last executing test programs: 14.156089486s ago: executing program 4 (id=8659): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) listen(r2, 0x2) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) shutdown(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x5824, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 13.93945767s ago: executing program 4 (id=8661): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc", 0x34}, {&(0x7f00000017c0)="44504f81d37c356952483f9244dd24e9721f7301f0dd0efe110d5e42d312d8a8c424c3d2e9d5a72d432257fd9a16d54633ee7e655e580fc0c5f738a50b5e5c368d704341435788d36495f5cb1a1a8561280ba32dc2ac0e9dc99f5966775d6a15a0baf8d7d01de240d0a98f154dbb5a209a565a11413802912a876b1e535aec09bc56e9a11b152a513b1ccb936a83ee422fdb3dbad2c9f87b46af59b76ac5f66be4b8749c34e63eec0f0360ba4f374e2c29558ff0c2aebbbc33a9791b54b5bf5a129ce4633ef208351356c4c69dc23dfe5901f65817ce5c2e8c3630a37266a43e02fe104bab6b619be0bef129a6fb9ffba7166433c0ad5c8c5244f7fc154263b9e63ae7f1bff904ee8edd49793edcbc2fef56331e335d43ea63d3e6d6998e65b1f185b4ec39c97e5b6abe32cb31fc4989e360445796226143e08f0a3c8c850637b4054d6326a770a7f287e5978b8d2bd5cceb1f7840d0ec5295df104768aa1e2a496450234f3ce7cbbc2a3ee961973bb4995f670440afdfee4376aae0d0c465353e0968ac3b9ba4bf4bae767666d713ded82432026b724a8313ff5fa842ef0dc7326d655c9a815abb7c3b21464f9c6bc1ca65e5cc669d3672d97fc13bb5c93cf524e42f3cb3ee8984d8c257bdaa750eb89bd3e1ce3d7afeac2d2d208e240d661e7cb6eae2706063ce8cbfab3fec9bdd2fb08607cefecbbd270db5dc5a5eeb911fffced98c473faf5676328334d3c2bac87ec8c18275cba96ec4da0d1866a5a9cafd4d8459fba6d6a00d89949d03a1253770f470c29f9b772cabfd742596b85ab8891ed53bc991dad10e7f62804a6ffab97d71266631e1c9f7bbfafca90570b16f251c6df3f476393e9ad47155248d939149bc6641015d3bf9d91a6d12fc393f00d85c3251dae7dd23119b7444f6a60a9823bd6ec7054a5b6ab6845381d5c30ea04f1b66765af446ae1909ca79c3c75136d3d59b2708a81e245ad6a299a4bab20c7bc33cb6ea49de071b69950ff60fe9d64c7ef67075b580b30b44e0aa18967fcb0e8574fde467cc39c8f9c08b12124f95f9ba71bcac69dcaa7de6761605e307c2e724223cb53cb7cc2a6e6f2c92ad18bb748ebe9c3b02fbe3fff04ed8ea921ccd65622b00747d00bcc489a1aadaa3a403cbf4a69b2858d563d63e2d0704a8e02836803f1b2d003658ea9c261b2036b301ceee5195e9261e2c16067b78c3ae28e0f46562e65f36d058d405743a85c2a0a1c5593ba05138619d1181ab0ae48a3e8516fea8a00a7fb8a5b70be59f0e46c322601cb3c8733b2bbdb21bd800c9fdddbf9e7121946e75f24df19c1cdf0f0098db8c6f93a6464646db8d2a503324e1f29a9b24f8ea63f074da4f98bf0330df6e4b6ce3c77c65c938217ec54966d45b4528dfb52a310c1a74cc6281bb47822b7557f04088e0702eebdf3928a1037b1fd981035f160b3e072458e59f2cc6b370a4d227cdf189d9ecaf914ceca925f5cea23c9fa4cb728ac586d3a556adf84ef94ab8a04630687a72292eeae417c5b741c220b9b6d716fb8b266123827e19a3e1d890ae3e4e3de7eb28440dc7f68506b255b3d0a87b99d4987c945f9a3a4e3a7d76a7a8b6e7d8b109a49533e11edadf2f8c9eee4ab3364728d96f26a61eafac0ac2ae7986c0473b82ab63a22c307c5769fe4d4135587d5a4e0d393c159c2270c4b75b31c4d75376376dae48ee452150c170bef8fa62881d8085e1b0ff8075c1b8733c560165f9489fea4df5bcabbc3d70e046a79e34a16343ec49bdf20a3f0cdef468e64e7c2f7c67842b50b503900a90ccc47256b7e3d4b6dd05e804a264cbcc55ad569e871fb45c2b7e2e8839d180657d20956483dbd2b8f3cafae2fba034dfa5eebb951540270a7991178601c58fcec4583e154414d047acf227ab702ad807d6bbda2a72837fd735a448999883fcaba3bfb5d17a037a9eb852b27df388321f6dca418f44b69bcf7c7c84ae7225e0574adc09d3b65b55b1c5681ed48bf97e8433589294e5db8e1c8bafad54ad23588d32f92eb8a2ee4872da9500c94851b20b6bcd3b93cb41a4787b233fb88e5fd099a4abc094aa3789479041b4bd28cbe3f0623617339ab4c07e1d96635b0a6400ff3d893affa26f780044a159db5bba02009341635b67a8dd8f009f6595f3d43cea9e92d908e3eaa56eb576c76c951291a36c593306fcfd291b926b2f3937c646bd67f0d14f89eb1028377b17ee8b6ab1eeb1e9035de0e9a40ada71904349cffc7a0885a4e5c6215b9cd7db13d2cd83f10425b499c6f5b443bb26e51ac8aeeb49b289da1af136b08ba3301b4475604bf4a17dca8da65a54ef292f043f5ca2e957d55b0c6e0d01cf7c22a322d332a6c11e2b10eb233a3c31ce7fe0b04d369a433a40a4ec0e69abe166b57eaf322c6e5004301ee1377df589d970b7e85cf64f4f0308be3b75b62ca0da200ddbbd7a06c8dd47404c62a76c5b402dddc322d29708fb708e5180cb6ae2dc99ed443c810bb76ec2aeb610fb47def22464e6ce8a57b223014dd476bcd9c1f6eac83db401b76398f345cf57b15b5a22131dfe640c8ee5d402616453968e1a7eaefc426bafaef97fb9f9bef23649d18afa762d37c2abc8da9135588738fe442c915497649b8256aef0e3eed320154289e0c727911763d814bdc9980a50a9ca6b20c00fe9bd2d79b89e5fe078a210eb0db7225fa37e46e0b171c1132e10822d0ce3f32ae73bfcd7c9fcc416a2834e29daf5b4bba8d4f7358fe2834e00674f0c787a71075bbd60724b11fb7f1781ec2ab99c5ac648caaf6bfba7f0d3b2b2816f2891c36965507f826e71d2ffcbb96dc770579d9289309fe72028234a201803c10d0696fb98aecc158c2ec820e566a6f8ff68499b98e9a56344a1bcdd6fb2ea8f51ccb964b016dc09bd8ece896742fd7d39710e08f5426188fc3d9f056302e8e5a2b254d1bb8dd871d536387998ee4a4f989b455f9e7513aff9bd4333bd94a6c1d1ce9cd008927caec96dd298b4eee0dbd42d30b92d5770bf404d83bdf7b70abbb13e578e94262af47b8116fd9e074ed3e5fd8cf049218473361f8f302f018d20144532394e2fe8f7ce625ac4700ff92637e655846d300af951d18168fc68a5a9c6b1d1c88d7558e83ab4971d14f51c92c89f608ccf09a9aa25d4eb16704e3278cee9b79f3ca816a40c78727d7a0c077199589602c60839d657c97d410dcd88eaea137970c42ff1bd12301346845d4ad140edb6e33233f20655311ad68991470dae7e177bc7073aa9936382f45a643cc30008b5165aff65e0117cc9434093e2d89e474ccb83fc0b3fcf3d8a01adcf5d28127f7677a45295d3e16487b94402d127e986df81e1a92d8271a774532f047398e535b56a5b5f45a0af174249548eafd7c69c6ae4bbe4ba08b2861cda6e52122ccecf3dbc9b220cfef7dce56a942d21cc82e23ff79ff71a032d2fde816778d2171a8a7269fcf9f8c38904bbe2fd6e5426b88b7eba1ff086b9e935c0558812ab2e898ed862dff14d6da6044da16ebdbf87b389ae4949fd83614884b464b881393f2ff0495b1d8289c816cd8ca18efc3913548c827d3dc3e002d21ce01fc55bf662e09fce2145bc6580a0967f13aed369c24cb2f511a193a63d1751b0325776bc01a90844604677723551833734a6dcd46455c3721a66da81d351e47b95fdae5b522f3cd9d6fb22e32b67f387aa1ab0916b2fa97b0e2670682201aa856d20eafad08f3321786b870d72232e84e3061994c4659f9a65813769032e7ea1aa8b520be948d4a560271c6db746528c80dc5637b4df23a1f8497494e2342f557e58df7dba68c742dd6cb3a613c170639b160e3aa4e5b65b7bfc79a7c1315b9c70d0dd4a2853e844ab1190b0c7076df2b70c93cd5d6de01d6d8909e6c9efbd02eba9bd91a5843f79f76bcd71b981d7b5e46646a14d85622a978a057a582a7092fcb1882371faaa11f0ae48bc32d45385dc886a04bd13b1675c979ea4a03537b39309ca663262ac3ec51b4a3dcb110368218089ef8aeb61a780085d1b7faec401b141ad4d6dbcecc63823a0b0d99dcf25896286994665a9ac9d05ede0f65c7a3a0b076582d159e58cad421877bd531c800efe67f7a84ea7aee880a530a0d5a522df4842dd94cc1ab6f565e6187a7ff8c2e23d6d2aaa3195a0285d325c3df4d054394f3a7f4a33569a454bdf477646bbe9998029066640484924879a3518bb35c493a089a720da9a21b6da421957d973a4f1fe80b410c5becd0090cc98634d2348600a1fc09c2caa9db88f9507dda5d5279619ca891387c43719ef86d19ee95f591c5c395dbcd8f8cc279082c9035ce6528f6b05aedbfd796431e13402a66794a90dee34998e4bec14464de50c4ba482d92151c9511abb11f688c29eac864fc66721a2b9c91e7b34bdc4039225314d3a658fae7bc1a1fa3e6a03fc03a382f67eefeae459e979e534caf25a6b6d808cdc8de8df7127ce834ef72e40e8568f0f044ed885ba69a1b19307f560f2db82240cdac9bb1ca733583e351dcfe7ba695efb8dbf9099c05ae60a6b9c4b415ec3307b7b6eeae1a6aef4ae64c0b6b3014920cb2909847afa969961c0b5ab940c59474018caac354d0cc07400a2ee434648d57a1d30430a6afde56b1ff51cfe83dfb5daa425b742d39fbfcda3e62c23783b0cfb5380759684f2dbc9a2a4cc969a920e4dfb6f2a97dd42733373c8a13844fa5ef857236db52e02c4422476c191fc0914594cb6a1bc91066f68599e4f33aefb08a66e82dee36ed65a3508615633582e5d04aace6743074f81a6cb47ca7dea50a2df361617d2ecbc4c0c2f184cb83577d67b5b7755e916fd2b4c916291ff0ba2b8407096b346a38a7ac21312797eb367927725ce6274455403591410527c71894626be1b77088a631f1e7759be7fc058398484ef4629df260393a871892b37bb3d6b8783d36cb2ff94805ca7d92d715465a1da27717c23483d484a415bdb35e2ff6920600d8ac91a277669658906bec640975c5b9e6eb59b9385937d27793b78af0914f460368d07f55913efc67499bef7f695d3aa7cfcc53a24ed293e02af55c8d2e09cf8d1b7b7dd94ea4e0bbb901d6e03e955a422c6f4c19242b5425af44a2d5cb957d56158bdb10c21e934571054d0303d874d68f6f59b914ff8e828d1418eb7210707c4ffdf474dce5cca94804636f56fa11cc5ade935b13d104d4e5f9d0c7f884aabee7862e94092de489d4ab0249161c25f05615f9b704bd6b02604032efa98c7882c93c188c01e17a277adbec3abb56d9639aa85a28922735c6102b6d6286f69482fa3c45ace8602dcf6acc497cb5467f5fb3b364e8baf9d8f2fbd8059b3795fe2da1dd5dc453eaa34365d5aefd933dc7db4bd22585d94394c44701dc1cd57edf55ec89ba5ff21debe863c6cf42b78ffd506e581b65a1ac9a3c7bdba8a2100194ea41296", 0xf14}], 0x2}, 0x2404c0d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x44004000) r3 = socket(0x10, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c8a1894120c97f72846175d5d3fa378d1cca80e7350235a631a3c163667a93209dfe30659771edd85ed924fb7ab0b17d3f914b70283cf06c2c008fcffc068eec04b1209503ca96e2663bbcec44c891b1375a8a25f2ac60518e1dcf3861156c3dbffd75bf548be30907f2ef2111d9f174431c38f450f616bf5a1dbd3ff206c537dc99e529922e749c6921c682d480c690e64b7d446b551d461841fc9e51e9ad27cf041d85babeb08575508ae2fa28302e8a1cbfcbf6114d648ee0fb3fb", @ANYRES16=r0, @ANYRES8, @ANYRESOCT=r5], 0x34}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0x7, 0xf, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x2f00, 0xfffffffe, 0xb}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000002700)=@data_frame={@msdu=@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8e}, @broadcast, @broadcast, @initial, {0x8, 0x37}, "", @value={0x4, 0x0, 0x2, 0x0, 0x78}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x6e, "fd24ba0323e0b623825598587a88471f2d3e384f6bbc243cb317705fd8d3aa654f1535358d236b73208db0b5a07e0c195bb02626b07a52d240f17fa7b59d0b94324baef7ce717ed614ec32d0dfd84f7af9372095139d530f890fdc6d3e19751045923a14d5854bb8cea28bc347fd"}, {@device_b, @device_b, 0xc7, "18b3341c487fc8354ea026b0f648933f8d74a709d75a2c56195f7aee37f8252559bd896a5265799d37ef92fcde2ed6cbbdc9e3c26ee410434a08072d49a3d3f0d91f2001b981cf58691c07cd36bf21c7c1d12041801f311380e2f789a34db71a09a8930847a5f27fa81fc3b8e462d4982ed23a7214adf53dc3b6bd82ff76a669e3f3408489b0410716f55602ed1ffee718952a616ee53caacba1f3b7b646ae7573b87b4c340f5551eac78ab965e189f43171782d0dc537a4721ea387707c26a6b579fdc6423a4d"}, {@device_a, @device_b, 0x4f, "6adba1c8011ee5f44d6ded89839ba4e048498eb6d3c5970e0249bd84815d8968653372e90732b96a66c83048336fad90013da34cfd988f742a2aa5f4ec47d5d6d42e2b425cb128a93ebceef0971922"}, {@device_a, @broadcast, 0x1000, "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"}, {@device_a, @broadcast, 0x36, "84a5e7f00c35bf8d2d0ada9de0db7d7a6981fdcf058b46974358c9247d620e52225b2a1aa51d57b4bf7d12429b40ce203816fa15dc84"}, {@device_b, @broadcast, 0x75, "c3e953d7ef4a6f8c6fb990819635bcff127acae3c7a3f684e61e4ee7121cdcee393ff07a618fbe41f47c3b4bd8e6e8c9e8b5a758d4a16dc03e4ea0370b261c60468805337453621d92c1effd3eab1f1270bf49f264594c0def935d1151a5ca8d56e35a04f8f1fc6818b7e9b2ed8a9cc65fba01a172"}, {@device_a, @device_b, 0x32, "617c6da46d1b9d2164bda52777a7e6e2b07db23529107a1653fbc2d9954b3b68d173fbe6a39d27e2ecef5838c9712891fa5a"}, {@device_a, @device_b}, {@device_a, @device_b, 0x91, "ce06c8fff1dd270a1cca640f1b4770c39ae453573017656cb9cc918a1b6302246ad1ea603c40b810b7d6b53599635847d1e4eac770257fba35ca6a8f033b5819677f28253d64de325174eab5ba3c42781df724611c32d2971f809e1ce950369b6675fbc68bf1318a0346893eda2d2a6a4d0053be84484844cd6e5849668a87879994e66261ad6ebe52be2e0254da34e558"}, {@device_b, @broadcast, 0x74, "94c2615fc91dc95487f5e7b4ff2bd7618151af78966d3dcd7d20d73c5bb29df9681a31966a7fa7faee4a5d0556d6e2b6e2cd37018ff0096158a8bac4277b5405082620c3e140546034619611c9ed0d3a70447a79b7cbf825d164269bcb4bcb0628f2197641d33c6dd3ee838bbdfed50330f4d59a"}]}, 0x141e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000111000008102000000"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x20) r8 = socket(0xa, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 12.816576356s ago: executing program 4 (id=8670): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 12.48047611s ago: executing program 4 (id=8673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8040}, 0x20040000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfc, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12.152438206s ago: executing program 4 (id=8677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.64414507s ago: executing program 4 (id=8684): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x5, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000140)=0x1a, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c508000000000000080002"], 0x160}}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000014c0)={0xe8, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x1) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0xc90, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}, 0x0, {[0x2, 0x6, 0x5, 0xf2, 0xa, 0xfffffffd, 0x3]}}, 0x5c) 11.576449282s ago: executing program 2 (id=8685): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000280)=[{&(0x7f0000001300)="94", 0x1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000400)="0dd2", 0x2}], 0x1, 0x0) tee(r3, r4, 0xfffffffffffffffd, 0x0) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0xc029}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x77}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) 10.62325894s ago: executing program 2 (id=8693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmmsg$alg(r3, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4fd9eb52bb01c35c8cfd700b5aac7b6d2c9a59a903f56429e171f1a950e3db0d7ef59630d0c7a40011bdc8f84a59c8dd67f3bc42f323caeadf2d65db19f012ffdabb8d2329ead04c554563c6d830fad095ff08c284656e821c230105defce7841f808a9224d48c45e0d58e1e56224219f9683126b839854c65de115d1a7e9bb27c3a99b072af4bca7ddb6d997c850c9e64d51d91d3dd43dcbfa863ac43e3ce920303346ee6473852", 0xa8}, {&(0x7f0000001400)="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", 0x1000}], 0x2, &(0x7f0000000700)=[@iv={0xc0, 0x117, 0x2, 0xa7, "3d8378f7deea92d7dc7ef4d996389c40582670184cae2b43958a969e8d0aea915bc01949560300d01f008315aa099e76a9b04758f7e7c926aa377951e219a4e400f9c45e9e2969a123c07a4129aa7e71bfca4bb46a6dbabf6c3b8fd97c3c518c069ed4882254ecf6281bd86c24f7578df1495e037f70fdc1c34956bfaf114c4766d97331d327153f4d0d38852725a3d84a6bce5b1a22a70bf32c929087907bc2533b124fb5ad34"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0xf0, 0x80}, {0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)="a6be171f75a7a54c56ba0c8c6340befaeea4751881f113b2aecbddef36638674ebcaa055ab34fccf4775d21f8050e771a111bfe2dc7dd997b260f7e338d34ab614b51f7358699d9997415086913feb1736b9cf34713006cf8e4748cb46940640469df0af7bc1bc58b80904a477058a7bad4956764b7341d7a8051cd8741aba0c45d8abfa22ac88f87c804f3227c046728956058be2", 0x95}, {&(0x7f00000008c0)="4c41ec231cbadf4e5de112f85bc078c8e16211d8a5322af68b069e605df373c4385427d7955be3108402446087ff478d338674df0744f453b4cce51e2e0e80da448ce7493fbbb4275841c30c7cd40705c02a6c6492ee45940063916940ab5df188e41e0cd4999178704bf38f366235c2367db3da699fceb407fbdb1278b1ae8476d61eb577fd3752fb3d", 0x8a}], 0x2, &(0x7f0000000b80)=[@iv={0x90, 0x117, 0x2, 0x78, "e826cabd9e9036e212c6085288aa7e6978459d47a169a69d2f1ff254595ac1ae0bb8f35d9810ef7f31a204049bff24af1ab972d1c62262af1767adec601c0d5e86c6cc7a48ef29e6b0b5d07ff591976a2f04e3f675fd8dee8eccc5aa3f41449b6cfca62ea907181fad2f8934b7c2457b4de5618e5c044e7c"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1b2}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x88, 0x117, 0x2, 0x70, "8d192279ed11ce573f75fcad1f168195d76d59b1e618f26c1e04ae2d0a09b9fdded1d6b282d6c78871737aead99f22c8c1d051ef980714347f4674db4628ad06b570c8d9e5d89465b532343e7723bf5f7ec6534342ecece282ab8c156bc3af825f789f154fd94196449a9032beea3021"}], 0x1a8, 0x800}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)="da3d684081e343e053e3ea8008c7fac21ba1c7aea5953d48c279ac404c7a6a2645d611841d50538c7f2fdd73cebb2963b602decf6314b1510b7cb4f160dfe0022464465c6e2f004daea22819d8f6fb64e0df02f4bd2cd5cca3e19e555bdcbc9e6cf3cd471c85361b146f72152aebb2bdaa5e5da851db1377a89c2bda2490ce7bb21dabedb67e0058ece36d624ee4cfe31199619126b666c41c9b9999c7d3c0c42ed4df5cf31f2d72e4934ba57d", 0xad}], 0x1, 0x0, 0x0, 0x2400c815}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="d46d4c71a10bbd8ab8b42860e41f21993ca61345bb1713144aac7272516cc7270e92d6552778d6daa03bab9124e147566f07f4c4ad2fc4212104f8c907eb8c821835b9afd7fab9f12f36708a4520433f45ae9c84419663ad90195a3a2b5ac4c35188dcbcd349d6188d58faf2", 0x6c}, {&(0x7f0000000d40)="b7e2f420549215b176dab9a49426325bd9247d49c5cdedfa9d4ef2a108fce9c7e4afefc279f0f173eeced9d13ee1c20476952f7032152ff733ede308758b7f74b0b27e38f34e868f0191e3f79d2ec3455495b172281b39dc454ac6032c25b1fdbbe17612bba079b1d4e6eff8d45edf1515b921528ad92ed93fff2ab4f3eea710f29778ba735a5a5f8f54e24eedd91b130677792ab5cbdc811acb6069d3c3c744a0a5f8b4238b1299d6ac31a23a2f3c5f9695e9c62ac650ee806dfb928a64bd8acbd53c9ddf0e2456a8b152bd8159ad52bad15ae094e776f09573109d00de3b6ad2f7f37be15cddaf29b9081c", 0xec}], 0x2, &(0x7f0000000e40)=[@assoc={0x18, 0x117, 0x4, 0xe85}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5a17}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0xed29a3d4480fee87}], 0x78, 0x88}, {0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000ec0)="21657186ffbbb2064ed13d7ea2d58c8805b1c2a6cb9089279686b13790537d7f2e3d6e9cdb0582b633804ac06c13e5", 0x2f}, {&(0x7f0000000f00)="9d14688016c2b29a40529c5fab8f8fa22656b915b9848969dc93f9692b45fea8f91fc15614b05da586a089d19729babbd1b325141fd2f6b30f5a14", 0x3b}, {&(0x7f0000000f40)="1992c2af41d6171bab", 0x9}, {&(0x7f0000000f80)="fc7f7ac8feac", 0x6}, {&(0x7f0000000fc0)="97d6a2825b8273b744d63512ac1484b79115b5b2c9ff9bc9cd3cd4f70f1f5bc3bea586ba6f1cf2518f", 0x29}, {&(0x7f0000001000)="76eabca68663c8177f178b806100d0e917263e24eaec5e00cbb904255d287bb7a83f4043651dec1a6868dee26901684144111c88c9e1d757b55fd67346acb2ee35eb0226bc1b174330488a6334ccb57b57bc8e3cd9603a4ad5f329fe2c1d1dbba37da740ae92adbf400074ef2c1baccb45f6714250d2208a4317ca91cb7fd844f18ef77898d8cb8d4b0da3bb5f7dedd5121d9135bd132b742875faf63186ddea68c7a3a07fe2a67e27b7cf350166140de258e8e13a4605244c736072c8b3592e30510123582a4fc92aa1f3628926a77dc94440e734249daaacc756fe9aad3d0e5241", 0xe2}], 0x6, 0x0, 0x0, 0x881}, {0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001180)="e90cc941ad4e97d35ff96f47a7457e8640d40d627619e0be28a6d3", 0x1b}, {&(0x7f00000011c0)="3b1ce4f08fa069d9b5c8e01b96196df821f0c0574e37f567f03086f1159a801c983dc8d8d9fae2b28f32c6d8225b69feab6a3db90a27a005cb406eebe29b47e48e7a083629166fd1c0d72bdf4904c6fe0a58888d9b7022210b705ce8fa0990374bc78141ba7a9702947335b443eb", 0x6e}, {&(0x7f0000002400)="8db5b441f5ec18042e74dc03b04b8f947e3a5c5a32454042c7fe982ed80f2960a8425cefc75f53853177bca659a5c18a6cc6d08823796b62dc8cd58304b3f048e1969ccc2d07a50e5dcf14ea0d06487280e21bdeadc1fef6d638ebff64b6a92a3ce034a9faa8add63d795b5a9fb3a12a67312ded4fe1ab238f34ec2638c12bc6e6d6bbc0ef56cd218d876f5383e1cf4f971902844f388e358bf49badd078543739c8c572b938407c3723638f4e5e432d349dd4dc05c90b1ca2f9858cde67bdf08f4ce8339db888394aa2e2ca74ea472e8de02776b0ad04cee2bf857763fc48b577922e754d005b30c1a2e4e46e62ee79c201c7", 0xf3}, {&(0x7f0000002500)="400e25d8c5c7dd7291a08c0c935e424378d9ec28948bb732d28be1c2a1b767b2072f475fbd6666e5184410d6f6ea970ca67a8c9df2c12c052d461b4cbf032f75f200447178309585c16e56b2bd41cb734b8bed1fa3a015d032c88cd2249445c5e0719ca8ddb8a66d8436479200ad136ad42a6bffade5f5953d8614a5a7d84a798b545564312b8fa119b637498915cf8928b047dba84d99007484f51628bce447801deab82862b60c0776cc615e436c835d2bdf38bcf2ab6a2591458c0a58670beb51fbffcaac0532c8cc61022a607278fb9a8328a875", 0xd6}, {&(0x7f0000002600)="d8d99b1629e1ec505c9943112972b969ce6e62ee8aedca8ec2f688927e51d23765996721cfde27b52411dc39fe516684df391950ffc345c6709416ed5f48f90ace6964e58e40f5d3aba0c54aeff4b5dd3dc89bcdc8586d7d479e334259ae4b73934c46ff0c5968cc7da56ce6f7872a1086cfa9e730265181625d2c6c81c0cdd188f0986c38d8cd08bfc1a1638fc6edc3c07e41", 0x93}, {&(0x7f0000001240)="5dc90fe578ac8d0435010370a3ec32f253ad9b29032e86f51ff5e6c871946e379effbccb110b8ad1512c857d07d2ac8f3aec043c1d5ead008949561a91e355c48956ddedffa33669fe7f8858e83f0b046a7a3463cb3720a9549462717a36050114e228ca565a695fa75d2ffd8eef79421e9c8ace704fe1364b427aaf945c057f", 0x80}, {&(0x7f00000026c0)="e30897950b410800e771e63dc37bff19b7923662f6a509712d5fdadb071fa3ed48746b885c9594b87c0df555c9ce6269691aa3ccc705ea9a1b51988347c82f1d4d828fbed93ce36b1df0117d765c3b5f0723aaa555f600eb257bbb4c0cb5998e208950545976a3d2879777c506665fa73b22f349f3526e5d9483f6af7b51a7f5e7552d1ac19878a5821ff97ccc888d116fa2de12731d7a12d9678d843e98ce39381bc55a8c236611328875c4e4299e432e4342a01092bf83383a499d20dbc6d924e0bd737d3352d5293f26291aa5fbf286cab749a4ed35c61b59955276d9", 0xde}], 0x7, &(0x7f0000002840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x404008c}], 0x6, 0x880) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000540)=""/192, 0xc0}], 0x3}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000012c0)="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", 0x130}, {&(0x7f0000000180)="1a39e33c9bb56fd43a362ffea90553761d7ed507c9de39febbf44d3f865312c8f87355b539002cdd0c62a1b4af1b231aedcaa350cbed61f038c59eb5ab370f7078bb09bba3f39fd8421406392f4ce058", 0x50}, {&(0x7f0000000480)="607dd884f33ff413bd131c8b890067b9df813bdca47007b3029f63a8ce8d396f0741075350111184a065fdecf602a80cba8b0ceaac55d2a5ac82ea58fd20f788ba0f910bce416fd530579aec17ed688e6f569c95d7049bea84d87e6477c0d22a895de1f4d49936c287c188a7a1a833", 0x6f}], 0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) listen(r5, 0xfffffffd) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x6, 0x2, 0x7, 0x1, 0x7, 0x3, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0x1}}, 0x2, 0x8000, 0xffff, 0x80000001, 0x7a2}}, &(0x7f0000000000)=0xb0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0028"], 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x48, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) 10.446447999s ago: executing program 2 (id=8694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4386}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004040}, 0x880) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7001fcdbdf25390000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300030000002a0001006e657464657673696d0000000f0002006e657464657673696d3000000800030007000000000001006e657464657673696d000000000002006e657464657673696d300000000003000100000044a32fe69f492ba32b3c5880ac23c0762ab8ed3974fccc2b3429fae052c29cdadffb382c5ba6b051b67d9e3f73a14d"], 0x64}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) 8.671917705s ago: executing program 2 (id=8706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000002000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d617463"], 0xa8}}, 0x4048010) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) 6.848018467s ago: executing program 3 (id=8718): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000010400"/24], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x401, 0x2c}}}}, ["", ""]}, 0x20}}, 0x40001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x1) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) (async) connect$unix(r6, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) (async) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)='\b', 0x1}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x0) (async) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3f4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x20000084) 6.77716625s ago: executing program 3 (id=8719): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x150}}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x1e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000b311ff00000000000000000000ffffe0000002ff0200000000000000000000000000014f194e2000b39078c243000100000000a8dd8945d8051ff8413bbe8cfa0b3bcbed5f75828ddf7f41278c1536614c0ec84cfb4af0d78f9482dacd3cd23ee36b467b555679b33a4a87021214ec17408e61e724a28d7e0b1d0dc8e215016e294a8259ade307a3e145d0dd75997fc25e4894cc6e1117d752958b65b105cb9c942cd074afe14590214565ee13fc4326a9432eab484d9b1d7a136e8ca67c2e5e315a2f7e656a98e0c4b4f621965cf8e69a77fc83c48a"], 0x14c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000070000000000000014000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a300000000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x701, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10000080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) socketpair(0x29, 0x1, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000040)={r11, @in={{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5}, 0x90) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000380)={r11, @in6={{0xa, 0x4e20, 0x9, @empty, 0x2}}, 0x4, 0x5, 0xffffff01, 0x5, 0x0, 0x1, 0x9}, 0x9c) 6.633942867s ago: executing program 1 (id=8720): r0 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff003c3c00fe80ddffffff000000000000000000aafe8000000000000000000000000000aa2f04000000000000c910fff4a638e24151ebdaa20200000000000000"], 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff003c3c00fe80ddffffff000000000000000000aafe8000000000000000000000000000aa2f04000000000000c910fff4a638e24151ebdaa20200000000000000"], 0x0) 6.439588613s ago: executing program 1 (id=8722): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f00000000c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "25a8c840b3d753c1a57ef634c95010d2"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x4040080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x1ff}, 0x5, 0xa4, 0x64, 0x7, 0x20, 'syz1\x00', "fca48afe66cc314586b4167eac61a7e80ee1b622c696978e7dc10fbe6513f783", "2c4a9ef2990291bae4f6c643944c35d66007b96863850003d191952c5fd6bfe7", [{0x9, 0x8, {0xf5d49ed548bc98e6, 0x8}}, {0x4, 0x0, {0x3, 0xd6}}, {0x9, 0x3, {0x2, 0xfffffff9}}, {0x7fff, 0x2, {0x2, 0x6}}, {0xfff2, 0x1, {0x1, 0x8}}, {0xdd3, 0x2, {0x0, 0x8}}, {0x401, 0x1, {0x1, 0x5}}, {0x60, 0x4575, {0xc1ea0cb41ee6c63e, 0x221}}, {0xbaf, 0x1, {0x1, 0x8}}, {0x7, 0x8457, {0x0, 0x7}}, {0x8, 0x4, {0x2, 0x3}}, {0xfff, 0x7, {0xf1fe4befac355da4, 0x9}}, {0x4, 0x6, {0x1, 0x8}}, {0x5, 0x6, {0x1, 0xc4f}}, {0x2, 0x7ff8, {0x1, 0x8}}, {0x2, 0x10, {0x0, 0x401}}, {0x9, 0x5, {0x0, 0xffffffff}}, {0x800, 0xa, {0x0, 0x200}}, {0x8000, 0x2, {0x1, 0x1ff}}, {0xfff9, 0x1, {0x3, 0x100}}, {0xcc, 0x9e87, {0x0, 0x5}}, {0x2156, 0x2, {0x0, 0x7}}, {0x0, 0x5, {0x2, 0xfffffe00}}, {0x4, 0x1, {0x1, 0xfffffff8}}, {0x8, 0xffff, {0x2, 0x8}}, {0x7, 0x5, {0x1, 0x2}}, {0xb1, 0xe, {0x0, 0xff98}}, {0x6, 0x2, {0x3}}, {0x81f, 0x7fff, {0x3, 0x2}}, {0x408a, 0x2, {0x1, 0x7f}}, {0x2668, 0x4, {0x3, 0x7f}}, {0x89d, 0x1, {0x2, 0x52}}, {0x7, 0x200, {0x2, 0x7}}, {0x6, 0x5, {0x2, 0x2}}, {0x41c2, 0x9, {0x1, 0x80000}}, {0x0, 0x6, {0x3, 0x1}}, {0x200, 0x800, {0x1, 0x800}}, {0x7, 0xcd31, {0x1, 0xe5ed}}, {0x4, 0x0, {0x2}}, {0x1, 0x1, {0x0, 0x4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4010}, 0x20000090) 6.252475692s ago: executing program 1 (id=8724): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) (async, rerun: 64) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x3a8, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (async) splice(r1, &(0x7f0000000000)=0x5, r1, &(0x7f0000000040)=0x2, 0x1, 0x0) 6.150366618s ago: executing program 1 (id=8725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = epoll_create(0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={r3, &(0x7f0000000180)='\x91\x00', 0x1, &(0x7f0000000240)={@_ha_fsid={[0x48800, 0x7f]}, {0x77ac, 0x4, 0x3, 0x4}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffa}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x10422, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x9, 0x3, 0x8, 0xae, 0x4, 0xfffffffb, 0x400, 0xc3bd, 0x9a, 0x5, 0x6, 0x1fa4, 0x80000000, 0x5, 0x7, 0x9, 0x0, 0x7, 0x30000, 0x84, 0x7, 0x80000001, 0xee, 0x60cc, 0x6, 0x4, 0xd3, 0x7fff, 0xffff890c, 0x3ff, 0x3, 0x6, 0x5, 0x7, 0x7, 0x8001, 0x5a6, 0x10000, 0x9, 0x66c, 0xfffffffe, 0x0, 0x8, 0x870, 0x5, 0x80000000, 0x3, 0x3, 0x7ff, 0x2d4, 0x7ff, 0x6, 0x7fff, 0x0, 0xf, 0x52bb, 0xfffffff8, 0xd, 0x6, 0x7ff, 0xc76, 0x1, 0x0, 0x8, 0x8000, 0x6, 0x6, 0x3, 0x9a9, 0x5, 0x6, 0x9, 0x1, 0xa7, 0xffff, 0xfffffffc, 0x2, 0x1, 0xab27, 0x3, 0x7, 0x8001, 0xd781, 0x5, 0xffffffff, 0xa139, 0x6, 0xfff, 0x7fffffff, 0x7fffffff, 0x5, 0x7, 0x1000, 0x3777, 0x3, 0x3ff, 0x2, 0xfff, 0xb0, 0x138e, 0x10d, 0x1, 0xfffffffc, 0x7, 0x1, 0x9, 0x1ff, 0x0, 0x3f6, 0x6, 0x7, 0x1, 0xc142, 0x2, 0xc, 0x2, 0x5, 0x4, 0x1, 0x80000001, 0x7ff, 0x8, 0x8, 0x100, 0x4, 0x80, 0x3ff, 0x80, 0x8, 0x8, 0x0, 0x3, 0x73a343e, 0x2, 0x3, 0x101, 0x7, 0x7, 0x81, 0x6, 0x9, 0x0, 0x5, 0xd, 0x6, 0x3, 0xb77df9c, 0x3, 0x7, 0x1c, 0x3, 0x6, 0xd0d, 0xfffffffc, 0x27, 0x6, 0x58, 0x2, 0xc124, 0xffffffff, 0x1, 0x7, 0x3ff, 0x6, 0x6, 0x40b, 0x0, 0xfffffff8, 0x3, 0x3, 0x9, 0x1037, 0x400, 0xe, 0x5, 0x3ff, 0x3, 0x8, 0x2, 0x0, 0x9, 0x0, 0xff, 0x8e0b, 0x2, 0x9, 0x100, 0xa, 0x8, 0x10000003, 0x1, 0x7ff, 0x3abc35b5, 0x0, 0x2, 0x4, 0x9, 0x9, 0x5, 0x5, 0x5, 0x9, 0x5, 0xffff, 0xae, 0x10, 0x81, 0x10, 0x800, 0x3, 0x1000, 0xa93, 0x0, 0x67, 0x7fffffff, 0x1, 0x80, 0x9, 0x6, 0x7, 0x101, 0x9, 0x4, 0x7, 0x5, 0x2, 0x0, 0x2e9, 0xd, 0x73b0, 0x8, 0x10000, 0xf, 0x0, 0x7, 0xfffffffa, 0xff, 0x4, 0x81, 0xfffffffc, 0x8, 0x0, 0x3, 0xa7, 0x1, 0x2, 0x0, 0xc, 0x9, 0xa3b, 0x4, 0x0, 0x1, 0x9, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xc2) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x90000000}) 4.455327189s ago: executing program 3 (id=8727): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) epoll_create1(0xde9af85ee90dd339) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x80000005, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50493}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x75}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000044) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.330752043s ago: executing program 0 (id=8728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000000000032700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.272518213s ago: executing program 2 (id=8729): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001780)=""/4111, 0x100f}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000001700)=""/117, 0x75}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000440)=""/255, 0xff}], 0x6}, 0x16100) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@broadcast, 0x1, 0x0, 0xa0, 0x0, [{@local}, {@remote}, {@remote}, {@dev}, {@multicast1}, {@private}, {@initdev}, {@dev}, {@dev}, {@loopback}]}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37daeed337490ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581100000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 2.436055183s ago: executing program 0 (id=8730): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2000000000000002) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x30}, 0x0) recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4081, 0xff1}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/232, 0xe8}], 0x4}, 0x102}], 0x3, 0x20, 0x0) 1.544909604s ago: executing program 0 (id=8731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x3000200e}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=0x0, @ANYRESDEC=r0], 0x30}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000440)={r4, r5, 0x0, 0xd8, &(0x7f0000000340)="bf235beedc97d2ce2b6c268548ab3d4017c270c20241c6886dfaaa8532be6e9eecb7a11a292aed62edc073575b70a19435500a2fb555c6ec075aa5acd8e448e7e1ff09b49ed4cdcd3c1ab1ab2c5ccb135f07347b104d3f25973db6e13b35ea1be4f13871cf4c33021250c27c8600f9b8b6dcdfbd5aeb09f1ecced83842531ed5be2ed4be701db1729b817cf94099e99575d8f7f6eed09d4483949dd8cfd3053b6d35824471df38d24440b2d2d18bd30d9cff0dff068db3b62c4c5fa88a05e646364029316d2712fc487cb814f1e70ad23e09ce23a91eab9b", 0xa, 0x6, 0x6, 0x1, 0xa48, 0x2, 0xfff, 'syz1\x00'}) socketpair(0x0, 0x80000, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0x106add48ec68cc2e, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x8044) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000500)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x34, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f0000000600)=""/180, 0x54, 0xb4, 0x0, 0xee10}, 0x28) 1.32545975s ago: executing program 0 (id=8732): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0xfffffffffffffffe) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x80000) r3 = accept4$rose(r2, &(0x7f0000000500)=@short={0xb, @remote, @bcast, 0x1, @netrom}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000000c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="c84ad40600000004080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, [0x5, 0x0, 0x0, 0xffffffff]}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="f803a0330e7c21b1955b930bcac0900498c8cdfd2a76ed66ee96f5a70d9b4756309709859a7507dacd734248c7d3de0a6a8c19deca9b1c6b71c52a90e5f4d3deed6ea2153a90b2eb6134bd3eb39f572e5cda81fefcc679b650000cb11fc8b011f37fd8e7d63d9b57c76c07b91f7ab004d68db1f37b1a12708af18f39c10e3a419021", 0x82}, {&(0x7f00000001c0)="e4ed5192859fd7bdb1f1a432aa333ddd6efb4c21c5fd38cc1e837deb5fc9697f42b7653220b5b4a9ccfcbbb41c95079aba69c94437e7cf", 0x37}, {&(0x7f0000000400)="cdd085fbb1e7a25e8dad7fbbf5f7d23a1620893a7fcf6df29634", 0x1a}], 0x3}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x34}}, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xbe7, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x4044c94) 562.626527ms ago: executing program 1 (id=8733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c8d0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24008084) syz_emit_ethernet(0x9e, &(0x7f0000000100)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b, 0x0, 0x2}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) 527.144492ms ago: executing program 3 (id=8734): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000006900000228bd7000fbdbdf2500000000000000000800010002000000080001000900000008000100000000000800010000000000080001000000002008000100010000003d0001000200000008000100000000000800010001000000"], 0x60}, 0x1, 0x0, 0x0, 0x2404d889}, 0x0) 490.893811ms ago: executing program 2 (id=8735): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) r5 = socket(0x22, 0x2, 0x3) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7085fedbdf2505000000080002000300000008000300050021"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x28, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r8, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f00000001c0)={0x1, 0x5}, 0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48050}, 0x20000080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x23, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffff800}, @generic={0x6, 0x8, 0x9, 0x8, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0xe732c6c3abcba3d4, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1005, &(0x7f0000001a00)=""/4101, 0x41000, 0xc}, 0x94) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x5) r11 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r11, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5600000000030080"], 0x18}}], 0x2, 0x4800) 482.783753ms ago: executing program 0 (id=8736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x2000800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) unshare(0x8040600) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a020000000000000000d02ab0da5b47d15b000002010000000000"], 0x0, 0x32}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="98f262a9bb0a9657150ef664fa538c4eb4891ec1cab422aaa84ca3ebf2615e6fb9f70ab68cf73c57fe717f38b164934d4758e913603b98d1a99eca3d064b4f0dabc7b680390182eba6a7f4c34edccb4b118338c0532672861f1f24282568504d621f993ff7c1ba16ddd9e7583ea7b806e5a492c35991bc4eb4feca558e5f83f757e20f158050833000e866ec2c9088d3955d432e80", @ANYRES64=0x0], 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 296.504665ms ago: executing program 3 (id=8737): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5d}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80800) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000140)={'hsr0\x00', 0x9, 0x6}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xd) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000280)={0x8001, 0xc, 0x3, 0x40, 0x5, 0x2, 0x3}, 0xc) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) shutdown(r6, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf0b9c23e66d22cde}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xcc, 0x7a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4005) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0x7}, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getsadinfo={0x20, 0x23, 0x200, 0x70bd2a, 0x25dfdbfe, 0x0, [@mark={0xc, 0x15, {0x350759, 0x7fffffff}}]}, 0x20}}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r7) r8 = socket$packet(0x11, 0x0, 0x300) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000640)={r8, &(0x7f0000000540)='\x00', 0x141000, &(0x7f0000000580)={@_ha_fsid={[0x101, 0x6]}, {0xfffc, 0x200, 0x2, 0x3}}, 0x5, &(0x7f00000005c0), &(0x7f0000000600)=0x7}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000007c0)={{r0, &(0x7f0000000680)='\x00', 0x400000, &(0x7f00000006c0)={@align=0x10001, {0x6, 0x7, 0x2, 0x9}}, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x400}, {[0x25c, 0x6, 0x6, 0x80000001]}, 0x0, 0x10, &(0x7f0000000780)=""/16}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000840)=r10, 0x4) r11 = accept4$packet(r8, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14, 0x0) setsockopt$packet_int(r11, 0x107, 0xc, &(0x7f0000000900)=0x9, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="89cdc0b77850a9ec915696a0b6618ea51601c793e9a7bf95ba5fbf91505cbf22b2a7177865eb4f3b8af1ea832514feb9b04c14635d0ae7079d4a25f901d60bbcb10fc6685d2e4a68e65ec776e10aa962458fb8009635bfa8ece7695b661619ae9b8254091a7f35f7e4b60e292b7ddddfbaaa01712ef42623", 0x78}, {&(0x7f00000009c0)="357afc76a6e132abdaf7642698885b3d2dcbc682fd8f81f957cc878263345c76f934d61c66421d097033a74a9911e06dd41ac0b329545ec9f26e154459ef8098c330a060e1b03608d16321e6d3451467ecca9203f2747698e2020dde24aa999a9acf30b41b82e6bf1300cb4a1ba2926883", 0x71}], 0x2, &(0x7f0000000a80)=[{0xa8, 0x119, 0x0, "e80206ce936947be03f8142b252856d1fb3a52d7ad37ee543a81d31b3bc2edba409b50736fb639e961f51d3c6f30530005393b268a063ed188482c19a087558982f6df6db08ab1cfdf39a2ac28c51dfa36d7ba18d89a7abd16d9edacc5fb7c009d5bf6909c31dd3f568e0821c57fc0e065043311a88c7c41475d6880580e8171ccb547eae17ee08dfdc884835f45a90eb32142f3c2be"}, {0x48, 0x112, 0x6, "b554c41d11c4aa36c210cd47e3be486dbf8cab443b18562dda324550d9040f1cf64c3a0bcf283a0644e6e0462bd80a9bda0b6b3b0afde733"}, {0x78, 0x104, 0x0, "12d82e3a801e56420e3634199a5f2909a35120e284fd840725d1e51245d41851d99b9ee4cf3fecf04dfee30169ed46945c4c948b3181bbdac47879d510f36402e85db93732fc09890bf3dca9bbfd395f788ba7b4366984acc80105365f0264f3370c94"}, {0x20, 0x116, 0x5, "1dcb7dc34420cfb52f9dc04f"}], 0x188}}, {{&(0x7f0000000c40)=@ll={0x11, 0x1c, r12, 0x1, 0x9, 0x6, @broadcast}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="35c7b680df8072b560f3345a3393b9ac48b8bce3ff6bf5f1ca45a491caf5f15bd26b8afd90cf08b4f74eaf73ce9e47d32aa24f29d5d4af965e6d8056546237", 0x3f}], 0x1}}, {{&(0x7f0000000d40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="47beba1e4621c917eb89d23b7772db06695a027cd05508e1e1eb2f920ec093d288bb52d8b78e2a94d6bdbc797522c9919a697611595edfc0b763ff8d6db7ae6f6bf7f3b3a832118dc4f34298315b069157d28201b17734bc2e44c239521efcaa4cbfea78df2e95eb4f2eaecadf0c97ea1887425598088f2ca62a9a", 0x7b}], 0x1, &(0x7f0000000e80)=[{0x78, 0x103, 0x7, "42924ba833f28046abec1df420d24c56ae688eb828b1ec7490916b803290a992187fb6a2bc48aa6659851192aff2c82c3c709c9499f17ca5f80a80e4b9addcebfa722cbbdce6c6e93f116c8261d55f7ad05561a92e9307fa31a8f8c7a7c2cdd0e82a30e578357f"}, {0xb0, 0x1, 0x9, "5d96aaf13f7a0c0cb1b00bb6fd374b516f18e108a0750a89c93086d48d0cab95cb17d004fcf63b4c1369b59e1348caa0b9caa58e66a6d64995f4072d7bac3b5881f47e8a436aad4fe2d6369d04a21bd90d91dabfb30788747a14e900e23ee0b5fffa867f12a13169626e5c0d1cb23fba15788b68fe0e30a1e749addbf107c326d04d040ded42cb04b2e66c5f3c59b00e2a271ffda2575d25627be1195f5b40"}, {0x78, 0x10f, 0x7f, "887d1fe0e2dfe94993ec2a664aa084cf821aee63ca4b7cbf2cc73b870f14834af1277d6fe072d9214162f381db570ce5d8f0b970fdf47deaa60beb43704c2f3800251a7f4a8585fe6a7efb4394b59f36998ca35e325065a574a2cc1846f0dfcbc7ec2b"}, {0xa0, 0x118, 0x3, "ec3122c017f06ba58503d18e515831ee893526789ed3b03c60c0082cd7678038dde3716a9661f83e6e581279b908f5ff1e69a39d8be82c92ace42bd7d1cf5a7df594a05c40c995f274b8c8cf722e4f472f995a0bcafa2a6a883a71f85b190b8c6cdf3eb116fe942ae9a8874bfbd197ebf3c0003c0585de81e249c327d77edc347ac33fca3efd11130eb794d6"}, {0x28, 0x108, 0x100000, "4736ca178bdbbd3a4d25a4193c678f977625"}, {0x28, 0x3a, 0x0, "5bcbc4b1530e526a1c53815424997a6856a7b87610"}], 0x290}}], 0x3, 0x810) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000001200), 0x4) 261.624332ms ago: executing program 0 (id=8738): r0 = socket(0x10, 0x2, 0x0) (async) close(0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x7, 0x0, 0x1, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b80)=@bridge_setlink={0x58, 0x13, 0x100, 0x70bd2f, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8800, 0x820}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffff49a}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x58}}, 0x20000000) r2 = socket$inet6(0xa, 0x1, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000080000000000000000000000000000000000000000000002d5b247509a0bc5d244b76b7a9b2ca31f59787feb3cade86d0078f15b90d1d075511f5b0dcd28de76d6db124707b73634efc6cc949d1545d"], 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000002000010006000000000000000a2010000000000100000000050016000c00000005001300010000000c001400f10ffad1bc68b9719c417be8ed03591ab34cceb30f22e234ed65a9caf301ac6a5b4c6a7686639fed33aae52bf18dbe6f842d4f06effb25a1", @ANYBLOB, @ANYRES32, @ANYBLOB="1400ec9dcdf4d6690748f990f001002001004de9000000000e"], 0x60}}, 0x54) socket$inet6(0xa, 0x800000000000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x2c}}, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x10, @loopback, 0x5}}, {{0xa, 0x4e23, 0x1ff, @private1, 0x9}}}, 0x108) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x5}, 0x10) (async) socket$alg(0x26, 0x5, 0x0) 235.20585ms ago: executing program 1 (id=8739): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8934, &(0x7f0000000100)={'\x00', @ifru_mtu=0x7}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x48}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) 0s ago: executing program 3 (id=8740): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512-arm64,ctr-cast5-avx)\x00'}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x400}}], 0x1, 0x4000015) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) r2 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x2c020400) connect$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) unshare(0x20100) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): invalid length. [ 755.191658][ T524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6880'. [ 755.230803][T27404] : left promiscuous mode [ 755.351334][T27404] l24): left promiscuous mode [ 755.560495][ T553] xt_TCPMSS: Only works on TCP SYN packets [ 755.674243][ T556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6889'. [ 755.685377][T27404] tipc: Left network mode [ 755.854046][ T561] lo speed is unknown, defaulting to 1000 [ 755.861623][ T569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 756.099610][ T582] syzkaller0: entered promiscuous mode [ 756.121557][ T582] syzkaller0: entered allmulticast mode [ 756.142593][ T582] 0: reclassify loop, rule prio 0, protocol 800 [ 756.339332][T27404] hsr_slave_0: left promiscuous mode [ 756.384539][ T594] sctp: [Deprecated]: syz.2.6897 (pid 594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.384539][ T594] Use struct sctp_sack_info instead [ 756.391587][T27404] pim6reg99999999 (unregistering): left allmulticast mode [ 756.439430][T27404] pimreg (unregistering): left allmulticast mode [ 756.542096][T27404] macvlan1 (unregistering): left allmulticast mode [ 756.607754][ T600] xt_nfacct: accounting object `syz0' does not exist [ 756.700822][T27404] team0 (unregistering): Port device team_slave_1 removed [ 756.719355][T27404] team0 (unregistering): Port device team_slave_0 removed [ 756.838002][ T598] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.849978][ T599] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 757.049377][ T610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6902'. [ 757.189631][ T619] netlink: 'syz.2.6904': attribute type 1 has an invalid length. [ 757.288407][T27404] IPVS: stop unused estimator thread 0... [ 757.650506][ T648] bridge_slave_0: left allmulticast mode [ 757.670216][ T648] bridge_slave_0: left promiscuous mode [ 757.676218][ T648] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.680527][T10711] syz_tun: tun_net_xmit 110 [ 757.715149][ T648] bridge_slave_1: left allmulticast mode [ 757.737666][ T666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6915'. [ 757.743233][ T648] bridge_slave_1: left promiscuous mode [ 757.767411][ T648] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.850206][ T648] bond0: (slave bond_slave_0): Releasing backup interface [ 757.873399][ T648] bond0: (slave bond_slave_1): Releasing backup interface [ 757.902979][ T648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.920869][ T648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.949827][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6916'. [ 757.961828][ T648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.976493][ T648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.009191][ T648] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 758.156894][ T687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6920'. [ 758.166658][ T686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6920'. [ 758.167061][T10711] syz_tun: tun_net_xmit 110 [ 758.227029][ T686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6920'. [ 758.243400][ T686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6920'. [ 758.447435][ T691] syzkaller0: entered promiscuous mode [ 758.454375][ T691] syzkaller0: entered allmulticast mode [ 758.796502][ T701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.160339][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 760.168404][ C0] lec:lec_tx_timeout: lec0 [ 760.173040][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 760.521708][ T686] __nla_validate_parse: 26 callbacks suppressed [ 760.521726][ T686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6920'. [ 760.551913][ T718] : entered promiscuous mode [ 760.631233][ T723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6930'. [ 760.675455][ T723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6930'. [ 760.757088][ T732] lo speed is unknown, defaulting to 1000 [ 760.763111][ T726] siw: device registration error -23 [ 760.771808][ T732] lo speed is unknown, defaulting to 1000 [ 760.779720][ T732] lo speed is unknown, defaulting to 1000 [ 760.797802][ T732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 760.864275][ T732] lo speed is unknown, defaulting to 1000 [ 760.888110][ T732] lo speed is unknown, defaulting to 1000 [ 760.897518][ T732] lo speed is unknown, defaulting to 1000 [ 760.908989][ T732] lo speed is unknown, defaulting to 1000 [ 760.916683][ T732] lo speed is unknown, defaulting to 1000 [ 760.924133][ T732] lo speed is unknown, defaulting to 1000 [ 760.939728][ T732] lo speed is unknown, defaulting to 1000 [ 760.958652][ T732] lo speed is unknown, defaulting to 1000 [ 761.301011][ T768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6942'. [ 761.339438][ T774] syz_tun: tun_net_xmit 126 [ 761.430386][ T777] syz_tun: entered promiscuous mode [ 761.445903][ T773] lo speed is unknown, defaulting to 1000 [ 761.481509][ T779] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6944'. [ 761.608500][ T784] netlink: 'syz.4.6945': attribute type 1 has an invalid length. [ 761.655186][ T784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 761.680502][ T784] bond5: entered allmulticast mode [ 761.831685][ T805] tipc: Enabling of bearer rejected, failed to enable media [ 761.939903][ T810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6951'. [ 762.016221][ T813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6952'. [ 762.081896][ T815] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 762.185913][ T820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 762.251408][ T824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6957'. [ 762.272328][ T820] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 762.355082][ T828] x_tables: duplicate underflow at hook 1 [ 762.401074][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6959'. [ 762.417201][ T826] sctp: [Deprecated]: syz.0.6958 (pid 826) Use of int in max_burst socket option. [ 762.417201][ T826] Use struct sctp_assoc_value instead [ 762.773619][T11616] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.790909][T11616] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.808186][T11616] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.825215][T11616] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.949450][ T852] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 763.053831][ T879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 763.160178][ T5878] IPVS: starting estimator thread 0... [ 763.176193][ T894] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.257795][ T897] IPVS: using max 28 ests per chain, 67200 per kthread [ 763.271736][ T894] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.359147][ T894] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.422768][ T894] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.453086][ T912] netlink: 'syz.1.6982': attribute type 8 has an invalid length. [ 763.473967][ T912] bond0: entered promiscuous mode [ 763.482360][ T912] gretap0: entered promiscuous mode [ 763.489268][ T912] bond0: left promiscuous mode [ 763.495025][ T912] gretap0: left promiscuous mode [ 763.550214][T27406] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.572507][T27400] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.595157][T27406] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.625276][T27400] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.925689][ T957] ipvlan0: entered promiscuous mode [ 763.931535][ T957] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 763.950356][ T957] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 764.123840][ T973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.127812][ T969] bond4: option ad_select: invalid value (34) [ 764.141198][ T969] bond4 (unregistering): Released all slaves [ 764.257398][ T981] openvswitch: netlink: IP tunnel dst address not specified [ 764.542923][ T1008] lo speed is unknown, defaulting to 1000 [ 764.827452][ T1024] batman_adv: batadv0: Adding interface: dummy0 [ 764.833958][ T1024] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.862581][ T1024] batman_adv: batadv0: Interface activated: dummy0 [ 764.877655][ T1024] batadv0: mtu less than device minimum [ 764.884128][ T1024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.895802][ T1024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.907271][ T1024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.918401][ T1024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.930035][ T1024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.941237][ T1024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.952574][ T1024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 766.506345][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6330 ms [ 766.514425][ C0] lec:lec_tx_timeout: lec0 [ 766.519068][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 767.155467][ T975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.207002][ T2068] block nbd1: Possible stuck request ffff88803e118000: control (read@0,1024B). Runtime 120 seconds [ 767.218091][ T2068] block nbd1: Possible stuck request ffff88803e118200: control (read@1024,1024B). Runtime 120 seconds [ 767.229699][ T2068] block nbd1: Possible stuck request ffff88803e118400: control (read@2048,1024B). Runtime 120 seconds [ 767.247414][ T2068] block nbd1: Possible stuck request ffff88803e118600: control (read@3072,1024B). Runtime 120 seconds [ 767.347787][ T1036] syzkaller0: entered promiscuous mode [ 767.351001][ T1045] __nla_validate_parse: 22 callbacks suppressed [ 767.351019][ T1045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7008'. [ 767.353295][ T1036] syzkaller0: entered allmulticast mode [ 767.371654][ T1039] netlink: 'syz.0.7007': attribute type 1 has an invalid length. [ 767.389220][ T1050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7008'. [ 767.414224][ T1040] ipvlan2: entered promiscuous mode [ 767.437313][ T1040] bridge0: port 1(ipvlan2) entered blocking state [ 767.453964][ T1040] bridge0: port 1(ipvlan2) entered disabled state [ 767.470312][ T1040] ipvlan2: entered allmulticast mode [ 767.475658][ T1040] bridge0: entered allmulticast mode [ 767.519027][ T1040] ipvlan2: left allmulticast mode [ 767.534233][ T1040] bridge0: left allmulticast mode [ 767.581621][ T1071] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 767.631044][ T1071] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7011'. [ 767.761210][ T1073] macsec2: entered promiscuous mode [ 767.767506][ T1073] ip6gretap0: entered promiscuous mode [ 767.773325][ T1073] macsec2: entered allmulticast mode [ 767.785125][ T1073] ip6gretap0: entered allmulticast mode [ 767.832609][ T1073] ip6gretap0: left allmulticast mode [ 767.848210][ T1073] ip6gretap0: left promiscuous mode [ 767.954587][ T1092] netlink: 'syz.1.7020': attribute type 1 has an invalid length. [ 767.977329][ T1091] netlink: 'syz.1.7020': attribute type 1 has an invalid length. [ 768.063378][ T1091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 768.092339][ T1094] bond4: (slave veth3): Enslaving as an active interface with a down link [ 768.101533][ T1092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7020'. [ 768.139762][ T1092] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 768.148511][ T1092] bond4: (slave batadv1): making interface the new active one [ 768.157574][ T1092] batadv1: entered promiscuous mode [ 768.163073][ T1092] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 768.462634][ T1117] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7024'. [ 768.520657][ T1123] netlink: 'syz.4.7027': attribute type 21 has an invalid length. [ 768.531558][ T1123] netlink: 'syz.4.7027': attribute type 1 has an invalid length. [ 768.542669][ T1123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7027'. [ 768.644366][ T1129] netlink: 'syz.1.7029': attribute type 11 has an invalid length. [ 768.670040][ T1129] netlink: 'syz.1.7029': attribute type 11 has an invalid length. [ 768.680572][ T1129] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7029'. [ 768.807256][ T1138] netlink: 'syz.4.7032': attribute type 5 has an invalid length. [ 768.833159][ T1144] xt_hashlimit: size too large, truncated to 1048576 [ 768.843497][ T1144] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 768.961166][ T1155] x_tables: unsorted entry at hook 2 [ 769.006369][T10704] IPVS: starting estimator thread 0... [ 769.070868][ T1162] tipc: Enabled bearer , priority 0 [ 769.078714][ T1162] syzkaller0: entered promiscuous mode [ 769.084289][ T1162] syzkaller0: entered allmulticast mode [ 769.094027][ T1163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7039'. [ 769.111675][ T1156] IPVS: using max 34 ests per chain, 81600 per kthread [ 769.151409][ T1168] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 769.207433][ T1170] geneve2: entered promiscuous mode [ 769.221974][ T1162] tipc: Resetting bearer [ 769.241832][ T1161] tipc: Resetting bearer [ 769.269643][ T1161] tipc: Disabling bearer [ 769.570066][ T1182] netlink: 'syz.4.7046': attribute type 1 has an invalid length. [ 769.687637][ T1184] syzkaller0: entered promiscuous mode [ 769.698262][ T1184] syzkaller0: entered allmulticast mode [ 769.726534][ T1184] net_ratelimit: 15 callbacks suppressed [ 769.726553][ T1184] 0: reclassify loop, rule prio 0, protocol 800 [ 769.822180][ T1198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7049'. [ 769.871236][ T1082] Bluetooth: hci1: command 0x0406 tx timeout [ 769.877756][ T1082] Bluetooth: hci2: command 0x0406 tx timeout [ 770.022674][ T1210] netlink: 'syz.2.7052': attribute type 11 has an invalid length. [ 770.283937][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7053'. [ 770.418539][ T1215] lo speed is unknown, defaulting to 1000 [ 770.797403][ T1240] netlink: 'syz.4.7059': attribute type 1 has an invalid length. [ 770.881731][ T1240] bond7: entered promiscuous mode [ 770.897000][ T1240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 771.120873][ T1252] netlink: 'syz.4.7061': attribute type 6 has an invalid length. [ 771.148639][ T1252] netlink: 'syz.4.7061': attribute type 7 has an invalid length. [ 771.169322][ T1252] netlink: 'syz.4.7061': attribute type 8 has an invalid length. [ 771.915349][ T1286] macvlan3: entered allmulticast mode [ 772.127745][ T1294] x_tables: duplicate underflow at hook 3 [ 772.183514][ T1257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.192538][ T1257] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 772.205844][ T1298] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 772.222394][ T1257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.229702][ T1257] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 772.247812][ T1257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 772.263013][ T1257] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 772.266300][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 772.278803][ C0] lec:lec_tx_timeout: lec0 [ 772.286187][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 772.311943][ T1257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.326437][ T1257] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 772.446071][ T1304] tipc: Enabling of bearer rejected, failed to enable media [ 772.659049][ T1307] netlink: 'syz.0.7079': attribute type 11 has an invalid length. [ 772.689541][ T1307] netlink: 'syz.0.7079': attribute type 23 has an invalid length. [ 772.706692][ T1307] __nla_validate_parse: 5 callbacks suppressed [ 772.706709][ T1307] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7079'. [ 773.037955][ T1329] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7084'. [ 773.453159][ T1333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7085'. [ 773.512397][ T1345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7085'. [ 773.850616][ T1361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7091'. [ 773.870826][ T1354] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.950255][ T1368] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7093'. [ 774.007580][ T1354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.024687][ T1354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.133402][T10706] syz1: Port: 1 Link DOWN [ 774.139482][T27406] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.166628][T27406] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.175556][T27406] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.196630][T27406] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.221217][T27406] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.240582][T27406] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.260251][T27406] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.279985][T27406] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.319463][ T1377] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 774.560112][ T1381] IPVS: set_ctl: invalid protocol: 33 172.20.20.30:20002 [ 775.027786][ T1389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7098'. [ 776.706703][ T1353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.911807][ T1413] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7103'. [ 776.924462][ T1415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 776.950133][ T1413] vlan2: entered promiscuous mode [ 776.955286][ T1413] geneve1: entered promiscuous mode [ 777.015794][ T1415] team0: Mode changed to "activebackup" [ 777.034660][ T1422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7106'. [ 777.364788][ T1442] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 777.417161][ T1442] bond4 (unregistering): Released all slaves [ 777.599817][ T1465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7116'. [ 777.711945][ T1473] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 777.755993][ T1475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.772600][ T1470] __nla_validate_parse: 1 callbacks suppressed [ 777.772616][ T1470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7117'. [ 778.027979][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 778.036044][ C0] lec:lec_tx_timeout: lec0 [ 778.041053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 778.079413][ T1490] syzkaller0: entered promiscuous mode [ 778.085027][ T1490] syzkaller0: entered allmulticast mode [ 778.101770][ T1490] tipc: Enabled bearer , priority 0 [ 778.243616][ T1503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7126'. [ 778.266113][ T1489] tipc: Resetting bearer [ 778.298857][ T1489] tipc: Disabling bearer [ 778.424378][ T1518] tipc: Enabled bearer , priority 0 [ 778.431906][ T1517] tipc: Enabling of bearer rejected, already enabled [ 778.529964][ T1517] tipc: Disabling bearer [ 778.614336][ T1530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7132'. [ 778.822892][ T1547] netlink: 'syz.1.7136': attribute type 1 has an invalid length. [ 779.001256][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7137'. [ 779.126715][ T1560] netlink: 'syz.4.7141': attribute type 1 has an invalid length. [ 779.157022][ T1560] netlink: 174 bytes leftover after parsing attributes in process `syz.4.7141'. [ 779.284768][ T1578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7144'. [ 779.331493][ T1576] syzkaller0: entered promiscuous mode [ 779.334329][ T1578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7144'. [ 779.364364][ T1576] syzkaller0: entered allmulticast mode [ 779.390600][T27405] batadv1: left promiscuous mode [ 779.700560][ T1599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7150'. [ 779.777963][ T1601] lo speed is unknown, defaulting to 1000 [ 779.892566][ T1609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7155'. [ 779.913986][ T1609] tipc: Invalid UDP bearer configuration [ 779.914041][ T1609] tipc: Enabling of bearer rejected, failed to enable media [ 779.964849][ T1621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7158'. [ 780.851575][ T1654] tun0: tun_chr_ioctl cmd 1074025675 [ 780.857517][ T1654] tun0: persist enabled [ 780.864679][ T1654] tun0: tun_chr_ioctl cmd 1074025675 [ 780.871410][ T1654] tun0: persist disabled [ 781.438870][ T1680] netlink: 'syz.2.7175': attribute type 49 has an invalid length. [ 781.514688][ T1683] syzkaller0: entered allmulticast mode [ 781.818710][ T1692] lo speed is unknown, defaulting to 1000 [ 781.951368][ T1704] netlink: 'syz.4.7183': attribute type 10 has an invalid length. [ 781.970753][ T1704] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 781.988351][ T1704] team0: Failed to send options change via netlink (err -105) [ 781.995857][ T1704] team0: Port device netdevsim0 added [ 782.204874][ T1700] team0: Failed to send options change via netlink (err -105) [ 782.214411][ T1700] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 782.224617][ T1700] team0: Port device netdevsim0 removed [ 782.270676][ T1711] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 782.278592][ T1711] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 782.403950][ T1714] lo speed is unknown, defaulting to 1000 [ 783.056330][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 783.064403][ C0] lec:lec_tx_timeout: lec0 [ 783.069182][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 783.127763][ T1745] __nla_validate_parse: 4 callbacks suppressed [ 783.127782][ T1745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7189'. [ 783.145760][ T1745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7189'. [ 783.156812][ T1745] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7189'. [ 783.313177][ T1753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7191'. [ 783.943637][ T1764] tipc: Enabling of bearer rejected, failed to enable media [ 784.226240][ T1785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7201'. [ 784.433119][ T1798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7203'. [ 784.453761][ T1798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7203'. [ 784.621765][ T1816] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7203'. [ 784.652632][ T1816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7203'. [ 784.688797][ T1826] tipc: Enabled bearer , priority 0 [ 784.696217][ T1826] syzkaller0: entered promiscuous mode [ 784.702183][ T1826] syzkaller0: entered allmulticast mode [ 784.798987][ T1826] tipc: Resetting bearer [ 784.861223][ T1833] tipc: Resetting bearer [ 784.896821][ T1833] tipc: Disabling bearer [ 785.016958][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.037278][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.451478][ T1858] netlink: 'syz.3.7221': attribute type 1 has an invalid length. [ 785.564131][T22615] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb1 [ 786.235102][ T1882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7228'. [ 786.938050][ T47] IPVS: starting estimator thread 0... [ 787.026483][ T1893] IPVS: using max 35 ests per chain, 84000 per kthread [ 788.076372][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 788.084461][ C0] lec:lec_tx_timeout: lec0 [ 788.089083][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 788.350537][ T1858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 788.555557][ T1911] syzkaller1: entered promiscuous mode [ 788.572663][ T1911] syzkaller1: entered allmulticast mode [ 788.742890][ T1928] netlink: 'syz.3.7242': attribute type 1 has an invalid length. [ 788.816937][ T1928] __nla_validate_parse: 2 callbacks suppressed [ 788.816958][ T1928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7242'. [ 788.855554][ T1928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 788.893693][ T1935] bond0: (slave dummy0): Releasing backup interface [ 788.921966][ T1935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.939366][T10717] lo speed is unknown, defaulting to 1000 [ 788.952421][ T1928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 788.967542][ T1928] bond3: (slave geneve2): making interface the new active one [ 788.980723][ T1928] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 789.013641][ T1940] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 789.021650][T27400] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 789.041105][ T1944] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 789.051972][T27400] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 789.087685][T27400] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 789.118479][ T1940] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 789.137462][T27400] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 789.170242][ T1948] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7248'. [ 789.329679][ T1955] netlink: 'syz.3.7252': attribute type 1 has an invalid length. [ 789.364956][ T1955] bond4: entered promiscuous mode [ 789.370954][ T1955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 789.391275][ T1955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 789.406949][ T1955] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 789.417488][ T1955] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 789.430117][ T1955] bond4: (slave vcan1): making interface the new active one [ 789.438813][ T1955] vcan1: entered promiscuous mode [ 789.445585][ T1955] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 789.530336][ T1969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7254'. [ 789.548815][ T1965] tipc: Enabled bearer , priority 0 [ 789.598051][ T1969] vlan1: entered promiscuous mode [ 789.618599][ T1969] bridge0: entered promiscuous mode [ 789.675847][ T1973] netlink: 'syz.2.7254': attribute type 11 has an invalid length. [ 789.684213][ T1973] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.7254'. [ 789.745772][ T1977] lo speed is unknown, defaulting to 1000 [ 789.859101][ T1991] x_tables: unsorted underflow at hook 2 [ 789.887045][ T1992] No such timeout policy "syz1" [ 789.897116][ T1967] tipc: Disabling bearer [ 789.910985][ T1994] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 790.009161][ T1986] lo speed is unknown, defaulting to 1000 [ 790.234477][ T2007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7264'. [ 790.302702][ T2010] openvswitch: netlink: IP tunnel dst address not specified [ 790.371364][ T2016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7267'. [ 790.388163][ T2016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7267'. [ 790.703617][ T2033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7272'. [ 790.767005][ T2031] syzkaller0: entered promiscuous mode [ 790.772600][ T2031] syzkaller0: entered allmulticast mode [ 790.888963][ T2033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.911935][ T2033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.009116][ T2041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7271'. [ 791.021094][ T2041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7271'. [ 791.168565][ T2033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.181318][ T2033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.831932][ T2033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.842960][ T2033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.863787][ T2054] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 793.017883][ T2033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.058966][ T2033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.096393][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 793.104450][ C0] lec:lec_tx_timeout: lec0 [ 793.109435][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 793.193802][ T2074] syzkaller0: entered promiscuous mode [ 793.203166][ T2074] syzkaller0: entered allmulticast mode [ 793.241015][ T2078] syzkaller0: entered promiscuous mode [ 793.262673][ T2078] syzkaller0: entered allmulticast mode [ 793.337538][ T2069] openvswitch: netlink: Missing valid actions attribute. [ 793.356590][ T2069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.394060][T27400] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.406144][T27400] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.531281][T27400] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.546770][T27400] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.575012][T27400] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.595923][T27400] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.638511][T27400] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.647986][T27400] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.724959][ T2092] syzkaller0: entered promiscuous mode [ 793.733753][ T2092] syzkaller0: entered allmulticast mode [ 794.053973][ T2116] sctp: [Deprecated]: syz.3.7291 (pid 2116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.053973][ T2116] Use struct sctp_sack_info instead [ 794.114791][ T2118] __nla_validate_parse: 4 callbacks suppressed [ 794.114812][ T2118] netlink: 464 bytes leftover after parsing attributes in process `syz.4.7292'. [ 794.131507][ T2118] netlink: 464 bytes leftover after parsing attributes in process `syz.4.7292'. [ 794.170963][ T5191] udevd[5191]: worker [28722] /devices/virtual/block/nbd1 is taking a long time [ 794.194009][ T2120] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7293'. [ 794.205114][ T2120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7293'. [ 794.217815][ T2121] netlink: 'syz.4.7292': attribute type 3 has an invalid length. [ 795.970699][ T2139] syzkaller0: entered promiscuous mode [ 795.976228][ T2139] syzkaller0: entered allmulticast mode [ 796.008039][ T2149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7301'. [ 796.021399][ T2151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7299'. [ 796.405716][ T2176] syzkaller0: entered promiscuous mode [ 796.416191][ T2176] syzkaller0: entered allmulticast mode [ 796.427992][ T2175] tipc: Enabled bearer , priority 0 [ 796.794202][ T2185] macvlan0: entered promiscuous mode [ 796.812032][ T2185] macvlan0: entered allmulticast mode [ 796.830864][ T2185] veth1_vlan: entered allmulticast mode [ 796.845885][ T2185] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 796.868614][ T2175] tipc: Resetting bearer [ 796.908741][ T2175] tipc: Disabling bearer [ 796.930361][ T2186] netlink: 'syz.1.7309': attribute type 1 has an invalid length. [ 796.947554][ T2186] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 797.075589][ T2202] netpci0: tun_chr_ioctl cmd 1074025678 [ 797.076659][ T2204] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7316'. [ 797.095986][ T2202] netpci0: group set to 0 [ 797.174750][ T2217] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 797.208454][ T2216] syzkaller0: entered promiscuous mode [ 797.214139][ T2216] syzkaller0: entered allmulticast mode [ 797.234571][ T2068] block nbd1: Possible stuck request ffff88803e118000: control (read@0,1024B). Runtime 150 seconds [ 797.245732][ T2068] block nbd1: Possible stuck request ffff88803e118200: control (read@1024,1024B). Runtime 150 seconds [ 797.277726][ T2068] block nbd1: Possible stuck request ffff88803e118400: control (read@2048,1024B). Runtime 150 seconds [ 797.289310][ T2068] block nbd1: Possible stuck request ffff88803e118600: control (read@3072,1024B). Runtime 150 seconds [ 797.491807][ T2233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7323'. [ 797.511772][ T2233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7323'. [ 797.522884][ T2231] lo speed is unknown, defaulting to 1000 [ 797.781555][ T2248] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7328'. [ 797.900987][ T2246] lo speed is unknown, defaulting to 1000 [ 797.915088][ T2250] syzkaller0: entered promiscuous mode [ 797.931143][ T2250] syzkaller0: entered allmulticast mode [ 798.116316][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 798.124401][ C0] lec:lec_tx_timeout: lec0 [ 798.129127][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 798.373321][ T2284] netlink: 'syz.3.7336': attribute type 10 has an invalid length. [ 798.447048][ T2284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.457794][ T2274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.457889][ T2284] team0: Port device bond0 added [ 798.705099][ T2294] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 798.804192][ T2298] lo speed is unknown, defaulting to 1000 [ 799.465703][ T2340] __nla_validate_parse: 5 callbacks suppressed [ 799.465791][ T2340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7351'. [ 799.619503][ T2349] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 799.631972][ T2349] bond8 (unregistering): Released all slaves [ 799.828169][ T2367] xt_TCPMSS: Only works on TCP SYN packets [ 799.911511][ T2374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7360'. [ 799.957838][ T2374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7360'. [ 800.079525][ T2390] netlink: 212232 bytes leftover after parsing attributes in process `syz.4.7360'. [ 800.270267][ T2399] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 800.538539][ T2405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7363'. [ 800.748777][ T2421] lo speed is unknown, defaulting to 1000 [ 800.766849][ T2420] netlink: 'syz.4.7365': attribute type 62 has an invalid length. [ 800.789368][ T2422] netlink: 'syz.4.7365': attribute type 62 has an invalid length. [ 801.241427][ T2446] tipc: Enabled bearer , priority 0 [ 801.262169][ T2446] syzkaller0: entered promiscuous mode [ 801.276870][ T2446] syzkaller0: entered allmulticast mode [ 801.386187][ T2446] tipc: Resetting bearer [ 801.424149][ T2445] tipc: Resetting bearer [ 801.515611][ T2465] xt_TPROXY: Can be used only with -p tcp or -p udp [ 801.523365][ T2445] tipc: Disabling bearer [ 802.279416][ T2526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7385'. [ 802.520518][ T2535] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7388'. [ 802.890096][ T2562] batadv_slave_0: entered promiscuous mode [ 802.929488][ T2562] batadv0: entered promiscuous mode [ 803.136365][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 803.144451][ C0] lec:lec_tx_timeout: lec0 [ 803.149656][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 803.331620][ T2574] netlink: 'syz.4.7394': attribute type 1 has an invalid length. [ 803.367885][ T2562] batadv_slave_0: left promiscuous mode [ 803.382925][ T2574] syzkaller0: entered promiscuous mode [ 803.394889][ T2574] syzkaller0: entered allmulticast mode [ 803.504556][ T2579] netlink: 'syz.0.7396': attribute type 29 has an invalid length. [ 804.092096][ T2627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.291694][ T2638] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002 [ 804.544230][ T2658] tc_dump_action: action bad kind [ 804.825170][ T2684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7422'. [ 804.866908][ T2684] geneve3: entered promiscuous mode [ 805.049112][ T2700] bond8: entered promiscuous mode [ 805.196557][ T2708] netlink: 'syz.2.7427': attribute type 1 has an invalid length. [ 805.263206][ T2710] netlink: 'syz.4.7428': attribute type 14 has an invalid length. [ 805.349122][ T2719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7429'. [ 805.544905][ T2728] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7433'. [ 805.566987][ T2735] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 805.795509][ T2751] : entered promiscuous mode [ 805.805711][ T2744] lo speed is unknown, defaulting to 1000 [ 805.989469][ T2765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7443'. [ 806.052473][ T2765] GUP no longer grows the stack in syz.3.7443 (2765): 200000003000-20000000a000 (200000001000) [ 806.064242][ T2765] CPU: 1 UID: 0 PID: 2765 Comm: syz.3.7443 Not tainted syzkaller #0 PREEMPT(full) [ 806.064269][ T2765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 806.064282][ T2765] Call Trace: [ 806.064290][ T2765] [ 806.064299][ T2765] dump_stack_lvl+0xe8/0x150 [ 806.064330][ T2765] __get_user_pages+0x2453/0x29d0 [ 806.064374][ T2765] ? __gup_longterm_locked+0xc4e/0x1630 [ 806.064395][ T2765] ? down_read_killable+0x1bb/0x340 [ 806.064422][ T2765] ? try_get_folio+0xec/0x650 [ 806.064448][ T2765] __gup_longterm_locked+0xdcf/0x1630 [ 806.064495][ T2765] gup_fast_fallback+0x1d82/0x22e0 [ 806.064548][ T2765] ? __pfx_gup_fast_fallback+0x10/0x10 [ 806.064572][ T2765] ? is_valid_gup_args+0x11f/0x200 [ 806.064595][ T2765] ? get_user_pages_fast+0x4d/0xb0 [ 806.064617][ T2765] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 806.064654][ T2765] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 806.064681][ T2765] iov_iter_get_pages2+0x5e/0xa0 [ 806.064704][ T2765] __se_sys_vmsplice+0x7b3/0x1490 [ 806.064745][ T2765] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 806.064769][ T2765] ? __pfx_futex_wake+0x10/0x10 [ 806.064799][ T2765] ? lockdep_hardirqs_on+0x7a/0x110 [ 806.064882][ T2765] do_syscall_64+0x14d/0xf80 [ 806.064905][ T2765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.064922][ T2765] ? trace_irq_disable+0x37/0x100 [ 806.064944][ T2765] ? clear_bhb_loop+0x40/0x90 [ 806.064967][ T2765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.064985][ T2765] RIP: 0033:0x7f17f5f9bf79 [ 806.065003][ T2765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.065019][ T2765] RSP: 002b:00007f17f6d98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 806.065040][ T2765] RAX: ffffffffffffffda RBX: 00007f17f6215fa0 RCX: 00007f17f5f9bf79 [ 806.065054][ T2765] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 806.065067][ T2765] RBP: 00007f17f60327e0 R08: 0000000000000000 R09: 0000000000000000 [ 806.065079][ T2765] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 806.065091][ T2765] R13: 00007f17f6216038 R14: 00007f17f6215fa0 R15: 00007ffccbc2ef08 [ 806.065124][ T2765] [ 806.104262][ T2773] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.143687][ T2764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7438'. [ 806.383942][ T2785] geneve2: entered promiscuous mode [ 806.391257][T27403] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.399767][T27403] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.410367][T27403] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.419704][T27403] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.981707][ T2831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7458'. [ 807.110179][ T2846] netlink: 'syz.0.7461': attribute type 2 has an invalid length. [ 807.200292][ T2854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7464'. [ 807.221899][ T2854] macvtap0: entered promiscuous mode [ 807.229358][ T2854] mac80211_hwsim hwsim66 wlan1: entered promiscuous mode [ 807.916783][ T2902] nbd5: detected capacity change from 0 to 127 [ 807.974209][ T2913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7481'. [ 808.016853][ T2903] nbd6: detected capacity change from 0 to 127 [ 808.025840][ T2915] netlink: 'syz.3.7482': attribute type 1 has an invalid length. [ 808.049690][ T2915] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 808.066757][ T5839] block nbd5: Receive control failed (result -104) [ 808.082670][ T5834] block nbd6: Receive control failed (result -32) [ 808.156316][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 808.164359][ C0] lec:lec_tx_timeout: lec0 [ 808.170310][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 808.261764][ T2929] lo speed is unknown, defaulting to 1000 [ 808.263038][ T2936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7487'. [ 808.567728][ T2953] netlink: 'syz.3.7493': attribute type 2 has an invalid length. [ 808.755091][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.775211][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7496'. [ 809.302471][ T3007] tipc: Enabled bearer , priority 0 [ 809.314382][ T3007] syzkaller0: entered promiscuous mode [ 809.319979][ T3007] syzkaller0: entered allmulticast mode [ 809.355089][ T3007] lo speed is unknown, defaulting to 1000 [ 809.419940][ T3018] tipc: Resetting bearer [ 809.457613][ T3018] tipc: Disabling bearer [ 809.868493][ T3049] __nla_validate_parse: 13 callbacks suppressed [ 809.868515][ T3049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7515'. [ 810.368623][ T3071] gre0: entered promiscuous mode [ 810.373821][ T3071] gre0: entered allmulticast mode [ 810.675405][ T3093] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7531'. [ 810.970993][ T3117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7538'. [ 811.007914][ T3109] bond9: option packets_per_slave: invalid value (5636102) [ 811.015311][ T3109] bond9: option packets_per_slave: allowed values 0 - 65535 [ 811.035901][ T3109] bond9 (unregistering): Released all slaves [ 811.180667][ T3123] block nbd0: NBD_DISCONNECT [ 811.185457][ T3123] block nbd0: Send disconnect failed -32 [ 811.191686][ T3123] block nbd0: shutting down sockets [ 811.361049][T32009] udevd[32009]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 811.715061][ T3176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7549'. [ 812.320047][T27400] bond6 (unregistering): (slave bridge7): Releasing active interface [ 812.328489][T27400] bond6 (unregistering): (slave bridge7): the permanent HWaddr of slave - 2a:da:dd:b0:1c:9e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 812.370525][T27400] bond6 (unregistering): (slave bridge8): Releasing active interface [ 812.551835][T27400] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.561921][T27400] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.571772][T27400] .` (unregistering): (slave bond3): Releasing backup interface [ 812.580377][T27400] .` (unregistering): Released all slaves [ 812.592143][T27400] bond1 (unregistering): Released all slaves [ 812.605121][T27400] bond2 (unregistering): Released all slaves [ 812.617739][T27400] bond3 (unregistering): Released all slaves [ 812.631056][T27400] bond4 (unregistering): (slave batadv2): Releasing active interface [ 812.639944][T27400] bond4 (unregistering): Released all slaves [ 812.661117][T27400] bond5 (unregistering): (slave batadv3): Releasing backup interface [ 812.670337][T27400] bond5 (unregistering): Released all slaves [ 812.682836][T27400] bond6 (unregistering): Released all slaves [ 812.695140][T27400] bond7 (unregistering): Released all slaves [ 812.726838][ T3160] tipc: Enabling of bearer rejected, failed to enable media [ 812.736036][ T3168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7549'. [ 812.746228][ T3190] netlink: 'syz.0.7547': attribute type 1 has an invalid length. [ 812.754035][ T3190] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7547'. [ 812.763703][ T3168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7549'. [ 812.785122][ T3168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7549'. [ 812.810833][ T3190] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7547'. [ 812.821240][ T3168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7549'. [ 812.832593][ T3168] netlink: 'syz.1.7549': attribute type 6 has an invalid length. [ 812.872523][T27400] : left promiscuous mode [ 812.926485][ T3199] netlink: 'syz.4.7551': attribute type 4 has an invalid length. [ 812.980555][ T3202] netlink: 'syz.2.7552': attribute type 1 has an invalid length. [ 813.042144][T27400] tipc: Left network mode [ 813.992080][ T3274] IPVS: length: 85 != 24 [ 814.205058][T27400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.238520][T27400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.278070][T27400] batman_adv: batadv0: Removing interface: macvlan3 [ 814.359496][T27400] pim6reg (unregistering): left allmulticast mode [ 814.506299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6330 ms [ 814.514384][ C0] lec:lec_tx_timeout: lec0 [ 814.519252][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 814.831870][T27400] team_slave_1 (unregistering): left allmulticast mode [ 814.839982][T27400] team0 (unregistering): Port device team_slave_1 removed [ 814.859512][T27400] team_slave_0 (unregistering): left allmulticast mode [ 814.873012][T27400] team0 (unregistering): Port device team_slave_0 removed [ 815.055313][ T3276] __nla_validate_parse: 8 callbacks suppressed [ 815.055332][ T3276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7570'. [ 815.109033][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7578'. [ 815.327414][ T3288] lo speed is unknown, defaulting to 1000 [ 815.519648][ T3332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7581'. [ 815.603875][ T3330] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.615731][ T3337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7584'. [ 815.647833][ T3335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7582'. [ 815.669745][ T3337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7584'. [ 815.705557][T27400] IPVS: stop unused estimator thread 0... [ 815.782896][ T3330] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.854084][ T3347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7586'. [ 815.909873][ T3330] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.000210][ T3357] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7589'. [ 816.012624][ T3357] nbd: must specify at least one socket [ 816.024394][ T3330] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.044774][ T3354] netlink: 'syz.3.7588': attribute type 1 has an invalid length. [ 816.047196][ T3355] lo speed is unknown, defaulting to 1000 [ 816.203138][T27401] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.231736][T27401] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.275377][T27401] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.326549][T27401] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.538069][ T3373] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7595'. [ 816.577627][ T3373] netlink: 'syz.2.7595': attribute type 1 has an invalid length. [ 816.603753][ T3384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7594'. [ 816.647445][ T3373] bridge_slave_1: left allmulticast mode [ 816.653213][ T3373] bridge_slave_1: left promiscuous mode [ 816.660845][ T3373] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.672455][ T3373] bridge_slave_0: left allmulticast mode [ 816.685602][ T3373] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.500820][ T3468] dvmrp6: left allmulticast mode [ 818.181058][ T3515] lo speed is unknown, defaulting to 1000 [ 818.305721][ T3529] netlink: 'syz.2.7637': attribute type 32 has an invalid length. [ 818.324602][ T3528] netlink: 'syz.2.7637': attribute type 32 has an invalid length. [ 818.399134][ T3528] bond4: option coupled_control: invalid value (12) [ 818.417856][ T3528] bond4 (unregistering): Released all slaves [ 818.508007][ T3529] bond4: option coupled_control: invalid value (12) [ 818.527850][ T3529] bond4 (unregistering): Released all slaves [ 818.644956][ T3541] netlink: 'syz.3.7639': attribute type 13 has an invalid length. [ 818.909808][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.327402][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.358530][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.528266][ T3541] veth1_vlan: left allmulticast mode [ 819.768376][T11616] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.791857][T11616] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.836774][T11616] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 819.845823][T11616] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.870751][T11616] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.884092][T11616] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 820.030848][T11616] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.049575][T11616] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.067922][T11616] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 820.077868][T11616] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.092637][T11616] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.103259][T11616] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 820.216481][ T3588] __nla_validate_parse: 11 callbacks suppressed [ 820.216502][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7651'. [ 820.266298][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 820.274417][ C0] lec:lec_tx_timeout: lec0 [ 820.279473][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 820.300593][ T3590] : entered promiscuous mode [ 820.538457][ T3597] smc: net device wlan0 applied user defined pnetid SYZ1 [ 820.643775][ T3608] netlink: 'syz.0.7659': attribute type 8 has an invalid length. [ 820.662682][ T3609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7658'. [ 820.949685][ T3631] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7664'. [ 821.100892][ T3637] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.7669'. [ 821.109845][ T3632] lo speed is unknown, defaulting to 1000 [ 821.113325][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7669'. [ 821.145593][ T3637] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7669'. [ 821.260825][ T3647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7672'. [ 821.334812][ T3645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7671'. [ 821.360789][ T3647] tunl0: entered promiscuous mode [ 821.365865][ T3647] tunl0: entered allmulticast mode [ 821.564351][T32009] udevd[32009]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 821.583771][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7676'. [ 821.665038][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7676'. [ 821.922796][ T3684] netlink: 'syz.2.7679': attribute type 2 has an invalid length. [ 822.032384][ T3684] bond4: option all_slaves_active: invalid value (13) [ 822.044865][ T3684] bond4 (unregistering): Released all slaves [ 822.598575][ T3727] --map-set only usable from mangle table [ 822.733620][ T3731] netlink: 'syz.0.7692': attribute type 3 has an invalid length. [ 822.744246][ T3731] netlink: 'syz.0.7692': attribute type 2 has an invalid length. [ 822.752842][ T3731] netlink: 'syz.0.7692': attribute type 2 has an invalid length. [ 822.988956][ T3751] netlink: 'syz.3.7698': attribute type 21 has an invalid length. [ 823.031230][ T3751] netlink: 'syz.3.7698': attribute type 5 has an invalid length. [ 823.045535][ T3746] lo speed is unknown, defaulting to 1000 [ 823.056181][ T3753] syzkaller0: entered promiscuous mode [ 823.062412][ T3753] syzkaller0: entered allmulticast mode [ 823.215623][ T3760] sctp: [Deprecated]: syz.1.7702 (pid 3760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.215623][ T3760] Use struct sctp_sack_info instead [ 823.239727][ T3760] sctp: [Deprecated]: syz.1.7702 (pid 3760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.239727][ T3760] Use struct sctp_sack_info instead [ 823.321826][ T3760] 8021q: VLANs not supported on nlmon0 [ 823.350565][ T3762] syzkaller0: entered promiscuous mode [ 823.366412][ T3762] syzkaller0: entered allmulticast mode [ 823.475189][ T3772] validate_nla: 1 callbacks suppressed [ 823.475208][ T3772] netlink: 'syz.2.7705': attribute type 7 has an invalid length. [ 823.516235][ T3780] openvswitch: netlink: Key type 30 is not supported [ 823.664193][ T3784] lo speed is unknown, defaulting to 1000 [ 824.130717][ T3798] lo speed is unknown, defaulting to 1000 [ 824.416989][ T3808] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 824.605587][ T3825] : entered promiscuous mode [ 825.396324][ T3859] __nla_validate_parse: 25 callbacks suppressed [ 825.396342][ T3859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7729'. [ 825.559021][ T3862] bond6: option primary_reselect: invalid value (4) [ 825.578528][ T3862] bond6 (unregistering): Released all slaves [ 825.721228][ T3878] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7737'. [ 825.927423][ T3894] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 826.026296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 826.034372][ C0] lec:lec_tx_timeout: lec0 [ 826.039729][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 826.199650][ T3913] syzkaller1: entered allmulticast mode [ 826.584716][ T3921] lo speed is unknown, defaulting to 1000 [ 826.961028][ T3937] openvswitch: netlink: EtherType 50a is less than min 600 [ 827.132983][ T3944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7752'. [ 827.366811][ T2068] block nbd1: Possible stuck request ffff88803e118000: control (read@0,1024B). Runtime 180 seconds [ 827.369882][ T3949] tipc: Enabling of bearer rejected, failed to enable media [ 827.377630][ T2068] block nbd1: Possible stuck request ffff88803e118200: control (read@1024,1024B). Runtime 180 seconds [ 827.377662][ T2068] block nbd1: Possible stuck request ffff88803e118400: control (read@2048,1024B). Runtime 180 seconds [ 827.377685][ T2068] block nbd1: Possible stuck request ffff88803e118600: control (read@3072,1024B). Runtime 180 seconds [ 827.579095][ T3949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7756'. [ 827.595695][ T3941] lo speed is unknown, defaulting to 1000 [ 827.981325][ T3963] syzkaller0: entered promiscuous mode [ 827.997983][ T3963] syzkaller0: entered allmulticast mode [ 828.029136][ T3963] tipc: Enabled bearer , priority 0 [ 828.062906][ T3961] tipc: Resetting bearer [ 828.135925][ T3961] tipc: Disabling bearer [ 828.220407][ T3976] bridge4: entered promiscuous mode [ 828.350548][ T3990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7769'. [ 828.354171][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7771'. [ 828.406673][ T3992] netlink: 'syz.0.7771': attribute type 1 has an invalid length. [ 828.470212][ T3997] bpq0: entered promiscuous mode [ 828.558680][ T4005] Cannot find map_set index 135 as target [ 828.740412][ T4020] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7778'. [ 829.454568][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7783'. [ 830.785710][ T4042] lo speed is unknown, defaulting to 1000 [ 830.950388][ T4054] netlink: 'syz.0.7784': attribute type 1 has an invalid length. [ 830.958897][ T4054] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7784'. [ 830.978753][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7787'. [ 831.022268][ T4054] tipc: Enabled bearer , priority 0 [ 831.034983][ T4054] syzkaller0: entered allmulticast mode [ 831.046310][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 831.048614][ T4067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7789'. [ 831.054450][ C0] lec:lec_tx_timeout: lec0 [ 831.054633][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 831.084789][ T4054] tipc: Resetting bearer [ 831.099850][ T4067] vlan2: entered promiscuous mode [ 831.105174][ T4067] gretap0: entered promiscuous mode [ 831.114092][ T4054] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7784'. [ 831.143565][ T4054] nbd: couldn't find a device at index 65546 [ 831.176846][ T4053] tipc: Disabling bearer [ 831.338620][ T4078] tipc: Enabled bearer , priority 0 [ 831.346708][ T4078] syzkaller0: entered promiscuous mode [ 831.353521][ T4078] syzkaller0: entered allmulticast mode [ 831.361397][ T4084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7794'. [ 831.376241][ T4078] tipc: Resetting bearer [ 831.384548][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7794'. [ 831.395129][ T4077] tipc: Resetting bearer [ 831.413856][ T4077] tipc: Disabling bearer [ 831.433123][ T4081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7791'. [ 831.442774][ T4081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7791'. [ 831.624799][ T4101] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7798'. [ 831.784011][ T4117] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 831.925602][ T4125] lo speed is unknown, defaulting to 1000 [ 832.067051][ T4135] netlink: 'syz.2.7807': attribute type 10 has an invalid length. [ 832.088292][ T4135] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 832.353013][ T4155] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.7813'. [ 832.443564][ T4168] netlink: 'syz.1.7817': attribute type 32 has an invalid length. [ 832.494948][ T4170] netlink: 'syz.3.7816': attribute type 1 has an invalid length. [ 832.526166][ T4170] bond5: entered promiscuous mode [ 832.531771][ T4170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 832.574468][ T4170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 832.584366][ T4170] bond5: (slave bond6): making interface the new active one [ 832.591934][ T4170] bond6: entered promiscuous mode [ 832.598997][ T4170] bond5: (slave bond6): Enslaving as an active interface with an up link [ 832.613693][ T4175] tipc: Enabled bearer , priority 26 [ 832.714633][ T4184] syzkaller1: entered promiscuous mode [ 832.727570][ T4184] syzkaller1: entered allmulticast mode [ 832.751297][ T4184] syzkaller1: left promiscuous mode [ 832.758776][ T4184] syzkaller1: left allmulticast mode [ 833.194733][ T4214] netlink: 'syz.3.7830': attribute type 10 has an invalid length. [ 833.209328][ T4214] team0: Port device geneve0 added [ 833.215028][T27402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.224585][T27402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.233782][T27402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.243579][T27402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.659215][ T4242] netlink: 'syz.2.7838': attribute type 10 has an invalid length. [ 833.734161][ T4244] lo speed is unknown, defaulting to 1000 [ 833.978977][ T4264] netlink: 'syz.3.7842': attribute type 10 has an invalid length. [ 833.990843][ T4264] team0: Failed to send options change via netlink (err -105) [ 833.998809][ T4264] team0: Port device dummy0 added [ 834.164522][ T4270] netlink: 'syz.3.7842': attribute type 10 has an invalid length. [ 834.199668][ T4270] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 834.263558][ T4270] team0: Failed to send options change via netlink (err -105) [ 834.278705][ T4270] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 834.295237][ T4270] team0: Port device dummy0 removed [ 834.307427][ T4286] netlink: 'syz.2.7848': attribute type 3 has an invalid length. [ 834.317597][ T4270] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 834.338318][ T4284] pim6reg: entered allmulticast mode [ 834.343882][ T4289] pim6reg: left allmulticast mode [ 834.377907][ T4288] veth5: entered promiscuous mode [ 834.422289][ T4266] syzkaller0: entered promiscuous mode [ 834.446565][ T4266] syzkaller0: entered allmulticast mode [ 834.475212][ T4266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.492790][ T4297] netlink: 'syz.1.7851': attribute type 1 has an invalid length. [ 834.626793][ T4308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.865231][ T4321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.056997][ T4331] vlan2: entered promiscuous mode [ 835.062087][ T4331] bridge0: entered promiscuous mode [ 835.104601][ T4333] tipc: Enabled bearer , priority 0 [ 835.288606][ T4333] syzkaller0: entered promiscuous mode [ 835.311934][ T4346] netlink: 'syz.0.7862': attribute type 11 has an invalid length. [ 835.321390][ T4333] syzkaller0: entered allmulticast mode [ 835.332529][ T4333] tipc: Resetting bearer [ 835.383075][ T4332] tipc: Resetting bearer [ 836.078896][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 836.086970][ C0] lec:lec_tx_timeout: lec0 [ 836.091748][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 837.745926][ T4332] tipc: Disabling bearer [ 837.794934][ T4380] lo speed is unknown, defaulting to 1000 [ 837.975682][ T4402] __nla_validate_parse: 15 callbacks suppressed [ 837.975703][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7873'. [ 838.007326][ T4410] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 838.017704][ T4410] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7877'. [ 838.042643][ T4408] netlink: 'syz.3.7876': attribute type 4 has an invalid length. [ 838.056575][ T4410] netlink: Conntrack attr has 3 unknown bytes [ 838.082901][ T4410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7877'. [ 838.161037][ T4396] syzkaller0: entered promiscuous mode [ 838.166952][ T4396] syzkaller0: entered allmulticast mode [ 838.192369][ T2048] block nbd5: Possible stuck request ffff888026620000: control (read@0,1024B). Runtime 30 seconds [ 838.204142][ T2048] block nbd5: Possible stuck request ffff888026620200: control (read@1024,1024B). Runtime 30 seconds [ 838.217310][ T2048] block nbd5: Possible stuck request ffff888026620400: control (read@2048,1024B). Runtime 30 seconds [ 838.228831][ T11] block nbd6: Possible stuck request ffff8880266a8000: control (read@0,1024B). Runtime 30 seconds [ 838.239766][ T11] block nbd6: Possible stuck request ffff8880266a8200: control (read@1024,1024B). Runtime 30 seconds [ 838.251335][ T2048] block nbd5: Possible stuck request ffff888026620600: control (read@3072,1024B). Runtime 30 seconds [ 838.262635][ T11] block nbd6: Possible stuck request ffff8880266a8400: control (read@2048,1024B). Runtime 30 seconds [ 838.273979][ T11] block nbd6: Possible stuck request ffff8880266a8600: control (read@3072,1024B). Runtime 30 seconds [ 838.357528][ T4424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.635041][ T4447] syzkaller0: entered promiscuous mode [ 840.645792][ T4447] syzkaller0: entered allmulticast mode [ 840.813563][ T4464] erspan1: entered promiscuous mode [ 840.819793][ T4464] erspan1: entered allmulticast mode [ 840.863961][ T4471] lo speed is unknown, defaulting to 1000 [ 840.881101][ T4469] rdma_rxe: rxe_newlink: failed to add lo [ 840.889439][ T4471] lo speed is unknown, defaulting to 1000 [ 840.895947][ T4471] lo speed is unknown, defaulting to 1000 [ 841.106331][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 841.114399][ C0] lec:lec_tx_timeout: lec0 [ 841.254194][ T4495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7900'. [ 841.274404][ T4493] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 841.284040][ T4471] infiniband sqz0: set down [ 841.290961][ T4493] bond6 (unregistering): Released all slaves [ 841.295392][ T4471] infiniband sqz0: added lo [ 841.308414][ T4502] xt_TCPMSS: Only works on TCP SYN packets [ 841.353695][T10704] lo speed is unknown, defaulting to 1000 [ 841.361913][ T4502] netlink: 'syz.1.7899': attribute type 1 has an invalid length. [ 841.397274][ T4471] RDS/IB: sqz0: added [ 841.403859][ T4471] smc: adding ib device sqz0 with port count 1 [ 841.410722][ T4471] smc: ib device sqz0 port 1 has no pnetid [ 841.417251][T10704] lo speed is unknown, defaulting to 1000 [ 841.427678][ T4471] lo speed is unknown, defaulting to 1000 [ 841.524246][ T4507] netlink: 'syz.3.7903': attribute type 46 has an invalid length. [ 841.532796][ T4507] netlink: 'syz.3.7903': attribute type 19 has an invalid length. [ 841.542184][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7903'. [ 841.694359][ T4471] lo speed is unknown, defaulting to 1000 [ 841.960434][ T4522] openvswitch: netlink: IP tunnel dst address not specified [ 842.033819][ T4471] lo speed is unknown, defaulting to 1000 [ 842.310209][ T4529] xt_l2tp: v2 tid > 0xffff: 37482740 [ 842.392850][ T4542] nbd: must specify a device to reconfigure [ 842.471250][ T4471] lo speed is unknown, defaulting to 1000 [ 842.538294][ T4550] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 842.539173][ T4552] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 842.568025][ T4557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7916'. [ 842.829482][ T4571] netlink: 'syz.3.7922': attribute type 29 has an invalid length. [ 842.979935][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7923'. [ 842.994825][ T4471] lo speed is unknown, defaulting to 1000 [ 843.007123][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7923'. [ 843.029181][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7923'. [ 843.052110][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7923'. [ 843.285149][ T4599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7929'. [ 843.367712][ T4602] netlink: 'syz.1.7930': attribute type 13 has an invalid length. [ 843.434500][ T4607] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 843.494986][ T4604] ip6gre1: entered allmulticast mode [ 843.524763][ T4612] xfrm0: entered promiscuous mode [ 843.530210][ T4612] xfrm0: entered allmulticast mode [ 843.535651][ T4471] lo speed is unknown, defaulting to 1000 [ 843.546884][ T4611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7933'. [ 843.744379][ T4621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7937'. [ 843.868880][ T4628] netlink: 'syz.0.7939': attribute type 11 has an invalid length. [ 843.888473][ T4628] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.7939'. [ 844.072687][ T4471] lo speed is unknown, defaulting to 1000 [ 844.163886][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7942'. [ 844.193537][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7945'. [ 844.226039][ T4643] batadv_slave_0: entered promiscuous mode [ 844.235136][ T4643] batman_adv: batadv0: Adding interface: macsec1 [ 844.252985][ T4643] batman_adv: batadv0: Interface activated: macsec1 [ 844.269788][ T4645] gtp1: entered promiscuous mode [ 844.275273][ T4648] xt_TPROXY: Can be used only with -p tcp or -p udp [ 844.282173][ T4645] gtp1: entered allmulticast mode [ 844.679435][ T4684] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20002 [ 844.696240][ T4678] bond4: entered promiscuous mode [ 844.703329][ T4678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 844.724319][ T4678] bond4 (unregistering): Released all slaves [ 844.838896][ T4693] nbd: must specify a size in bytes for the device [ 845.060328][ T4707] vlan1: entered promiscuous mode [ 845.075611][ T4707] syz_tun: entered promiscuous mode [ 845.278206][ T4717] vlan1: entered promiscuous mode [ 845.283517][ T4717] team0: entered promiscuous mode [ 845.289146][ T4717] team_slave_0: entered promiscuous mode [ 845.295563][ T4717] team_slave_1: entered promiscuous mode [ 845.307374][ T4717] bond0: entered promiscuous mode [ 845.312900][ T4717] bond_slave_0: entered promiscuous mode [ 845.319409][ T4717] bond_slave_1: entered promiscuous mode [ 845.325431][ T4717] bridge_slave_1: entered promiscuous mode [ 845.332293][ T4717] dummy0: entered promiscuous mode [ 845.338471][ T4717] geneve0: entered promiscuous mode [ 845.855767][ T4744] sctp: [Deprecated]: syz.1.7968 (pid 4744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 845.855767][ T4744] Use struct sctp_sack_info instead [ 847.356209][ T4758] netlink: 'syz.1.7972': attribute type 89 has an invalid length. [ 847.428990][ T4763] netlink: 'syz.4.7974': attribute type 1 has an invalid length. [ 847.455513][ T4763] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 847.515322][ T4771] bridge5: entered promiscuous mode [ 847.537379][ T4771] bridge5: entered allmulticast mode [ 847.548724][ T4771] team0: Port device bridge5 added [ 847.594562][ T4777] x_tables: duplicate underflow at hook 2 [ 847.973304][ T4806] netlink: 'syz.4.7986': attribute type 11 has an invalid length. [ 847.988268][ T4805] mac80211_hwsim hwsim66 wlan1 (unregistering): left promiscuous mode [ 848.048780][ T4811] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 848.224826][ T4822] netlink: 'syz.3.7991': attribute type 1 has an invalid length. [ 848.496667][ T4838] netlink: 'syz.1.7996': attribute type 10 has an invalid length. [ 848.497454][ T4836] __nla_validate_parse: 8 callbacks suppressed [ 848.497469][ T4836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7995'. [ 848.504699][ T4838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7996'. [ 848.558738][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7999'. [ 848.583421][ T4843] netlink: 'syz.2.7999': attribute type 2 has an invalid length. [ 848.620279][ T4850] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8000'. [ 848.655168][ T4843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7999'. [ 848.672157][ T4854] netlink: 'syz.4.7997': attribute type 3 has an invalid length. [ 848.683042][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7997'. [ 848.694654][ T4850] netlink: 'syz.0.8000': attribute type 9 has an invalid length. [ 848.734550][ T4850] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8000'. [ 848.748453][ T4850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8000'. [ 848.914626][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8005'. [ 848.964071][ T4868] bond9: entered promiscuous mode [ 849.014728][ T4868] 8021q: adding VLAN 0 to HW filter on device bond9 [ 849.076989][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8005'. [ 849.664180][ T4917] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 850.392004][ T4966] netlink: 'syz.2.8027': attribute type 1 has an invalid length. [ 850.501425][ T4968] netlink: 'syz.0.8033': attribute type 1 has an invalid length. [ 850.511037][ T4968] netlink: 'syz.0.8033': attribute type 1 has an invalid length. [ 850.600385][T27403] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.613323][T27403] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.628830][T27403] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.649680][T27403] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.860005][ T4994] lo speed is unknown, defaulting to 1000 [ 850.867058][ T4994] lo speed is unknown, defaulting to 1000 [ 851.018178][ T5000] tipc: Enabling of bearer rejected, failed to enable media [ 851.184192][ T5011] xt_hashlimit: size too large, truncated to 1048576 [ 851.191417][ T5011] xt_hashlimit: max too large, truncated to 1048576 [ 852.413853][ T5088] lo speed is unknown, defaulting to 1000 [ 852.420931][ T5088] lo speed is unknown, defaulting to 1000 [ 852.729424][ T5096] syzkaller0: entered promiscuous mode [ 852.735288][ T5096] syzkaller0: entered allmulticast mode [ 852.767031][ T5097] TC_ACT_REPEAT abuse ? [ 852.774179][ T5096] TC_ACT_REPEAT abuse ? [ 853.195388][ T5128] lo speed is unknown, defaulting to 1000 [ 853.214587][ T5128] lo speed is unknown, defaulting to 1000 [ 853.508219][ T5144] netlink: 'syz.2.8079': attribute type 1 has an invalid length. [ 853.641866][ T5144] bond4: entered promiscuous mode [ 853.657038][ T5144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 853.710597][ T5143] bond4: (slave bridge0): making interface the new active one [ 853.737371][ T5143] bridge0: entered promiscuous mode [ 853.758827][ T5143] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 853.871002][ T5148] netlink: 'syz.0.8078': attribute type 13 has an invalid length. [ 854.059695][ T5155] tipc: Enabled bearer , priority 0 [ 854.070731][ T5157] syzkaller0: entered promiscuous mode [ 854.078048][ T5157] syzkaller0: entered allmulticast mode [ 854.115714][ T5147] tipc: Resetting bearer [ 854.143950][ T5147] tipc: Disabling bearer [ 854.238744][ T5166] syzkaller0: entered promiscuous mode [ 854.244278][ T5166] syzkaller0: entered allmulticast mode [ 854.259743][ T5163] lo speed is unknown, defaulting to 1000 [ 854.344664][ T5163] lo speed is unknown, defaulting to 1000 [ 854.356185][ T5171] syzkaller1: entered promiscuous mode [ 854.363274][ T5171] syzkaller1: entered allmulticast mode [ 854.643884][ T5186] __nla_validate_parse: 9 callbacks suppressed [ 854.643903][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8088'. [ 854.719488][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8089'. [ 854.745688][ T5192] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8089'. [ 855.037362][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8095'. [ 855.044028][ T5217] IPv6: NLM_F_CREATE should be specified when creating new route [ 855.054437][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8095'. [ 855.063046][T27401] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.072822][T27401] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.083293][T27401] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.092942][T27401] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.095882][ T5211] IPv6: NLM_F_CREATE should be specified when creating new route [ 855.130242][ T5220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8094'. [ 855.463846][ T5228] lo speed is unknown, defaulting to 1000 [ 855.557281][ T5228] lo speed is unknown, defaulting to 1000 [ 855.614210][ T5237] lo speed is unknown, defaulting to 1000 [ 855.870893][ T5237] lo speed is unknown, defaulting to 1000 [ 856.510752][ T5265] x_tables: duplicate underflow at hook 1 [ 856.782473][ T5266] syzkaller0: entered promiscuous mode [ 856.820729][ T5266] syzkaller0: entered allmulticast mode [ 856.871698][ T5273] tipc: Enabled bearer , priority 0 [ 856.884799][ T5266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8110'. [ 856.921782][ T5273] syzkaller0: entered promiscuous mode [ 856.938776][ T5266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.943943][ T5273] syzkaller0: entered allmulticast mode [ 857.215865][ T5293] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8115'. [ 857.399771][ T2068] block nbd1: Possible stuck request ffff88803e118000: control (read@0,1024B). Runtime 210 seconds [ 857.410917][ T2068] block nbd1: Possible stuck request ffff88803e118200: control (read@1024,1024B). Runtime 210 seconds [ 857.422363][ T2068] block nbd1: Possible stuck request ffff88803e118400: control (read@2048,1024B). Runtime 210 seconds [ 857.433938][ T2068] block nbd1: Possible stuck request ffff88803e118600: control (read@3072,1024B). Runtime 210 seconds [ 857.748327][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8116'. [ 858.253039][ T5834] block nbd7: Receive control failed (result -32) [ 859.250492][ T5287] tipc: Resetting bearer [ 859.261633][ T5272] tipc: Resetting bearer [ 859.347803][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8119'. [ 859.357886][ T5272] tipc: Disabling bearer [ 859.671341][ T5339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8122'. [ 859.719557][ T5335] syzkaller0: entered promiscuous mode [ 859.725736][ T5335] syzkaller0: entered allmulticast mode [ 859.773160][ T5344] sctp: [Deprecated]: syz.2.8122 (pid 5344) Use of int in max_burst socket option deprecated. [ 859.773160][ T5344] Use struct sctp_assoc_value instead [ 859.872287][ T5341] bond8 (unregistering): Released all slaves [ 860.122606][ T5356] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 860.373373][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8135'. [ 860.384723][ T5376] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 860.404931][ T5376] bond8 (unregistering): Released all slaves [ 860.597730][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8139'. [ 860.653355][ T5396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8141'. [ 860.798254][ T5404] netlink: 'syz.3.8142': attribute type 4 has an invalid length. [ 860.845892][ T5404] netlink: 'syz.3.8142': attribute type 4 has an invalid length. [ 860.863847][ T5404] xt_limit: Overflow, try lower: 268435456/134217728 [ 861.016205][ T5414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8145'. [ 861.233521][ T5418] 0: reclassify loop, rule prio 0, protocol 800 [ 861.314927][ T5402] syzkaller0: entered promiscuous mode [ 861.320828][ T5402] syzkaller0: entered allmulticast mode [ 861.451487][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8148'. [ 861.521752][ T5428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8149'. [ 861.579233][ T5435] tipc: Enabled bearer , priority 0 [ 861.587302][ T5435] syzkaller0: entered promiscuous mode [ 861.592883][ T5435] syzkaller0: entered allmulticast mode [ 861.779116][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8155'. [ 861.798875][ T5435] tipc: Resetting bearer [ 861.827748][ T5435] tipc: Disabling bearer [ 861.846032][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8155'. [ 861.929200][ T5452] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8158'. [ 862.343017][ T5494] bond0 (unregistering): Released all slaves [ 862.497720][ T5508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 863.525430][ T5531] batman_adv: batadv0: Interface deactivated: macsec1 [ 863.554161][T10707] lo speed is unknown, defaulting to 1000 [ 863.562485][T10707] syz2: Port: 1 Link DOWN [ 863.582468][T27403] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.598159][T27403] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.627591][T27403] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.640412][T27403] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.649755][ T5550] lo speed is unknown, defaulting to 1000 [ 863.670859][ T5550] lo speed is unknown, defaulting to 1000 [ 863.672022][T27403] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.696153][T27403] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.713604][T27403] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.724524][T27403] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.281657][ T5588] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 865.080390][ T5630] bond6 (unregistering): Released all slaves [ 865.360723][ T5648] Cannot find del_set index 2 as target [ 865.445459][ T5653] netlink: 'syz.2.8207': attribute type 1 has an invalid length. [ 865.584934][ T5657] veth0: entered promiscuous mode [ 865.598085][ T5657] veth0: left promiscuous mode [ 865.706809][ T5664] __nla_validate_parse: 7 callbacks suppressed [ 865.706828][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8208'. [ 865.722766][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.756596][ T5663] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 865.856689][ T5676] wg2: Caught tx_queue_len zero misconfig [ 865.859265][ T5674] netlink: 'syz.3.8213': attribute type 21 has an invalid length. [ 865.870924][ T5674] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8213'. [ 865.953750][ T5683] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 866.006878][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8217'. [ 866.034323][ T5683] syzkaller0: entered promiscuous mode [ 866.039912][ T5683] syzkaller0: entered allmulticast mode [ 866.208459][T27724] lec:lec_start_xmit: lec0:No lecd attached [ 866.219743][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.343782][ T5716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8225'. [ 866.431945][ T5721] netlink: 'syz.4.8226': attribute type 13 has an invalid length. [ 866.431955][ T5722] netlink: 'syz.4.8226': attribute type 13 has an invalid length. [ 866.515964][T27404] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.528293][T27404] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.550034][T27404] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.559032][T27404] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.726080][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8228'. [ 866.733252][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8229'. [ 866.764540][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8229'. [ 866.846793][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8228'. [ 867.020019][ T5746] netlink: 'syz.3.8232': attribute type 1 has an invalid length. [ 867.033034][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8232'. [ 867.343392][ T5744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8230'. [ 867.778199][ T5782] netlink: 'syz.2.8243': attribute type 4 has an invalid length. [ 867.996795][ T5795] vlan1: entered allmulticast mode [ 868.001966][ T5795] veth0_to_bond: entered allmulticast mode [ 868.278915][ T11] block nbd5: Possible stuck request ffff888026620000: control (read@0,1024B). Runtime 60 seconds [ 868.290512][ T11] block nbd5: Possible stuck request ffff888026620200: control (read@1024,1024B). Runtime 60 seconds [ 868.302320][ T11] block nbd5: Possible stuck request ffff888026620400: control (read@2048,1024B). Runtime 60 seconds [ 868.313788][ T11] block nbd5: Possible stuck request ffff888026620600: control (read@3072,1024B). Runtime 60 seconds [ 868.324924][ T2048] block nbd6: Possible stuck request ffff8880266a8000: control (read@0,1024B). Runtime 60 seconds [ 868.335794][ T2048] block nbd6: Possible stuck request ffff8880266a8200: control (read@1024,1024B). Runtime 60 seconds [ 868.347199][ T2048] block nbd6: Possible stuck request ffff8880266a8400: control (read@2048,1024B). Runtime 60 seconds [ 868.358684][ T2048] block nbd6: Possible stuck request ffff8880266a8600: control (read@3072,1024B). Runtime 60 seconds [ 868.387070][ T5827] netlink: 'syz.3.8253': attribute type 83 has an invalid length. [ 868.487108][ T5909] lo speed is unknown, defaulting to 1000 [ 868.583395][ T5843] netlink: 'syz.0.8258': attribute type 1 has an invalid length. [ 868.602986][ T5842] geneve4: entered promiscuous mode [ 868.608493][ T5842] geneve4: entered allmulticast mode [ 868.740469][ T5850] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 868.740506][ T5850] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 868.766675][ T5850] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 868.899408][ T5863] tipc: Started in network mode [ 868.918268][ T5867] netlink: 'syz.1.8266': attribute type 21 has an invalid length. [ 868.924207][ T5863] tipc: Node identity 0ea6e18de21f, cluster identity 4711 [ 868.936722][ T5863] tipc: Enabled bearer , priority 0 [ 869.028666][ T5863] tipc: Resetting bearer [ 869.060997][ T5863] tipc: Disabling bearer [ 869.104453][ T5877] lo speed is unknown, defaulting to 1000 [ 869.121127][ T5877] lo speed is unknown, defaulting to 1000 [ 869.220405][ T5887] netlink: 'syz.4.8272': attribute type 11 has an invalid length. [ 869.261792][ T5890] netlink: 'syz.3.8271': attribute type 1 has an invalid length. [ 869.596917][ T5905] ip6t_srh: unknown srh match flags 4000 [ 869.667984][ T5905] openvswitch: netlink: Flow actions attr not present in new flow. [ 870.037218][ T5930] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 870.172326][ T5936] nbd: couldn't find a device at index 0 [ 870.186527][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 870.193944][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.014132][ T5964] __nla_validate_parse: 19 callbacks suppressed [ 871.014152][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8288'. [ 871.031727][ T5966] nbd: couldn't find a device at index 0 [ 871.075287][ T5964] 8021q: adding VLAN 0 to HW filter on device bond8 [ 871.234746][ T5977] validate_nla: 4 callbacks suppressed [ 871.234767][ T5977] netlink: 'syz.0.8292': attribute type 62 has an invalid length. [ 871.280471][ T5981] bridge0: Device is already in use. [ 871.406650][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8298'. [ 871.443176][ T5990] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8298'. [ 871.460714][ T5990] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 871.503122][ T5997] tipc: Enabled bearer , priority 0 [ 871.524416][ T5997] syzkaller0: entered promiscuous mode [ 871.529592][ T5999] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8301'. [ 871.549001][ T5997] syzkaller0: entered allmulticast mode [ 871.602791][ T5997] tipc: Resetting bearer [ 871.621170][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8303'. [ 871.634160][ T6003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8303'. [ 871.643485][ T5994] tipc: Resetting bearer [ 871.669751][ T5994] tipc: Disabling bearer [ 871.705534][ T6005] lo speed is unknown, defaulting to 1000 [ 871.715097][ T6005] lo speed is unknown, defaulting to 1000 [ 871.794776][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8306'. [ 871.870865][ T6014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.946301][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 871.954378][ C0] lec:lec_tx_timeout: lec0 [ 871.959375][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 872.035221][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8308'. [ 872.054760][ T6014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.172536][ T6014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.310964][ T6014] bond0: (slave netdevsim0): Releasing backup interface [ 872.327486][ T6014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.397517][ T6034] lo speed is unknown, defaulting to 1000 [ 872.411667][ T6034] lo speed is unknown, defaulting to 1000 [ 872.467028][T27404] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.546104][T27403] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.612476][T27403] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.633283][T27403] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.717491][ T6047] netlink: 'syz.2.8315': attribute type 5 has an invalid length. [ 873.232826][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8323'. [ 873.234507][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8320'. [ 873.270842][ T6073] netlink: 'syz.4.8324': attribute type 3 has an invalid length. [ 873.379903][ T6064] bond9: option broadcast_neighbor: invalid value (30) [ 873.420723][ T6064] bond9 (unregistering): Released all slaves [ 873.452773][ T6082] bpq0: left promiscuous mode [ 873.913866][ T6107] netlink: 'syz.4.8333': attribute type 13 has an invalid length. [ 874.048276][ T6115] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 874.056567][ T6115] syzkaller0: entered promiscuous mode [ 874.062130][ T6115] syzkaller0: entered allmulticast mode [ 874.240964][ T6117] sit0: left promiscuous mode [ 874.265112][ T6117] bridge0: left promiscuous mode [ 874.293576][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.339974][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.403670][ T6117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.555208][ T6142] netlink: 'syz.4.8342': attribute type 1 has an invalid length. [ 874.573158][ T6146] netlink: 'syz.1.8343': attribute type 1 has an invalid length. [ 874.597243][ T6145] netlink: 'syz.1.8343': attribute type 1 has an invalid length. [ 874.761296][ T6151] bond6: (slave geneve0): making interface the new active one [ 874.801431][ T6151] bond6: (slave geneve0): Enslaving as an active interface with an up link [ 874.822306][T27406] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 874.876626][T27406] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 874.923856][T27406] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 874.946951][T27406] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 875.205123][ T6196] netlink: 'syz.1.8359': attribute type 7 has an invalid length. [ 875.246936][ T5909] IPVS: starting estimator thread 0... [ 875.336451][ T6206] IPVS: using max 37 ests per chain, 88800 per kthread [ 875.645421][ T6217] ipvlan0: entered promiscuous mode [ 875.655110][ T6217] ipvlan0: left promiscuous mode [ 875.686738][ T6233] 8021q: VLANs not supported on nlmon0 [ 875.810826][ T6235] syzkaller0: entered promiscuous mode [ 875.866674][ T6235] syzkaller0: entered allmulticast mode [ 876.031881][ T6255] __nla_validate_parse: 10 callbacks suppressed [ 876.031902][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8369'. [ 876.480484][ T6279] ip6tnl0: Caught tx_queue_len zero misconfig [ 876.842510][ T5191] udevd[5191]: worker [28722] /devices/virtual/block/nbd1 timeout; kill it [ 876.852033][ T5191] udevd[5191]: seq 37385 '/devices/virtual/block/nbd1' killed [ 876.870397][ T5191] udevd[5191]: worker [27306] /devices/virtual/block/nbd5 is taking a long time [ 876.880331][ T5191] udevd[5191]: worker [28723] /devices/virtual/block/nbd6 is taking a long time [ 876.989412][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 876.997651][ C0] lec:lec_tx_timeout: lec0 [ 878.615974][ T6291] veth0_to_bridge: entered promiscuous mode [ 878.628201][ T6296] veth0_to_bridge: left promiscuous mode [ 878.647945][ T6300] lo speed is unknown, defaulting to 1000 [ 878.655401][ T6300] lo speed is unknown, defaulting to 1000 [ 878.802636][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8381'. [ 879.057398][ T6328] netlink: 'syz.4.8387': attribute type 4 has an invalid length. [ 879.078858][ T6329] netlink: 'syz.4.8387': attribute type 4 has an invalid length. [ 879.149546][ T794] lo speed is unknown, defaulting to 1000 [ 879.155685][T10717] lo speed is unknown, defaulting to 1000 [ 879.171331][T10717] lo speed is unknown, defaulting to 1000 [ 879.270051][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8390'. [ 879.444530][ T6350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8392'. [ 879.679538][ T6363] netlink: 'syz.2.8395': attribute type 4 has an invalid length. [ 879.692066][ T6363] netlink: 'syz.2.8395': attribute type 4 has an invalid length. [ 880.287046][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8404'. [ 880.289271][ T6382] bond5: option packets_per_slave: invalid value (1048582) [ 880.303941][ T6382] bond5: option packets_per_slave: allowed values 0 - 65535 [ 880.327583][ T6382] bond5 (unregistering): Released all slaves [ 880.413283][ T6393] sit4: entered promiscuous mode [ 880.458600][ T6393] sit4: entered allmulticast mode [ 880.613576][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8408'. [ 880.665310][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.719776][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8411'. [ 880.884742][ T6442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.684938][ T6462] sit1: entered promiscuous mode [ 881.737492][ T6464] netlink: 'syz.3.8419': attribute type 29 has an invalid length. [ 881.748486][ T6464] netlink: 'syz.3.8419': attribute type 29 has an invalid length. [ 881.758560][ T6464] netlink: 'syz.3.8419': attribute type 39 has an invalid length. [ 881.767176][ T6464] netlink: 'syz.3.8419': attribute type 29 has an invalid length. [ 883.667827][ T6425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.680406][ T6452] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 883.681360][ T6454] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 883.700763][ T6457] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 883.952863][ T6487] netlink: 'syz.0.8425': attribute type 1 has an invalid length. [ 883.991228][ T6487] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8425'. [ 884.241787][ T6514] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8431'. [ 884.272075][ T6514] openvswitch: netlink: Flow actions attr not present in new flow. [ 884.383769][ T6521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.713733][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8439'. [ 884.892464][ T6552] netlink: 'syz.0.8443': attribute type 1 has an invalid length. [ 884.904226][ T6552] netlink: 'syz.0.8443': attribute type 2 has an invalid length. [ 884.947115][ T6552] rdma_rxe: rxe_newlink: failed to add syz_tun [ 884.962491][ T6555] sctp: [Deprecated]: syz.3.8445 (pid 6555) Use of int in max_burst socket option deprecated. [ 884.962491][ T6555] Use struct sctp_assoc_value instead [ 884.994872][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8443'. [ 885.524076][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8448'. [ 885.649575][ T6572] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 885.672199][ T6572] bond2 (unregistering): Released all slaves [ 885.702549][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8449'. [ 885.818307][ T6588] netlink: 'syz.4.8453': attribute type 1 has an invalid length. [ 885.850010][ T6591] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8455'. [ 885.881858][ T6591] 6eth1_to_bond: renamed from gretap0 [ 885.902163][ T6591] 6eth1_to_bond: left promiscuous mode [ 885.916047][ T6591] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 885.939941][ T6602] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8457'. [ 885.989485][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.043877][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8457'. [ 886.085635][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8458'. [ 886.187035][ T6615] openvswitch: netlink: Flow key attr not present in new flow. [ 886.273172][ T6623] lo speed is unknown, defaulting to 1000 [ 886.297439][ T6623] lo speed is unknown, defaulting to 1000 [ 886.780990][ T6642] netlink: 'syz.4.8467': attribute type 11 has an invalid length. [ 886.907684][ T6646] sit0: entered promiscuous mode [ 887.273603][ T6660] syzkaller0: entered promiscuous mode [ 887.317862][ T6660] syzkaller0: entered allmulticast mode [ 887.490919][ T2068] block nbd1: Possible stuck request ffff88803e118000: control (read@0,1024B). Runtime 240 seconds [ 887.504954][ T2068] block nbd1: Possible stuck request ffff88803e118200: control (read@1024,1024B). Runtime 240 seconds [ 887.517339][ T2068] block nbd1: Possible stuck request ffff88803e118400: control (read@2048,1024B). Runtime 240 seconds [ 887.528711][ T2068] block nbd1: Possible stuck request ffff88803e118600: control (read@3072,1024B). Runtime 240 seconds [ 889.144875][ T6684] geneve0: entered promiscuous mode [ 889.154591][ T6684] geneve0: entered allmulticast mode [ 889.212679][ T6692] lo: Caught tx_queue_len zero misconfig [ 889.241441][ T6679] lo speed is unknown, defaulting to 1000 [ 889.263244][ T6679] lo speed is unknown, defaulting to 1000 [ 889.345042][ T6702] __nla_validate_parse: 15 callbacks suppressed [ 889.345060][ T6702] netlink: 236 bytes leftover after parsing attributes in process `syz.4.8484'. [ 889.395820][ T6704] netlink: 'syz.3.8485': attribute type 1 has an invalid length. [ 889.420563][ T6704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.433624][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.471411][ T6711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8486'. [ 889.602127][ T6714] xt_hashlimit: size too large, truncated to 1048576 [ 889.964001][ T6731] bond0: option fail_over_mac: invalid value (127) [ 889.988467][ T6731] bond0 (unregistering): Released all slaves [ 890.100206][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8492'. [ 890.118430][ T6750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8493'. [ 890.144872][ T6752] macvtap1: entered promiscuous mode [ 890.159177][ T6752] veth1_to_hsr: entered promiscuous mode [ 890.171876][ T6752] macvtap1: entered allmulticast mode [ 890.185167][ T6752] veth1_to_hsr: entered allmulticast mode [ 890.516771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.588054][ T6775] netlink: 'syz.4.8498': attribute type 1 has an invalid length. [ 890.614776][ T6776] netlink: 'syz.4.8498': attribute type 1 has an invalid length. [ 890.749492][ T6780] tipc: Enabled bearer , priority 0 [ 890.757134][ T6780] syzkaller0: entered promiscuous mode [ 890.766724][ T6780] syzkaller0: entered allmulticast mode [ 890.779420][ T6780] tipc: Resetting bearer [ 890.797631][ T6779] tipc: Resetting bearer [ 890.834635][ T6779] tipc: Disabling bearer [ 890.860989][ T6797] dummy0: entered promiscuous mode [ 890.872987][ T6792] syzkaller0: entered promiscuous mode [ 890.879645][ T6792] syzkaller0: entered allmulticast mode [ 890.887998][ T6796] dummy0: left promiscuous mode [ 890.966851][ T6810] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 891.017930][ T6808] netlink: 'syz.1.8508': attribute type 1 has an invalid length. [ 891.031533][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8508'. [ 891.154461][ T6825] netlink: 332 bytes leftover after parsing attributes in process `syz.4.8510'. [ 891.164024][ T6825] netlink: 'syz.4.8510': attribute type 9 has an invalid length. [ 891.178047][ T6825] netlink: 'syz.4.8510': attribute type 10 has an invalid length. [ 891.216126][ T6828] syzkaller1: entered promiscuous mode [ 891.266902][ T6828] syzkaller1: entered allmulticast mode [ 891.281827][ T6831] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.8512'. [ 891.291226][ T6832] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.8512'. [ 891.326456][ T6831] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 891.346865][ T6832] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 891.361999][ T6828] dummy0: entered promiscuous mode [ 891.460878][ T6832] dummy0: left promiscuous mode [ 891.520298][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8516'. [ 891.546524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.600983][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8520'. [ 891.669437][ T6858] ipvlan2: entered promiscuous mode [ 891.835576][ T29] audit: type=1800 audit(1771142918.761:19): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8523" name="memory.events" dev="tmpfs" ino=2322 res=0 errno=0 [ 891.904314][ T6863] netlink: 'syz.0.8524': attribute type 1 has an invalid length. [ 892.281994][ T6882] lo speed is unknown, defaulting to 1000 [ 892.313854][ T6891] veth1: entered promiscuous mode [ 892.337806][ T6891] team0: entered promiscuous mode [ 892.349477][ T6891] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 892.366813][ T6891] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 892.393393][ T6897] ip6_vti0: Caught tx_queue_len zero misconfig [ 892.397438][ T6882] lo speed is unknown, defaulting to 1000 [ 892.597200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.606167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.614631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.623100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.631539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.640018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.648472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.441773][ T6937] netlink: 'syz.4.8546': attribute type 2 has an invalid length. [ 893.514053][ T6937] : entered promiscuous mode [ 894.404905][ T6975] __nla_validate_parse: 14 callbacks suppressed [ 894.404926][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8556'. [ 894.452722][ T6978] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8557'. [ 894.613548][ T6987] netlink: 'syz.4.8560': attribute type 1 has an invalid length. [ 894.631805][ T6985] tipc: Enabled bearer , priority 0 [ 894.660945][ T6984] tipc: Disabling bearer [ 894.787388][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8558'. [ 894.973557][ T7009] tap0: tun_chr_ioctl cmd 1074025681 [ 895.048663][ T7003] lo speed is unknown, defaulting to 1000 [ 895.088431][ T7003] lo speed is unknown, defaulting to 1000 [ 895.303983][ T7025] set match dimension is over the limit! [ 895.317505][ T7023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8570'. [ 895.341869][ T7024] syzkaller0: entered promiscuous mode [ 895.359146][ T7024] syzkaller0: entered allmulticast mode [ 895.445364][ T7031] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8572'. [ 896.308017][ T7051] ip6gretap1: entered promiscuous mode [ 896.325520][ T7051] ip6gretap1: entered allmulticast mode [ 896.356222][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8581'. [ 896.405614][ T7052] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 896.445746][ T7052] bond9 (unregistering): Released all slaves [ 896.484266][ T7062] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8583'. [ 896.656467][ T7066] x_tables: duplicate underflow at hook 2 [ 896.755734][ T7070] tipc: Enabling of bearer rejected, failed to enable media [ 896.764444][ T7073] netlink: 'syz.4.8587': attribute type 1 has an invalid length. [ 896.864020][ T7073] bond0: entered promiscuous mode [ 896.879512][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.928007][ T7073] bond0: (slave bridge3): making interface the new active one [ 896.944462][ T7073] bridge3: entered promiscuous mode [ 896.963944][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8587'. [ 897.009257][ T7073] bridge3: left promiscuous mode [ 897.368994][ T7111] xt_bpf: check failed: parse error [ 897.442921][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8595'. [ 897.488858][ T7110] hsr_slave_1 (unregistering): left promiscuous mode [ 897.681582][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8603'. [ 897.697676][ T7136] lo: Caught tx_queue_len zero misconfig [ 897.968736][ T7153] sctp: [Deprecated]: syz.3.8608 (pid 7153) Use of int in maxseg socket option. [ 897.968736][ T7153] Use struct sctp_assoc_value instead [ 898.075049][ T7155] vlan3: entered promiscuous mode [ 898.103767][ T7155] netlink: 'syz.3.8609': attribute type 2 has an invalid length. [ 898.119702][ T7155] net_ratelimit: 73 callbacks suppressed [ 898.119725][ T7155] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 898.287424][ T7159] netlink: 'syz.3.8611': attribute type 1 has an invalid length. [ 898.347045][ T11] block nbd6: Possible stuck request ffff8880266a8000: control (read@0,1024B). Runtime 90 seconds [ 898.357781][ T2048] block nbd5: Possible stuck request ffff888026620000: control (read@0,1024B). Runtime 90 seconds [ 898.368544][ T11] block nbd6: Possible stuck request ffff8880266a8200: control (read@1024,1024B). Runtime 90 seconds [ 898.379544][ T2048] block nbd5: Possible stuck request ffff888026620200: control (read@1024,1024B). Runtime 90 seconds [ 898.390777][ T2048] block nbd5: Possible stuck request ffff888026620400: control (read@2048,1024B). Runtime 90 seconds [ 898.401928][ T11] block nbd6: Possible stuck request ffff8880266a8400: control (read@2048,1024B). Runtime 90 seconds [ 898.412947][ T2048] block nbd5: Possible stuck request ffff888026620600: control (read@3072,1024B). Runtime 90 seconds [ 898.423944][ T11] block nbd6: Possible stuck request ffff8880266a8600: control (read@3072,1024B). Runtime 90 seconds [ 898.495763][ T7164] netlink: 'syz.4.8613': attribute type 4 has an invalid length. [ 898.613102][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.623267][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.634362][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.644727][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.653815][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.667865][ T7169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.716485][ T7170] netlink: 'syz.4.8613': attribute type 39 has an invalid length. [ 898.749393][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.930933][ T7184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.419807][ T7211] __nla_validate_parse: 6 callbacks suppressed [ 899.419827][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8624'. [ 899.654927][ T7217] lo speed is unknown, defaulting to 1000 [ 899.683133][ T7217] lo speed is unknown, defaulting to 1000 [ 900.125878][ T7218] lo speed is unknown, defaulting to 1000 [ 900.187940][ T7249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8632'. [ 900.197119][ T7218] lo speed is unknown, defaulting to 1000 [ 900.389479][ T7256] gretap0: entered allmulticast mode [ 900.413759][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8637'. [ 900.416685][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8639'. [ 900.467494][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8638'. [ 900.497065][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8638'. [ 900.505969][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8638'. [ 900.687151][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8640'. [ 900.696152][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8640'. [ 900.702533][ T7272] xt_CT: No such helper "snmp_trap" [ 900.851390][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8645'. [ 901.069950][ T7279] ip6gretap3: entered promiscuous mode [ 901.075656][ T7279] ip6gretap3: entered allmulticast mode [ 901.135092][ T7283] lo speed is unknown, defaulting to 1000 [ 901.192637][ T7283] lo speed is unknown, defaulting to 1000 [ 901.892327][ T7332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 901.908652][ T7337] netlink: 'syz.2.8658': attribute type 1 has an invalid length. [ 901.932274][ T7323] tunl0: Caught tx_queue_len zero misconfig [ 902.056458][ T7347] netlink: 'syz.4.8659': attribute type 7 has an invalid length. [ 902.084797][ T7337] bond5: entered promiscuous mode [ 902.086616][ T7348] netlink: 'syz.4.8659': attribute type 11 has an invalid length. [ 902.110701][ T7337] 8021q: adding VLAN 0 to HW filter on device bond5 [ 902.171901][ T7344] lo speed is unknown, defaulting to 1000 [ 902.247778][ T7344] lo speed is unknown, defaulting to 1000 [ 903.336577][ T7380] bridge_slave_0: left allmulticast mode [ 903.357416][ T7380] bridge_slave_0: left promiscuous mode [ 903.367360][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.597513][ T7375] lo speed is unknown, defaulting to 1000 [ 903.628065][ T7375] lo speed is unknown, defaulting to 1000 [ 903.665323][ T7377] lo speed is unknown, defaulting to 1000 [ 903.715091][ T7400] openvswitch: netlink: Missing key (keys=40, expected=80) [ 903.934135][ T7410] syzkaller0: entered promiscuous mode [ 903.951570][ T7410] syzkaller0: entered allmulticast mode [ 904.053353][ T7377] lo speed is unknown, defaulting to 1000 [ 904.058748][ T7419] tipc: Enabled bearer , priority 0 [ 904.075725][ T7419] syzkaller0: entered promiscuous mode [ 904.102846][ T7419] syzkaller0: entered allmulticast mode [ 904.290511][ T7419] tipc: Resetting bearer [ 904.323036][ T7429] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 904.366461][ T7418] tipc: Resetting bearer [ 904.419262][ T7418] tipc: Disabling bearer [ 904.583588][ T7442] netlink: 'syz.1.8682': attribute type 8 has an invalid length. [ 904.680837][ T7447] __nla_validate_parse: 16 callbacks suppressed [ 904.680858][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8686'. [ 904.756561][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8686'. [ 904.808012][ T7448] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8684'. [ 904.817588][ T7448] netlink: 35 bytes leftover after parsing attributes in process `syz.4.8684'. [ 904.835981][ T7447] tap0: tun_chr_ioctl cmd 1074812118 [ 904.836031][ T7444] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.8684'. [ 904.851574][ T7447] tap0: tun_chr_ioctl cmd 21731 [ 905.149560][ T7452] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.8688'. [ 905.170578][ T7452] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.8688'. [ 905.251864][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.263556][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.272618][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.285595][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.294838][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 905.388638][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.408648][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.416940][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.439960][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.457556][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 905.518060][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8690'. [ 905.554236][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8691'. [ 905.649753][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8690'. [ 905.715392][ T7453] lo speed is unknown, defaulting to 1000 [ 905.755702][ T7453] lo speed is unknown, defaulting to 1000 [ 905.848291][ T7477] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.923167][ T7477] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.959680][ T7487] netlink: 'syz.0.8697': attribute type 1 has an invalid length. [ 906.086216][ T7495] x_tables: unsorted underflow at hook 3 [ 906.092206][ T7494] x_tables: unsorted underflow at hook 3 [ 906.098865][ T7490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 906.102552][ T7490] bond2: (slave bond3): making interface the new active one [ 906.116055][ T7490] bond2: (slave bond3): Enslaving as an active interface with an up link [ 906.132339][ T7477] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.155336][ T7487] bond2: (slave gretap0): Enslaving as a backup interface with an up link [ 906.191621][ T7490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 906.205091][ T7477] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.278244][T27403] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 906.313686][T27406] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 906.568587][T27402] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 906.585928][T27402] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 907.010434][T27400] bond1 (unregistering): Released all slaves [ 907.022928][T27400] bond2 (unregistering): Released all slaves [ 907.035667][T27400] bond3 (unregistering): Released all slaves [ 907.054344][T27400] bond4 (unregistering): Released all slaves [ 907.067415][T27400] bond5 (unregistering): Released all slaves [ 907.084062][T27400] bond6 (unregistering): Released all slaves [ 907.098013][T27400] bond7 (unregistering): Released all slaves [ 907.112156][T27400] bond8 (unregistering): Released all slaves [ 907.130909][T27400] bond9 (unregistering): Released all slaves [ 907.151362][T27400] bond0 (unregistering): Released all slaves [ 907.207228][T11616] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.288281][T11616] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.435850][T27400] : left promiscuous mode [ 907.945747][ T5834] Bluetooth: hci4: command tx timeout [ 907.999931][T27402] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.023781][T27402] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.115988][T27400] : left promiscuous mode [ 908.153032][ T7532] netlink: 'syz.0.8707': attribute type 1 has an invalid length. [ 908.224051][T27400] tipc: Disabling bearer [ 908.251014][T27400] tipc: Left network mode [ 908.271173][ T7453] chnl_net:caif_netlink_parms(): no params data found [ 908.662197][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.682397][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.702866][ T7453] bridge_slave_0: entered allmulticast mode [ 908.734400][ T7453] bridge_slave_0: entered promiscuous mode [ 908.848745][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.871851][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.899136][ T7453] bridge_slave_1: entered allmulticast mode [ 908.920273][ T7453] bridge_slave_1: entered promiscuous mode [ 909.110617][ T7453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.151498][ T7453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.319944][ T7453] team0: Port device team_slave_0 added [ 909.344650][ T7453] team0: Port device team_slave_1 added [ 909.507044][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.541081][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.661577][ T7453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.777060][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.784044][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.874239][ T7453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.013963][T27400] hsr_slave_0: left promiscuous mode [ 910.029012][ T5839] Bluetooth: hci4: command tx timeout [ 910.063553][T27400] hsr_slave_1: left promiscuous mode [ 910.919706][T27405] smc: removing ib device sqz0 [ 910.933748][T27403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.936634][ T7617] __nla_validate_parse: 3 callbacks suppressed [ 910.936653][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 910.947927][T27403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.993296][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.002827][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.032269][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.044560][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.055001][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.064523][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.085296][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.116429][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.135250][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8725'. [ 911.658767][ T7628] syzkaller0: entered promiscuous mode [ 911.664279][ T7628] syzkaller0: entered allmulticast mode [ 912.117914][ T5839] Bluetooth: hci4: command tx timeout [ 914.195759][ T5839] Bluetooth: hci4: command tx timeout [ 915.063677][ T7668] rdma_rxe: rxe_newlink: failed to add syz_tun [ 915.529236][ T7453] hsr_slave_0: entered promiscuous mode [ 915.548875][ T7453] hsr_slave_1: entered promiscuous mode [ 915.704441][ T7672] ip6t_REJECT: ECHOREPLY is not supported [ 916.052702][ T7453] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 916.204605][ T7690] __nla_validate_parse: 20 callbacks suppressed [ 916.204625][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8738'. [ 916.224606][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.250753][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.266838][ C1] ------------[ cut here ]------------ [ 916.272901][ C1] ODEBUG: free active (active state 0) object: ffff888035027090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 916.285844][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.0.8738/7690 [ 916.296511][ C1] Modules linked in: [ 916.296526][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.301289][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.309017][ C1] CPU: 1 UID: 0 PID: 7690 Comm: syz.0.8738 Not tainted syzkaller #0 PREEMPT(full) [ 916.326445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.336540][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 916.342908][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 916.362597][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 916.368729][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4f8fb0 RCX: 0000000000000000 [ 916.376765][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 916.384770][ C1] RBP: ffffffff8bcf4a00 R08: ffff888035027090 R09: ffffffff8bcf5d20 [ 916.392840][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888035027200 [ 916.400868][ C1] R13: ffffffff901b4570 R14: ffff888035027000 R15: ffff888035027090 [ 916.408930][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 916.418001][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.424605][ C1] CR2: 00007f2f9c327368 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 916.427012][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.432644][ C1] Call Trace: [ 916.444009][ C1] [ 916.446900][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 916.452560][ C1] kfree+0x13a/0x610 [ 916.456502][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 916.461640][ C1] rose_timer_expiry+0x4cb/0x600 [ 916.466642][ C1] ? call_timer_fn+0x178/0x5a0 [ 916.471491][ C1] call_timer_fn+0x192/0x5a0 [ 916.476099][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 916.481640][ C1] ? call_timer_fn+0xd4/0x5a0 [ 916.486363][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 916.491516][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.496776][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 916.502267][ C1] __run_timer_base+0x652/0x8b0 [ 916.507270][ C1] ? ktime_get+0x45/0x200 [ 916.511640][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 916.517087][ C1] ? sched_clock_cpu+0x74/0x440 [ 916.521003][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.521953][ C1] run_timer_softirq+0xb7/0x170 [ 916.534910][ C1] handle_softirqs+0x22a/0x7c0 [ 916.539740][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 916.544535][ C1] __irq_exit_rcu+0x5f/0x150 [ 916.549184][ C1] irq_exit_rcu+0x9/0x30 [ 916.553447][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 916.559153][ C1] [ 916.562098][ C1] [ 916.565038][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 916.571072][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x82/0x90 [ 916.575288][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.577460][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 09 ea dc 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 916.577484][ C1] RSP: 0018:ffffc90002ee7400 EFLAGS: 00000293 [ 916.610529][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.611406][ C1] RAX: ffffffff82173363 RBX: dffffc0000000000 RCX: 0000000000000000 [ 916.627436][ C1] RDX: ffff888049c1bc80 RSI: 00000000000001fd RDI: 00000000000000f0 [ 916.635436][ C1] RBP: 00000000000000f0 R08: ffffea00010e3e73 R09: 1ffffd400021c7ce [ 916.643477][ C1] R10: dffffc0000000000 R11: fffff9400021c7cf R12: ffff888055c6600c [ 916.651500][ C1] R13: 00000000000001fd R14: 00000000000001fd R15: ffffc90002ee7900 [ 916.659542][ C1] ? __tlb_remove_folio_pages_size+0x233/0x5a0 [ 916.665734][ C1] __tlb_remove_folio_pages_size+0x233/0x5a0 [ 916.671790][ C1] unmap_page_range+0x1f1b/0x4030 [ 916.676915][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 916.682330][ C1] ? mas_find+0xb0e/0xd30 [ 916.686732][ C1] ? unmap_vmas+0x157/0x5c0 [ 916.691264][ C1] unmap_vmas+0x3c0/0x5c0 [ 916.695640][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 916.700588][ C1] exit_mmap+0x251/0xb30 [ 916.703454][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.704853][ C1] ? uprobe_clear_state+0x20f/0x290 [ 916.704893][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 916.723020][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 916.728739][ C1] ? __pfx_exit_aio+0x10/0x10 [ 916.733454][ C1] ? uprobe_clear_state+0x27c/0x290 [ 916.738718][ C1] __mmput+0x118/0x430 [ 916.742814][ C1] exit_mm+0x168/0x220 [ 916.746958][ C1] do_exit+0x62e/0x2310 [ 916.751150][ C1] ? cgroup1_freezing+0x20/0x350 [ 916.756108][ C1] ? __pfx_do_exit+0x10/0x10 [ 916.760772][ C1] ? cgroup1_freezing+0x20/0x350 [ 916.765724][ C1] ? cgroup1_freezing+0x20/0x350 [ 916.770748][ C1] do_group_exit+0x21b/0x2d0 [ 916.775361][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.780642][ C1] get_signal+0x1284/0x1330 [ 916.785201][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 916.790818][ C1] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 916.795973][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 916.802215][ C1] exit_to_user_mode_loop+0x86/0x480 [ 916.807559][ C1] ? rcu_is_watching+0x15/0xb0 [ 916.812352][ C1] do_syscall_64+0x32d/0xf80 [ 916.817024][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.823111][ C1] ? trace_irq_disable+0x37/0x100 [ 916.828207][ C1] ? clear_bhb_loop+0x40/0x90 [ 916.828547][ T7702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.832905][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.832930][ C1] RIP: 0033:0x7f143df9bf79 [ 916.832949][ C1] Code: Unable to access opcode bytes at 0x7f143df9bf4f. [ 916.832961][ C1] RSP: 002b:00007f143ef38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.866929][ C1] RAX: 000000000000002c RBX: 00007f143e215fa0 RCX: 00007f143df9bf79 [ 916.874918][ C1] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 916.883312][ C1] RBP: 00007f143e0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 916.892208][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.900691][ C1] R13: 00007f143e216038 R14: 00007f143e215fa0 R15: 00007ffd811431f8 [ 916.908734][ C1] [ 916.911790][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 916.919082][ C1] CPU: 1 UID: 0 PID: 7690 Comm: syz.0.8738 Not tainted syzkaller #0 PREEMPT(full) [ 916.928377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.938446][ C1] Call Trace: [ 916.941740][ C1] [ 916.944578][ C1] vpanic+0x1e0/0x670 [ 916.948561][ C1] panic+0xc5/0xd0 [ 916.952276][ C1] ? __pfx_panic+0x10/0x10 [ 916.956734][ C1] __warn+0x315/0x4a0 [ 916.960718][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 916.966446][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 916.972507][ C1] __report_bug+0x29a/0x540 [ 916.977005][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 916.982980][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 916.988870][ C1] ? __pfx___report_bug+0x10/0x10 [ 916.993894][ C1] ? kfree+0x1c1/0x610 [ 916.997954][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 917.003061][ C1] ? call_timer_fn+0x192/0x5a0 [ 917.007816][ C1] ? __run_timer_base+0x652/0x8b0 [ 917.012827][ C1] ? run_timer_softirq+0xb7/0x170 [ 917.017838][ C1] ? handle_softirqs+0x22a/0x7c0 [ 917.022779][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 917.027533][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 917.033333][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.039475][ C1] ? __sanitizer_cov_trace_cmp4+0x82/0x90 [ 917.045188][ C1] ? __tlb_remove_folio_pages_size+0x233/0x5a0 [ 917.051334][ C1] ? unmap_page_range+0x1f1b/0x4030 [ 917.056532][ C1] report_bug_entry+0x19a/0x290 [ 917.061374][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 917.067101][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 917.072814][ C1] handle_bug+0xca/0x200 [ 917.077062][ C1] exc_invalid_op+0x1a/0x50 [ 917.081560][ C1] asm_exc_invalid_op+0x1a/0x20 [ 917.086404][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 917.092727][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 917.112326][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 917.118388][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4f8fb0 RCX: 0000000000000000 [ 917.126349][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 917.134313][ C1] RBP: ffffffff8bcf4a00 R08: ffff888035027090 R09: ffffffff8bcf5d20 [ 917.142277][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888035027200 [ 917.150325][ C1] R13: ffffffff901b4570 R14: ffff888035027000 R15: ffff888035027090 [ 917.158293][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 917.163744][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 917.169388][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 917.175021][ C1] kfree+0x13a/0x610 [ 917.178905][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 917.184015][ C1] rose_timer_expiry+0x4cb/0x600 [ 917.188946][ C1] ? call_timer_fn+0x178/0x5a0 [ 917.193701][ C1] call_timer_fn+0x192/0x5a0 [ 917.198281][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 917.203738][ C1] ? call_timer_fn+0xd4/0x5a0 [ 917.208498][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 917.213603][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.218793][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 917.224250][ C1] __run_timer_base+0x652/0x8b0 [ 917.229270][ C1] ? ktime_get+0x45/0x200 [ 917.233602][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 917.238966][ C1] ? sched_clock_cpu+0x74/0x440 [ 917.243813][ C1] run_timer_softirq+0xb7/0x170 [ 917.248653][ C1] handle_softirqs+0x22a/0x7c0 [ 917.253409][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 917.258168][ C1] __irq_exit_rcu+0x5f/0x150 [ 917.262749][ C1] irq_exit_rcu+0x9/0x30 [ 917.266986][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 917.272610][ C1] [ 917.275551][ C1] [ 917.278561][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.284552][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x82/0x90 [ 917.290888][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 09 ea dc 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 917.310489][ C1] RSP: 0018:ffffc90002ee7400 EFLAGS: 00000293 [ 917.316552][ C1] RAX: ffffffff82173363 RBX: dffffc0000000000 RCX: 0000000000000000 [ 917.324521][ C1] RDX: ffff888049c1bc80 RSI: 00000000000001fd RDI: 00000000000000f0 [ 917.332482][ C1] RBP: 00000000000000f0 R08: ffffea00010e3e73 R09: 1ffffd400021c7ce [ 917.340450][ C1] R10: dffffc0000000000 R11: fffff9400021c7cf R12: ffff888055c6600c [ 917.348412][ C1] R13: 00000000000001fd R14: 00000000000001fd R15: ffffc90002ee7900 [ 917.356380][ C1] ? __tlb_remove_folio_pages_size+0x233/0x5a0 [ 917.362540][ C1] __tlb_remove_folio_pages_size+0x233/0x5a0 [ 917.368522][ C1] unmap_page_range+0x1f1b/0x4030 [ 917.373579][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 917.378950][ C1] ? mas_find+0xb0e/0xd30 [ 917.383315][ C1] ? unmap_vmas+0x157/0x5c0 [ 917.387816][ C1] unmap_vmas+0x3c0/0x5c0 [ 917.392149][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 917.397009][ C1] exit_mmap+0x251/0xb30 [ 917.401242][ C1] ? uprobe_clear_state+0x20f/0x290 [ 917.406439][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 917.411195][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 917.416829][ C1] ? __pfx_exit_aio+0x10/0x10 [ 917.421508][ C1] ? uprobe_clear_state+0x27c/0x290 [ 917.426704][ C1] __mmput+0x118/0x430 [ 917.430767][ C1] exit_mm+0x168/0x220 [ 917.434832][ C1] do_exit+0x62e/0x2310 [ 917.438986][ C1] ? cgroup1_freezing+0x20/0x350 [ 917.443914][ C1] ? __pfx_do_exit+0x10/0x10 [ 917.448514][ C1] ? cgroup1_freezing+0x20/0x350 [ 917.453443][ C1] ? cgroup1_freezing+0x20/0x350 [ 917.458375][ C1] do_group_exit+0x21b/0x2d0 [ 917.462963][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.468157][ C1] get_signal+0x1284/0x1330 [ 917.472665][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 917.478202][ C1] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 917.483317][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 917.489477][ C1] exit_to_user_mode_loop+0x86/0x480 [ 917.494844][ C1] ? rcu_is_watching+0x15/0xb0 [ 917.499600][ C1] do_syscall_64+0x32d/0xf80 [ 917.504187][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.510246][ C1] ? trace_irq_disable+0x37/0x100 [ 917.515265][ C1] ? clear_bhb_loop+0x40/0x90 [ 917.519935][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.525815][ C1] RIP: 0033:0x7f143df9bf79 [ 917.530219][ C1] Code: Unable to access opcode bytes at 0x7f143df9bf4f. [ 917.537224][ C1] RSP: 002b:00007f143ef38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.545633][ C1] RAX: 000000000000002c RBX: 00007f143e215fa0 RCX: 00007f143df9bf79 [ 917.553600][ C1] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 917.561564][ C1] RBP: 00007f143e0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 917.569550][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.577514][ C1] R13: 00007f143e216038 R14: 00007f143e215fa0 R15: 00007ffd811431f8 [ 917.585497][ C1] [ 917.588864][ C1] Kernel Offset: disabled [ 917.593176][ C1] Rebooting in 86400 seconds..