to 1000 [ 530.515729][T22459] wg1 speed is unknown, defaulting to 1000 [ 530.527422][T22459] lo speed is unknown, defaulting to 1000 [ 530.583602][T22480] xt_policy: output policy not valid in PREROUTING and INPUT [ 530.698027][T22482] tipc: Enabled bearer , priority 0 [ 530.708741][T22482] syzkaller0: entered promiscuous mode [ 530.715021][T22482] syzkaller0: entered allmulticast mode [ 530.727195][T22482] tipc: Resetting bearer [ 530.736559][T22481] tipc: Resetting bearer [ 530.790734][T22481] tipc: Disabling bearer [ 530.983615][T10280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.207557][T22469] batadv0 speed is unknown, defaulting to 1000 [ 531.234276][T22462] wg1 speed is unknown, defaulting to 1000 [ 531.243834][T22507] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4115'. [ 531.294322][T22507] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4115'. [ 531.322138][T22507] netlink: 'syz.0.4115': attribute type 9 has an invalid length. [ 531.333794][T22507] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4115'. [ 531.353758][T22507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4115'. [ 531.625030][T10278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.007010][T22462] lo speed is unknown, defaulting to 1000 [ 532.024885][T22469] wg1 speed is unknown, defaulting to 1000 [ 532.106679][T22510] openvswitch: netlink: Actions may not be safe on all matching packets [ 532.177978][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 532.524904][T22469] lo speed is unknown, defaulting to 1000 [ 532.796691][T22530] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.686797][T22533] netlink: 'syz.0.4122': attribute type 1 has an invalid length. [ 533.830428][T22537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4122'. [ 533.902739][T22533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4122'. [ 534.025520][T22536] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 534.073700][T22536] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 534.278822][T22537] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 534.313311][T22533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.797355][T22551] xt_recent: Unsupported userspace flags (000000b1) [ 534.806839][T22553] siw: device registration error -23 [ 534.908609][T22559] netlink: 'syz.3.4128': attribute type 3 has an invalid length. [ 534.967235][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4130'. [ 535.112829][T22569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4130'. [ 535.163943][T22563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4130'. [ 535.246782][T22563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4130'. [ 535.301213][T22579] tipc: Enabled bearer , priority 0 [ 535.340839][T22580] syzkaller0: entered promiscuous mode [ 535.352639][T22580] syzkaller0: entered allmulticast mode [ 535.372305][T22583] SET target dimension over the limit! [ 535.388087][T22581] tipc: Resetting bearer [ 535.399124][T22580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.503228][T22589] macsec1: entered promiscuous mode [ 535.516528][T22589] ip6gretap0: entered promiscuous mode [ 535.530980][T22589] macsec1: entered allmulticast mode [ 535.547375][T22589] ip6gretap0: entered allmulticast mode [ 535.564634][T22589] ip6gretap0: left allmulticast mode [ 535.581671][T22589] ip6gretap0: left promiscuous mode [ 535.809085][T22587] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 535.859135][T22574] tipc: Resetting bearer [ 535.896888][T22574] tipc: Disabling bearer [ 535.934303][T22602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.014352][T22602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.242587][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4144'. [ 536.302437][T22625] netlink: 'syz.3.4144': attribute type 1 has an invalid length. [ 536.680328][T22644] vxcan3: entered promiscuous mode [ 536.744025][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.766475][T10272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.271319][T22663] bond3: entered promiscuous mode [ 537.640565][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4159'. [ 537.980794][T22691] lo speed is unknown, defaulting to 1000 [ 537.991861][T22691] batadv0 speed is unknown, defaulting to 1000 [ 538.227308][T22704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 538.313783][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4167'. [ 538.413895][T22691] wg1 speed is unknown, defaulting to 1000 [ 538.422245][T22691] lo speed is unknown, defaulting to 1000 [ 538.676019][T22717] syzkaller0: entered promiscuous mode [ 538.678688][T11446] lec:lec_start_xmit: lec0:No lecd attached [ 538.714469][T22717] syzkaller0: entered allmulticast mode [ 538.891359][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'. [ 539.264693][T22730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4171'. [ 540.651748][T22733] batadv_slave_0: entered promiscuous mode [ 540.673058][T22733] batadv_slave_0: left promiscuous mode [ 540.707989][T22735] batadv1: entered promiscuous mode [ 541.003722][T22748] netlink: 'syz.2.4175': attribute type 5 has an invalid length. [ 541.163094][T22751] IPVS: length: 132 != 8 [ 541.182226][T10280] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 541.250582][T22742] pimreg: entered allmulticast mode [ 541.275659][T22741] lo speed is unknown, defaulting to 1000 [ 541.284606][T22741] batadv0 speed is unknown, defaulting to 1000 [ 541.309569][T22742] pimreg: left allmulticast mode [ 541.731277][T22768] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4178'. [ 541.773290][T22768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4178'. [ 542.054620][T22777] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4182'. [ 542.064531][T22777] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4182'. [ 542.163999][T22741] wg1 speed is unknown, defaulting to 1000 [ 542.184792][T22741] lo speed is unknown, defaulting to 1000 [ 542.423555][T22790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4185'. [ 542.481748][T22790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4185'. [ 542.503651][T10275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.517778][T10285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.523928][T22790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.535821][T22790] IPv6: NLM_F_CREATE should be set when creating new route [ 542.801312][T22812] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4191'. [ 542.835068][T22812] netlink: 51 bytes leftover after parsing attributes in process `syz.4.4191'. [ 542.872005][T22812] netlink: 'syz.4.4191': attribute type 4 has an invalid length. [ 543.663497][T22852] tipc: Enabled bearer , priority 0 [ 543.701932][T22852] syzkaller0: entered promiscuous mode [ 543.717022][T22852] syzkaller0: entered allmulticast mode [ 543.815954][T22858] tipc: Resetting bearer [ 543.898577][T22851] tipc: Resetting bearer [ 543.942097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 543.950231][ C0] lec:lec_tx_timeout: lec0 [ 544.141061][T22851] tipc: Disabling bearer [ 544.359902][T22881] x_tables: duplicate underflow at hook 1 [ 544.377104][T22881] __nla_validate_parse: 2 callbacks suppressed [ 544.377125][T22881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'. [ 544.434719][T22880] hsr0: entered promiscuous mode [ 544.448237][T22881] hsr_slave_0: left promiscuous mode [ 544.456442][T22881] hsr_slave_1: left promiscuous mode [ 544.517872][T22881] hsr0 (unregistering): left promiscuous mode [ 544.583329][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 544.651785][T22895] netlink: 'syz.1.4212': attribute type 10 has an invalid length. [ 544.659673][T22895] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4212'. [ 544.715436][T22892] netlink: 'syz.4.4210': attribute type 2 has an invalid length. [ 544.885603][T22902] netlink: 8880 bytes leftover after parsing attributes in process `syz.2.4216'. [ 545.002873][T22905] bridge3: entered allmulticast mode [ 545.071432][T22905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4215'. [ 545.146112][T22913] siw: device registration error -23 [ 545.183527][T22911] netlink: 'syz.3.4219': attribute type 5 has an invalid length. [ 546.199820][T22949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'. [ 546.281358][T22958] xt_hashlimit: size too large, truncated to 1048576 [ 546.284840][T22955] tipc: Enabling of bearer rejected, failed to enable media [ 546.301187][T22958] xt_hashlimit: max too large, truncated to 1048576 [ 546.383195][ T29] audit: type=1804 audit(1771404510.994:12): pid=22957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4230" name="memory.events" dev="tmpfs" ino=1480 res=1 errno=0 [ 546.465780][ T29] audit: type=1800 audit(1771404510.994:13): pid=22957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4230" name="memory.events" dev="tmpfs" ino=1480 res=0 errno=0 [ 546.496998][T22963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4234'. [ 546.522387][T22967] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 546.827836][T22985] netlink: 'syz.4.4237': attribute type 3 has an invalid length. [ 547.229936][T22998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4240'. [ 547.272323][T22997] lo speed is unknown, defaulting to 1000 [ 547.279935][T22997] batadv0 speed is unknown, defaulting to 1000 [ 547.622132][ C0] ------------[ cut here ]------------ [ 547.627992][ C0] ODEBUG: free active (active state 0) object: ffff888045d8fc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 547.629610][T23006] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 547.640980][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz.0.4233/22967 [ 547.658210][ C0] Modules linked in: [ 547.662611][ C0] CPU: 0 UID: 0 PID: 22967 Comm: syz.0.4233 Not tainted syzkaller #0 PREEMPT(full) [ 547.672090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.682303][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 547.688697][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 547.708581][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 547.714742][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a4555d0 RCX: 0000000000000000 [ 547.722808][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 547.730829][ C0] RBP: ffffffff8bcf4a00 R08: ffff888045d8fc90 R09: ffffffff8bcf5d20 [ 547.738991][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888045d8fe00 [ 547.747043][ C0] R13: ffffffff901b4570 R14: ffff888045d8f000 R15: ffff888045d8fc90 [ 547.755129][ C0] FS: 00007f40bbc1f6c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 547.764133][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.770756][ C0] CR2: 00007f2a0b3a4ff8 CR3: 0000000034cb2000 CR4: 00000000003526f0 [ 547.778820][ C0] Call Trace: [ 547.782163][ C0] [ 547.785049][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 547.790750][ C0] kfree+0x13a/0x610 [ 547.794738][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 547.799919][ C0] rose_timer_expiry+0x4cb/0x600 [ 547.804982][ C0] ? call_timer_fn+0x178/0x5a0 [ 547.809800][ C0] call_timer_fn+0x192/0x5a0 [ 547.814480][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 547.819992][ C0] ? call_timer_fn+0xd4/0x5a0 [ 547.824751][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 547.829921][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.835205][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 547.840732][ C0] __run_timer_base+0x652/0x8b0 [ 547.845650][ C0] ? ktime_get+0x45/0x200 [ 547.850041][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 547.855504][ C0] ? sched_clock_cpu+0x74/0x440 [ 547.860408][ C0] run_timer_softirq+0xb7/0x170 [ 547.865351][ C0] handle_softirqs+0x22a/0x7c0 [ 547.870159][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 547.875024][ C0] __irq_exit_rcu+0x5f/0x150 [ 547.879660][ C0] irq_exit_rcu+0x9/0x30 [ 547.883995][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 547.889671][ C0] [ 547.892660][ C0] [ 547.895735][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.901800][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x4/0x90 [ 547.908173][ C0] Code: 74 11 18 48 89 44 11 20 e9 09 ea dc 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0d c8 c2 52 11 65 8b 15 e9 c2 52 11 81 e2 00 [ 547.927951][ C0] RSP: 0018:ffffc90004837058 EFLAGS: 00000286 [ 547.933498][T10275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.934123][ C0] RAX: ffffffffffffff00 RBX: ffff88807af649c0 RCX: 0000000000080000 [ 547.952643][ C0] RDX: ffffc900132a9000 RSI: ffff88801f3e5a00 RDI: ffff88807cfadc00 [ 547.960837][ C0] RBP: ffffc90004837250 R08: ffff888025d78000 R09: 0000000000000003 [ 547.968906][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffff88801f3e5a00 [ 547.976955][ C0] R13: dffffc0000000000 R14: ffff88807cfadc00 R15: 0000000000000001 [ 547.985031][ C0] mt_validate+0x3ea9/0x4320 [ 547.989694][ C0] ? __pfx_mt_validate+0x10/0x10 [ 547.994776][ C0] validate_mm+0xd4/0x4c0 [ 547.999167][ C0] ? vma_complete+0x56f/0xae0 [ 548.003935][ C0] ? __pfx_validate_mm+0x10/0x10 [ 548.008945][ C0] ? vma_complete+0xa5c/0xae0 [ 548.013721][ C0] ? vma_prepare+0x47e/0x4b0 [ 548.018367][ C0] ? vma_adjust_trans_huge+0x286/0x370 [ 548.024026][ C0] __split_vma+0x906/0xa50 [ 548.028507][ C0] ? __pfx___split_vma+0x10/0x10 [ 548.033548][ C0] ? mas_find+0xb0e/0xd30 [ 548.037939][ C0] vms_gather_munmap_vmas+0x4d0/0x1320 [ 548.043510][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 548.049460][ C0] ? mas_find+0xa7d/0xd30 [ 548.053892][ C0] mmap_region+0x838/0x1f40 [ 548.058442][ C0] ? security_mmap_file+0x773/0xa20 [ 548.064183][ C0] ? vm_mmap_pgoff+0x134/0x4f0 [ 548.069020][ C0] ? __pfx_mmap_region+0x10/0x10 [ 548.074098][ C0] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 548.080424][ C0] ? mm_get_unmapped_area+0xd3/0x100 [ 548.085800][ C0] ? apparmor_capable+0x137/0x1a0 [ 548.090906][ C0] ? bpf_lsm_capable+0x9/0x20 [ 548.095688][ C0] ? security_capable+0x7e/0x2c0 [ 548.100683][ C0] ? shmem_mapping+0xd/0x50 [ 548.105259][ C0] ? memfd_check_seals_mmap+0x165/0x200 [ 548.110870][ C0] do_mmap+0xc39/0x10c0 [ 548.115136][ C0] ? __pfx_do_mmap+0x10/0x10 [ 548.119784][ C0] ? down_write_killable+0x180/0x240 [ 548.125170][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 548.130868][ C0] ? apparmor_mmap_file+0x23e/0x2b0 [ 548.136193][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 548.140845][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 548.146166][ C0] ? __fget_files+0x2a/0x420 [ 548.150819][ C0] ? __fget_files+0x3a0/0x420 [ 548.155679][ C0] ? __fget_files+0x2a/0x420 [ 548.160311][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 548.165161][ C0] do_syscall_64+0x14d/0xf80 [ 548.169822][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.175983][ C0] ? trace_irq_disable+0x37/0x100 [ 548.181056][ C0] ? clear_bhb_loop+0x40/0x90 [ 548.185816][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.191784][ C0] RIP: 0033:0x7f40bad9c629 [ 548.196248][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.215938][ C0] RSP: 002b:00007f40bbc1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 548.224442][ C0] RAX: ffffffffffffffda RBX: 00007f40bb015fa0 RCX: 00007f40bad9c629 [ 548.232500][ C0] RDX: 000000000100000c RSI: 0000000000003000 RDI: 00002000007a6000 [ 548.240535][ C0] RBP: 00007f40bae32b39 R08: 0000000000000009 R09: 0000000000000000 [ 548.248603][ C0] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000000 [ 548.256646][ C0] R13: 00007f40bb016038 R14: 00007f40bb015fa0 R15: 00007fffc0c60758 [ 548.264730][ C0] [ 548.267815][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 548.275129][ C0] CPU: 0 UID: 0 PID: 22967 Comm: syz.0.4233 Not tainted syzkaller #0 PREEMPT(full) [ 548.284547][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.294646][ C0] Call Trace: [ 548.297959][ C0] [ 548.300838][ C0] vpanic+0x1e0/0x670 [ 548.304876][ C0] panic+0xc5/0xd0 [ 548.308642][ C0] ? __pfx_panic+0x10/0x10 [ 548.313126][ C0] __warn+0x315/0x4a0 [ 548.317190][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 548.322956][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 548.328730][ C0] __report_bug+0x29a/0x540 [ 548.333276][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 548.339135][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 548.344928][ C0] ? __pfx___report_bug+0x10/0x10 [ 548.350005][ C0] ? kfree+0x1c1/0x610 [ 548.354114][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 548.359279][ C0] ? call_timer_fn+0x192/0x5a0 [ 548.364088][ C0] ? __run_timer_base+0x652/0x8b0 [ 548.369160][ C0] ? run_timer_softirq+0xb7/0x170 [ 548.374221][ C0] ? handle_softirqs+0x22a/0x7c0 [ 548.379237][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 548.384048][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 548.389912][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.396111][ C0] ? __sanitizer_cov_trace_cmp8+0x4/0x90 [ 548.401885][ C0] ? mt_validate+0x3ea9/0x4320 [ 548.406701][ C0] ? validate_mm+0xd4/0x4c0 [ 548.411259][ C0] report_bug_entry+0x19a/0x290 [ 548.416201][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 548.421966][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 548.427737][ C0] handle_bug+0xca/0x200 [ 548.432031][ C0] exc_invalid_op+0x1a/0x50 [ 548.436605][ C0] asm_exc_invalid_op+0x1a/0x20 [ 548.441492][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 548.447864][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 548.467505][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 548.473621][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a4555d0 RCX: 0000000000000000 [ 548.481621][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 548.489629][ C0] RBP: ffffffff8bcf4a00 R08: ffff888045d8fc90 R09: ffffffff8bcf5d20 [ 548.497649][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888045d8fe00 [ 548.505664][ C0] R13: ffffffff901b4570 R14: ffff888045d8f000 R15: ffff888045d8fc90 [ 548.513692][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 548.519159][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 548.524849][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 548.530550][ C0] kfree+0x13a/0x610 [ 548.534530][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 548.539700][ C0] rose_timer_expiry+0x4cb/0x600 [ 548.544693][ C0] ? call_timer_fn+0x178/0x5a0 [ 548.549502][ C0] call_timer_fn+0x192/0x5a0 [ 548.554154][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 548.559681][ C0] ? call_timer_fn+0xd4/0x5a0 [ 548.564404][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 548.569578][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.574826][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 548.580337][ C0] __run_timer_base+0x652/0x8b0 [ 548.585251][ C0] ? ktime_get+0x45/0x200 [ 548.589639][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 548.595055][ C0] ? sched_clock_cpu+0x74/0x440 [ 548.599962][ C0] run_timer_softirq+0xb7/0x170 [ 548.604858][ C0] handle_softirqs+0x22a/0x7c0 [ 548.609663][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 548.614484][ C0] __irq_exit_rcu+0x5f/0x150 [ 548.619122][ C0] irq_exit_rcu+0x9/0x30 [ 548.623431][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 548.629124][ C0] [ 548.632088][ C0] [ 548.635052][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.641075][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x4/0x90 [ 548.647449][ C0] Code: 74 11 18 48 89 44 11 20 e9 09 ea dc 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0d c8 c2 52 11 65 8b 15 e9 c2 52 11 81 e2 00 [ 548.667105][ C0] RSP: 0018:ffffc90004837058 EFLAGS: 00000286 [ 548.673256][ C0] RAX: ffffffffffffff00 RBX: ffff88807af649c0 RCX: 0000000000080000 [ 548.681305][ C0] RDX: ffffc900132a9000 RSI: ffff88801f3e5a00 RDI: ffff88807cfadc00 [ 548.689423][ C0] RBP: ffffc90004837250 R08: ffff888025d78000 R09: 0000000000000003 [ 548.697462][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffff88801f3e5a00 [ 548.705476][ C0] R13: dffffc0000000000 R14: ffff88807cfadc00 R15: 0000000000000001 [ 548.713517][ C0] mt_validate+0x3ea9/0x4320 [ 548.718248][ C0] ? __pfx_mt_validate+0x10/0x10 [ 548.723285][ C0] validate_mm+0xd4/0x4c0 [ 548.727679][ C0] ? vma_complete+0x56f/0xae0 [ 548.732401][ C0] ? __pfx_validate_mm+0x10/0x10 [ 548.737397][ C0] ? vma_complete+0xa5c/0xae0 [ 548.742119][ C0] ? vma_prepare+0x47e/0x4b0 [ 548.746776][ C0] ? vma_adjust_trans_huge+0x286/0x370 [ 548.752291][ C0] __split_vma+0x906/0xa50 [ 548.756774][ C0] ? __pfx___split_vma+0x10/0x10 [ 548.761768][ C0] ? mas_find+0xb0e/0xd30 [ 548.766149][ C0] vms_gather_munmap_vmas+0x4d0/0x1320 [ 548.771671][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 548.777614][ C0] ? mas_find+0xa7d/0xd30 [ 548.781992][ C0] mmap_region+0x838/0x1f40 [ 548.786531][ C0] ? security_mmap_file+0x773/0xa20 [ 548.791773][ C0] ? vm_mmap_pgoff+0x134/0x4f0 [ 548.796593][ C0] ? __pfx_mmap_region+0x10/0x10 [ 548.801620][ C0] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 548.807934][ C0] ? mm_get_unmapped_area+0xd3/0x100 [ 548.813279][ C0] ? apparmor_capable+0x137/0x1a0 [ 548.818360][ C0] ? bpf_lsm_capable+0x9/0x20 [ 548.823093][ C0] ? security_capable+0x7e/0x2c0 [ 548.828080][ C0] ? shmem_mapping+0xd/0x50 [ 548.832630][ C0] ? memfd_check_seals_mmap+0x165/0x200 [ 548.838215][ C0] do_mmap+0xc39/0x10c0 [ 548.842423][ C0] ? __pfx_do_mmap+0x10/0x10 [ 548.847065][ C0] ? down_write_killable+0x180/0x240 [ 548.852404][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 548.858092][ C0] ? apparmor_mmap_file+0x23e/0x2b0 [ 548.863347][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 548.867992][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 548.873145][ C0] ? __fget_files+0x2a/0x420 [ 548.877783][ C0] ? __fget_files+0x3a0/0x420 [ 548.882497][ C0] ? __fget_files+0x2a/0x420 [ 548.887144][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 548.891957][ C0] do_syscall_64+0x14d/0xf80 [ 548.896625][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.902732][ C0] ? trace_irq_disable+0x37/0x100 [ 548.907805][ C0] ? clear_bhb_loop+0x40/0x90 [ 548.912532][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.918556][ C0] RIP: 0033:0x7f40bad9c629 [ 548.923014][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.942666][ C0] RSP: 002b:00007f40bbc1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 548.951141][ C0] RAX: ffffffffffffffda RBX: 00007f40bb015fa0 RCX: 00007f40bad9c629 [ 548.959155][ C0] RDX: 000000000100000c RSI: 0000000000003000 RDI: 00002000007a6000 [ 548.967157][ C0] RBP: 00007f40bae32b39 R08: 0000000000000009 R09: 0000000000000000 [ 548.975150][ C0] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000000 [ 548.983151][ C0] R13: 00007f40bb016038 R14: 00007f40bb015fa0 R15: 00007fffc0c60758 [ 548.991165][ C0] [ 548.994825][ C0] Kernel Offset: disabled [ 548.999162][ C0] Rebooting in 86400 seconds..