last executing test programs: 19.16321295s ago: executing program 2 (id=1710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1d}, {&(0x7f0000000400)='gH', 0x2}], 0x2}, 0x40080) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bind$inet6(0xffffffffffffffff, 0x0, 0x1f) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x2, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x103000, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98980000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 18.647910393s ago: executing program 0 (id=1715): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x19, &(0x7f0000001fc0)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) sendto$unix(r1, 0x0, 0x803e, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x1, 0x1, 0x3, 0x2, 0x0, 0x4}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000140)="0fe5369b990ab81a87e2af04c7e0e63a782af4c0412db77002c0") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)={[{0x2b, 'cpuset'}]}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="6cc2de9e7a63a1ad56b6c5820fae9d6dcd", 0x11) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376209e7c58a5af9809ca096afdba128280ffce04a8a9b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e8398ed4336a6e2884e7cb51726b360fbb37b4fe035bbb095873048fdaf7feb971cff41fcd557fdaa87e2b7c1d5abe96be5920b5dca912974277631ec6909b7d1bc092b14a64057283584cb86cd0c5ecb462805004eda7003a760ce6cdd58d06e9386af739b0e71a2f78a06cf64624151492b066d531713376e110a7591b90d01950964a49dd2615d8864cfacbc1298b2c9e8dc2e66ea03bdebe4b8060025bfa9057aba8278351898f7f847f2516f8ca52c78", 0xf8}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 18.14417537s ago: executing program 0 (id=1718): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x50}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', r4, 0x20, 0x7800, 0x9, 0x33, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x2, [{@multicast1, 0x32f}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x51, 0x3, 0x8, [{@empty, 0x1c00}, {@loopback, 0x9}, {@loopback, 0x7ff}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) socket$caif_stream(0x25, 0x1, 0x4) sendmmsg$inet6(r5, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040001) sendmsg$sock(r5, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x80, 0x0}, 0x20008001) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x800, 0xa}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x45c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_VFINFO_LIST={0x3ec, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf1, 0xc}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @remote}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xaf5, 0x61e, 0x7ff, 0x8100}}, {0x14, 0x1, {0x8, 0xaba, 0x2, 0x8100}}, {0x14, 0x1, {0xfff, 0xdcb, 0x1, 0x8100}}, {0x14, 0x1, {0x4, 0x250, 0x9, 0x8100}}, {0x14, 0x1, {0x6, 0x85a, 0x0, 0x8100}}, {0x14, 0x1, {0x36f, 0xd5a, 0xd, 0x88a8}}]}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x10000, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x8}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0xaee, 0xb6, 0x88a8}}, {0x14, 0x1, {0x56, 0x124, 0xe, 0x88a8}}, {0x14, 0x1, {0x0, 0x835, 0x0, 0x8100}}, {0x14, 0x1, {0x4, 0xd4d, 0x7fffffff, 0x8100}}, {0x14, 0x1, {0xc, 0xf23, 0x9, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x9}}]}, {0x128, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x472, 0xb, 0x8100}}, {0x14, 0x1, {0x4, 0x4ef, 0x9, 0x8100}}, {0x14, 0x1, {0x19f, 0xeac, 0x7, 0x8100}}, {0x14, 0x1, {0xe, 0x57c, 0x2, 0x8100}}, {0x14, 0x1, {0x6, 0x6fb, 0x8, 0x88a8}}, {0x14, 0x1, {0xa, 0xdd2, 0xc, 0x88a8}}, {0x14, 0x1, {0x1, 0x6c1, 0x7, 0x88a8}}, {0x14, 0x1, {0xf06, 0xef6, 0xb4}}, {0x14, 0x1, {0x6, 0x6de, 0x3ff, 0x8100}}, {0x14, 0x1, {0x3, 0xfa, 0x1, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7fffffff, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa48, 0x41b}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x394}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x166dd387}}, @IFLA_VF_RATE={0x10, 0x6, {0xd, 0x36, 0x3}}]}, {0x160, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x65e9, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x100, 0xc}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1000, 0x43}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0xfac, 0x7, 0x8100}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xf}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x10, 0xd3a, 0xff, 0x88a8}}, {0x14, 0x1, {0x9, 0xf0a, 0x0, 0x8100}}, {0x14, 0x1, {0xba, 0x12a, 0x6f2774e5, 0x88a8}}, {0x14, 0x1, {0x2, 0xd93, 0x7f, 0x8100}}, {0x14, 0x1, {0x7f, 0x668, 0x2, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x75c, 0x101, 0x8100}}, {0x14, 0x1, {0xffffffff, 0x828, 0x5, 0x8100}}, {0x14, 0x1, {0x2, 0x7a5, 0x3, 0xc554}}, {0x14, 0x1, {0x2, 0x87, 0x1, 0x8100}}, {0x14, 0x1, {0xbe, 0xd29, 0x4ca2, 0x8100}}, {0x14, 0x1, {0x3, 0x85a, 0x7, 0x8100}}]}]}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b053127449e509ba48c2185a4ea44cd5"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x6, 0x2, '*\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bc49ceb4780d31961519a189911489ec"}]}, @IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x45c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 18.143303391s ago: executing program 2 (id=1719): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x977, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001160000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x9c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r6, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r6, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000ff"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a8", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) bind$llc(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000180)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1}, {0x2, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x18) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x80010, r9, 0x822b1000) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000500)={0x0, &(0x7f00000004c0)}, 0x10) 17.600437873s ago: executing program 3 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x2c, 0x0, 0x7fffffff) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2, 0x92a, 0x3, 0x8, 0x6, 0x7]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r9}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000180)={0x0, @aes256, 0x0, @desc4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x26, 0x1000c001, 0x0, 0x0) close(0x3) 17.538044112s ago: executing program 4 (id=1723): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x51e6c}, [@IFLA_WEIGHT={0x8, 0xf, 0xfffffffa}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x3c}}, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000140)=""/242, &(0x7f0000000040)=0xf2) 17.267536663s ago: executing program 4 (id=1725): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x70bd28, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x20}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000300)={0x7, 0x3, 0x9, 0x9, 0x3, 0x80, 0x40}, 0xc) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1d, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5dd36fc5, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 17.240605732s ago: executing program 1 (id=1726): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) (rerun: 32) write(r1, &(0x7f00000006c0)="73fa5a5d08d0c025b3a543ab97b07219ce22a9acb60fe6f5af456b2f7191846bb571d7ec2aa937e1aff9f42ae4018cea206f22be826d9ef060099797809eab2b98422f6ad97da5babbb9c519ef180dbb2b0a57fc3453aa4860ccbf3b05d40818290125e0256c74f30e47a01c9a78375ece0a39f2f203551258de15d53e0956acfd6bb11fe916d9d3ebea566fbdeda2fc16170813d5e89cb0e895e27483f4e997ca77bfba8ed6eb103734d223589fac2ad59519b2d5dea384bd7347bb4407df06d2a8849f87689a8d79c81f60bbcde17a9e2746cf5b622359f71c7bab93395e3c7b898f5b82f556dc7c6c3f67b4a6da3244c5bc911a94522c81a6968ee6703e3fb168073d8bb55a7d12aba31f8cb29e2bc9ce98af124967a0ffb94e7239f8983dccd847f796ec14ed5ab1572dfc8e935fcb8c9141a75b7ce6c318d38800915c6160231e2f4d50127c0feb8c13f7791417673cdeaf0e61077c9ba1743b340822cc815d4ac65bfa21d3ab99be655f7eed12f751dd456ac6a5ed748d75045612a3e761777cf67f0f1b65d907ed250d079fd37ec35e135f6119ac222b3c3b464e3a245d553706238213915d41d95e0ee01a1353d89bbdd5ee1b1a0aaff4181b14b7c89de15c0b0e8e9a84a36a8308e80595666726410406733aa88248857f4df0edaf8bc4e26edae60537f6007cb34156cf4cd542283857d4805022142c40e078eb671812fab1c093a2a004cf9ce008d9a897abfed80ae7d42808551d41d25976c59d31db0eb9b46636001e11b30210662ae948b257f0e8fb8b7c3439b230266d37892b3054ed106bb1e8c03998219ef0a9286c58acfcdb46554749589e8e3c35f78712c29ae780cf87bb22de4c0ceba621f0ee2b0a00d641efd01817c92ff6e4e9a284ce3e07eea2a855e768b85a05e3fdc4578435ff641d007b6e719f6ec3b8323715ae2d3891051bd465e8442c545309662eb5516b5aceca745d1c7cdf3316f8431578b8c02a4ae22a61aacb8f91527385d2d7d44e0f64a1f263b940c2113eb193d219462b1bdf462592d9b8436defec04c693d7b8577797eecdd974ffa82aed9ac395fcb70e42e5b885f43884e08da3c1fd31c5cf90631760134b8ae0e7e8df7b3f309e60738162a2d0747dfc9f3af163c478ab6a1bd8bf2d1d9abd463b6fa2a672d70dd9e63fd708e974a066d701a07b4ee7c16e826397328e57c77f91dc2f5a91739538b135c368f2ec772b40da60c056aa71ad30e76f86747050860584e3eec93622a1edea2e4a827044c5be8a43b52f1510e5636a886b6dbbf0b8eb62455de876b38250769a0f67fb8496e8d7d09974f45d3c9a9881b675da23793477208bc4787bac667ba2750d1b82db5d2029ef95f2bd2387cf3857b8d7af22a1353ad4fc4fcd535e2ac97afa51de4ec9b0123056302da68c348c6951ce15fe91a7144a59fd9afb3a6a08f42fa63783e0c33e40735e53d2a62a5cef677a0d5399975541a25a3dd35e2ae8bbca975473e57d4e47a18135a4d3ae29e5eb55f4cbec8dea7d28a7e78551200fb52d9a4efe9d0bbc78e89b1064ae6790f91c15b481dfc369b88e4999820125039c022a37cf583a74db59697e7c0dda3d198533bed1a20677919c6464251366e88e98277261ec306e2ca120260b9c7967638434a06b33f6136ee583032151145349a506dc8ea9948bb1b694728ec8a5bde3670689c0cbe05fe35b0fdcdd0b2153a495c2e70f2056680eb6ce7952ee564cbb8cd74b78bf47c2aebed3faacc6302420bf7031b5059ef99259314e32715ea638ec99bfa106fbe828de8469beaba809f15196fa69529a0e43ffab68f4ca05df6510ab856b9ad90754b92c1f7d1c8954be9a33099ea60c1c281877a84c38ff1d4b740b5965b297102161e8ac50831ad3bcbea39861bbd991b01100603efde80fdd8ea29af7298aa6800de4521ea7931f15ee559a950e828466e9531929e6198517e88c0b1fb738b5b30cf7caf2fe6f7c0d8d03305e0c946a3c0947ce7ffed2930629556eaed18fd6e004aff90d4b738150d7259b786cd4716256a7f18584e947e1a16c856e6bd9ef1d244bcd24c48c0dafcfdf31ca9b2ba1b68ecdbc0cc57ba7c815e548ec9404453145d96f663d1ca1cf2bd19c0a0303fcf1c3cfb95d174f9c92dbaf281d174afce1080cb39fa80b6e0d347130a779d7955d1d3cc003572d5f7fcc750f2fe07225d2bc7b58cf706d7bed819287e38bc4c99c477650a74c55e00c964a55abd4e0e11877e6ca0777017a179d52592215c4c867528e8e39840f84258bd3a12908cf23ebaeabfb9ba905dc3e83c6267bba67ca19df60b7f94903838790fca8332c64c327c027277754cfd450ae3d00f09d06805735419b9da02755676381cf1debf61193e3f0cd20a00e88c1a077540bb98d07be7c1413a774db6d9e668ca67a3cd58cffabef2af2aa8886490cd93cdea9dfb54887a3c8dafe01a693e38eb1d3d112bd3d1af2f2cf72ae093fef8846351d0230e6516be40cdfa4802504cc3dd0001671e274c7f10b726a984199b83ed2b2a3fbb2767b9b7c4466eed613bd32fc88d9bbf06cf91acb24aad1f441b3852f854981dba135cd4625bc2808c4cc0b472b4d728770412216d771759f7cc8ff5b49cd733a4ac6183c651d3a67b05cf3601efeeca7ebbb4c3ae18e01d5bb863df4c417132296179fc6a0886aedea0931c054c1bc8346feddd4829dc21eba9a9b4e3f498ddb9e69735f77711b495b07a2b288ae27e140e1911fb774e4140afbe38af67ca72293442eca08afeb16633b6e7d955f0d15a3cf32bb3a93f15bf30021b5fdc03c7653c419110c309f6fd617f8f4175e93c1405195c64a7a0f339614ecbd673b4ec685e972f0a206b433955d3617c5f3e334954a792f7f61f5574a9f44a9a47178c88a664c75f4b94b39ad1e26a9aba2c020fe439f60095216beb54488cd27298f4abe2905df47cc73e6d98aa01933cb7ac6b5109c0a63c68c53d960d70e4a273f3657299f39657304514fa5e517a646ae7b47fe65c147d42b6ed8e1046d38b35b09e3abbea368410dce4bcab51e66eae9cf9deee610331c75ec8072ecbc851d5e03fa96a62a2962aa586810456f2f216205c16970eb61f288b89bb42ab87750157970ce1b162f3c996fe7ac25ec5a1a6755cd8fdfd7cfe5ed6edd89b629e56079ec755bc87bbebe1b81589b334e1ac0e8fd9d7a3c6de0e0804dacd70896fa97b6c802dbee36eea0e272b56632d7b379ce32b7520912fe2ac755aae969efa5cdb25f48a9f2ed0bedff5be3f01a807f307124b8b559f7fd7b035712e9fccf8860eb47c3c61e9e62afe5f94c661859e0e567aa3db0f9788d510b626e20c0bd1b64b1cb32991d7cafe3eb901f1630d725bc0ab4fd483511a4feb49d098d7798baa2f825f7e27baa2736aa3e2c0bdd8c46f3a4c802fd77e34e3a354f81d0fa3b67e7c68a056b350bcd5b2439b88cb9170af7a5ce441dad7d9c9f022720686c8e3ca25badcbdaa6d6089b5939158f1548b663f70135bc09fda4311154f525a1ea036d3cfe6d6d5580603ad2d7780e4a0aeaa1e3c0eb532f4a1981dcd51bf3ea7398a79c876711dab4defc29db554e8a90452279f7aa94fba6abd2b4ed6e98f029535a9b6276e61d12c1ea412b901966fe4fb2e2562f7b642d81fc49f35b05a61741bca7c5e9d2c665279ceada6f0bdd132e1b222b99598d691971e37c0e38247f952eacec93afa19b7e4284a1c0a53885b1ff984716abc99cdda43b363064c0d4499e85941a4abd29cbef3861bb3037233a7bc3f669974284fc3df56083b5d805b6d53d62f108ddbeafc2200fda22ea2e06e2ad7b9ba27598d259affd9a909a043f4a2efcf8e45612f0a0f051cd067f12d4eb1ea2ab319beeab330a311a19fc4dfb126ddbadf360713eb2ff5c1faa4307d4ec3ddaed537d899cd526534a65cbcf2849a4de56917e59adc4d945e660631994faac5ef0d8fc3ba667b4c5907f0701e15b9ce9c5c5aa2ae244419c9a94844b43bbb069f156beecf7ae591eb546424c5ec99f58b1f7f723eb9c7ea18f8f53c0d82ab9453f263fa746a8ea96b177a2d8abe5e4250788907c0afbe499e2400fd7f96461633e9dc1a0c646972f8a2995dd52645ee0f10999d48addff1e274be54005bbc23d497442bba4cf474b4bb8ffc08426c386bd8835a434e13741c79c0eb8ea1d7f7a12ea806b0fbb248f309bdf0592b8aedf15b81e247cbeeace14cb67c0c149ff2c442df6fa10a53df9df459e3ab5cd10158526dbc3245572373cf8a642419fda70d924d7afab7302802d19e5abee9a774345225f4be5c00fdfdf037dd6c7cd17e9fb040f1af8afebfaad52ef9fbbf0a7783897af05d7ffa0c954a6c8be65d95cd1a6cfc24f5cf49936c13b7e88b880b91dd747d71e27ca86d12d00512ded42898bace14111a5c87299957903ec6874b1215619da1ea36f8340e53b08e7fa24dc8eb9022f3b4fbee95231d36a633194c6d84a5baf828a07722748f128e59035ba8d5c56361bd1d3d05b24cd6226fcad80ab0f10d96a588fa9b65629cc2edba6515ce04bf14e16185d4679eb1ca4e79609132ab486ffad935ce535682091052affc58bdf55fbc9b7f41a32d4a0b15e46de1a760257c2ea4806f9291668d9b578c479adc7abd80119b5f6ec15fd5d187f01cc78b6e38671cc82dca31747ec8d9c1613e5babb32a495beaa6f7a08bc21f6c910cd5216ffbae900b9002c65c48bda9253aad4855a39e131bbe351f3c3d0d3b509c5074000015b51b8e105425275f65aa77155d173f44e1dd036f8d079769121e01d2a3aeed57f0d58faf89398e614d2a2f953558085573514bfec3de942970da254642d1180905a83e6b61ead1ee1feb72e0848a731e426286e8b3d87ae308d6c85537a22b84f745feb788e3a50b6f2c0d14fb71f1242255b2df9027814c0cb58e570c7fb4afab1408689c2150849fa48b0eb554c4644c2e70eca4673f5640bf1ce24b3dfd9c9d61b651714a66c2083288eb9befc91329352b229d6ecff79ff8202e36ce0b9395b7c92fbcee87a97fa14b6f922f242965cb377831ddaa43c7c2bcb03df38f08e63d276d73ac90620220e3dc44d27a4f8e2e0fe9f671a919cf017798698aaafab196eb38a943463ab438e2e9cb6eb7404dc7ed2c7b031edec3a9fcad0a0b634042dfcd4b3cf97468e7a1ce42c44339ec179baabea984f888e8c0b39a8582c80262189ba88aaa2c39f68b37117b4890619c71cbf643fd72dd8ffd5fe06276f71b8b55328bfb82bca38bc394dc7641feb2ae90ad8ef64f6af02d749d9ac6d5b8f96820b9635e1fc9cf14e855b14ac17ba344de313f0ecf4a9ce2144a4606ee054b96b0bd937afd7a8b0f26747053f85b2a925fae8c83e1053edcc93386823168b3be8ea7c7e58b29351d6dfcdf33283f8177fd467ae9fb67f84ab24c93df8cf869e7b911b98142204a301070a21ffa9efe4a996a71788990fe43a991195863770abf20cf666781d9255169ddf255e99c365a20583b0e7acb36478bc45112328b8f7e07f961ab33ece03ff1f5a8502444cf2af9d77dc70f08d109e486efb2bff1c9e7a79e710ae23291be236dfbe02910eb1e104dbae4b7b7578a82ebab117b5e457d2a92102b7b4cd887f702bcf791bbe8e89eb4bf8392fbceb18d96388b6399ef883e3026c884b0a81a4d09c2f2cf3b3c4aa42f8d31f2394aa93a3e988252ca714b8339a319e0bd6a885504dec07a0c47ae1da9617be5e08361c77bac228f7d42708107377038fc745ad9e", 0x1000) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079f30700000000007b0af8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 17.192164627s ago: executing program 0 (id=1727): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) syz_emit_ethernet(0x42, &(0x7f0000001680)={@local, @dev, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa010101, @remote, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0xfffd}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) accept$alg(r4, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) bind$ax25(r5, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) close(r5) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b80)={0x0, 0x80000001}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 16.948084863s ago: executing program 2 (id=1728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100047e390f1210028bd020000000000", @ANYRES32=0x0, @ANYBLOB="0180000000000000140003006e657464657673696d3000000000000008002800994a00005c001680580001800c000700810000000600000014000a000f0900000000000000000000010000002800010008000000cb105c4caa3300000000000000000000000000000000000000000000000000000c0005000b000000ef150000"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40) 16.736759002s ago: executing program 1 (id=1729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x6, 0x5, 0x5, 0x7, 0x8}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xe, 0x10}, {0xfff2, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) close(r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000140)={'wlan0\x00', @remote}) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.718145985s ago: executing program 3 (id=1730): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r1 = socket(0x22, 0x2, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x300, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.588875715s ago: executing program 3 (id=1731): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000d040000000000000000000000004d36da5a5dcf39a70c4a2494ec49def399ae4b48bc27bf743f7d390917002655ff16bb30fc0e1091fc5118476f2199620edd6a952b1ee8d8694e222797877e53d12d8037351a6d0de72284dc0e0da834ae94477964f5203b8ff40474bd301eec7c58b4301f2c0dcebb4b1a9d65ce7bff0625ea01fbfa420e0d067ee1bfbf7b247872c42d6f6f61a1b9c98525f2754c00000000000000a40000", @ANYRES32=0x0, @ANYBLOB="00a5020000000000200012800b00010065727370616e000010000280050013000100000004001200"], 0x40}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x24000804, &(0x7f0000000200)={0x11, 0xf6, r2, 0x1, 0xff}, 0x14) (async) write(r0, &(0x7f0000000100)="520003000100b8", 0x7) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x14}}, 0x40090) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') unshare(0x6a040000) (async) socketpair(0x27, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x150, r5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r10, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc004}, 0x20020841) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="08f6f4dd31b0b35162a60b4c2440dd0f002bbd7000fcdbdf253700000008004300", @ANYRES32=r9, @ANYBLOB="08005700400000000800a000000000000800a1000700000005001b010e00000008005700020000000800570001000000050019010f00000008002600df160000050018011f00000005001901080000000800a00000000000050019000200000000000000f4150000080026007b0900000800a10004000000050018012600000008002201290300000800a000010000000800a000b7540000080026006c0900000800a0000e0300000800270002000001040018013200000005001801250000000800a00001800000"], 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x20048800) 16.209470909s ago: executing program 4 (id=1732): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000002c000000040080"], 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca", 0xe}, {&(0x7f0000000540)="60827ec40346450101cd0583dcd1035dcc5068fda1f69876", 0x18}], 0x2) 16.052871787s ago: executing program 1 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xb}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4091) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 15.99407367s ago: executing program 2 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='GPL\x00', 0xd837, 0x19, &(0x7f0000000200)=""/25, 0x41100, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x7, 0xff, 0xc}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x3, 0x2, 0xc, 0x1}, {0x0, 0x2, 0xb, 0xd}, {0x0, 0x1, 0x1, 0x6}, {0x4, 0x3, 0x2, 0x8}, {0x1, 0x3, 0x4, 0x9}, {0x0, 0x4, 0xf, 0x1}, {0x1, 0x3, 0x3, 0x1}, {0x2, 0x1, 0x2, 0x4}], 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRESDEC=r0, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x48c5) 15.782862115s ago: executing program 2 (id=1735): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 15.708532996s ago: executing program 1 (id=1736): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000004000000000000000b1ad2194499cdb8540b4c4c62a02a8b6ab51160c702c1eb61da8eaf6807325391f65d31b6b671d9fd32e62583d7e1f7ce4af8075b3e80692deebd18a3145cbfedb3af13317ad7c89598d13ee12725dfa1bf1b7966d1f5090034022310bece48fe5d86cebf491bd76ebe660847c84e5a906f463e7cf6e3a1513ad6a55d129b6b9deada5895b5e2424c63100b9d30da04d484a5091d2fccffa8687a13c625dff52f2e61321dfb41f85"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509010000000000c3aaf8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.655287967s ago: executing program 0 (id=1737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000e8309390cc222897f9c8f54da67584a6f12ad325a8463014b72c2b27ed464226d9e6066c2cfa1510ee3e0937362b25ba773012602dc311e2b10d43e0c31a5cfc61391244cf9fa0fa2c3542e183c00813ae03400d5a71bf4f5b58091e79f6e6128f0dce", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf251a0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) (async) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000e8309390cc222897f9c8f54da67584a6f12ad325a8463014b72c2b27ed464226d9e6066c2cfa1510ee3e0937362b25ba773012602dc311e2b10d43e0c31a5cfc61391244cf9fa0fa2c3542e183c00813ae03400d5a71bf4f5b58091e79f6e6128f0dce", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf251a0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000400)=@bpq0, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x5, 0xa}, {0x1}, {0x5}, {0x7, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x33, 0x9, 0x16, 0x30, 0x0, 0x36, 0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1c, 0x10d2, 0x9, 0xf6, 0x1000, 0x8, 0x9cfe]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x62}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x62}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180004"], 0x2c}}, 0x0) 15.5379964s ago: executing program 4 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x1000003b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000001fc0)={0x108, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private2, 0x3}}, {0xfffffffffffffd84, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a3a8b7264c000de1fbba3391b963c9bd90983ac5a2279dd9a127c1bc"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "fccae76c2d854ee9d98120ec6958b7d50606de621be5a7db795dcf0cee3bfa886aa787d4"}}]}]}, 0x108}}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xd, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@generic={0x3, 0x0, 0x1, 0x3, 0x8}, @tail_call, @ringbuf_query]}, &(0x7f0000000580)='GPL\x00', 0x7, 0x6f, &(0x7f0000000940)=""/111, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x0, 0x4, 0x1ff}, 0x10, 0x0, r3, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x4, 0x4, 0x9, 0x6}, {0x4, 0x4, 0xd}], 0x10, 0x5}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x1c, 0x5, 0x0, 0x0, 0x5, 0xf}, [@FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004040000003000000000000000200e196d0a6000d00000000080000000300000009000000010000000200000000000010040040000900008c8bc1ebdedd633f34c359170001000085cb0a00000300000004000000020000000061006aa1380167bcd1729bcfae"], &(0x7f0000000c40)=""/64, 0x5b, 0x40, 0x0, 0x6, 0x10000}, 0x28) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, &(0x7f0000000380)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1b, 0x10, 0x100, 0x401, 0x10088, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r10}, 0x18) nanosleep(&(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3103000000f1000000de0800000008000300", @ANYRES32=r12, @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES16=r1], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@can_newroute={0x30, 0x18, 0x8, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_MOD_UID={0x8}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x0, 0x0, 0x1}, {0x2}}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0x9, 0x6, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008811}, 0x488c0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x54054}, 0x4800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000800000001f00000071028000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) r13 = socket(0x11, 0x6, 0x81) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'\x00', {0x10, 0x9, 0xac, 0xfffffffa, 0x3, 0x7, 0x1, 0x80, 0x40}, {0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb2, 0x7000000, 0x8000}}}, {{@ipv6={@remote, @private2, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) connect$qrtr(r13, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r11, 0x5000943f, &(0x7f0000000fc0)={{r8}, 0x0, 0xc, @unused=[0x5, 0x2, 0x6, 0x1], @subvolid=0x8}) bind$xdp(r13, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x11c}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r13, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x1406, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x20080040) 15.432691513s ago: executing program 1 (id=1739): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x7, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0xffffffffffffffeb, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0xe, 0x5, "62ebc0326880cca8af89"}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) write(r5, &(0x7f0000000300)="2913cbd862a9c514cc189883ba361c8fd23c633cfbcaea688213667392a6ae404cc6c364dcc2f389a7e903d90851d788063c8662341e0402549b465bc496d463b2f3971790cbc4a2b012eaefaaff1aee4d0d41410ada3ad02dee617f405d827aab9e1454d52b05fff964718ac521a6fbf135c45a9b58d24d7a5bef52e2fa29df88230671e07ba69ee88a3e2133920e5cded394494211153820383d427939ba90f82053a383ad48ba0de21ecf3d423feee9e96ec23f8bb5764d69b21b6d9b47cc5005fda88a7dd307e9f3184825909fe17667e280667a554f07082e", 0xdb) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000000)="a236628bca54b53d726f7bb6edc0f57d4ea84709937b60e38dca81fde4bb5a933b0b74fdd61ff3", 0x27) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 15.427532422s ago: executing program 0 (id=1740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xcc04}, 0x4051) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40000c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x96, @private2, 0x7}}, 0xfe01}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000480)={0x2, 0x6, 0x8000, 0x3, 0x3, 0x8, 0x7ff, 0x9c5, r6}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000004c0)={0x5e, 0x0, '\x00', [@pad1]}, 0x10) r7 = accept4(r5, 0x0, &(0x7f0000000500), 0x800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000540)={r6, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000600)=0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) r8 = socket(0x23, 0x3, 0x81) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000000740)={'broute\x00', 0x0, 0x4, 0xd, [0xffff, 0x80000000, 0x0, 0x7, 0x9], 0x8, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000700)=""/13}, &(0x7f00000007c0)=0x78) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000b00)={'gretap0\x00', &(0x7f00000009c0)={'tunl0\x00', 0x0, 0x10, 0x700, 0x40, 0xa0000, {{0x3f, 0x4, 0x2, 0x22, 0xfc, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @empty, {[@rr={0x7, 0x27, 0x49, [@private=0xa010100, @local, @private=0xa010100, @loopback, @multicast2, @remote, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3e}]}, @end, @lsrr={0x83, 0x27, 0xc1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @cipso={0x86, 0x14, 0x2, [{0x2, 0x2}, {0x0, 0x6, "9e375b7c"}, {0x6, 0x6, "c2c4d129"}]}, @lsrr={0x83, 0x13, 0xf0, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @multicast2, @broadcast]}, @rr={0x7, 0x7, 0xe, [@broadcast]}, @end, @cipso={0x86, 0x17, 0x3, [{0x6, 0x3, "9e"}, {0x6, 0xb, "2482246bb944f7b73b"}, {0x1, 0x3, '#'}]}, @timestamp={0x44, 0x2c, 0x5b, 0x0, 0x4, [0xc59, 0x8, 0x6, 0xffff, 0x2, 0xb, 0x6, 0x9, 0x401, 0x1ff]}, @timestamp_prespec={0x44, 0x24, 0xb2, 0x3, 0x3, [{@multicast1}, {@multicast2, 0x7}, {@broadcast, 0x3}, {@local, 0x101}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x12, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x8, 0x6, 0x3, 0x4, 0x363}, @call={0x85, 0x0, 0x0, 0x79}, @alu={0x7, 0x1, 0x8, 0x4, 0x0, 0xffffffffffffffc0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x7, 0x97, &(0x7f0000000900)=""/151, 0x41100, 0x4, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0x1, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000bc0)=[{0x5, 0x2, 0x10, 0x3}, {0x2, 0x4, 0x5, 0x2}, {0x3, 0x1, 0x5, 0x7}, {0x0, 0x1, 0x1}, {0x2, 0x3, 0x9, 0x4}, {0x2, 0x1, 0xd, 0xb}, {0x0, 0x2}, {0x5, 0x5, 0x6}], 0x10, 0x9}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000d00)={r3, 0x5, 0x10, 0x9}) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000d40)={'rose0\x00', 0x8}) accept4$packet(r7, 0x0, &(0x7f0000000d80), 0x400) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000dc0)={{{@in=@rand_addr=0x64010102, @in6=@private2, 0x4e24, 0xcbc1, 0x4e21, 0x2, 0xa, 0x80, 0x20, 0x4}, {0x8, 0x0, 0x101, 0x7, 0x800, 0x4, 0xffffffffffffffc0, 0x3}, {0x5, 0x1, 0x401, 0x9}, 0x4e, 0x6e6bb3, 0x1, 0x1, 0x8d3b71b75a664a54, 0x1}, {{@in6=@remote, 0x4d5, 0xe6}, 0x2, @in=@empty, 0x34ff, 0x4, 0x1, 0xf, 0x5, 0x5, 0x2}}, 0xe8) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f0000000ec0)={0x706, 0xffffffff, 0x9, 0x3}, 0x14) 15.426890629s ago: executing program 3 (id=1741): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 15.422300381s ago: executing program 2 (id=1742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a401000000000031a0003"], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}]}}}]}, 0x5c}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[], 0xe0}}], 0x1, 0x4048040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0xa, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000002c0)={r8, 0x4}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="800000000001010400000000000000000200000024000180140001807a516108000100ac1e000108000800e00000010c0002800500010000000000240002800c00028005000100000000001400000408000740000000001c0018800800024000000000080001400000000004000340000000000e3bf6b81d2901f1679e251ac46aff8b508db6b40db623f2aec72ff3b6c31f933fa55cc3"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000041400100240012800b0001006d616373030000000000000005000a0005000000060002404e22000008000500", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00032cbd7000fedbdf251100000008000400fdffffff300003801400020076657468305f766c616e000000000000080003000400000008000300030000000800030001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48c0}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r12) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r12, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20440000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) 15.349214895s ago: executing program 4 (id=1743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048010}, 0xc804) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {&(0x7f0000000300)="b03ef9880b815229ff28eac1d4f49bcad59f85c5248ea7", 0x17}], 0x3) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x1fd, 0x9, 0x1, 0x1, 0x1}, 0x8) (async) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) 15.240762127s ago: executing program 3 (id=1744): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="35890ef501b30000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0xe1, &(0x7f0000000180)=""/225, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001580)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x25) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000006c0)={0x0, 0xffff, 0x9}) 15.216880927s ago: executing program 1 (id=1745): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) connect$inet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) 15.134287488s ago: executing program 0 (id=1746): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) unshare(0x22020400) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="02000000ff0300"/16, @ANYRES64=0x77359400, @ANYRES16=r4, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYBLOB="030000e0010000000400008000020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) (async) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x4, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x4) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c804) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000000900000000000000000180"], 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0xa0, 0xff}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@local, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0xb}]}]}, 0xa0}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000580)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000440)=0x51e, 0x12) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0x0, 0xdbcb54c63ef1f42d}, 0x2}, 0x18) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x54, r10, 0xe88935736c6909db, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x24042801) (rerun: 32) 15.080504321s ago: executing program 4 (id=1747): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x2c, 0x7, 0x7}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x208) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 15.078816157s ago: executing program 3 (id=1748): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x258, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xbc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfd12, 0x7f, 0xe, 0x6}, {0x800, 0xc0, 0x7, 0x9}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x2, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x3, 0x49, 0x7, 0x4}, {0x3, 0x9, 0x9, 0xb24}, {0x6, 0x8, 0x8, 0x6}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x13c, 0x1, [@m_bpf={0xa4, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x74, 0x6, "9691eff3d6fa1d321d4974305ce18f5a39737447038aa4539428956f1025fe8ceda1cc0f56fb66fffb8ba8ec20495f6a38ac724eab6a796f7629dffa7b3f9c3c9b78e8d22fe17af34aae7c85ed61a671868fe35ac5f12cf88ebe2450681c35100b89eb895d5ade79727eb9d5b6bf5af5"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x94, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x63, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea910bcdffe4d3ec14fb60880000000000000873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f0000000ac0)=""/208, 0xd0}, {&(0x7f0000000bc0)=""/158, 0x9e}, {&(0x7f0000000100)=""/11, 0xb}], 0x5}, 0x1) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000003800)={0x221c, r4, 0x108, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x10d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "1221420f0cb4e798dd1fd51caf67bb361d3bda4d77fbc93c62de21713fc84e89ddd9b9812127f05c36549901fa26696a98a95b8bc555e47323d50e888b559cced9102c70f762030f42a69d9f9a5fe2fea746b7044d8158f914e0ecc99af06ae069423c798fc47a79a9e960edad817d241c07c5b913683d2daeb7420cf268a35ee213f6a94b9ced6fe3585c7ecea6ceea693dbd1a39bde32b73b9530b34247f9cf88ce324adfdbfa8d6de72764f32389aca9517dcc7435a4124ffe3ea19cbe691dd6cac2071"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x10e8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "ffb426abae68bab3b9343de40c260450b63ba36bb05cb185fbab578608a0b15433fc39c47638bf4f67045d21bb667ee80b5f2a980ee5d25e8bc937644ec30d4b9e65b6218364630ee7335f2973be3092ad1d09f40ab6c1893fe8220d9b1528ef4d506c115315067f8494b525108576a87cdf1787dfd2a831284499393576649e0fea55142b34e70ded94a59b6caff04a86133257642b3772da6ebc15a9b46f3bd931a179ebe594d7f94db8145e345996766833a5a48364175512717919a3b96404037bef50d850d22a694c7090a8362e4911e063d9cd88d6"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x221c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r7, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 32 (id=1746): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) unshare(0x22020400) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="02000000ff0300"/16, @ANYRES64=0x77359400, @ANYRES16=r4, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYBLOB="030000e0010000000400008000020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) (async) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x4, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x4) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c804) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000000900000000000000000180"], 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0xa0, 0xff}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@local, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0xb}]}]}, 0xa0}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000580)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000440)=0x51e, 0x12) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0x0, 0xdbcb54c63ef1f42d}, 0x2}, 0x18) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x54, r10, 0xe88935736c6909db, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x24042801) (rerun: 32) kernel console output (not intermixed with test programs): [ 118.733726][ T6820] sit0: entered promiscuous mode [ 118.744242][ T6820] ip6tnl0: entered promiscuous mode [ 118.781253][ T6820] ip6gre0: entered promiscuous mode [ 118.795373][ T6820] syz_tun: entered promiscuous mode [ 118.820201][ T6820] ip6gretap0: entered promiscuous mode [ 118.834374][ T6820] bridge0: entered promiscuous mode [ 118.860134][ T6820] vcan0: entered promiscuous mode [ 118.876815][ T6820] bond0: entered promiscuous mode [ 118.893581][ T6820] bond_slave_0: entered promiscuous mode [ 118.899987][ T6820] bond_slave_1: entered promiscuous mode [ 118.908652][ T6820] team0: entered promiscuous mode [ 118.914055][ T6820] team_slave_0: entered promiscuous mode [ 118.962958][ T6820] team_slave_1: entered promiscuous mode [ 118.987914][ T6820] dummy0: entered promiscuous mode [ 119.040055][ T6820] nlmon0: entered promiscuous mode [ 119.082611][ T6820] caif0: entered promiscuous mode [ 119.098181][ T6820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.363318][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 119.612402][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 119.845838][ T6877] netlink: 'syz.0.227': attribute type 15 has an invalid length. [ 120.219481][ T6894] Driver unsupported XDP return value 0 on prog (id 81) dev N/A, expect packet loss! [ 120.669430][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 120.751204][ T6910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.788213][ T6907] wg1 speed is unknown, defaulting to 1000 [ 120.802468][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 121.011530][ T6920] netlink: 1208 bytes leftover after parsing attributes in process `syz.3.235'. [ 121.029433][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 121.104033][ T6924] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 121.153526][ T6923] ip6tnl1: entered allmulticast mode [ 121.369058][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.237'. [ 121.485607][ T30] audit: type=1800 audit(1765656870.173:5): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.240" name="memory.events" dev="tmpfs" ino=300 res=0 errno=0 [ 121.513007][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'. [ 121.526358][ T30] audit: type=1804 audit(1765656870.183:6): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.240" name="memory.events" dev="tmpfs" ino=300 res=1 errno=0 [ 121.573684][ T6934] veth1_to_batadv: mtu less than device minimum [ 121.606615][ T6939] : entered promiscuous mode [ 121.775769][ T6945] netlink: 'syz.3.242': attribute type 7 has an invalid length. [ 121.798837][ T6945] netlink: 'syz.3.242': attribute type 8 has an invalid length. [ 121.861723][ T6945] bond0: entered promiscuous mode [ 121.884919][ T6945] bond_slave_0: entered promiscuous mode [ 121.915177][ T6945] bond_slave_1: entered promiscuous mode [ 122.010092][ T6945] batadv0: entered promiscuous mode [ 122.026793][ T6945] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 122.402987][ T6963] wg1 speed is unknown, defaulting to 1000 [ 122.777810][ T6984] sctp: [Deprecated]: syz.3.252 (pid 6984) Use of int in max_burst socket option. [ 122.777810][ T6984] Use struct sctp_assoc_value instead [ 123.062628][ T6994] __nla_validate_parse: 4 callbacks suppressed [ 123.062649][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 123.152409][ T6991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.317646][ T7002] syzkaller1: entered promiscuous mode [ 123.335153][ T7002] syzkaller1: entered allmulticast mode [ 123.423866][ T6995] wg1 speed is unknown, defaulting to 1000 [ 124.039550][ T7037] netlink: 388 bytes leftover after parsing attributes in process `syz.4.267'. [ 124.158343][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.192046][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.204308][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.266466][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.272579][ T7048] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 124.309073][ T7048] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 124.325830][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.331095][ T7048] netlink: 348 bytes leftover after parsing attributes in process `syz.3.270'. [ 124.372529][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.408008][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.426603][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.454184][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.466630][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.650780][ T7065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.273'. [ 124.781616][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 124.798731][ T7073] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 125.012837][ T7083] netlink: 428 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.022385][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.064216][ T7087] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.283'. [ 125.074241][ T7087] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0 [ 125.712372][ T7100] tipc: Enabling of bearer rejected, failed to enable media [ 125.861418][ T7107] netlink: 156 bytes leftover after parsing attributes in process `syz.4.289'. [ 126.475375][ T7120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.937513][ T7129] bond1: entered promiscuous mode [ 126.951785][ T7129] bond1: entered allmulticast mode [ 126.977150][ T7129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.004848][ T7135] netlink: 'syz.2.295': attribute type 39 has an invalid length. [ 127.174703][ T7143] netlink: 'syz.1.296': attribute type 9 has an invalid length. [ 127.182961][ T7143] netlink: 'syz.1.296': attribute type 11 has an invalid length. [ 127.209149][ T7143] netlink: 'syz.1.296': attribute type 12 has an invalid length. [ 127.217014][ T7143] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.296'. [ 127.650481][ T7164] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 127.663454][ T7164] bond2 (unregistering): Released all slaves [ 127.924409][ T7177] syzkaller0: entered promiscuous mode [ 127.930308][ T7177] syzkaller0: entered allmulticast mode [ 128.471974][ T7194] __nla_validate_parse: 3 callbacks suppressed [ 128.472021][ T7194] netlink: 84 bytes leftover after parsing attributes in process `syz.4.315'. [ 128.880968][ T7220] wg1 speed is unknown, defaulting to 1000 [ 129.055388][ T7228] netlink: 'syz.1.323': attribute type 39 has an invalid length. [ 129.087662][ T7228] veth0_macvtap: left promiscuous mode [ 129.298142][ T7238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.326'. [ 129.359135][ T7240] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 129.412179][ T7243] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 129.526437][ T7240] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.529657][ T7243] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.025924][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.330'. [ 130.072041][ T7255] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.461498][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 130.862222][ T7283] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 130.899076][ T7283] macvtap0: entered allmulticast mode [ 130.929022][ T7283] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 131.078287][ T7283] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 131.086533][ T7283] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 131.112366][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.338'. [ 131.820021][ T7298] netlink: 'syz.3.341': attribute type 12 has an invalid length. [ 131.879191][ T7298] netlink: 'syz.3.341': attribute type 29 has an invalid length. [ 131.887019][ T7298] netlink: 148 bytes leftover after parsing attributes in process `syz.3.341'. [ 131.896284][ T7298] netlink: 59 bytes leftover after parsing attributes in process `syz.3.341'. [ 132.000753][ T7313] netlink: 'syz.2.343': attribute type 1 has an invalid length. [ 132.039909][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.289717][ T6897] wlan1: Trigger new scan to find an IBSS to join [ 133.254548][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.264009][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.249841][ T37] wlan1: Trigger new scan to find an IBSS to join [ 138.289052][ T3551] wlan1: Trigger new scan to find an IBSS to join [ 139.180646][ T6897] wlan1: Creating new IBSS network, BSSID 02:c4:bb:03:d8:a9 [ 169.219790][ T6108] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.424522][ T7324] ipvlan2: entered promiscuous mode [ 191.444321][ T7324] bridge0: port 3(ipvlan2) entered blocking state [ 191.460366][ T7324] bridge0: port 3(ipvlan2) entered disabled state [ 191.472901][ T7324] ipvlan2: entered allmulticast mode [ 191.482491][ T7324] bridge0: entered allmulticast mode [ 191.512708][ T7324] ipvlan2: left allmulticast mode [ 191.518110][ T7324] bridge0: left allmulticast mode [ 191.648178][ T7343] syzkaller0: entered promiscuous mode [ 191.662512][ T7343] syzkaller0: entered allmulticast mode [ 191.750199][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 191.780625][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.847642][ T7348] bridge_slave_1 (unregistering): left allmulticast mode [ 191.857275][ T7348] bridge_slave_1 (unregistering): left promiscuous mode [ 191.871498][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.019838][ T7361] sctp: [Deprecated]: syz.2.353 (pid 7361) Use of int in max_burst socket option. [ 192.019838][ T7361] Use struct sctp_assoc_value instead [ 192.559869][ T7374] netlink: 'syz.0.357': attribute type 11 has an invalid length. [ 192.598422][ T7374] netlink: 140 bytes leftover after parsing attributes in process `syz.0.357'. [ 193.328041][ T7410] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 193.471705][ T7410] bond1: entered promiscuous mode [ 193.477451][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.594949][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 193.618197][ T7416] bond2: Unable to set up delay as MII monitoring is disabled [ 193.633969][ T7416] bond2 (unregistering): Released all slaves [ 193.663513][ T7429] netlink: 'syz.2.373': attribute type 3 has an invalid length. [ 193.694655][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.723298][ T7410] bond1: (slave gre3): The slave device specified does not support setting the MAC address [ 193.778881][ T7410] bond1: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 193.810727][ T7410] bond1: (slave gre3): making interface the new active one [ 193.858282][ T7410] gre3: entered promiscuous mode [ 193.865476][ T7410] bond1: (slave gre3): Enslaving as an active interface with an up link [ 193.937403][ T7423] bridge_slave_0: left allmulticast mode [ 193.943649][ T7423] bridge_slave_0: left promiscuous mode [ 193.954571][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.961482][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 194.055348][ T7430] 8021q: VLANs not supported on xfrm0 [ 194.098826][ T7438] netlink: 'syz.1.376': attribute type 3 has an invalid length. [ 194.206267][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 194.420465][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 194.560473][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.383'. [ 194.694072][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.705877][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.106449][ T7477] wg1 speed is unknown, defaulting to 1000 [ 195.318547][ T7488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 195.431056][ T7488] netlink: 'syz.3.393': attribute type 8 has an invalid length. [ 195.479974][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 196.001924][ T7520] xt_HMARK: spi-set and port-set can't be combined [ 196.044324][ T7524] netlink: 'syz.0.399': attribute type 4 has an invalid length. [ 196.119033][ T7507] wg1: entered promiscuous mode [ 196.148044][ T7507] wg1: entered allmulticast mode [ 196.214803][ T5914] wg1 speed is unknown, defaulting to 1000 [ 196.247293][ T7506] wg1 speed is unknown, defaulting to 1000 [ 196.884452][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 197.280829][ T7548] IPVS: Unknown mcast interface: vcan0 [ 197.536337][ T7555] xt_hashlimit: size too large, truncated to 1048576 [ 197.578285][ T7555] xt_hashlimit: max too large, truncated to 1048576 [ 197.674963][ T7563] 8021q: VLANs not supported on lo [ 198.087137][ T7577] xt_hashlimit: size too large, truncated to 1048576 [ 198.452074][ T7594] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 198.491909][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 198.501557][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 198.514892][ T7595] macvlan0: entered allmulticast mode [ 198.521167][ T7595] veth1_vlan: entered allmulticast mode [ 198.742574][ T7604] netlink: 56 bytes leftover after parsing attributes in process `syz.3.423'. [ 198.752886][ T7603] wg1 speed is unknown, defaulting to 1000 [ 199.199710][ T7617] tipc: Started in network mode [ 199.205177][ T7617] tipc: Node identity ac14142f, cluster identity 4711 [ 199.222880][ T7617] tipc: New replicast peer: 0.0.0.0 [ 199.231972][ T7617] tipc: Enabled bearer , priority 10 [ 199.238629][ T7618] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 199.251439][ T7618] netlink: 228 bytes leftover after parsing attributes in process `syz.2.426'. [ 199.845113][ T7629] syzkaller0: entered promiscuous mode [ 199.856921][ T7629] syzkaller0: entered allmulticast mode [ 200.144624][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.245556][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 200.308902][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.497536][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 200.525563][ T7660] netlink: 'syz.1.437': attribute type 21 has an invalid length. [ 200.548761][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.567265][ T7660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.437'. [ 200.580469][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 200.633231][ T7668] netlink: 'syz.1.437': attribute type 21 has an invalid length. [ 200.663603][ T7668] netlink: 128 bytes leftover after parsing attributes in process `syz.1.437'. [ 200.703324][ T1053] tipc: Node number set to 2886997039 [ 200.726300][ T7664] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 200.736688][ T7660] netlink: 'syz.1.437': attribute type 5 has an invalid length. [ 200.751689][ T7668] netlink: 'syz.1.437': attribute type 5 has an invalid length. [ 201.011170][ T7678] bridge0: entered promiscuous mode [ 201.043990][ T7676] bridge1: entered promiscuous mode [ 201.192626][ T7662] netlink: 'syz.2.434': attribute type 30 has an invalid length. [ 201.282804][ T7662] bond2: option arp_missed_max: invalid value (0) [ 201.292835][ T7662] bond2: option arp_missed_max: allowed values 1 - 255 [ 201.302677][ T7662] bond2 (unregistering): Released all slaves [ 201.603554][ T7712] syzkaller0: entered promiscuous mode [ 201.637419][ T7712] syzkaller0: entered allmulticast mode [ 201.866438][ T7716] tipc: Started in network mode [ 201.879391][ T7716] tipc: Node identity 26fc65940341, cluster identity 4711 [ 201.888844][ T7716] tipc: Enabled bearer , priority 0 [ 201.917207][ T7719] syzkaller0: entered promiscuous mode [ 201.927324][ T7719] syzkaller0: entered allmulticast mode [ 201.981063][ T7728] netlink: 'syz.2.449': attribute type 11 has an invalid length. [ 202.014863][ T7716] tipc: Resetting bearer [ 202.099150][ T7715] tipc: Resetting bearer [ 202.169417][ T7715] tipc: Disabling bearer [ 202.521882][ T7745] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 202.538856][ T7745] netlink: 'syz.4.452': attribute type 3 has an invalid length. [ 202.580203][ T7745] netlink: 'syz.4.452': attribute type 2 has an invalid length. [ 202.588090][ T7745] netlink: 'syz.4.452': attribute type 3 has an invalid length. [ 202.589450][ T7744] syzkaller0: entered promiscuous mode [ 202.607621][ T7726] wg1 speed is unknown, defaulting to 1000 [ 202.615667][ T7745] __nla_validate_parse: 6 callbacks suppressed [ 202.615685][ T7745] netlink: 184 bytes leftover after parsing attributes in process `syz.4.452'. [ 202.670681][ T7744] syzkaller0: entered allmulticast mode [ 202.736187][ T7750] ip6erspan0: entered allmulticast mode [ 202.943364][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz.4.456'. [ 202.977568][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz.4.456'. [ 203.042335][ T7762] netlink: 56 bytes leftover after parsing attributes in process `syz.4.456'. [ 203.114471][ T7760] wg1 speed is unknown, defaulting to 1000 [ 203.499563][ T7784] netlink: 64 bytes leftover after parsing attributes in process `syz.4.458'. [ 203.546805][ T7784] block nbd0: not configured, cannot reconfigure [ 204.281808][ T7804] wg1 speed is unknown, defaulting to 1000 [ 204.658065][ T7824] netlink: 332 bytes leftover after parsing attributes in process `syz.4.465'. [ 204.690641][ T7824] validate_nla: 1 callbacks suppressed [ 204.690663][ T7824] netlink: 'syz.4.465': attribute type 9 has an invalid length. [ 204.746677][ T7824] netlink: 108 bytes leftover after parsing attributes in process `syz.4.465'. [ 204.796217][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.465'. [ 205.117943][ T7829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.333960][ T7858] netlink: 128 bytes leftover after parsing attributes in process `syz.1.470'. [ 205.646992][ T7865] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 205.659451][ T7865] Cannot find set identified by id 3 to match [ 205.690471][ T7829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.732455][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 205.979047][ T7829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.266455][ T7829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.391041][ T7895] netlink: 'syz.1.477': attribute type 2 has an invalid length. [ 206.445879][ T7895] : entered promiscuous mode [ 206.564772][ T6103] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.649530][ T6108] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.703353][ T6108] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.749186][ T7902] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 206.749254][ T7843] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.109435][ T6109] IPVS: starting estimator thread 0... [ 207.138351][ T7915] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 207.228847][ T7916] IPVS: using max 25 ests per chain, 60000 per kthread [ 207.412094][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.435006][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.906293][ T7961] __nla_validate_parse: 5 callbacks suppressed [ 207.906313][ T7961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.493'. [ 207.934430][ T7961] netlink: 'syz.4.493': attribute type 9 has an invalid length. [ 207.942731][ T7961] netlink: 'syz.4.493': attribute type 11 has an invalid length. [ 207.951246][ T7961] netlink: 'syz.4.493': attribute type 12 has an invalid length. [ 207.959508][ T7961] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.493'. [ 207.972406][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 207.992152][ T7961] netlink: 'syz.4.493': attribute type 6 has an invalid length. [ 208.123069][ T7969] syzkaller1: entered promiscuous mode [ 208.142033][ T7969] syzkaller1: entered allmulticast mode [ 208.396237][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.404606][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.412763][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.420808][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.428915][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.437062][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.445113][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.453166][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.461210][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.469242][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 208.597588][ T7986] netlink: 'syz.0.500': attribute type 2 has an invalid length. [ 208.649327][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 208.669535][ T7991] sit0: Master is either lo or non-ether device [ 209.059671][ T8005] wg1 speed is unknown, defaulting to 1000 [ 209.208192][ T8008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.222856][ T8008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.372267][ T8013] 8021q: VLANs not supported on ip6tnl0 [ 209.483933][ T8008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.515589][ T8008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.709729][ T8008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.723665][ T8008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.964214][ T8012] wg1 speed is unknown, defaulting to 1000 [ 210.042814][ T8008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.099155][ T8008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.150904][ T8022] wg1 speed is unknown, defaulting to 1000 [ 210.710759][ T7840] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.728821][ T7840] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.778209][ T7837] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.797146][ T7837] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.840032][ T7837] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.860682][ T7837] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.889226][ T7837] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.900026][ T7837] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.378484][ T8045] xt_hashlimit: max too large, truncated to 1048576 [ 211.413283][ T8045] xt_hashlimit: max too large, truncated to 1048576 [ 211.797036][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 211.812066][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 211.903791][ T8075] Cannot find add_set index 0 as target [ 211.923920][ T8075] netlink: 'syz.1.523': attribute type 11 has an invalid length. [ 211.966783][ T8075] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.523'. [ 212.084994][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 212.104034][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 212.131746][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 212.131774][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 212.137838][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 212.156442][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 212.216704][ T8095] Can't find ip_set type hasZ:net,port,let [ 212.225180][ T8102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.528'. [ 212.292456][ T8105] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 212.352471][ T8105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.436096][ T8114] : entered promiscuous mode [ 212.608367][ T8126] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 212.679815][ T8126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.730873][ T8126] veth3: entered promiscuous mode [ 212.753703][ T8126] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 213.362365][ T8168] xt_hashlimit: size too large, truncated to 1048576 [ 213.471143][ T8173] net_ratelimit: 45 callbacks suppressed [ 213.471154][ T8173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.523595][ T8172] lo: left promiscuous mode [ 213.537031][ T8172] tunl0: left promiscuous mode [ 213.538837][ T8178] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20002 [ 213.557885][ T8172] gre0: left promiscuous mode [ 213.576913][ T8172] gretap0: left promiscuous mode [ 213.589415][ T8172] erspan0: left promiscuous mode [ 213.610129][ T8172] ip_vti0: left promiscuous mode [ 213.630392][ T8172] ip6_vti0: left promiscuous mode [ 213.646797][ T8172] sit0: left promiscuous mode [ 213.660245][ T8172] ip6tnl0: left promiscuous mode [ 213.666112][ T8172] ip6gre0: left promiscuous mode [ 213.673652][ T8172] syz_tun: left promiscuous mode [ 213.688072][ T8172] ip6gretap0: left promiscuous mode [ 213.695073][ T8172] bridge0: left promiscuous mode [ 213.701612][ T8172] bond0: left promiscuous mode [ 213.706636][ T8172] bond_slave_0: left promiscuous mode [ 213.713248][ T8172] bond_slave_1: left promiscuous mode [ 213.720620][ T8172] team0: left promiscuous mode [ 213.725490][ T8172] team_slave_0: left promiscuous mode [ 213.733122][ T8172] team_slave_1: left promiscuous mode [ 213.741015][ T8172] dummy0: left promiscuous mode [ 213.746788][ T8172] nlmon0: left promiscuous mode [ 213.753032][ T8172] caif0: left promiscuous mode [ 213.772072][ T8172] vlan2: left promiscuous mode [ 213.777667][ T8172] bond1: left promiscuous mode [ 213.785419][ T8172] veth3: left promiscuous mode [ 213.792040][ T8177] netlink: 'syz.3.546': attribute type 3 has an invalid length. [ 213.820318][ T8191] syz_tun: entered allmulticast mode [ 213.852196][ T8177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.898245][ T8190] syz_tun: left allmulticast mode [ 214.045107][ T8197] wg1 speed is unknown, defaulting to 1000 [ 214.242937][ T8208] __nla_validate_parse: 1 callbacks suppressed [ 214.242958][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 214.635620][ T8217] netlink: 56 bytes leftover after parsing attributes in process `syz.0.554'. [ 214.656821][ T8217] pim6reg: entered allmulticast mode [ 214.687115][ T8217] pim6reg: left allmulticast mode [ 214.830758][ T8219] wg1 speed is unknown, defaulting to 1000 [ 214.869399][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'. [ 215.640781][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 216.126864][ T8268] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.565'. [ 216.631365][ T8296] 8021q: VLANs not supported on ip_vti0 [ 216.769209][ T8303] syzkaller0: entered promiscuous mode [ 216.774933][ T8303] syzkaller0: entered allmulticast mode [ 217.162174][ T8316] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 217.202147][ T8318] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 217.229921][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 217.309460][ T8318] bond2: entered promiscuous mode [ 217.315309][ T8318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.324864][ T8315] wg1 speed is unknown, defaulting to 1000 [ 217.842532][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 217.879570][ T8337] gretap0: entered promiscuous mode [ 218.013806][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.582'. [ 218.553192][ T8352] xfrm1: entered allmulticast mode [ 218.614609][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 218.661311][ T8358] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 218.806946][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 218.840476][ T8358] bond2: entered promiscuous mode [ 218.854927][ T8358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.976581][ T8360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.996666][ T8360] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 219.021407][ T8360] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 219.032422][ T8360] bond2: (slave gre1): Opening slave failed [ 219.770309][ T8387] tipc: Started in network mode [ 219.778819][ T8387] tipc: Node identity 866d698fadbd, cluster identity 4711 [ 219.786157][ T8387] tipc: Enabled bearer , priority 0 [ 219.821488][ T8387] syzkaller0: entered promiscuous mode [ 219.839224][ T8390] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 219.848045][ T8387] syzkaller0: entered allmulticast mode [ 219.936185][ T8390] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 219.942083][ T8393] tipc: Resetting bearer [ 219.960469][ T8386] tipc: Resetting bearer [ 220.032699][ T8386] tipc: Disabling bearer [ 220.076589][ T8397] __nla_validate_parse: 2 callbacks suppressed [ 220.076611][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 220.126668][ T8398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.597'. [ 220.199653][ T8403] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.598'. [ 220.207863][ T8382] lec:lec_atm_close: lec0: Shut down! [ 220.234941][ T8405] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.598'. [ 220.569097][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 220.943062][ T8198] Set syz1 is full, maxelem 65536 reached [ 221.109031][ T5956] lec:lec_start_xmit: lec0:No lecd attached [ 221.293337][ T8448] netlink: 4308 bytes leftover after parsing attributes in process `syz.0.607'. [ 221.434540][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 221.461976][ T8460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'. [ 221.508343][ T8462] veth1_to_batadv: entered promiscuous mode [ 221.606998][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 221.679181][ T8460] syzkaller0: entered promiscuous mode [ 221.723587][ T8460] syzkaller0: entered allmulticast mode [ 221.752446][ T8448] wg1 speed is unknown, defaulting to 1000 [ 221.849567][ T8460] tipc: Enabled bearer , priority 0 [ 221.932881][ T8456] tipc: Resetting bearer [ 222.066540][ T8456] tipc: Disabling bearer [ 222.075532][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'. [ 222.119921][ T8474] pim6reg1: entered promiscuous mode [ 222.135646][ T8474] pim6reg1: entered allmulticast mode [ 222.410562][ T8494] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 222.449119][ T5839] Bluetooth: hci4: link tx timeout [ 222.455388][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 222.882553][ T8506] wg1 speed is unknown, defaulting to 1000 [ 223.939689][ T8530] dummy0: entered promiscuous mode [ 223.948536][ T8530] team0: entered promiscuous mode [ 223.953915][ T8530] team_slave_0: entered promiscuous mode [ 223.961891][ T8530] team_slave_1: entered promiscuous mode [ 223.978206][ T8530] geneve0: entered promiscuous mode [ 224.053937][ T8542] tipc: Started in network mode [ 224.074295][ T8542] tipc: Node identity fe6cd203ec02, cluster identity 4711 [ 224.112255][ T8542] tipc: Enabled bearer , priority 0 [ 224.129681][ T8559] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 224.137386][ T8559] netlink: 'syz.2.630': attribute type 2 has an invalid length. [ 224.157518][ T8545] syzkaller0: entered promiscuous mode [ 224.168815][ T8545] syzkaller0: entered allmulticast mode [ 224.172616][ T8559] nbd: illegal input index 393224 [ 224.203421][ T8536] tipc: Resetting bearer [ 224.258403][ T8536] tipc: Disabling bearer [ 224.338428][ T8572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.395517][ T8550] wg1 speed is unknown, defaulting to 1000 [ 224.491391][ T8578] bridge_slave_1: left allmulticast mode [ 224.520345][ T8578] bridge_slave_1: left promiscuous mode [ 224.526195][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.535596][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 224.557015][ T8578] bridge_slave_0: left allmulticast mode [ 224.563930][ T8578] bridge_slave_0: left promiscuous mode [ 224.571440][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.656126][ T8566] wg1 speed is unknown, defaulting to 1000 [ 224.666571][ T8572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.791887][ T8584] syzkaller0: entered promiscuous mode [ 224.800344][ T8584] syzkaller0: entered allmulticast mode [ 226.279811][ T8572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.368030][ T8572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.493811][ T8602] __nla_validate_parse: 11 callbacks suppressed [ 226.493832][ T8602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.643'. [ 226.510458][ T8602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.643'. [ 226.688694][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 226.697286][ C0] lec:lec_tx_timeout: lec0 [ 226.702300][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 226.714272][ T6108] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.805118][ T6898] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.829616][ T8620] tipc: Started in network mode [ 226.842812][ T8620] tipc: Node identity f6eef5b794c7, cluster identity 4711 [ 226.881617][ T8620] tipc: Enabled bearer , priority 0 [ 226.888436][ T6898] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.926246][ T6898] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.970037][ T8614] syzkaller0: entered promiscuous mode [ 226.984364][ T8614] syzkaller0: entered allmulticast mode [ 227.015136][ T8620] tipc: Resetting bearer [ 227.165764][ T8639] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 227.398435][ T8646] xt_hashlimit: size too large, truncated to 1048576 [ 227.509760][ T8653] netlink: 'syz.0.655': attribute type 7 has an invalid length. [ 227.514393][ T8654] netlink: 284 bytes leftover after parsing attributes in process `syz.1.654'. [ 227.535636][ T8612] tipc: Resetting bearer [ 227.634767][ T8612] tipc: Disabling bearer [ 227.697625][ T8652] IPv6: sit2: Disabled Multicast RS [ 227.741043][ T6099] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.741226][ T8653] netlink: 'syz.0.655': attribute type 7 has an invalid length. [ 227.776698][ T6099] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.799578][ T6099] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.846574][ T6099] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.959115][ T8666] wg1 speed is unknown, defaulting to 1000 [ 227.981468][ T8670] veth0_to_bridge: entered promiscuous mode [ 228.042259][ T8675] netlink: 96 bytes leftover after parsing attributes in process `syz.3.658'. [ 228.076585][ T8675] 8021q: VLANs not supported on ip_vti0 [ 228.120510][ T8670] veth0_to_bridge: left promiscuous mode [ 228.172592][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 228.658930][ T8691] netlink: 'syz.2.662': attribute type 12 has an invalid length. [ 229.323082][ T8699] tipc: Enabled bearer , priority 0 [ 229.351065][ T8699] syzkaller0: entered promiscuous mode [ 229.356860][ T8699] syzkaller0: entered allmulticast mode [ 229.369783][ T8705] No such timeout policy "syz0" [ 229.375637][ T8705] raw_sendmsg: syz.1.667 forgot to set AF_INET. Fix it! [ 229.478484][ T8699] tipc: Resetting bearer [ 229.517218][ T8698] tipc: Resetting bearer [ 229.569300][ T8698] tipc: Disabling bearer [ 229.739721][ T8718] openvswitch: netlink: IP tunnel dst address not specified [ 229.796615][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.673'. [ 229.885048][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 229.918770][ T8727] netlink: 'syz.3.675': attribute type 13 has an invalid length. [ 229.939846][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 229.947969][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 229.962996][ T8731] netlink: 'syz.2.676': attribute type 10 has an invalid length. [ 230.037485][ T8731] team0: Port device dummy0 added [ 230.068031][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 230.079459][ T7840] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.107558][ T7840] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.108853][ T8727] netlink: 'syz.3.675': attribute type 13 has an invalid length. [ 230.124926][ T7840] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.149971][ T7840] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.372263][ T8740] netlink: 'syz.1.678': attribute type 13 has an invalid length. [ 230.419693][ T8740] netlink: 'syz.1.678': attribute type 17 has an invalid length. [ 230.831421][ T8740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.853782][ T8764] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.869913][ T8760] netlink: 'syz.0.681': attribute type 7 has an invalid length. [ 230.891844][ T8760] netlink: 'syz.0.681': attribute type 8 has an invalid length. [ 231.043067][ T8761] Cannot find add_set index 0 as target [ 231.092779][ T8773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.170870][ T6099] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 231.375589][ T8786] pim6reg: entered allmulticast mode [ 231.381929][ T8790] pim6reg: left allmulticast mode [ 231.547431][ T8792] pim6reg: entered allmulticast mode [ 231.585107][ T8796] __nla_validate_parse: 3 callbacks suppressed [ 231.585124][ T8796] netlink: 44 bytes leftover after parsing attributes in process `syz.2.691'. [ 231.754676][ T8806] netlink: 'syz.3.694': attribute type 1 has an invalid length. [ 231.814922][ T8806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.836491][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 231.928083][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.970372][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 232.015873][ T8806] bond5: (slave batadv1): making interface the new active one [ 232.081211][ T8806] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 232.127350][ T8832] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 232.324235][ T8838] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 232.342151][ T8815] bond5 (unregistering): (slave batadv1): Releasing active interface [ 232.364004][ T8815] bond5 (unregistering): Released all slaves [ 232.404642][ T8842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.704'. [ 232.448735][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 232.457054][ C0] lec:lec_tx_timeout: lec0 [ 232.462105][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 232.504680][ T8825] bond2: (slave geneve2): making interface the new active one [ 232.510680][ T8847] openvswitch: netlink: Unknown key attributes 2 [ 232.526580][ T8825] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 232.595215][ T6103] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 232.700281][ T6103] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 232.718082][ T6103] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 232.747649][ T6103] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 232.841276][ T8852] wg1 speed is unknown, defaulting to 1000 [ 232.906545][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 232.918940][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 233.004819][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.066490][ T8873] sctp: [Deprecated]: syz.0.711 (pid 8873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.066490][ T8873] Use struct sctp_sack_info instead [ 233.098774][ T8860] bridge_slave_0 (unregistering): left allmulticast mode [ 233.120450][ T8873] sctp: [Deprecated]: syz.0.711 (pid 8873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.120450][ T8873] Use struct sctp_sack_info instead [ 233.122453][ T8860] bridge_slave_0 (unregistering): left promiscuous mode [ 233.198885][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.586251][ T8889] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 233.958171][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.010680][ T8903] sctp: [Deprecated]: syz.2.716 (pid 8903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.010680][ T8903] Use struct sctp_sack_info instead [ 234.359549][ T7838] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.368499][ T7838] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.381478][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 234.505796][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 234.556624][ T7838] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.581318][ T7838] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.590037][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 234.618032][ T7838] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.630936][ T7838] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.678506][ T8920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.766222][ T8911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.774492][ T8911] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 234.787601][ T8911] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 234.823748][ T8907] wg1 speed is unknown, defaulting to 1000 [ 234.872433][ T7838] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.919807][ T7838] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.924686][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 235.289479][ T8960] nbd: must specify a device to reconfigure [ 235.760961][ T8979] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 235.895278][ T8991] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.013325][ T8991] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 236.674964][ T9024] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 236.711710][ T9024] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 237.019211][ T9044] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 237.034039][ T9044] bond6 (unregistering): Released all slaves [ 237.170472][ T9062] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 237.318399][ T9059] lo speed is unknown, defaulting to 1000 [ 237.347840][ T9059] lo speed is unknown, defaulting to 1000 [ 237.365187][ T9075] netlink: 'syz.1.751': attribute type 5 has an invalid length. [ 237.374220][ T9059] lo speed is unknown, defaulting to 1000 [ 237.387491][ T9074] __nla_validate_parse: 9 callbacks suppressed [ 237.387509][ T9074] netlink: 72 bytes leftover after parsing attributes in process `syz.4.750'. [ 237.426373][ T9059] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 237.468690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 237.476963][ C0] lec:lec_tx_timeout: lec0 [ 237.481761][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 237.718584][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 237.730721][ T9085] veth0: entered promiscuous mode [ 237.732639][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 237.745044][ T9059] lo speed is unknown, defaulting to 1000 [ 237.761567][ T9090] batman_adv: batadv0: Adding interface: ipvlan0 [ 237.768205][ T9090] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.771718][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 237.805441][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.816804][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.828241][ T9090] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 237.840034][ T9059] lo speed is unknown, defaulting to 1000 [ 237.858322][ T9091] batman_adv: batadv0: Adding interface: ipvlan1 [ 237.865280][ T9091] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.891875][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.901893][ T9085] netlink: 584 bytes leftover after parsing attributes in process `syz.2.752'. [ 237.902820][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.925053][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 237.936936][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.947197][ T9091] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 238.036222][ T9059] lo speed is unknown, defaulting to 1000 [ 238.136064][ T9059] lo speed is unknown, defaulting to 1000 [ 238.194833][ T9059] lo speed is unknown, defaulting to 1000 [ 238.202411][ T9103] wg1 speed is unknown, defaulting to 1000 [ 238.246046][ T9103] lo speed is unknown, defaulting to 1000 [ 238.284147][ T9079] veth0: left promiscuous mode [ 238.615053][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 238.636977][ T9120] Cannot find add_set index 4 as target [ 238.884654][ T9118] syzkaller0: entered promiscuous mode [ 238.891322][ T9118] syzkaller0: entered allmulticast mode [ 240.784134][ T9182] syzkaller1: entered promiscuous mode [ 240.789914][ T9182] syzkaller1: entered allmulticast mode [ 241.003856][ T9188] wg1 speed is unknown, defaulting to 1000 [ 241.012594][ T9188] lo speed is unknown, defaulting to 1000 [ 241.227695][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 241.347578][ T9205] Bluetooth: MGMT ver 1.23 [ 241.525607][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 241.765959][ T9227] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 242.009822][ T9232] trusted_key: syz.0.793 sent an empty control message without MSG_MORE. [ 242.046869][ T9232] wg1 speed is unknown, defaulting to 1000 [ 242.090016][ T9232] lo speed is unknown, defaulting to 1000 [ 242.488715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 242.496808][ C0] lec:lec_tx_timeout: lec0 [ 242.502159][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 242.593592][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 243.041807][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.804'. [ 243.189281][ T9270] nbd: must specify a size in bytes for the device [ 243.334421][ T9275] syzkaller0: create flow: hash 58549542 index 1 [ 243.351744][ T9276] netlink: 100 bytes leftover after parsing attributes in process `syz.1.807'. [ 243.362520][ T6103] syzkaller0: tun_net_xmit 76 [ 243.367907][ T6103] syzkaller0: tun_net_xmit 48 [ 243.380016][ T915] syzkaller0: tun_net_xmit 76 [ 243.409116][ T9278] netlink: 244 bytes leftover after parsing attributes in process `syz.4.808'. [ 243.444279][ T9272] syzkaller0: delete flow: hash 58549542 index 1 [ 243.544671][ T9279] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 245.928011][ T9309] netlink: 'syz.2.816': attribute type 13 has an invalid length. [ 245.946091][ T9309] netlink: 'syz.2.816': attribute type 17 has an invalid length. [ 245.994719][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 246.074721][ T9323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.819'. [ 246.152151][ T9309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.195408][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 246.288411][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.821'. [ 246.312780][ T9332] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 246.344341][ T9332] team0: Port device dummy0 removed [ 247.156618][ T9384] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.832'. [ 247.201715][ T9386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.363699][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.836'. [ 247.535133][ T9398] nbd: nbd64 already in use [ 247.600870][ T9419] __nla_validate_parse: 1 callbacks suppressed [ 247.600889][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.840'. [ 247.776270][ T9410] wg1 speed is unknown, defaulting to 1000 [ 247.800496][ T9406] wg1 speed is unknown, defaulting to 1000 [ 247.814064][ T9410] lo speed is unknown, defaulting to 1000 [ 247.833576][ T9412] udevd[9412]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 247.867038][ T9406] lo speed is unknown, defaulting to 1000 [ 248.136377][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 248.193857][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 248.288746][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 248.297002][ C0] lec:lec_tx_timeout: lec0 [ 248.302906][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 248.729058][ T9467] netlink: 'syz.0.850': attribute type 12 has an invalid length. [ 248.794319][ T9458] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 248.942568][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 248.990157][ T9462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.997757][ T9462] IPv6: NLM_F_CREATE should be set when creating new route [ 249.005576][ T9462] IPv6: NLM_F_CREATE should be set when creating new route [ 249.013972][ T9481] tipc: Enabling of bearer rejected, media not registered [ 249.099983][ T9462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.202766][ T9489] tipc: Enabled bearer , priority 0 [ 249.268174][ T9489] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 249.283238][ T9489] tipc: Resetting bearer [ 249.359524][ T9486] tipc: Disabling bearer [ 249.932988][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'. [ 249.969280][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 250.026262][ T9545] netlink: 'syz.0.872': attribute type 15 has an invalid length. [ 250.037145][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 250.059935][ T9540] ip6gre1: entered promiscuous mode [ 250.067695][ T9540] ip6gre1: entered allmulticast mode [ 250.674645][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.880'. [ 250.772036][ T9577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.781544][ T9577] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.797851][ T9577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.816803][ T8916] lo speed is unknown, defaulting to 1000 [ 250.856341][ T8916] syz2: Port: 1 Link ACTIVE [ 250.866153][ T9576] wg1 speed is unknown, defaulting to 1000 [ 250.894741][ T9576] lo speed is unknown, defaulting to 1000 [ 251.246470][ T9597] mac80211_hwsim hwsim8 ªªªªª;: renamed from wlan0 (while UP) [ 251.465268][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 251.644291][ T9609] bridge_slave_1: left allmulticast mode [ 251.689800][ T9609] bridge_slave_1: left promiscuous mode [ 251.715419][ T9609] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.192156][ T9612] bridge0: port 1(erspan0) entered blocking state [ 252.216391][ T9612] bridge0: port 1(erspan0) entered disabled state [ 252.229150][ T9612] erspan0: entered allmulticast mode [ 252.238408][ T9612] erspan0: left allmulticast mode [ 252.270988][ T9629] netlink: 'syz.1.889': attribute type 2 has an invalid length. [ 252.278855][ T9629] netlink: 'syz.1.889': attribute type 5 has an invalid length. [ 252.315824][ T9627] batadv_slave_1: entered promiscuous mode [ 252.471741][ T9643] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 252.557276][ T9643] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.597345][ T9649] netlink: 27 bytes leftover after parsing attributes in process `syz.0.895'. [ 252.620241][ T9649] netlink: 13953 bytes leftover after parsing attributes in process `syz.0.895'. [ 252.748958][ T9625] batadv_slave_1: left promiscuous mode [ 252.858962][ T9662] macsec2: entered allmulticast mode [ 252.864573][ T9662] macsec0: entered allmulticast mode [ 252.870656][ T9662] veth1_macvtap: entered allmulticast mode [ 252.953072][ T9669] geneve3: entered promiscuous mode [ 253.004244][ T9666] netlink: 1032 bytes leftover after parsing attributes in process `syz.3.899'. [ 253.328271][ T9672] geneve3: entered promiscuous mode [ 253.333716][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 253.333783][ C0] lec:lec_tx_timeout: lec0 [ 253.342500][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.374437][ T9672] netlink: 'syz.2.901': attribute type 29 has an invalid length. [ 253.669361][ T9678] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.903'. [ 253.908387][ T9690] bond3 (unregistering): Released all slaves [ 253.932876][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 253.938964][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 253.951230][ T9700] netlink: 'syz.3.908': attribute type 21 has an invalid length. [ 253.992969][ T9702] netlink: 'syz.0.907': attribute type 12 has an invalid length. [ 254.338404][ T9717] wg1 speed is unknown, defaulting to 1000 [ 254.348435][ T9717] lo speed is unknown, defaulting to 1000 [ 254.813637][ T9726] wg1: entered promiscuous mode [ 254.840876][ T9726] wg1: entered allmulticast mode [ 255.343296][ T9759] netlink: 'syz.0.924': attribute type 8 has an invalid length. [ 255.522848][ T9770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 255.629428][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 255.911071][ T9770] bond0: (slave bond_slave_1): Releasing backup interface [ 255.930125][ T9787] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 255.938295][ T9787] netlink: 'syz.0.932': attribute type 11 has an invalid length. [ 255.956451][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 255.967025][ T9787] netlink: 224 bytes leftover after parsing attributes in process `syz.0.932'. [ 255.982366][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 256.136425][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.304920][ T9807] siw: device registration error -23 [ 256.321864][ T9807] syz_tun: entered allmulticast mode [ 256.652029][ T9811] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 256.671329][ T9811] bond7 (unregistering): Released all slaves [ 256.945040][ T9829] netlink: 'syz.3.944': attribute type 2 has an invalid length. [ 257.314657][ T9851] syz.4.947 (9851) used greatest stack depth: 17656 bytes left [ 257.422190][ T9855] wg1 speed is unknown, defaulting to 1000 [ 257.454396][ T9855] lo speed is unknown, defaulting to 1000 [ 257.517293][ T9867] : entered promiscuous mode [ 257.681126][ T9857] bond3: option arp_validate: invalid value (18446744073491447809) [ 257.715579][ T9857] bond3 (unregistering): Released all slaves [ 258.348795][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 258.357085][ C0] lec:lec_tx_timeout: lec0 [ 258.362370][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 258.461844][ T9930] __nla_validate_parse: 4 callbacks suppressed [ 258.461863][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 258.511455][ T9930] veth1_to_hsr: entered promiscuous mode [ 258.517695][ T9930] macvtap0: entered promiscuous mode [ 258.544118][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 258.544647][ T9930] macvtap0: entered allmulticast mode [ 258.559904][ T9930] veth1_to_hsr: entered allmulticast mode [ 258.573019][ T9933] netlink: 56 bytes leftover after parsing attributes in process `syz.2.969'. [ 258.680639][ T9942] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 258.689662][ T9942] netlink: 244 bytes leftover after parsing attributes in process `syz.2.972'. [ 258.909185][ T6897] nci: nci_rx_work: unknown MT 0x7 [ 258.917728][ T6897] nci: nci_rx_work: unknown MT 0x7 [ 259.646310][ T9971] netlink: 'syz.2.978': attribute type 23 has an invalid length. [ 260.133836][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 260.184802][T10007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.988'. [ 260.308945][T10016] wg1 speed is unknown, defaulting to 1000 [ 260.327133][T10016] lo speed is unknown, defaulting to 1000 [ 260.362711][T10028] netlink: 996 bytes leftover after parsing attributes in process `syz.3.993'. [ 260.656832][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.994'. [ 260.706109][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 260.753495][T10038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.884299][T10045] wg1 speed is unknown, defaulting to 1000 [ 260.894097][T10045] lo speed is unknown, defaulting to 1000 [ 261.173893][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 261.221391][T10054] pim6reg: entered allmulticast mode [ 261.412494][T10061] netlink: 'syz.1.1001': attribute type 13 has an invalid length. [ 261.495357][ T3469] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.495494][T10061] netlink: 'syz.1.1001': attribute type 13 has an invalid length. [ 261.536763][ T3469] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.581860][ T3469] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.619261][ T3469] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.661642][T10073] pimreg: entered allmulticast mode [ 261.859386][T10057] netlink: 'syz.3.1000': attribute type 4 has an invalid length. [ 262.403300][T10073] pimreg: left allmulticast mode [ 262.945736][T10152] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 262.998323][T10147] team1: entered promiscuous mode [ 263.003739][T10147] team1: entered allmulticast mode [ 263.013600][T10147] 8021q: adding VLAN 0 to HW filter on device team1 [ 263.094616][T10157] bond1: left promiscuous mode [ 263.100051][T10157] sit1: left allmulticast mode [ 263.110603][T10157] bridge1: left promiscuous mode [ 263.120332][T10157] xfrm1: left allmulticast mode [ 263.140669][ T8916] lo speed is unknown, defaulting to 1000 [ 263.158765][ T8916] syz2: Port: 1 Link DOWN [ 263.368703][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 263.369306][ T3521] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 263.376914][ C0] lec:lec_tx_timeout: lec0 [ 263.391889][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 263.647164][T10151] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 263.796526][T10203] bond7: option packets_per_slave: invalid value (1048582) [ 263.805312][T10203] bond7: option packets_per_slave: allowed values 0 - 65535 [ 263.822307][T10203] bond7 (unregistering): Released all slaves [ 263.843984][T10207] __nla_validate_parse: 6 callbacks suppressed [ 263.843997][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 263.882916][T10207] wg1 speed is unknown, defaulting to 1000 [ 263.891989][T10207] lo speed is unknown, defaulting to 1000 [ 264.276847][T10213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 264.334659][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1035'. [ 264.537608][T10233] openvswitch: netlink: IP tunnel dst address not specified [ 264.633220][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'. [ 264.675546][T10237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'. [ 264.913204][T10250] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 265.001443][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1045'. [ 265.169507][T10266] sctp: [Deprecated]: syz.0.1048 (pid 10266) Use of int in max_burst socket option deprecated. [ 265.169507][T10266] Use struct sctp_assoc_value instead [ 265.180933][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 265.377477][T10261] wg1: left promiscuous mode [ 265.443579][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.463161][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.517164][T10261] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 265.534889][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1051'. [ 265.583620][T10261] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 265.662801][T10261] bond1: left promiscuous mode [ 265.667701][T10261] gre3: left promiscuous mode [ 265.675549][T10261] bond2: left promiscuous mode [ 265.724213][ T6897] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.755227][ T6897] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.769359][ T6897] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.777774][ T6897] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.837120][ T6897] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.847415][ T6897] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.858945][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 265.863772][T10283] wg1 speed is unknown, defaulting to 1000 [ 265.927155][ T6897] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.946889][ T6897] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.957860][T10287] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 265.970828][T10283] lo speed is unknown, defaulting to 1000 [ 266.153433][T10291] wg1 speed is unknown, defaulting to 1000 [ 266.279750][T10291] lo speed is unknown, defaulting to 1000 [ 266.838986][T10316] geneve2: entered promiscuous mode [ 266.844439][T10316] geneve2: entered allmulticast mode [ 266.872740][T10323] openvswitch: netlink: Flow key attribute not present in set flow. [ 266.884455][T10320] IPVS: set_ctl: invalid protocol: 64 0.32.0.0:8192 [ 267.149920][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 267.199351][T10331] syzkaller0: entered promiscuous mode [ 267.211728][T10331] syzkaller0: entered allmulticast mode [ 267.297062][T10340] tipc: Enabled bearer , priority 0 [ 267.307666][T10340] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 267.317727][T10340] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 267.382636][T10340] sctp: [Deprecated]: syz.1.1063 (pid 10340) Use of int in max_burst socket option. [ 267.382636][T10340] Use struct sctp_assoc_value instead [ 267.408201][T10340] tipc: Resetting bearer [ 267.583772][T10349] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 267.724391][T10361] netlink: 'syz.1.1067': attribute type 83 has an invalid length. [ 267.844500][T10359] syzkaller0: entered promiscuous mode [ 267.850405][T10359] syzkaller0: entered allmulticast mode [ 267.857348][T10358] tipc: Enabled bearer , priority 0 [ 268.000495][ T3469] tipc: Resetting bearer [ 268.009463][T10358] tipc: Resetting bearer [ 268.398760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 268.407031][ C0] lec:lec_tx_timeout: lec0 [ 268.411976][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.781892][T10358] tipc: Disabling bearer [ 269.893420][ T8914] tipc: Node number set to 309252611 [ 269.899406][ T5956] tipc: Node number set to 633169300 [ 270.045441][T10393] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 270.251072][T10412] __nla_validate_parse: 3 callbacks suppressed [ 270.251094][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 270.359319][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.367495][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.543534][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.564129][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.568317][T10411] netlink: 'syz.0.1078': attribute type 30 has an invalid length. [ 270.664684][T10407] veth1_macvtap: left allmulticast mode [ 270.766642][T10407] macsec0: left allmulticast mode [ 270.781845][T10407] veth1_to_hsr: left allmulticast mode [ 270.820794][ T8915] wg1 speed is unknown, defaulting to 1000 [ 270.829965][ T8915] syz0: Port: 1 Link DOWN [ 270.860029][T10411] bond2: option arp_missed_max: invalid value (0) [ 270.866700][T10411] bond2: option arp_missed_max: allowed values 1 - 255 [ 270.881715][T10411] bond2 (unregistering): Released all slaves [ 270.937131][ T3469] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.946885][ T3469] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.975895][ T3469] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 271.215656][ T3469] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.224981][ T3469] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.234608][ T3469] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 271.250209][T10430] netem: change failed [ 271.484333][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'. [ 272.756864][ T3469] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.778756][ T3469] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.787689][ T3469] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.827653][ T3469] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.849252][ T3469] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.868712][ T3469] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.882575][T10450] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1087'. [ 272.899608][T10427] wg1 speed is unknown, defaulting to 1000 [ 272.907456][T10427] lo speed is unknown, defaulting to 1000 [ 273.151329][T10460] xt_CT: No such helper "pptp" [ 273.428692][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 273.436888][ C0] lec:lec_tx_timeout: lec0 [ 273.442056][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 273.459305][T10468] pimreg3: entered allmulticast mode [ 273.465814][ T8916] IPVS: starting estimator thread 0... [ 273.579440][T10479] IPVS: using max 26 ests per chain, 62400 per kthread [ 274.236841][T10505] netlink: 'syz.0.1104': attribute type 11 has an invalid length. [ 274.953124][T10541] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1110'. [ 275.028386][T10544] siw: device registration error -23 [ 275.490639][T10553] batman_adv: batadv0: Adding interface: macsec3 [ 275.497269][T10553] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.544534][T10553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.584189][T10553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.629015][T10553] batman_adv: batadv0: Interface activated: macsec3 [ 275.743655][T10554] batadv1: entered promiscuous mode [ 275.745814][T10556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1116'. [ 275.812157][T10554] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.839032][T10556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1116'. [ 275.949506][T10566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.300823][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 276.739055][T10604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.777888][T10613] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1126'. [ 277.271055][T10620] macsec1: entered promiscuous mode [ 277.301776][T10620] macsec1: entered allmulticast mode [ 277.993254][T10659] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 278.448802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 278.456025][T10680] wg1 speed is unknown, defaulting to 1000 [ 278.458088][ C0] lec:lec_tx_timeout: lec0 [ 278.469819][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 278.504374][T10680] lo speed is unknown, defaulting to 1000 [ 278.943877][T10711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.332544][T10726] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1149'. [ 279.516306][T10729] wg1 speed is unknown, defaulting to 1000 [ 279.616384][T10726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.664878][T10729] lo speed is unknown, defaulting to 1000 [ 279.919066][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 279.951113][T10761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.990504][T10761] bond0: (slave rose0): Enslaving as an active interface with an up link [ 280.020651][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 280.097928][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.114488][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.145960][ T60] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.178073][ T60] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.635412][T10786] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 280.686083][T10786] xt_ecn: cannot match TCP bits for non-tcp packets [ 280.879745][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 280.928759][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 280.934870][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 280.934901][T10801] netlink: 'syz.0.1162': attribute type 12 has an invalid length. [ 281.133571][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.142110][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.155190][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.223166][T10807] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 281.309379][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.319649][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.330209][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.339620][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.348160][T10807] wg1 speed is unknown, defaulting to 1000 [ 281.436979][T10825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 281.862888][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 281.970936][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 282.011318][T10846] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 282.253048][T10853] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1174'. [ 282.475678][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1176'. [ 282.700632][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'. [ 283.358350][T10909] wg1 speed is unknown, defaulting to 1000 [ 283.368188][T10912] netlink: 'syz.4.1189': attribute type 3 has an invalid length. [ 283.390546][T10909] lo speed is unknown, defaulting to 1000 [ 283.422656][T10909] wg1 speed is unknown, defaulting to 1000 [ 283.478690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 283.486962][ C0] lec:lec_tx_timeout: lec0 [ 283.492024][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 283.727670][T10934] netlink: 'syz.2.1194': attribute type 3 has an invalid length. [ 283.769575][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 283.787956][T10938] netlink: 'syz.2.1194': attribute type 15 has an invalid length. [ 283.802265][T10937] xt_l2tp: invalid flags combination: 0 [ 284.003181][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 284.310478][T10959] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 284.500713][T10959] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.605412][T10978] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 284.679787][T10959] tipc: New replicast peer: 0.0.0.0 [ 284.690275][T10959] tipc: Enabled bearer , priority 10 [ 284.709093][T10959] tipc: New replicast peer: 172.30.1.5 [ 285.060221][T10992] sctp: [Deprecated]: syz.0.1208 (pid 10992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.060221][T10992] Use struct sctp_sack_info instead [ 285.089475][T10992] sctp: [Deprecated]: syz.0.1208 (pid 10992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.089475][T10992] Use struct sctp_sack_info instead [ 285.432369][T11000] wg1 speed is unknown, defaulting to 1000 [ 285.457929][T11000] lo speed is unknown, defaulting to 1000 [ 285.486328][T11000] wg1 speed is unknown, defaulting to 1000 [ 285.503583][T11007] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 285.816058][T11023] wg1 speed is unknown, defaulting to 1000 [ 285.855797][T11023] lo speed is unknown, defaulting to 1000 [ 285.865706][T11023] wg1 speed is unknown, defaulting to 1000 [ 285.893986][T11029] __nla_validate_parse: 11 callbacks suppressed [ 285.894007][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1216'. [ 286.236279][T11047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1222'. [ 286.327406][T11046] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 286.527769][T11046] bond3: entered promiscuous mode [ 286.533446][T11046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.614209][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 286.637732][ T8915] IPVS: starting estimator thread 0... [ 286.703146][ T5839] block nbd0: Receive control failed (result -107) [ 286.728902][T11067] IPVS: using max 26 ests per chain, 62400 per kthread [ 287.290377][T11083] x_tables: duplicate underflow at hook 2 [ 288.418547][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 288.429105][T11097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1230'. [ 288.508811][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 288.516996][ C0] lec:lec_tx_timeout: lec0 [ 288.521707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 288.626201][T11066] bridge_slave_0: left allmulticast mode [ 288.632309][T11066] bridge_slave_0: left promiscuous mode [ 288.638241][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.661045][T11066] bridge_slave_1: left allmulticast mode [ 288.667032][T11066] bridge_slave_1: left promiscuous mode [ 288.673263][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.696617][T11066] bond0: (slave bond_slave_0): Releasing backup interface [ 288.718509][T11066] bond0: (slave bond_slave_1): Releasing backup interface [ 288.741929][T11066] team0: Port device team_slave_0 removed [ 288.767230][T11066] team0: Port device team_slave_1 removed [ 288.781004][T11066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.788771][T11066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.797542][T11066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.805612][T11066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.815764][T11066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.887926][ T8915] wg1 speed is unknown, defaulting to 1000 [ 288.894394][T11102] netlink: 'syz.4.1231': attribute type 4 has an invalid length. [ 288.955918][T11096] wg1 speed is unknown, defaulting to 1000 [ 288.966010][T11096] lo speed is unknown, defaulting to 1000 [ 288.976238][T11096] wg1 speed is unknown, defaulting to 1000 [ 289.195575][T11118] wg1 speed is unknown, defaulting to 1000 [ 289.209236][T11118] lo speed is unknown, defaulting to 1000 [ 289.217258][T11118] wg1 speed is unknown, defaulting to 1000 [ 289.285659][T11105] can: request_module (can-proto-0) failed. [ 289.605230][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 289.795742][T11142] wg1 speed is unknown, defaulting to 1000 [ 289.803913][T11142] lo speed is unknown, defaulting to 1000 [ 289.826578][T11142] wg1 speed is unknown, defaulting to 1000 [ 290.003541][T11150] delete_channel: no stack [ 290.318053][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 290.358825][T11167] netlink: 'syz.0.1242': attribute type 13 has an invalid length. [ 290.366797][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 290.419864][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 290.431579][T11167] netlink: 'syz.0.1242': attribute type 13 has an invalid length. [ 290.451510][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 290.811919][T11191] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 290.827795][T11191] dummy0: entered promiscuous mode [ 290.833924][T11191] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 290.902611][T11190] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 290.910719][T11190] __nla_validate_parse: 4 callbacks suppressed [ 290.910738][T11190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1251'. [ 291.301726][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 291.421305][T11213] batman_adv: batadv0: Interface deactivated: macsec3 [ 291.532146][T11197] netlink: 'syz.1.1249': attribute type 3 has an invalid length. [ 291.614900][T11223] ip6gretap1: entered allmulticast mode [ 291.721756][T11232] Bluetooth: MGMT ver 1.23 [ 292.057113][T11246] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1265'. [ 292.171851][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 292.244982][T11237] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 292.320494][T11254] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1268'. [ 292.372206][T11257] openvswitch: netlink: IP tunnel dst address not specified [ 292.376231][T11254] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 292.447240][T11251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.758328][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1274'. [ 292.820322][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 292.874990][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'. [ 293.060767][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.076371][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.300813][ T3469] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.320309][ T3469] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.359362][ T3469] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.368303][ T3469] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.396494][ T3469] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.414625][ T3469] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.462761][ T3469] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.477373][ T3469] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.496425][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 293.563770][T11319] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20004 [ 293.613789][T11322] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1286'. [ 293.727436][T11327] wg1 speed is unknown, defaulting to 1000 [ 293.766406][T11327] lo speed is unknown, defaulting to 1000 [ 293.770710][T11335] syzkaller0: entered promiscuous mode [ 293.783008][T11335] syzkaller0: entered allmulticast mode [ 293.803105][T11327] wg1 speed is unknown, defaulting to 1000 [ 293.919975][T11345] nbd: must specify at least one socket [ 294.465735][T11368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.528693][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6010 ms [ 294.536966][ C0] lec:lec_tx_timeout: lec0 [ 294.542504][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.625829][T11434] gretap1: entered allmulticast mode [ 296.170586][T11455] __nla_validate_parse: 11 callbacks suppressed [ 296.170611][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 296.227719][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 296.257555][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1317'. [ 297.173879][T11484] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1322'. [ 297.429170][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1323'. [ 297.585480][T11489] batman_adv: batadv0: Adding interface: ip6gretap2 [ 297.601019][T11489] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.644424][T11491] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 297.674737][T11489] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 297.704737][T11494] lo: entered allmulticast mode [ 297.777886][T11493] lo: left allmulticast mode [ 297.911573][T11512] netlink: 'syz.2.1330': attribute type 29 has an invalid length. [ 297.957497][T11512] netlink: 'syz.2.1330': attribute type 29 has an invalid length. [ 298.211844][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 298.248407][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 298.353279][T11542] netlink: 'syz.4.1336': attribute type 3 has an invalid length. [ 298.420222][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1335'. [ 298.661254][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1341'. [ 299.112559][ T3821] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 299.128466][ T3821] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 299.140098][ T5945] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 299.971258][ T5945] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 299.992529][ T5945] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 300.146908][T11623] wg1 speed is unknown, defaulting to 1000 [ 300.208221][T11623] lo speed is unknown, defaulting to 1000 [ 300.231375][T11623] wg1 speed is unknown, defaulting to 1000 [ 300.288666][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 300.296786][ C0] lec:lec_tx_timeout: lec0 [ 300.302710][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 300.744175][T11651] tipc: Enabling of bearer rejected, already enabled [ 301.185387][T11674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1372'. [ 301.272755][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 301.298384][T11683] wg1 speed is unknown, defaulting to 1000 [ 301.305181][T11681] hsr_slave_0: left promiscuous mode [ 301.314716][T11681] hsr_slave_1: left promiscuous mode [ 301.358518][T11683] lo speed is unknown, defaulting to 1000 [ 301.376152][T11683] wg1 speed is unknown, defaulting to 1000 [ 301.583441][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1372'. [ 301.818023][T11707] ip6gre0: entered promiscuous mode [ 301.836564][T11707] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 302.123285][T11720] netlink: 'syz.4.1385': attribute type 6 has an invalid length. [ 302.155422][T11720] netlink: 'syz.4.1385': attribute type 6 has an invalid length. [ 302.162506][T11721] tipc: Enabled bearer , priority 0 [ 302.200461][T11721] syzkaller0: entered promiscuous mode [ 302.206173][T11721] syzkaller0: entered allmulticast mode [ 302.317037][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 302.327452][T11725] gre0: mtu less than device minimum [ 302.351532][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 302.351585][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1386'. [ 302.365127][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1387'. [ 302.373360][T11721] tipc: Resetting bearer [ 302.489011][T11717] tipc: Resetting bearer [ 302.733894][T11717] tipc: Disabling bearer [ 302.740470][T11739] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1389'. [ 302.741518][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 302.875030][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1375'. [ 303.117480][T11755] tipc: Enabled bearer , priority 0 [ 303.129698][T11755] syzkaller0: entered promiscuous mode [ 303.135493][T11755] syzkaller0: entered allmulticast mode [ 303.179714][T11755] tipc: Resetting bearer [ 303.200064][T11754] tipc: Resetting bearer [ 303.229938][T11754] tipc: Disabling bearer [ 303.373358][T11766] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 303.445776][T11764] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 303.493856][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 303.577294][T11764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.616781][T11774] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.632182][T11774] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 303.648813][T11785] netlink: 'syz.2.1400': attribute type 10 has an invalid length. [ 303.658385][T11774] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 303.677138][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.685286][T11781] gretap1: entered promiscuous mode [ 303.693905][T11781] bond8: (slave gretap1): making interface the new active one [ 303.705123][T11781] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 303.721384][T11787] x_tables: duplicate underflow at hook 1 [ 303.790108][T11764] macvlan0: entered promiscuous mode [ 303.795820][T11764] macvlan0: entered allmulticast mode [ 303.814382][T11764] bond8: entered promiscuous mode [ 303.840829][T11764] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 303.861277][T11764] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 303.876335][T11764] bond8: left promiscuous mode [ 303.898819][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.907028][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.920136][T11783] wg1 speed is unknown, defaulting to 1000 [ 303.939080][T11783] lo speed is unknown, defaulting to 1000 [ 303.950955][T11783] wg1 speed is unknown, defaulting to 1000 [ 303.991836][T11773] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.085857][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.118546][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.292594][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.313270][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.334843][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.382214][T11773] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.545310][T11821] wg1 speed is unknown, defaulting to 1000 [ 304.562995][T11821] lo speed is unknown, defaulting to 1000 [ 304.580582][T11821] wg1 speed is unknown, defaulting to 1000 [ 304.593306][T11821] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.989290][T11843] tipc: Enabling of bearer rejected, failed to enable media [ 305.191568][T11857] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 305.328680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 305.336908][ C0] lec:lec_tx_timeout: lec0 [ 305.341732][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.382322][T11865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.391482][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.747624][T11875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.078457][T11896] syzkaller1: entered promiscuous mode [ 306.137443][T11896] syzkaller1: entered allmulticast mode [ 306.225669][T11904] __nla_validate_parse: 4 callbacks suppressed [ 306.225689][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 306.256566][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 306.378590][T11920] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 306.455355][T11922] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1432'. [ 306.593033][T11920] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.703654][T11934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1435'. [ 306.986180][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 307.002248][T11956] syzkaller1: entered promiscuous mode [ 307.016471][T11956] syzkaller1: entered allmulticast mode [ 307.027636][T11958] netlink: 508 bytes leftover after parsing attributes in process `syz.0.1444'. [ 307.057736][T11955] netlink: 'syz.3.1442': attribute type 83 has an invalid length. [ 307.162045][T11960] wg1 speed is unknown, defaulting to 1000 [ 307.173274][T11960] lo speed is unknown, defaulting to 1000 [ 307.213384][T11960] wg1 speed is unknown, defaulting to 1000 [ 307.301514][T11960] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.362069][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 307.383747][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 307.425934][T11976] SET target dimension over the limit! [ 307.752450][T11978] wg1 speed is unknown, defaulting to 1000 [ 307.836257][T11978] lo speed is unknown, defaulting to 1000 [ 307.873806][T11978] wg1 speed is unknown, defaulting to 1000 [ 307.943502][T11978] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.106054][T12003] netlink: 'syz.1.1454': attribute type 29 has an invalid length. [ 308.126365][T12003] netlink: 'syz.1.1454': attribute type 29 has an invalid length. [ 308.138900][T12003] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1454'. [ 308.149001][T12003] unsupported nla_type 58 [ 308.467559][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 309.416865][T12060] wg1 speed is unknown, defaulting to 1000 [ 309.425696][T12060] lo speed is unknown, defaulting to 1000 [ 309.442004][T12060] wg1 speed is unknown, defaulting to 1000 [ 309.464329][T12060] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.007175][T12072] batman_adv: batadv0: Adding interface: dummy0 [ 310.031228][T12072] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.062063][T12091] x_tables: duplicate underflow at hook 3 [ 310.111497][T12072] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 310.348730][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 310.356940][ C0] lec:lec_tx_timeout: lec0 [ 310.362128][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.471382][T12107] bond9: option arp_interval: invalid value (18446744073709551615) [ 310.496172][T12107] bond9: option arp_interval: allowed values 0 - 2147483647 [ 310.570357][T12107] bond9 (unregistering): Released all slaves [ 310.777140][T12125] tipc: Enabled bearer , priority 0 [ 310.796268][T12125] syzkaller0: entered promiscuous mode [ 310.805973][T12125] syzkaller0: entered allmulticast mode [ 310.856797][T12125] tipc: Resetting bearer [ 310.909764][T12121] wg1 speed is unknown, defaulting to 1000 [ 310.913572][T12124] tipc: Resetting bearer [ 310.959149][T12124] tipc: Disabling bearer [ 310.970830][T12121] lo speed is unknown, defaulting to 1000 [ 311.001019][T12121] wg1 speed is unknown, defaulting to 1000 [ 311.050377][T12121] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.136156][T12131] wg1 speed is unknown, defaulting to 1000 [ 311.808874][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 311.819386][T12151] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 311.952238][T12131] lo speed is unknown, defaulting to 1000 [ 312.055901][T12151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.076145][T12152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.085409][T12152] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.092120][T12151] x_tables: duplicate underflow at hook 1 [ 312.096889][T12152] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 312.123264][T12153] gretap1: entered promiscuous mode [ 312.132837][T12153] bond2: (slave gretap1): making interface the new active one [ 312.141163][T12153] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 312.151632][T12131] wg1 speed is unknown, defaulting to 1000 [ 312.204412][T12131] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.248379][T12123] wg1 speed is unknown, defaulting to 1000 [ 312.358592][T12123] lo speed is unknown, defaulting to 1000 [ 312.447898][T12123] wg1 speed is unknown, defaulting to 1000 [ 312.506305][T12123] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.777915][T12187] __nla_validate_parse: 6 callbacks suppressed [ 312.777937][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 313.327869][T12191] wg1 speed is unknown, defaulting to 1000 [ 313.359719][ T30] audit: type=1800 audit(1765657062.053:7): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1503" name="memory.events" dev="tmpfs" ino=1607 res=0 errno=0 [ 313.389667][T12191] lo speed is unknown, defaulting to 1000 [ 313.397414][T12191] wg1 speed is unknown, defaulting to 1000 [ 313.497014][T12191] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.563881][T12203] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1504'. [ 313.616603][T12206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.646497][T12203] unsupported nlmsg_type 40 [ 313.945709][T12209] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 314.499903][T12225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1510'. [ 314.602897][T12239] netlink: 'syz.1.1513': attribute type 30 has an invalid length. [ 314.795102][T12232] wg1 speed is unknown, defaulting to 1000 [ 314.865807][T12232] lo speed is unknown, defaulting to 1000 [ 314.901409][T12232] wg1 speed is unknown, defaulting to 1000 [ 314.908589][T12246] netlink: 'syz.1.1515': attribute type 21 has an invalid length. [ 314.917007][T12246] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1515'. [ 314.931417][T12232] virt_wifi0 speed is unknown, defaulting to 1000 [ 315.000576][T12248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1516'. [ 315.044939][T12246] netlink: 'syz.1.1515': attribute type 4 has an invalid length. [ 315.060213][T12248] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 315.142304][T12246] netlink: 'syz.1.1515': attribute type 5 has an invalid length. [ 315.197961][T12246] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1515'. [ 315.368678][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.376950][ C0] lec:lec_tx_timeout: lec0 [ 315.382031][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 316.371760][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 316.477451][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1525'. [ 316.703424][ T3821] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.734226][ T3821] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.768830][ T3821] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.778518][ T3821] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.029098][T12298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.272651][T12312] netlink: 'syz.0.1532': attribute type 18 has an invalid length. [ 317.280931][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 317.299153][T12312] netlink: 'syz.0.1532': attribute type 18 has an invalid length. [ 317.307903][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 317.495791][T12320] bond5 (unregistering): Released all slaves [ 317.767663][T12329] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 317.944267][T12336] __nla_validate_parse: 6 callbacks suppressed [ 317.944289][T12336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1538'. [ 318.047088][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 318.196901][T12343] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1539'. [ 318.415720][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 318.879048][ T30] audit: type=1800 audit(1765657067.573:8): pid=12362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1544" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1695 res=0 errno=0 [ 318.946537][ T30] audit: type=1804 audit(1765657067.573:9): pid=12362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1544" name="/newroot/326/x000000000000000300000000000000000000003" dev="tmpfs" ino=1695 res=1 errno=0 [ 319.095717][T12365] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1545'. [ 319.113414][T12365] batman_adv: batadv0: Adding interface: dummy0 [ 319.129364][T12365] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.162524][T12365] batman_adv: batadv0: Interface activated: dummy0 [ 319.225753][T12371] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 319.427850][T12382] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 319.502994][T12382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.541883][T12382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1549'. [ 319.577188][T12382] bond5: entered promiscuous mode [ 319.584550][T12382] bond5: entered allmulticast mode [ 319.740309][T12395] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1551'. [ 319.851612][T12401] syz.0.1553 uses old SIOCAX25GETINFO [ 320.064495][T12382] bond5 (unregistering): Released all slaves [ 320.104441][T12395] vlan3: entered allmulticast mode [ 320.110138][T12395] gretap0: entered allmulticast mode [ 320.288245][T12416] netlink: 'syz.0.1557': attribute type 5 has an invalid length. [ 320.310410][ T30] audit: type=1800 audit(1765657069.003:10): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1557" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1706 res=0 errno=0 [ 320.388699][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 320.397247][ C0] lec:lec_tx_timeout: lec0 [ 320.407419][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 320.774742][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 320.854733][T12440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.863058][T12452] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.919894][T12452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.937731][T12452] bond6: (slave lo): Enslaving as an active interface with an up link [ 320.963986][T12459] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 321.020785][T12464] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 321.029381][T12464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1569'. [ 321.281581][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 321.334722][T12440] bond6 (unregistering): (slave lo): Releasing backup interface [ 321.344763][T12440] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 321.360553][T12440] bond6 (unregistering): Released all slaves [ 321.387179][T12459] batadv0: entered allmulticast mode [ 321.395799][T12459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.404800][T12459] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 321.433899][T12464] batadv0: entered promiscuous mode [ 321.441988][T12464] bond0: (slave batadv0): Releasing backup interface [ 321.453799][T12464] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 321.680810][T12495] IPVS: stopping backup sync thread 6924 ... [ 321.701133][ T6897] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.712759][ T6897] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.749078][ T6897] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.778567][ T6897] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.931338][T12520] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 322.081722][T12528] netlink: 'syz.4.1584': attribute type 11 has an invalid length. [ 322.165094][T12502] "syz.0.1579" (12502) uses obsolete ecb(arc4) skcipher [ 322.204275][T12533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.227538][T12533] tipc: Failed to remove unknown binding: 66,1,1/0:2425434725/2425434727 [ 322.237732][T12533] tipc: Failed to remove unknown binding: 66,1,1/0:2425434725/2425434727 [ 322.259790][T12534] tipc: Enabled bearer , priority 0 [ 322.280237][T12534] syzkaller0: entered promiscuous mode [ 322.286218][T12534] syzkaller0: entered allmulticast mode [ 322.300017][T12534] tipc: Resetting bearer [ 322.307056][T12534] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 322.332986][T12538] tipc: Failed to remove unknown binding: 66,1,1/0:2425434725/2425434727 [ 322.342327][T12538] tipc: Failed to remove unknown binding: 66,1,1/0:2425434725/2425434727 [ 322.342335][T12532] tipc: Resetting bearer [ 322.421042][T12532] tipc: Disabling bearer [ 322.792066][T12553] wg1 speed is unknown, defaulting to 1000 [ 322.923305][T12553] lo speed is unknown, defaulting to 1000 [ 322.933077][T12556] wg1 speed is unknown, defaulting to 1000 [ 322.971246][T12556] lo speed is unknown, defaulting to 1000 [ 322.988805][T12553] wg1 speed is unknown, defaulting to 1000 [ 323.021525][T12556] wg1 speed is unknown, defaulting to 1000 [ 323.039809][T12553] virt_wifi0 speed is unknown, defaulting to 1000 [ 323.059817][T12556] virt_wifi0 speed is unknown, defaulting to 1000 [ 323.390900][T12569] __nla_validate_parse: 10 callbacks suppressed [ 323.390921][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1595'. [ 324.324897][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1604'. [ 324.349881][T12607] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1605'. [ 324.369086][T12607] netlink: 'syz.3.1605': attribute type 9 has an invalid length. [ 324.377763][T12607] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 324.430520][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'. [ 324.666288][T12617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1606'. [ 324.719466][T12612] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1606'. [ 324.904836][T12628] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1608'. [ 324.915478][T12625] syzkaller0: entered promiscuous mode [ 324.921113][T12625] syzkaller0: entered allmulticast mode [ 325.165334][T12639] tipc: Enabled bearer , priority 0 [ 325.174323][T12629] Cannot find add_set index 2 as target [ 325.189862][T12639] syzkaller0: entered promiscuous mode [ 325.198703][T12639] syzkaller0: entered allmulticast mode [ 325.220851][T12639] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 325.418680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 325.426794][ C0] lec:lec_tx_timeout: lec0 [ 325.431546][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 325.927578][T12662] netlink: 'syz.1.1618': attribute type 9 has an invalid length. [ 325.948365][T12638] tipc: Resetting bearer [ 325.954727][T12662] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1618'. [ 326.032717][T12638] tipc: Disabling bearer [ 326.182105][T12665] pim6reg1: entered promiscuous mode [ 326.222368][T12665] pim6reg1: entered allmulticast mode [ 326.634071][T12663] delete_channel: no stack [ 326.698319][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 326.716594][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 327.308308][T12724] netlink: 'syz.3.1632': attribute type 11 has an invalid length. [ 327.874915][T12748] syzkaller0: entered promiscuous mode [ 327.885835][T12748] syzkaller0: entered allmulticast mode [ 328.413105][T12759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.450231][T12759] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 328.466685][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 328.489518][T12768] Cannot find set identified by id 65534 to match [ 329.105077][T12783] __nla_validate_parse: 3 callbacks suppressed [ 329.105098][T12783] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1648'. [ 329.457486][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 329.630905][T12794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.752254][T12802] wg1 speed is unknown, defaulting to 1000 [ 329.770794][T12802] lo speed is unknown, defaulting to 1000 [ 329.780339][T12802] wg1 speed is unknown, defaulting to 1000 [ 329.809793][T12802] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.922879][T12807] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 329.959060][T12807] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1656'. [ 329.978973][T12810] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1654'. [ 329.990475][T12807] tap0: tun_chr_ioctl cmd 1074025692 [ 330.029790][T12807] syzkaller0: entered promiscuous mode [ 330.035315][T12807] syzkaller0: entered allmulticast mode [ 330.438753][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 330.447300][ C0] lec:lec_tx_timeout: lec0 [ 330.452517][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 330.695428][T12846] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1663'. [ 330.781583][T12848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1664'. [ 330.814790][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 331.728093][T12873] wg1 speed is unknown, defaulting to 1000 [ 331.738234][T12873] lo speed is unknown, defaulting to 1000 [ 331.751645][T12873] wg1 speed is unknown, defaulting to 1000 [ 331.771099][T12873] virt_wifi0 speed is unknown, defaulting to 1000 [ 331.913221][T12887] syzkaller0: entered promiscuous mode [ 331.917231][T12886] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1672'. [ 331.924791][T12887] syzkaller0: entered allmulticast mode [ 331.937961][T12891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1674'. [ 332.002289][T12893] IPVS: set_ctl: invalid protocol: 109 172.20.20.27:20002 [ 332.182933][T12898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1675'. [ 332.423609][T12909] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 332.443533][T12909] netlink: 'syz.1.1678': attribute type 1 has an invalid length. [ 332.708270][T12926] wg1 speed is unknown, defaulting to 1000 [ 332.716316][T12926] lo speed is unknown, defaulting to 1000 [ 332.742416][T12926] wg1 speed is unknown, defaulting to 1000 [ 332.755335][T12926] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.238373][T12942] netlink: 'syz.0.1687': attribute type 4 has an invalid length. [ 333.266232][T12942] netlink: 'syz.0.1687': attribute type 4 has an invalid length. [ 333.280590][ T8916] lo speed is unknown, defaulting to 1000 [ 333.299528][ T8916] syz2: Port: 1 Link ACTIVE [ 333.630602][T12952] 8021q: adding VLAN 0 to HW filter on device bond9 [ 333.638294][T12958] netlink: 'syz.2.1689': attribute type 12 has an invalid length. [ 333.732376][T12959] macsec2: entered promiscuous mode [ 333.777373][T12959] bond9: entered promiscuous mode [ 333.790764][T12959] macsec2: entered allmulticast mode [ 333.814286][T12959] bond9: entered allmulticast mode [ 333.828153][T12959] bond9: left allmulticast mode [ 333.834652][T12959] bond9: left promiscuous mode [ 333.918783][T12963] : renamed from bond_slave_0 [ 334.133599][T12969] wg1 speed is unknown, defaulting to 1000 [ 334.180186][T12969] lo speed is unknown, defaulting to 1000 [ 334.237937][T12969] wg1 speed is unknown, defaulting to 1000 [ 334.281235][T12969] virt_wifi0 speed is unknown, defaulting to 1000 [ 335.403255][T13024] __nla_validate_parse: 6 callbacks suppressed [ 335.403275][T13024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1706'. [ 335.468698][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 335.477192][ C0] lec:lec_tx_timeout: lec0 [ 335.481746][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 335.655448][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 335.665868][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 335.851216][T13042] netem: incorrect ge model size [ 335.858785][T13042] netem: change failed [ 336.118031][T13053] netlink: 'syz.4.1712': attribute type 2 has an invalid length. [ 336.142551][T13052] netlink: 'syz.1.1713': attribute type 64 has an invalid length. [ 336.150567][T13052] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1713'. [ 336.344202][T13058] wg1 speed is unknown, defaulting to 1000 [ 336.360644][T13058] lo speed is unknown, defaulting to 1000 [ 336.404795][T13058] wg1 speed is unknown, defaulting to 1000 [ 336.457375][T13058] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.762610][T13073] netlink: 'syz.1.1717': attribute type 11 has an invalid length. [ 337.258136][T13094] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1720'. [ 337.277662][T13094] netlink: 'syz.4.1720': attribute type 6 has an invalid length. [ 337.286346][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1720'. [ 337.432599][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 337.470412][ T30] audit: type=1800 audit(1765657086.163:11): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1719" name="cgroup.controllers" dev="tmpfs" ino=1758 res=0 errno=0 [ 337.936575][T13117] wg1 speed is unknown, defaulting to 1000 [ 337.962923][T13117] lo speed is unknown, defaulting to 1000 [ 338.009920][T13117] wg1 speed is unknown, defaulting to 1000 [ 338.029083][T13123] bridge0: entered promiscuous mode [ 338.036280][T13123] bridge0: port 1(macvtap1) entered blocking state [ 338.044172][T13123] bridge0: port 1(macvtap1) entered disabled state [ 338.054653][T13123] macvtap1: entered allmulticast mode [ 338.060205][T13123] bridge0: entered allmulticast mode [ 338.073636][T13123] macvtap1: left allmulticast mode [ 338.107295][T13123] bridge0: left allmulticast mode [ 338.120326][T13123] bridge0: left promiscuous mode [ 338.173516][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 338.193741][T13117] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.420682][T13126] vlan0: entered allmulticast mode [ 338.436698][T13126] bridge0: entered allmulticast mode [ 338.447354][T13126] bridge4: port 1(vlan0) entered blocking state [ 338.467228][T13126] bridge4: port 1(vlan0) entered disabled state [ 338.500253][T13126] vlan0: entered promiscuous mode [ 338.505441][T13126] bridge0: entered promiscuous mode [ 338.573650][T13126] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 338.810420][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 338.830321][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 338.938746][T13148] netlink: 'syz.1.1733': attribute type 5 has an invalid length. [ 338.946723][T13148] netlink: 'syz.1.1733': attribute type 6 has an invalid length. [ 339.300720][T13166] block nbd1: Unsupported socket: should be TCP or UNIX. [ 339.328475][T13165] block nbd1: Unsupported socket: should be TCP or UNIX. [ 355.252352][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.261762][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.272686][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.282714][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.290913][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.645615][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.655744][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.664005][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.672300][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.680271][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.005721][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 356.015446][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 356.024230][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 356.032497][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 356.043120][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 356.454813][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 356.464523][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 356.473928][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 356.484436][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 356.492396][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 356.839694][ T5848] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 356.849694][ T5848] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 356.859689][ T5848] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 356.871054][ T5848] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 356.879119][ T5848] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 357.328952][ T5848] Bluetooth: hci5: command tx timeout [ 357.728793][ T5848] Bluetooth: hci6: command tx timeout [ 358.130235][ T5848] Bluetooth: hci7: command tx timeout [ 358.529911][ T5848] Bluetooth: hci8: command tx timeout [ 358.928720][ T5848] Bluetooth: hci9: command tx timeout [ 359.408858][ T5848] Bluetooth: hci5: command tx timeout [ 359.808751][ T5848] Bluetooth: hci6: command tx timeout [ 360.208744][ T5848] Bluetooth: hci7: command tx timeout [ 360.608915][ T5848] Bluetooth: hci8: command tx timeout [ 361.008886][ T5848] Bluetooth: hci9: command tx timeout [ 361.488766][ T5848] Bluetooth: hci5: command tx timeout [ 361.728871][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 361.888960][ T5848] Bluetooth: hci6: command tx timeout [ 362.288888][ T5848] Bluetooth: hci7: command tx timeout [ 362.688881][ T5848] Bluetooth: hci8: command tx timeout [ 363.088743][ T5848] Bluetooth: hci9: command tx timeout [ 363.568759][ T5848] Bluetooth: hci5: command tx timeout [ 363.968727][ T5848] Bluetooth: hci6: command tx timeout [ 364.368797][ T5848] Bluetooth: hci7: command tx timeout [ 364.768914][ T5848] Bluetooth: hci8: command tx timeout [ 365.170402][ T5848] Bluetooth: hci9: command tx timeout [ 416.281728][ T5852] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 416.292828][ T5852] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 416.301363][ T5852] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 416.309765][ T5852] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 416.317802][ T5852] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 416.340372][ T5852] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 416.350746][ T5852] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 416.359329][ T5852] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 416.368004][ T5852] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 416.382722][ T5852] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 417.855266][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 417.865846][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 417.874625][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 417.883904][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 417.892865][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 417.919552][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 417.933609][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 417.943086][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 417.952730][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 417.961567][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 417.999486][ T5852] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 418.009619][ T5852] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 418.018803][ T5852] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 418.027126][ T5852] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 418.035296][ T5852] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 418.368731][ T5839] Bluetooth: hci11: command tx timeout [ 418.448741][ T5839] Bluetooth: hci10: command tx timeout [ 419.968898][ T5839] Bluetooth: hci13: command tx timeout [ 420.048804][ T5839] Bluetooth: hci12: command tx timeout [ 420.128786][ T5839] Bluetooth: hci14: command tx timeout [ 420.448755][ T5839] Bluetooth: hci11: command tx timeout [ 420.529824][ T5839] Bluetooth: hci10: command tx timeout [ 422.048739][ T5839] Bluetooth: hci13: command tx timeout [ 422.128781][ T5839] Bluetooth: hci12: command tx timeout [ 422.208676][ T5839] Bluetooth: hci14: command tx timeout [ 422.529009][ T5839] Bluetooth: hci11: command tx timeout [ 422.608855][ T5839] Bluetooth: hci10: command tx timeout [ 424.128702][ T5839] Bluetooth: hci13: command tx timeout [ 424.208747][ T5839] Bluetooth: hci12: command tx timeout [ 424.288922][ T5839] Bluetooth: hci14: command tx timeout [ 424.608696][ T5839] Bluetooth: hci11: command tx timeout [ 424.688753][ T5839] Bluetooth: hci10: command tx timeout [ 426.208748][ T5839] Bluetooth: hci13: command tx timeout [ 426.288692][ T5839] Bluetooth: hci12: command tx timeout [ 426.368701][ T5839] Bluetooth: hci14: command tx timeout [ 430.208795][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.533358][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 444.818564][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 444.825710][ C0] rcu: 0-....: (1 GPs behind) idle=2ed4/1/0x4000000000000000 softirq=50319/50327 fqs=5245 [ 444.837510][ C0] rcu: hardirqs softirqs csw/system [ 444.844173][ C0] rcu: number: 8044 0 0 [ 444.850790][ C0] rcu: cputime: 181 52318 13 ==> 52520(ms) [ 444.858802][ C0] rcu: (t=10503 jiffies g=47033 q=2099 ncpus=2) [ 444.865395][ C0] CPU: 0 UID: 0 PID: 13175 Comm: syz.2.1742 Not tainted syzkaller #0 PREEMPT(full) [ 444.865420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.865429][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2f/0x70 [ 444.865453][ C0] Code: 8b 04 24 65 48 8b 0c 25 08 f0 76 92 65 8b 15 b8 a5 b5 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 <74> 2c 8b 91 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b [ 444.865465][ C0] RSP: 0018:ffffc90000007b38 EFLAGS: 00000246 [ 444.865479][ C0] RAX: ffffffff8961fe40 RBX: 0000000000000000 RCX: ffff888025439e80 [ 444.865489][ C0] RDX: 0000000000000100 RSI: 0000000000000010 RDI: 0000000000000009 [ 444.865498][ C0] RBP: 1ffff1100ed7206a R08: ffffffff89615756 R09: ffffffff8df41cc0 [ 444.865508][ C0] R10: 0000000000000001 R11: ffffffff89549fc0 R12: dffffc0000000000 [ 444.865517][ C0] R13: ffff888076b90354 R14: 0000000000000010 R15: 0000000000000002 [ 444.865526][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 444.865537][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.865546][ C0] CR2: 00007fe3671156c0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 444.865561][ C0] Call Trace: [ 444.865569][ C0] [ 444.865574][ C0] taprio_dequeue_tc_priority+0x2d0/0x750 [ 444.865604][ C0] ? taprio_dequeue+0x26/0x550 [ 444.865620][ C0] taprio_dequeue+0x186/0x550 [ 444.865633][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 444.865653][ C0] __qdisc_run+0x23f/0x1510 [ 444.865689][ C0] qdisc_run+0xc7/0x300 [ 444.865708][ C0] net_tx_action+0x7ac/0x9f0 [ 444.865726][ C0] ? net_tx_action+0x617/0x9f0 [ 444.865742][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 444.865757][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 444.865786][ C0] handle_softirqs+0x27d/0x850 [ 444.865804][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 444.865822][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 444.865839][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 444.865859][ C0] __irq_exit_rcu+0xca/0x1f0 [ 444.865872][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 444.865893][ C0] irq_exit_rcu+0x9/0x30 [ 444.865904][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 444.865923][ C0] [ 444.865927][ C0] [ 444.865933][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 444.865947][ C0] RIP: 0010:lock_acquire+0x16c/0x340 [ 444.865960][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 14 c5 d8 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 444.865971][ C0] RSP: 0018:ffffc90002ee74f0 EFLAGS: 00000206 [ 444.865982][ C0] RAX: 4fdac2eaeff00e00 RBX: 0000000000000000 RCX: 4fdac2eaeff00e00 [ 444.865991][ C0] RDX: 000000003d98fb7b RSI: ffffffff8d952009 RDI: ffffffff8bbfc660 [ 444.866001][ C0] RBP: ffffffff82324194 R08: ffffffff82324194 R09: ffffffff8df41cc0 [ 444.866010][ C0] R10: dffffc0000000000 R11: fffff9400034f671 R12: 0000000000000002 [ 444.866019][ C0] R13: ffffffff8df41cc0 R14: 0000000000000000 R15: 0000000000000246 [ 444.866037][ C0] ? page_table_check_clear+0x144/0x5f0 [ 444.866056][ C0] ? page_table_check_clear+0x144/0x5f0 [ 444.866081][ C0] ? pfn_valid+0xba/0x490 [ 444.866099][ C0] ? pfn_valid+0xba/0x490 [ 444.866118][ C0] page_table_check_clear+0x164/0x5f0 [ 444.866134][ C0] ? page_table_check_clear+0x144/0x5f0 [ 444.866148][ C0] ? page_table_check_clear+0x144/0x5f0 [ 444.866163][ C0] ? vm_normal_page+0x10d/0x240 [ 444.866185][ C0] unmap_page_range+0x344b/0x4370 [ 444.866245][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 444.866270][ C0] ? mas_find+0xb0e/0xd30 [ 444.866287][ C0] ? unmap_vmas+0x144/0x580 [ 444.866310][ C0] unmap_vmas+0x399/0x580 [ 444.866337][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 444.866377][ C0] exit_mmap+0x23b/0xb20 [ 444.866394][ C0] ? uprobe_clear_state+0x20f/0x290 [ 444.866416][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 444.866431][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 444.866459][ C0] ? __pfx_exit_aio+0x10/0x10 [ 444.866483][ C0] ? uprobe_clear_state+0x27c/0x290 [ 444.866506][ C0] __mmput+0x118/0x430 [ 444.866521][ C0] exit_mm+0x1da/0x2c0 [ 444.866540][ C0] ? __pfx_exit_mm+0x10/0x10 [ 444.866565][ C0] do_exit+0x658/0x2310 [ 444.866580][ C0] ? preempt_schedule+0xae/0xc0 [ 444.866598][ C0] ? preempt_schedule_common+0x83/0xd0 [ 444.866614][ C0] ? preempt_schedule+0xae/0xc0 [ 444.866629][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 444.866645][ C0] ? __pfx_do_exit+0x10/0x10 [ 444.866666][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 444.866692][ C0] do_group_exit+0x21c/0x2d0 [ 444.866713][ C0] __x64_sys_exit_group+0x3f/0x40 [ 444.866730][ C0] x64_sys_call+0x2210/0x2210 [ 444.866746][ C0] do_syscall_64+0xfa/0xf80 [ 444.866764][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.866777][ C0] ? clear_bhb_loop+0x60/0xb0 [ 444.866794][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.866806][ C0] RIP: 0033:0x7f258e98f749 [ 444.866819][ C0] Code: Unable to access opcode bytes at 0x7f258e98f71f. [ 444.866826][ C0] RSP: 002b:00007ffcafedcb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 444.866839][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f258e98f749 [ 444.866848][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.866856][ C0] RBP: 00007ffcafedcbcc R08: 0000001eafedcc5f R09: 00000000000927c0 [ 444.866865][ C0] R10: 0000000000000204 R11: 0000000000000246 R12: 0000000000000156 [ 444.866873][ C0] R13: 00000000000927c0 R14: 0000000000052d84 R15: 00007ffcafedcc20 [ 444.866898][ C0] [ 446.428187][ C0] sched: DL replenish lagged too much