last executing test programs: 9.327021861s ago: executing program 2 (id=1537): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000f00000061119c0001000000180000000000ffff"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@random="0f68f1e7312e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x17, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800}, {"056f56"}}}}}}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) 8.795842871s ago: executing program 2 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f0081"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 8.506975637s ago: executing program 2 (id=1544): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x95}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x40, 0xe4, &(0x7f0000000200)=""/228, 0x40f00, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0xde, &(0x7f0000000c40)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(r7) socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 6.289918745s ago: executing program 4 (id=1555): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x62, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x9, 0xffff}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4040004) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r5, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00"], 0x40}}, 0x440d4) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) 6.06509615s ago: executing program 4 (id=1556): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 4.292466361s ago: executing program 4 (id=1562): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[], 0x1c}}, 0x0) close(0x4) unshare(0x6a040000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 3.75461933s ago: executing program 0 (id=1564): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000f00000061119c0001000000180000000000ffff"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@random="0f68f1e7312e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x17, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800}, {"056f56"}}}}}}}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) 3.412969627s ago: executing program 3 (id=1565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) 3.40078837s ago: executing program 1 (id=1566): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x9c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffc0000000000}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) epoll_create(0x40) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r4, 0x4) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.106718468s ago: executing program 3 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYBLOB="d17040ac9241ace1f29bfa9e53aec33ca78039b55c3d4593734e12c6e2ff117523c3c43a36fa644a829623d09216a5c8b6100dda10c04d0d0951c34f36ea83e2f12873f99e4d639c62ab3205efdd40447e28d88dff94f49ffcf1", @ANYRES8=r0, @ANYBLOB, @ANYRES8=r2, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c890}, 0xc081) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r2, 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) write(r1, &(0x7f0000000140)="24000000010006", 0x7) 3.09904595s ago: executing program 0 (id=1568): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) 2.944410509s ago: executing program 2 (id=1569): shutdown(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2.808407777s ago: executing program 1 (id=1570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r3, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.759893481s ago: executing program 3 (id=1571): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000140)=0x503f, 0x4) unshare(0x20000400) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x39, 0x0, &(0x7f00000002c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) socket$netlink(0x10, 0x3, 0xc) 2.152945603s ago: executing program 1 (id=1572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x2, 0xfffff001, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 2.068471492s ago: executing program 0 (id=1573): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440a00"], 0x20}}], 0x1, 0x24000004) r2 = socket(0x10, 0x80002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000700)={0x0, 0x55, &(0x7f00000006c0)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='dctcp', 0x5) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d02727311", 0x14}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d", 0xc8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227c1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9b9025c4e153612d4674b9411fb4de295599abbcb388d291aa839a0000000000000000", 0x98}, {&(0x7f0000000a00)}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa60a1fb949feae7ec37efdfbcf1afd4d5cf86a0f9ae55644480d6a5e735b84303583d6c2534badb3981b5448037697faa59cc666dd9ac5c7d019b47f102d78fcc0f1b609fdc51fd8d0ff81d918cbd51e9215d34ed61bd9b1bdc7afd86dc924080a278f4a7c1031bd8c64d14781e109678224f0af3631ca72a0f9c1da8d03e2f9fda9368b50f087578e25371749e0ba68e30e020b44de5ce89e0ee0bc6f843647bed3295d40858bc264defce7e12a15aea29c34861634a2c6768676349fdb9496607461a6d87cf9ae33a1bb2227a97c80a0442a79f5e268a06751322cb161d0d952368dd4c7eae22466981250b4a6de41b00e121a01b26b23bb1804c7f2d92834965cd55f0cb95d60be7dec94b05ccd", 0x1b2}], 0x4}}], 0x2, 0x2090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) 2.011726195s ago: executing program 3 (id=1574): shutdown(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 1.851111414s ago: executing program 4 (id=1575): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) 1.709810283s ago: executing program 2 (id=1576): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="549910ecb66b3a50e59ff190bf70", 0xe}, {&(0x7f0000000280)="41b6e0e7411e50f9333f14c3af0eb5c45340546ee407da39df", 0x19}], 0x2, &(0x7f00000005c0), 0x0, 0x20000000}], 0x1, 0x800) recvmmsg(r2, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.482354537s ago: executing program 1 (id=1577): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000f00000061119c0001000000180000000000ffff"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@random="0f68f1e7312e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x17, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800}, {"056f56"}}}}}}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) 1.229812616s ago: executing program 1 (id=1578): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000040)=r11, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) 1.045720878s ago: executing program 0 (id=1579): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) 924.753702ms ago: executing program 0 (id=1580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f00000000c0)="328ab2b3e5"}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004380)=ANY=[@ANYBLOB="280100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000004"], 0x128}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x700, 0x9, 0x8, {{0x2b, 0x4, 0x1, 0x11, 0xac, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x4, 0xe2, 0x3, 0x5}, @timestamp_addr={0x44, 0x24, 0x85, 0x1, 0x3, [{@empty, 0x4}, {@broadcast, 0xd0}, {@multicast1, 0x2d3f}, {@remote, 0xffffffff}]}, @lsrr={0x83, 0x1b, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x80000000, @multicast1, @multicast1]}, @ssrr={0x89, 0x1b, 0x5e, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x18}, @remote, @local, @empty, @local]}, @lsrr={0x83, 0xb, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x2c, 0x16, 0x0, 0x9, [0x5, 0x400, 0x1, 0x6, 0x4, 0x0, 0x7fc0, 0x2, 0xc0000000, 0xfffffffc]}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r2, &(0x7f0000000540)="06086c1a191ccaba933e05c7e17ac7090268c03ef0dbe9b4a39c38dedfb5f45336267522fa48e79e27a2ff3279e467dbcc06031c2954d53e2b0eb3293141dca194af2baf6eef806332d24c1515bc24d4fb425d749e19bb2845f108ab10cd2bb2d55e3195f680a73bc6ec2ffd1fff0f95f615e9e5e001ea44d0cd2f11b075df1c12d1a9ee8218bb4fda5def0245bc0ce65922e82dd847c25270bd479d16cb701a", 0xa0, 0x1, &(0x7f0000000380)={0xa, 0x4e23, 0x3ff, @local, 0x9}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tcx}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000640)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004"], 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x44000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 912.159028ms ago: executing program 4 (id=1581): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000140)=0x503f, 0x4) unshare(0x20000400) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r8, 0x29, 0x39, 0x0, &(0x7f00000002c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) socket$netlink(0x10, 0x3, 0xc) 907.925824ms ago: executing program 3 (id=1582): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000140)=0x503f, 0x4) unshare(0x20000400) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r8, 0x29, 0x39, 0x0, &(0x7f00000002c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) socket$netlink(0x10, 0x3, 0xc) 646.824365ms ago: executing program 0 (id=1583): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r7 = socket(0x2b, 0x1, 0x0) unshare(0x2c020400) ppoll(&(0x7f0000000280)=[{r7, 0xa0}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) 507.197368ms ago: executing program 2 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="050c1f6d9525d293783da3a0f1b304aa19dc525561f5bfcdec16fe120c1b0949e0ab27c8b6789aec1571c450e9453a13f89418a7977802c4ecbd93a72fb73e2895b068c053cf64e12f2a7af84c852a8e5fd8f1c9f050efa6220e7807c0f890c4de3386a8ba3dc386db886db8912c09597c3fbdf9cce3877b3044f6", @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000740)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0xc004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) close(0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 245.290697ms ago: executing program 1 (id=1585): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[], 0x1c}}, 0x0) close(0x4) unshare(0x6a040000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 126.740224ms ago: executing program 3 (id=1586): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r8, 0x10c, 0x9, &(0x7f0000000140)=0x503f, 0x4) unshare(0x20000400) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r9, 0x29, 0x39, 0x0, &(0x7f00000002c0)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) socket$netlink(0x10, 0x3, 0xc) 0s ago: executing program 4 (id=1587): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[], 0x1c}}, 0x0) close(0x4) unshare(0x6a040000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 72.591167][ T5805] cgroup: Unknown subsys name 'net' [ 72.721435][ T5805] cgroup: Unknown subsys name 'cpuset' [ 72.730740][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.260400][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.418130][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.429089][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.438308][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.446193][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.454123][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.462245][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.469339][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.470261][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.480129][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.491179][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.498956][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.502412][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.509002][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.519360][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.521322][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.534790][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.542726][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.543377][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.551067][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.566479][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.574543][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.582306][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.589606][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.597996][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.610610][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.113855][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 77.272752][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 77.313547][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.321765][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.328968][ T5821] bridge_slave_0: entered allmulticast mode [ 77.336024][ T5821] bridge_slave_0: entered promiscuous mode [ 77.371599][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.379281][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.386496][ T5821] bridge_slave_1: entered allmulticast mode [ 77.394375][ T5821] bridge_slave_1: entered promiscuous mode [ 77.402612][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 77.472932][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 77.510553][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 77.525272][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.572752][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.652667][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.659975][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.667309][ T5826] bridge_slave_0: entered allmulticast mode [ 77.674551][ T5826] bridge_slave_0: entered promiscuous mode [ 77.714357][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.721750][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.728978][ T5826] bridge_slave_1: entered allmulticast mode [ 77.735983][ T5826] bridge_slave_1: entered promiscuous mode [ 77.745224][ T5821] team0: Port device team_slave_0 added [ 77.782865][ T5821] team0: Port device team_slave_1 added [ 77.842453][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.849721][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.856836][ T5822] bridge_slave_0: entered allmulticast mode [ 77.864065][ T5822] bridge_slave_0: entered promiscuous mode [ 77.884115][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.915359][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.922521][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.948744][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.960873][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.968806][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.975967][ T5822] bridge_slave_1: entered allmulticast mode [ 77.983250][ T5822] bridge_slave_1: entered promiscuous mode [ 77.991288][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.998524][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.005657][ T5820] bridge_slave_0: entered allmulticast mode [ 78.012929][ T5820] bridge_slave_0: entered promiscuous mode [ 78.022260][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.031718][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.039009][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.046138][ T5819] bridge_slave_0: entered allmulticast mode [ 78.053618][ T5819] bridge_slave_0: entered promiscuous mode [ 78.062174][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.069476][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.076608][ T5819] bridge_slave_1: entered allmulticast mode [ 78.083783][ T5819] bridge_slave_1: entered promiscuous mode [ 78.091386][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.098495][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.124517][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.145773][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.153554][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.161295][ T5820] bridge_slave_1: entered allmulticast mode [ 78.168620][ T5820] bridge_slave_1: entered promiscuous mode [ 78.236553][ T5826] team0: Port device team_slave_0 added [ 78.254765][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.268220][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.288870][ T5826] team0: Port device team_slave_1 added [ 78.296564][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.307549][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.330015][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.350866][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.419812][ T5819] team0: Port device team_slave_0 added [ 78.436463][ T5822] team0: Port device team_slave_0 added [ 78.442886][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.450157][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.476464][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.500209][ T5819] team0: Port device team_slave_1 added [ 78.507603][ T5820] team0: Port device team_slave_0 added [ 78.519010][ T5821] hsr_slave_0: entered promiscuous mode [ 78.525504][ T5821] hsr_slave_1: entered promiscuous mode [ 78.534160][ T5822] team0: Port device team_slave_1 added [ 78.540416][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.547393][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.573448][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.596300][ T5820] team0: Port device team_slave_1 added [ 78.650216][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.657178][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.683269][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.694983][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.702509][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.729492][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.729555][ T5834] Bluetooth: hci4: command tx timeout [ 78.740265][ T5141] Bluetooth: hci3: command tx timeout [ 78.745933][ T52] Bluetooth: hci2: command tx timeout [ 78.752410][ T5830] Bluetooth: hci1: command tx timeout [ 78.757073][ T52] Bluetooth: hci0: command tx timeout [ 78.768706][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.775743][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.802234][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.840785][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.847986][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.874323][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.892022][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.898988][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.924934][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.970942][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.978250][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.004982][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.059216][ T5826] hsr_slave_0: entered promiscuous mode [ 79.065616][ T5826] hsr_slave_1: entered promiscuous mode [ 79.072210][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 79.078197][ T5826] Cannot create hsr debugfs directory [ 79.154156][ T5819] hsr_slave_0: entered promiscuous mode [ 79.160670][ T5819] hsr_slave_1: entered promiscuous mode [ 79.166741][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 79.172576][ T5819] Cannot create hsr debugfs directory [ 79.214808][ T5822] hsr_slave_0: entered promiscuous mode [ 79.221324][ T5822] hsr_slave_1: entered promiscuous mode [ 79.227435][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 79.233339][ T5822] Cannot create hsr debugfs directory [ 79.274103][ T5820] hsr_slave_0: entered promiscuous mode [ 79.280497][ T5820] hsr_slave_1: entered promiscuous mode [ 79.286697][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 79.292530][ T5820] Cannot create hsr debugfs directory [ 79.725620][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.739142][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.750396][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.770008][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.825134][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.840552][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.853444][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.863786][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.947543][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.961765][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.976582][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.001738][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.094378][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.116028][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.127229][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.137639][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.160410][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.259493][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.272854][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.286469][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.303566][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.311188][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.334589][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.341864][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.370235][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.405654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.412783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.457521][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.473254][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.498665][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.505768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.549503][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.556683][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.596730][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.611573][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.642622][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.649944][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.682332][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.689514][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.770928][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.808602][ T52] Bluetooth: hci1: command tx timeout [ 80.814052][ T52] Bluetooth: hci3: command tx timeout [ 80.819772][ T5834] Bluetooth: hci2: command tx timeout [ 80.825193][ T5834] Bluetooth: hci0: command tx timeout [ 80.828267][ T5831] Bluetooth: hci4: command tx timeout [ 80.856622][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.863758][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.896824][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.912479][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.919691][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.950188][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.963639][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.033411][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.040616][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.079860][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.087069][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.514046][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.543521][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.733089][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.740484][ T5826] veth0_vlan: entered promiscuous mode [ 81.758350][ T5819] veth0_vlan: entered promiscuous mode [ 81.772138][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.782279][ T5821] veth0_vlan: entered promiscuous mode [ 81.802754][ T5821] veth1_vlan: entered promiscuous mode [ 81.812058][ T5826] veth1_vlan: entered promiscuous mode [ 81.825951][ T5819] veth1_vlan: entered promiscuous mode [ 81.919423][ T5821] veth0_macvtap: entered promiscuous mode [ 81.936957][ T5826] veth0_macvtap: entered promiscuous mode [ 81.948396][ T5826] veth1_macvtap: entered promiscuous mode [ 81.964553][ T5822] veth0_vlan: entered promiscuous mode [ 81.973475][ T5820] veth0_vlan: entered promiscuous mode [ 81.981091][ T5821] veth1_macvtap: entered promiscuous mode [ 81.994115][ T5819] veth0_macvtap: entered promiscuous mode [ 82.012214][ T5820] veth1_vlan: entered promiscuous mode [ 82.023049][ T5819] veth1_macvtap: entered promiscuous mode [ 82.030613][ T5822] veth1_vlan: entered promiscuous mode [ 82.054916][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.070830][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.090057][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.106805][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.121684][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.143157][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.156417][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.175149][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.184516][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.209698][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.219591][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.232843][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.249093][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.268182][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.283821][ T5822] veth0_macvtap: entered promiscuous mode [ 82.321060][ T4512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.331183][ T4512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.350860][ T4512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.359663][ T4512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.370480][ T5822] veth1_macvtap: entered promiscuous mode [ 82.401016][ T5820] veth0_macvtap: entered promiscuous mode [ 82.423903][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.435706][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.445282][ T5820] veth1_macvtap: entered promiscuous mode [ 82.496417][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.533542][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.537462][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.553894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.566624][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.574455][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.605490][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.655046][ T4512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.664661][ T4512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.684523][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.710031][ T4512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.719858][ T4512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.744763][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.763858][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.779261][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.796710][ T4512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.808899][ T4512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.869177][ T5831] Bluetooth: hci0: command tx timeout [ 82.874632][ T5831] Bluetooth: hci2: command tx timeout [ 82.880880][ T52] Bluetooth: hci1: command tx timeout [ 82.881452][ T5830] Bluetooth: hci4: command tx timeout [ 82.886324][ T52] Bluetooth: hci3: command tx timeout [ 82.911018][ T4512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.933732][ T4512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.946917][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.964478][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.968559][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.987872][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.092095][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.116195][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.156676][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.180845][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.251229][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.287966][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.354604][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.371993][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.469780][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.496299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.819266][ T5951] syzkaller1: entered promiscuous mode [ 83.835515][ T5951] syzkaller1: entered allmulticast mode [ 83.889818][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9'. [ 84.739976][ T5991] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.948714][ T5831] Bluetooth: hci4: command tx timeout [ 84.951408][ T5830] Bluetooth: hci1: command tx timeout [ 84.954456][ T5141] Bluetooth: hci0: command tx timeout [ 84.960349][ T5830] Bluetooth: hci2: command tx timeout [ 84.965635][ T52] Bluetooth: hci3: command tx timeout [ 85.866137][ T6036] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 85.881980][ T6036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.29'. [ 85.992470][ T6038] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 86.318016][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.326352][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.464633][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.479368][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.830090][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.856587][ T6049] lec:lec_atm_close: lec0: Shut down! [ 86.874810][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.016172][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.057795][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.057936][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 88.059407][ T6111] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 88.067017][ T6111] netlink: 224 bytes leftover after parsing attributes in process `syz.4.46'. [ 88.133421][ T6113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.44'. [ 88.250104][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 88.331229][ T6113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.44'. [ 88.407449][ T6113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.44'. [ 88.907909][ T5878] IPVS: starting estimator thread 0... [ 89.013517][ T6133] IPVS: using max 29 ests per chain, 69600 per kthread [ 89.180051][ T5823] lec:lec_start_xmit: lec0:No lecd attached [ 89.183344][ T6135] Zero length message leads to an empty skb [ 89.804294][ T6169] bond1: option mode: invalid value (254) [ 89.838523][ T6173] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 89.888982][ T6173] netlink: 224 bytes leftover after parsing attributes in process `syz.4.55'. [ 89.940869][ T6169] bond1 (unregistering): Released all slaves [ 90.185697][ T6189] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 90.356978][ T6190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.58'. [ 90.414851][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 90.461869][ T6190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.58'. [ 90.517747][ T6190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.58'. [ 90.647018][ T50] IPVS: stop unused estimator thread 0... [ 91.767890][ T6247] bridge_slave_1: left allmulticast mode [ 91.774606][ T6247] bridge_slave_1: left promiscuous mode [ 91.780762][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.838220][ T983] cfg80211: failed to load regulatory.db [ 92.050423][ T6254] syzkaller1: entered promiscuous mode [ 92.062733][ T6254] syzkaller1: entered allmulticast mode [ 92.571364][ T6266] openvswitch: netlink: Message has 16 unknown bytes. [ 92.780254][ T6274] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 92.837960][ T6274] team0: Failed to send options change via netlink (err -105) [ 92.841570][ T6275] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 92.845488][ T6274] team0: Port device dummy0 added [ 92.930604][ T6275] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 92.946289][ T6279] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 92.977999][ T6275] team0: Failed to send options change via netlink (err -105) [ 92.997492][ T6275] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.012840][ T6275] team0: Port device dummy0 removed [ 93.025218][ T6275] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.387704][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms [ 94.396414][ C0] lec:lec_tx_timeout: lec0 [ 94.403396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 94.465522][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.561361][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.575389][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.688580][ T6314] syz_tun: entered promiscuous mode [ 94.696759][ T6314] vlan2: entered promiscuous mode [ 94.734928][ T6324] dummy0: entered allmulticast mode [ 94.741219][ T6328] syz_tun: entered allmulticast mode [ 94.759803][ T1326] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.781971][ T1326] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.937202][ T6337] __nla_validate_parse: 10 callbacks suppressed [ 94.937220][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 95.021756][ T6318] syz_tun: left allmulticast mode [ 95.049239][ T1326] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.089465][ T1326] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.476849][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 96.003915][ T6369] syz_tun: entered promiscuous mode [ 96.010182][ T6369] vlan2: entered promiscuous mode [ 96.216629][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 97.492747][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 97.603207][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 98.104858][ T6442] netlink: 148 bytes leftover after parsing attributes in process `syz.0.140'. [ 98.122799][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 98.132895][ T6442] openvswitch: netlink: Missing key (keys=40, expected=80) [ 98.526868][ T6453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.549977][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 98.590221][ T6453] vlan2: entered promiscuous mode [ 98.608200][ T6453] syz_tun: entered promiscuous mode [ 98.732224][ T6464] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 98.755946][ T6464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.157'. [ 99.080937][ T6474] Bluetooth: MGMT ver 1.23 [ 99.311377][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.150'. [ 99.671373][ T6487] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 100.104972][ T6480] dvmrp1: entered allmulticast mode [ 100.150362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 100.158535][ C0] lec:lec_tx_timeout: lec0 [ 100.163157][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 100.613526][ T50] dvmrp1 (unregistering): left allmulticast mode [ 100.623972][ T6511] __nla_validate_parse: 5 callbacks suppressed [ 100.623990][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 100.698494][ T6511] bridge0: entered promiscuous mode [ 100.715724][ T6511] bridge0: left promiscuous mode [ 100.772897][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'. [ 100.995280][ T6523] tls_set_device_offload_rx: netdev not found [ 101.322937][ T6542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.166'. [ 101.332044][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'. [ 101.354243][ T6542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.166'. [ 101.423664][ T6542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.166'. [ 101.655170][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 102.461135][ T6578] netlink: 'syz.2.175': attribute type 8 has an invalid length. [ 102.476187][ T6578] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 102.520966][ T6578] netlink: 240 bytes leftover after parsing attributes in process `syz.2.175'. [ 102.766546][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 102.838307][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 103.185049][ T6613] geneve2: entered promiscuous mode [ 103.207840][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.216010][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.383622][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.660180][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.712075][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.727027][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.218375][ T6651] tipc: Started in network mode [ 104.245226][ T6651] tipc: Node identity 4246, cluster identity 4711 [ 104.255522][ T6651] tipc: Node number set to 16966 [ 104.261459][ T6651] tipc: Cannot configure node identity twice [ 104.463529][ T6661] netlink: 'syz.1.198': attribute type 2 has an invalid length. [ 104.735131][ T6675] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 104.771887][ T6675] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 104.788283][ T6677] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 105.198838][ T6691] netdevsim netdevsim3: Direct firmware load for r failed with error -2 [ 105.218206][ T6691] netdevsim netdevsim3: Falling back to sysfs fallback for: r [ 105.740052][ T6705] __nla_validate_parse: 9 callbacks suppressed [ 105.740071][ T6705] netlink: 64 bytes leftover after parsing attributes in process `syz.4.211'. [ 105.907688][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 105.915758][ C0] lec:lec_tx_timeout: lec0 [ 105.920486][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 106.316578][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 106.327771][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 106.344588][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 106.384080][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 106.717441][ T6720] lec:lec_atm_close: lec0: Shut down! [ 106.908254][ T6735] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 106.929586][ T6735] netlink: 224 bytes leftover after parsing attributes in process `syz.0.220'. [ 107.277689][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.285382][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.390170][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.414726][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.658756][ T6751] tipc: Enabled bearer , priority 0 [ 107.799784][ T6755] syzkaller0: entered promiscuous mode [ 107.805351][ T6755] syzkaller0: entered allmulticast mode [ 107.812475][ T6755] tipc: Resetting bearer [ 107.823954][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.852877][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.862696][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.877056][ T6744] tipc: Resetting bearer [ 108.090586][ T6772] Cannot find add_set index 0 as target [ 109.138328][ T6744] tipc: Disabling bearer [ 109.148267][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.826077][ T6810] syzkaller0: entered promiscuous mode [ 109.849662][ T6810] syzkaller0: entered allmulticast mode [ 110.503929][ T6816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.955164][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 111.057882][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'. [ 111.112774][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 111.161376][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 111.482012][ T6889] tipc: Started in network mode [ 111.487086][ T6889] tipc: Node identity 32dee2e8d5d2, cluster identity 4711 [ 111.494821][ T6889] tipc: Enabled bearer , priority 0 [ 111.504195][ T6889] syzkaller0: entered promiscuous mode [ 111.532644][ T6889] syzkaller0: entered allmulticast mode [ 111.707406][ T6893] tipc: Resetting bearer [ 111.837685][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 111.845882][ C0] lec:lec_tx_timeout: lec0 [ 111.850939][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 111.907243][ T6888] tipc: Resetting bearer [ 111.930025][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 111.947327][ T6888] tipc: Disabling bearer [ 111.955780][ T6910] netlink: 'syz.2.261': attribute type 13 has an invalid length. [ 113.171180][ T6960] syzkaller0: entered promiscuous mode [ 113.178178][ T6960] syzkaller0: entered allmulticast mode [ 113.225663][ T6959] syzkaller0: entered promiscuous mode [ 113.233911][ T6959] syzkaller0: entered allmulticast mode [ 113.269167][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.275'. [ 113.279097][ T6964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 113.296649][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.275'. [ 113.315622][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.275'. [ 114.194208][ T6983] netlink: 'syz.4.283': attribute type 13 has an invalid length. [ 114.356955][ T6983] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 114.370678][ T6983] syzkaller0: entered promiscuous mode [ 114.376391][ T6983] syzkaller0: entered allmulticast mode [ 114.399786][ T6983] tipc: Enabled bearer , priority 0 [ 114.455954][ T6982] tipc: Resetting bearer [ 114.489455][ T6982] tipc: Disabling bearer [ 114.627500][ T6993] tipc: Failed to remove unknown binding: 66,0,0/0:3153735545/3153735546 [ 114.640645][ T6993] tipc: Failed to remove unknown binding: 66,0,0/0:3153735545/3153735546 [ 115.072330][ T7008] syzkaller0: entered promiscuous mode [ 115.082190][ T7008] syzkaller0: entered allmulticast mode [ 115.111067][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 115.136818][ T7004] netlink: 'syz.1.291': attribute type 6 has an invalid length. [ 115.278061][ T7004] netlink: 'syz.1.291': attribute type 6 has an invalid length. [ 115.311076][ T7024] vlan2: entered promiscuous mode [ 115.316211][ T7024] bond0: entered promiscuous mode [ 115.327555][ T7024] bond_slave_0: entered promiscuous mode [ 115.338197][ T7024] bond_slave_1: entered promiscuous mode [ 116.060318][ T7048] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 116.686310][ T7071] macsec1: entered promiscuous mode [ 116.701254][ T7071] macsec1: entered allmulticast mode [ 116.867794][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 116.875879][ C0] lec:lec_tx_timeout: lec0 [ 116.880635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 116.891277][ T7085] netlink: 'syz.3.311': attribute type 16 has an invalid length. [ 116.925353][ T7085] netlink: 'syz.3.311': attribute type 17 has an invalid length. [ 117.088617][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.104960][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.128907][ T7085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.382555][ T7100] syzkaller0: entered promiscuous mode [ 117.407901][ T7100] syzkaller0: entered allmulticast mode [ 117.433518][ T7100] TC_ACT_REPEAT abuse ? [ 119.081257][ T7146] __nla_validate_parse: 7 callbacks suppressed [ 119.081307][ T7146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.325'. [ 119.121600][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.325'. [ 119.144383][ T7146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.325'. [ 119.155497][ T7146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.325'. [ 119.230987][ T7140] syzkaller0: entered promiscuous mode [ 119.236595][ T7140] syzkaller0: entered allmulticast mode [ 119.415088][ T7162] netlink: 148 bytes leftover after parsing attributes in process `syz.4.331'. [ 119.516097][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 119.526133][ T7168] openvswitch: netlink: Missing key (keys=40, expected=80) [ 120.074685][ T7178] syzkaller0: entered promiscuous mode [ 120.086139][ T7178] syzkaller0: entered allmulticast mode [ 120.124928][ T7190] bond_slave_0: entered promiscuous mode [ 120.130833][ T7190] bond_slave_1: entered promiscuous mode [ 120.147167][ T7190] vlan2: entered promiscuous mode [ 120.152555][ T7190] bond0: entered promiscuous mode [ 120.237517][ T7196] dummy0: entered promiscuous mode [ 120.249413][ T7196] vlan2: entered promiscuous mode [ 120.682142][ T7212] syzkaller0: entered promiscuous mode [ 120.689355][ T7212] syzkaller0: entered allmulticast mode [ 120.705414][ T7212] 0: reclassify loop, rule prio 0, protocol 700 [ 120.875407][ T7222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.974612][ T7222] bond_slave_0: entered promiscuous mode [ 120.980436][ T7222] bond_slave_1: entered promiscuous mode [ 120.980825][ T7228] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 121.008735][ T7222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.030337][ T7222] bond1: (slave macvlan2): making interface the new active one [ 121.037907][ T7228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.345'. [ 121.052009][ T7222] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 121.210026][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 121.391556][ T7244] syzkaller0: entered promiscuous mode [ 121.397224][ T7244] syzkaller0: entered allmulticast mode [ 121.728812][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 121.748771][ T7252] syzkaller0: entered promiscuous mode [ 121.754311][ T7252] syzkaller0: entered allmulticast mode [ 121.771110][ T7246] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 121.795257][ T5141] Bluetooth: hci2: link tx timeout [ 121.803079][ T5141] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.887684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 121.895746][ C0] lec:lec_tx_timeout: lec0 [ 121.900418][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 121.924528][ T7246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.979144][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 122.063709][ T7253] bond2: (slave geneve2): making interface the new active one [ 122.075974][ T7253] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 122.093255][ T7256] vlan2: entered promiscuous mode [ 122.116782][ T7256] batadv0: entered promiscuous mode [ 122.308505][ T7271] netlink: 'syz.0.359': attribute type 7 has an invalid length. [ 122.316328][ T7271] netlink: 'syz.0.359': attribute type 8 has an invalid length. [ 122.328216][ T7267] warning: `syz.1.356' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.412012][ T7271] team0: entered promiscuous mode [ 122.420448][ T7271] team_slave_0: entered promiscuous mode [ 122.435065][ T7271] team_slave_1: entered promiscuous mode [ 122.458301][ T7271] gretap0: entered promiscuous mode [ 122.477454][ T7271] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 122.930203][ T30] audit: type=1107 audit(1770383658.559:2): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' Û—žD»ùÖª,b†Ø”z‚"ƶ­?0Éy’£½çYÙY˜ÎÒ»Àe) ƒ4' [ 123.348637][ T5831] Bluetooth: hci2: link tx timeout [ 123.353963][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.429387][ T5885] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 123.609653][ T7303] fido_id[7303]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 123.828997][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 124.065158][ T7320] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 124.263045][ T7327] syzkaller0: entered promiscuous mode [ 124.275418][ T7327] syzkaller0: entered allmulticast mode [ 124.802332][ T7341] geneve0: entered promiscuous mode [ 124.807607][ T7341] geneve0: entered allmulticast mode [ 125.061641][ T7352] syzkaller0: entered promiscuous mode [ 125.067308][ T7352] syzkaller0: entered allmulticast mode [ 125.104339][ T7365] tipc: Enabled bearer , priority 0 [ 126.175718][ T7359] syzkaller0: entered promiscuous mode [ 126.181833][ T7359] syzkaller0: entered allmulticast mode [ 126.191773][ T7363] syzkaller0: entered promiscuous mode [ 126.197405][ T7363] syzkaller0: entered allmulticast mode [ 126.277330][ T7365] __nla_validate_parse: 8 callbacks suppressed [ 126.277364][ T7365] netlink: 44 bytes leftover after parsing attributes in process `syz.4.382'. [ 126.303589][ T7372] tipc: Resetting bearer [ 126.416579][ T7357] tipc: Resetting bearer [ 126.450111][ T7357] tipc: Disabling bearer [ 126.627337][ T7385] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 126.755618][ T7389] syzkaller0: entered promiscuous mode [ 126.795661][ T7389] syzkaller0: entered allmulticast mode [ 126.827365][ T7389] TC_ACT_REPEAT abuse ? [ 126.907676][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 126.915855][ C0] lec:lec_tx_timeout: lec0 [ 126.921715][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 127.030156][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 127.171909][ T7407] syzkaller0: entered promiscuous mode [ 127.189078][ T7407] syzkaller0: entered allmulticast mode [ 127.198980][ T7410] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 127.215513][ T7407] 0: reclassify loop, rule prio 0, protocol 800 [ 127.227068][ T7410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.393'. [ 127.493607][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 127.515690][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 127.546214][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 127.656133][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 127.727411][ T7427] bridge1: entered promiscuous mode [ 127.732874][ T7427] bridge1: entered allmulticast mode [ 127.744412][ T7427] team0: Port device bridge1 added [ 127.757308][ T7430] bridge0: port 3(team0) entered blocking state [ 127.765023][ T7430] bridge0: port 3(team0) entered disabled state [ 127.772288][ T7430] team0: entered allmulticast mode [ 127.779602][ T7430] team_slave_0: entered allmulticast mode [ 127.785397][ T7430] team_slave_1: entered allmulticast mode [ 127.800858][ T7430] team0: entered promiscuous mode [ 127.806207][ T7430] team_slave_0: entered promiscuous mode [ 127.812586][ T7430] team_slave_1: entered promiscuous mode [ 127.963546][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'. [ 127.998578][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 128.082677][ T7442] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 128.234901][ T7453] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.657449][ T7458] syzkaller0: entered promiscuous mode [ 128.693550][ T7458] syzkaller0: entered allmulticast mode [ 130.870833][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 131.104700][ T7551] netlink: 'syz.4.412': attribute type 7 has an invalid length. [ 131.120994][ T7551] netlink: 'syz.4.412': attribute type 8 has an invalid length. [ 131.161704][ T7551] team0: entered promiscuous mode [ 131.170206][ T7551] team_slave_0: entered promiscuous mode [ 131.176128][ T7551] team_slave_1: entered promiscuous mode [ 131.185397][ T7551] bond0: entered promiscuous mode [ 131.193516][ T7551] bond0: left promiscuous mode [ 131.199889][ T7551] team0: left promiscuous mode [ 131.204834][ T7551] team_slave_0: left promiscuous mode [ 131.210844][ T7551] team_slave_1: left promiscuous mode [ 131.881670][ T7582] __nla_validate_parse: 2 callbacks suppressed [ 131.881689][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 131.937847][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 131.945961][ C0] lec:lec_tx_timeout: lec0 [ 131.951640][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 132.083238][ T7585] xt_hashlimit: size too large, truncated to 1048576 [ 132.127929][ T7585] xt_hashlimit: max too large, truncated to 1048576 [ 132.163374][ T7591] netlink: 192 bytes leftover after parsing attributes in process `syz.2.418'. [ 132.183636][ T7585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.417'. [ 132.288501][ T7595] netlink: 'syz.4.419': attribute type 39 has an invalid length. [ 132.349289][ T7598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.478086][ T7596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.512461][ T7591] syz.2.418 (7591) used greatest stack depth: 17656 bytes left [ 132.784937][ T7624] tunl0: Caught tx_queue_len zero misconfig [ 132.796170][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.804349][ T7624] netlink: 288 bytes leftover after parsing attributes in process `syz.2.424'. [ 132.815629][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.240971][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 133.665316][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.431'. [ 133.712196][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 133.752267][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.431'. [ 133.766683][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.431'. [ 133.804319][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 134.616590][ T7701] netlink: 'syz.1.437': attribute type 39 has an invalid length. [ 135.523174][ T7726] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 136.513571][ T7767] netlink: 'syz.0.444': attribute type 2 has an invalid length. [ 136.522361][ T7767] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 136.643940][ T7773] Bluetooth: MGMT ver 1.23 [ 136.716119][ T7777] openvswitch: netlink: IP tunnel dst address not specified [ 136.901030][ T7785] __nla_validate_parse: 7 callbacks suppressed [ 136.901062][ T7785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.916591][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.925699][ T7785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.955251][ T7785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.971801][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 136.979860][ C0] lec:lec_tx_timeout: lec0 [ 136.984800][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 137.828259][ T7512] wlan0: Trigger new scan to find an IBSS to join [ 137.850384][ T7818] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 137.874766][ T7818] netlink: 216 bytes leftover after parsing attributes in process `syz.1.451'. [ 138.459566][ T7829] netlink: 240 bytes leftover after parsing attributes in process `syz.0.452'. [ 138.472591][ T7829] netlink: 48 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.051898][ T7851] batman_adv: batadv0: Adding interface: dummy0 [ 139.058521][ T7851] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.084126][ T7851] batman_adv: batadv0: Interface activated: dummy0 [ 139.120798][ T7851] batadv0: mtu less than device minimum [ 139.128175][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.140193][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.151937][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.163770][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.175449][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.187343][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.199105][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.210675][ T7851] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.396296][ T7855] lo speed is unknown, defaulting to 1000 [ 139.404503][ T7855] lo speed is unknown, defaulting to 1000 [ 139.436718][ T7855] lo speed is unknown, defaulting to 1000 [ 139.482440][ T7855] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.500498][ T7855] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.547052][ T7855] lo speed is unknown, defaulting to 1000 [ 139.567000][ T7855] lo speed is unknown, defaulting to 1000 [ 139.592749][ T7855] lo speed is unknown, defaulting to 1000 [ 139.609875][ T7855] lo speed is unknown, defaulting to 1000 [ 139.628435][ T7855] lo speed is unknown, defaulting to 1000 [ 139.720405][ T7865] lo speed is unknown, defaulting to 1000 [ 139.970850][ T7876] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.460'. [ 139.995786][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 140.192399][ T7885] lo speed is unknown, defaulting to 1000 [ 140.292057][ T7880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.461'. [ 140.874015][ T7514] wlan0: Trigger new scan to find an IBSS to join [ 141.138095][ T7907] siw: device registration error -23 [ 141.584351][ T7935] lo speed is unknown, defaulting to 1000 [ 141.808292][ T7514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.970293][ T7945] lo speed is unknown, defaulting to 1000 [ 141.997777][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 142.005973][ C0] lec:lec_tx_timeout: lec0 [ 142.010581][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 142.032855][ T7949] __nla_validate_parse: 7 callbacks suppressed [ 142.032871][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 142.241907][ T7954] lo speed is unknown, defaulting to 1000 [ 142.557295][ T7966] netlink: 76 bytes leftover after parsing attributes in process `syz.1.480'. [ 142.830542][ T7982] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 142.854296][ T7982] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 142.887300][ T7982] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 142.930495][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.480'. [ 143.053069][ T7978] lo speed is unknown, defaulting to 1000 [ 143.961647][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.035197][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.101578][ T8013] erspan0: entered promiscuous mode [ 144.121924][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 144.228079][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.234757][ T5141] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 144.467128][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 146.004356][ T8075] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 146.013828][ T8075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.510'. [ 146.034641][ T8069] netlink: 220 bytes leftover after parsing attributes in process `syz.1.508'. [ 146.044792][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 146.196129][ T8084] netlink: 'syz.1.514': attribute type 10 has an invalid length. [ 146.224888][ T8084] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 146.388269][ T8093] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 146.411839][ T8093] netlink: 224 bytes leftover after parsing attributes in process `syz.4.517'. [ 146.602019][ T8102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.519'. [ 147.017795][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 147.025860][ C0] lec:lec_tx_timeout: lec0 [ 147.030681][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 148.096821][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.535'. [ 150.242782][ T7499] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.257842][ T7499] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.266760][ T7499] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.288765][ T7499] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.320973][ T8160] net_ratelimit: 12 callbacks suppressed [ 150.320991][ T8160] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.998525][ T8213] lo speed is unknown, defaulting to 1000 [ 151.040903][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.558'. [ 151.123258][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.558'. [ 151.159094][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.558'. [ 151.218053][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.558'. [ 151.707002][ T8241] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 151.714876][ T8241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.564'. [ 152.037689][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 152.045877][ C0] lec:lec_tx_timeout: lec0 [ 152.050531][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 152.111832][ T8253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.613505][ T8270] batman_adv: batadv0: Adding interface: dummy0 [ 152.657279][ T8270] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.727763][ T8270] batman_adv: batadv0: Interface activated: dummy0 [ 152.783760][ T8275] batadv0: mtu less than device minimum [ 152.846299][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.858162][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.870069][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.881890][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.893614][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.905353][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.917404][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.371595][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 153.598750][ T8311] netlink: 192 bytes leftover after parsing attributes in process `syz.4.581'. [ 153.697066][ T8316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 154.057711][ T8331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.585'. [ 154.078077][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'. [ 154.496690][ T8314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.405480][ T8365] siw: device registration error -23 [ 156.445427][ T8365] geneve2: left promiscuous mode [ 156.535559][ T8369] netlink: 148 bytes leftover after parsing attributes in process `syz.3.596'. [ 156.641553][ T8316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.652097][ T8333] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 156.661341][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 156.670313][ T8371] net_ratelimit: 13 callbacks suppressed [ 156.670326][ T8371] openvswitch: netlink: Missing key (keys=40, expected=80) [ 156.672272][ T8333] netlink: 224 bytes leftover after parsing attributes in process `syz.1.586'. [ 156.849171][ T8375] xt_hashlimit: size too large, truncated to 1048576 [ 157.065079][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 157.400082][ T8396] netlink: 'syz.1.606': attribute type 3 has an invalid length. [ 157.420676][ T8396] netlink: 666 bytes leftover after parsing attributes in process `syz.1.606'. [ 157.499919][ T8400] dummy0: Caught tx_queue_len zero misconfig [ 157.518794][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 157.541960][ T8400] netem: change failed [ 157.696858][ T8408] openvswitch: netlink: Missing key (keys=40, expected=80) [ 157.823039][ T8413] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 158.288220][ T8438] openvswitch: netlink: Missing key (keys=40, expected=80) [ 158.387721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 158.395804][ C0] lec:lec_tx_timeout: lec0 [ 158.400470][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 158.847552][ T8457] __nla_validate_parse: 4 callbacks suppressed [ 158.847573][ T8457] netlink: 27 bytes leftover after parsing attributes in process `syz.1.635'. [ 159.695920][ T8491] tipc: Started in network mode [ 159.701709][ T8491] tipc: Node identity ac14140f, cluster identity 4711 [ 159.713137][ T8491] tipc: Enabled bearer , priority 10 [ 159.979033][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 160.368599][ T5892] IPVS: starting estimator thread 0... [ 160.370816][ T8511] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.472275][ T8521] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 160.478851][ T8517] IPVS: using max 25 ests per chain, 60000 per kthread [ 160.558620][ T8521] netlink: 224 bytes leftover after parsing attributes in process `syz.4.656'. [ 160.709498][ T5892] tipc: Node number set to 2886997007 [ 160.777804][ T8535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 160.811046][ T8538] macvtap1: entered promiscuous mode [ 160.823839][ T8538] macvtap1: entered allmulticast mode [ 160.894169][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 161.280608][ T8556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.668'. [ 161.726128][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 162.723177][ T8628] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.918560][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.949000][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.965298][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.984318][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.998608][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.108314][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.274125][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.318293][ T8647] syzkaller1: entered promiscuous mode [ 163.325146][ T8647] syzkaller1: entered allmulticast mode [ 163.380038][ T8651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.389051][ T8651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.398179][ T8651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.606254][ T8660] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 163.637760][ T8660] netlink: 224 bytes leftover after parsing attributes in process `syz.3.708'. [ 164.147708][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 164.155779][ C0] lec:lec_tx_timeout: lec0 [ 164.160740][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 164.422102][ T8693] netlink: 'syz.4.716': attribute type 21 has an invalid length. [ 164.447717][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 164.504880][ T8693] netlink: 'syz.4.716': attribute type 21 has an invalid length. [ 164.514058][ T7512] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.523290][ T7512] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.548622][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 164.569604][ T7512] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.612534][ T7512] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.852378][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 165.158101][ T8730] netlink: 41 bytes leftover after parsing attributes in process `syz.3.723'. [ 165.219086][ T8730] netlink: 140 bytes leftover after parsing attributes in process `syz.3.723'. [ 165.305920][ T8730] netlink: 41 bytes leftover after parsing attributes in process `syz.3.723'. [ 166.768317][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 166.989100][ T8799] block nbd0: server does not support multiple connections per device. [ 167.032292][ T8799] block nbd0: shutting down sockets [ 167.134807][ T8808] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 167.606435][ T8823] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.555287][ T983] net_ratelimit: 32 callbacks suppressed [ 168.555306][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.187927][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.271372][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.281074][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.292264][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.637949][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.907722][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 169.915851][ C0] lec:lec_tx_timeout: lec0 [ 169.921439][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 170.017228][ T8879] netlink: 'syz.0.773': attribute type 5 has an invalid length. [ 170.165086][ T8899] sctp: [Deprecated]: syz.1.777 (pid 8899) Use of int in max_burst socket option. [ 170.165086][ T8899] Use struct sctp_assoc_value instead [ 170.261603][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 170.634336][ T8921] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 170.674923][ T8921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.700118][ T8921] netlink: 108 bytes leftover after parsing attributes in process `syz.2.784'. [ 170.718141][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.750059][ T8921] bond1: entered promiscuous mode [ 170.773883][ T8921] bond1: entered allmulticast mode [ 171.198114][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.709920][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.792'. [ 171.750297][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.759901][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.792'. [ 171.803245][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.792'. [ 171.845626][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.792'. [ 172.030556][ T8964] netlink: 64 bytes leftover after parsing attributes in process `syz.3.798'. [ 172.049346][ T8964] syzkaller1: entered promiscuous mode [ 172.054953][ T8964] syzkaller1: entered allmulticast mode [ 172.308798][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.732693][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 173.548397][ T9010] netlink: 'syz.0.811': attribute type 4 has an invalid length. [ 173.901406][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.814'. [ 173.913905][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 174.264004][ T9043] vlan2: entered promiscuous mode [ 174.269784][ T9043] bond0: entered promiscuous mode [ 174.927674][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 174.935738][ C0] lec:lec_tx_timeout: lec0 [ 174.947954][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 175.277901][ T9081] __nla_validate_parse: 3 callbacks suppressed [ 175.277920][ T9081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 175.322280][ T9081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 175.397739][ T9081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 175.484566][ T9088] tipc: Failed to remove unknown binding: 66,0,0/0:1923473145/1923473146 [ 175.498194][ T9081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 175.518769][ T9088] tipc: Failed to remove unknown binding: 66,0,0/0:1923473145/1923473146 [ 175.609364][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 175.630337][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 175.639444][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 175.648501][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 175.855673][ T9098] syzkaller0: entered promiscuous mode [ 175.888222][ T9098] syzkaller0: entered allmulticast mode [ 176.360906][ T9116] tipc: Enabled bearer , priority 0 [ 176.374039][ T9118] syzkaller0: entered promiscuous mode [ 176.379713][ T9118] syzkaller0: entered allmulticast mode [ 176.386382][ T5141] Bluetooth: hci2: link tx timeout [ 176.392002][ T5141] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 176.412803][ T9116] syzkaller0: entered promiscuous mode [ 176.428726][ T9116] syzkaller0: entered allmulticast mode [ 176.564452][ T9116] tipc: Resetting bearer [ 176.647732][ T9113] tipc: Resetting bearer [ 176.781905][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.846'. [ 176.858399][ T9113] tipc: Disabling bearer [ 177.258778][ T9161] vlan2: entered promiscuous mode [ 177.612979][ T9181] netlink: 84 bytes leftover after parsing attributes in process `syz.0.853'. [ 178.132575][ T9204] vlan0: entered promiscuous mode [ 178.148010][ T9204] batadv0: entered promiscuous mode [ 178.433085][ T9219] syzkaller0: entered promiscuous mode [ 178.460403][ T9219] syzkaller0: entered allmulticast mode [ 178.467765][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 179.957654][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 179.965731][ C0] lec:lec_tx_timeout: lec0 [ 179.971127][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 180.366214][ T9286] __nla_validate_parse: 12 callbacks suppressed [ 180.366234][ T9286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.876'. [ 180.389710][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 180.724467][ T9294] netlink: 'syz.0.879': attribute type 2 has an invalid length. [ 180.773207][ T9294] !: entered promiscuous mode [ 180.861188][ T9300] syzkaller0: entered promiscuous mode [ 180.866707][ T9300] syzkaller0: entered allmulticast mode [ 181.788931][ T9342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.885'. [ 181.880240][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'. [ 181.892460][ T9342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.885'. [ 181.918355][ T9342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.885'. [ 183.134755][ T9381] syzkaller0: entered promiscuous mode [ 183.147750][ T9381] syzkaller0: entered allmulticast mode [ 183.474989][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 183.494386][ T9398] netlink: 52 bytes leftover after parsing attributes in process `syz.4.893'. [ 183.521647][ T9398] netlink: 'syz.4.893': attribute type 1 has an invalid length. [ 183.600877][ T9403] netlink: 'syz.2.895': attribute type 1 has an invalid length. [ 183.623838][ T9404] netlink: 48 bytes leftover after parsing attributes in process `syz.3.894'. [ 183.650392][ T9403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.895'. [ 183.973789][ T9419] syzkaller0: entered promiscuous mode [ 183.981445][ T9419] syzkaller0: entered allmulticast mode [ 184.699175][ T9441] tipc: Enabled bearer , priority 0 [ 184.716243][ T9441] syzkaller0: entered promiscuous mode [ 184.747742][ T9441] syzkaller0: entered allmulticast mode [ 184.798424][ T9441] tipc: Resetting bearer [ 184.838026][ T9438] tipc: Resetting bearer [ 184.907834][ T9438] tipc: Disabling bearer [ 184.977787][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 184.985892][ C0] lec:lec_tx_timeout: lec0 [ 184.991298][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 185.153123][ T9453] tipc: Started in network mode [ 185.182649][ T9453] tipc: Node identity 9ae6aa64a789, cluster identity 4711 [ 185.227901][ T9453] tipc: Enabled bearer , priority 0 [ 185.266239][ T9459] syzkaller0: entered promiscuous mode [ 185.319572][ T9459] syzkaller0: entered allmulticast mode [ 185.371685][ T9453] tipc: Resetting bearer [ 185.398417][ T9451] tipc: Resetting bearer [ 185.424390][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 185.462203][ T9451] tipc: Disabling bearer [ 186.521439][ T9506] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 186.538836][ T9506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.912'. [ 186.880396][ T30] audit: type=1800 audit(1770383722.499:3): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.914" name="x000000000000000b00000000000000000000013" dev="tmpfs" ino=905 res=0 errno=0 [ 186.934064][ T30] audit: type=1804 audit(1770383722.509:4): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.914" name="/newroot/172/x000000000000000b00000000000000000000013" dev="tmpfs" ino=905 res=1 errno=0 [ 187.106886][ T9527] syzkaller0: entered promiscuous mode [ 187.118459][ T9527] syzkaller0: entered allmulticast mode [ 187.226276][ T9527] tipc: Enabled bearer , priority 0 [ 187.332013][ T9526] tipc: Resetting bearer [ 187.449177][ T9526] tipc: Disabling bearer [ 187.850594][ T9551] tipc: Enabled bearer , priority 0 [ 187.883251][ T9551] syzkaller0: entered promiscuous mode [ 187.895977][ T9551] syzkaller0: entered allmulticast mode [ 187.943741][ T9549] net_ratelimit: 11 callbacks suppressed [ 187.943759][ T9549] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 188.082953][ T9550] tipc: Resetting bearer [ 188.161966][ T9550] tipc: Disabling bearer [ 188.519843][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 188.785337][ T9588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.923'. [ 188.794708][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'. [ 188.809604][ T9588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.923'. [ 189.021710][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.918'. [ 189.033080][ T9588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.923'. [ 189.755076][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 189.997690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 190.005834][ C0] lec:lec_tx_timeout: lec0 [ 190.010972][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 190.527029][ T9614] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 190.547288][ T9614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.930'. [ 191.013961][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 191.048737][ T9603] netlink: 'syz.3.927': attribute type 4 has an invalid length. [ 191.158445][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.932'. [ 191.191520][ T9624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.932'. [ 191.744224][ T9648] netlink: 148 bytes leftover after parsing attributes in process `syz.0.938'. [ 191.959488][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 191.971308][ T9661] openvswitch: netlink: Missing key (keys=40, expected=80) [ 192.165793][ T9659] syzkaller0: entered promiscuous mode [ 192.171485][ T9659] syzkaller0: entered allmulticast mode [ 194.004076][ T9691] tipc: Enabled bearer , priority 0 [ 194.014643][ T9693] syzkaller0: entered promiscuous mode [ 194.020596][ T9693] syzkaller0: entered allmulticast mode [ 194.056117][ T9688] tipc: Resetting bearer [ 194.115003][ T9687] tipc: Resetting bearer [ 194.148710][ T9687] tipc: Disabling bearer [ 194.388216][ T9698] tipc: Enabled bearer , priority 0 [ 194.417445][ T9698] syzkaller0: entered promiscuous mode [ 194.427110][ T9698] syzkaller0: entered allmulticast mode [ 194.478825][ T9698] tipc: Resetting bearer [ 194.506389][ T9697] tipc: Resetting bearer [ 194.527263][ T9697] tipc: Disabling bearer [ 194.783541][ T9703] tipc: Enabled bearer , priority 0 [ 195.017659][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 195.025751][ C0] lec:lec_tx_timeout: lec0 [ 195.030397][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 195.282786][ T9707] tipc: Resetting bearer [ 195.308024][ T9706] tipc: Enabled bearer , priority 0 [ 195.318236][ T9711] syzkaller0: entered promiscuous mode [ 195.335120][ T9711] syzkaller0: entered allmulticast mode [ 195.388537][ T9715] tipc: Resetting bearer [ 195.402243][ T9701] tipc: Disabling bearer [ 195.426228][ T9702] tipc: Resetting bearer [ 195.458399][ T9702] tipc: Disabling bearer [ 195.830407][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 197.438220][ T9769] syzkaller0: entered promiscuous mode [ 197.448206][ T9769] syzkaller0: entered allmulticast mode [ 198.662856][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 198.809770][ T9793] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 198.817479][ T9793] netlink: 224 bytes leftover after parsing attributes in process `syz.2.965'. [ 198.942903][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 199.045788][ T9675] Set syz1 is full, maxelem 65536 reached [ 199.354530][ T9809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.968'. [ 199.411865][ T9809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.968'. [ 200.013661][ T9821] syzkaller0: entered promiscuous mode [ 200.019669][ T9821] syzkaller0: entered allmulticast mode [ 200.037653][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 200.045764][ C0] lec:lec_tx_timeout: lec0 [ 200.050794][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 200.246283][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 201.346627][ T9873] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 201.375055][ T9873] netlink: 224 bytes leftover after parsing attributes in process `syz.2.982'. [ 201.431048][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.439341][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 201.446374][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 201.446771][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 201.549502][ T9880] lo speed is unknown, defaulting to 1000 [ 201.580992][ T9880] lo speed is unknown, defaulting to 1000 [ 201.596734][ T9880] lo speed is unknown, defaulting to 1000 [ 202.079287][ T9880] infiniband syz0: set down [ 202.084290][ T9880] infiniband syz0: added lo [ 202.136693][ T5878] lo speed is unknown, defaulting to 1000 [ 202.308029][ T9880] RDS/IB: syz0: added [ 202.319696][ T9880] smc: adding ib device syz0 with port count 1 [ 202.337967][ T9880] smc: ib device syz0 port 1 has no pnetid [ 202.386656][ T9880] lo speed is unknown, defaulting to 1000 [ 202.435926][ T5878] lo speed is unknown, defaulting to 1000 [ 203.122447][ T9920] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 203.131517][ T9880] lo speed is unknown, defaulting to 1000 [ 203.140328][ T9920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.991'. [ 203.592434][ T9880] lo speed is unknown, defaulting to 1000 [ 204.155814][ T9927] lo speed is unknown, defaulting to 1000 [ 204.525892][ T9880] lo speed is unknown, defaulting to 1000 [ 204.862555][ T9880] lo speed is unknown, defaulting to 1000 [ 205.110358][ T9880] lo speed is unknown, defaulting to 1000 [ 205.737962][ T9965] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 205.745970][ T9965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1002'. [ 206.387639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 206.395788][ C0] lec:lec_tx_timeout: lec0 [ 206.400552][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 206.674485][ T9984] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 206.690711][ T9984] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1006'. [ 209.632863][ T9992] lo speed is unknown, defaulting to 1000 [ 210.150628][T10003] syzkaller0: entered promiscuous mode [ 210.166089][T10003] syzkaller0: entered allmulticast mode [ 211.427363][ T9996] lo speed is unknown, defaulting to 1000 [ 211.743431][T10001] lo speed is unknown, defaulting to 1000 [ 211.916593][T10027] tap0: tun_chr_ioctl cmd 35111 [ 212.147648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 212.155744][ C0] lec:lec_tx_timeout: lec0 [ 212.160633][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 213.171942][T10037] syzkaller0: entered promiscuous mode [ 213.177475][T10037] syzkaller0: entered allmulticast mode [ 213.265812][T10043] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 213.295221][T10043] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1019'. [ 215.482470][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 215.580236][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 215.628798][T10074] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 215.646850][T10074] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1028'. [ 215.727515][T10075] lo speed is unknown, defaulting to 1000 [ 216.633791][T10102] lo speed is unknown, defaulting to 1000 [ 216.641886][T10108] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 216.674648][T10108] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1034'. [ 216.709933][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1032'. [ 216.723717][T10094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1032'. [ 216.745022][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1032'. [ 216.764672][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1032'. [ 217.013772][T10099] lo speed is unknown, defaulting to 1000 [ 217.317742][T10105] lo speed is unknown, defaulting to 1000 [ 217.626496][T10121] syzkaller0: entered promiscuous mode [ 217.632273][T10121] syzkaller0: entered allmulticast mode [ 217.909788][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 217.917855][ C0] lec:lec_tx_timeout: lec0 [ 217.922597][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 219.365221][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 219.402110][T10148] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 219.417931][T10148] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1042'. [ 219.607125][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 220.371927][T10170] netlink: 'syz.0.1048': attribute type 1 has an invalid length. [ 220.380301][T10170] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1048'. [ 221.131610][T10197] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 221.147765][T10197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1052'. [ 221.160557][T10195] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 221.177881][T10195] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1053'. [ 221.549037][T10206] syzkaller0: entered promiscuous mode [ 221.563316][T10206] syzkaller0: entered allmulticast mode [ 221.600518][T10206] 0: reclassify loop, rule prio 0, protocol 700 [ 221.805838][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 221.911378][T10215] lo speed is unknown, defaulting to 1000 [ 222.493096][T10227] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 222.501105][T10227] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1059'. [ 222.520744][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 222.932273][T10244] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 222.940424][T10244] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1062'. [ 222.947726][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 222.957549][ C0] lec:lec_tx_timeout: lec0 [ 222.962203][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 223.573694][T10258] lo speed is unknown, defaulting to 1000 [ 224.073172][T10274] lo speed is unknown, defaulting to 1000 [ 224.868047][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 224.896111][T10288] lo speed is unknown, defaulting to 1000 [ 225.821473][T10315] lo speed is unknown, defaulting to 1000 [ 226.376929][T10331] syzkaller0: entered promiscuous mode [ 226.407793][T10331] syzkaller0: entered allmulticast mode [ 227.380641][T10347] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 227.388748][T10347] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1081'. [ 227.980045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 227.988152][ C0] lec:lec_tx_timeout: lec0 [ 227.992734][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 229.817841][T10355] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 229.825665][T10355] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1082'. [ 230.477278][T10375] lo speed is unknown, defaulting to 1000 [ 230.545216][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 230.947115][T10382] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 230.963461][T10382] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1087'. [ 231.019578][T10316] Set syz1 is full, maxelem 65536 reached [ 231.189102][T10387] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 231.207183][T10387] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1088'. [ 231.466020][T10393] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 231.474944][T10393] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1089'. [ 232.208424][T10406] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 232.235754][T10406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1091'. [ 232.320748][T10408] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 232.366868][T10408] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1092'. [ 232.905613][T10418] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 232.917844][T10418] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1093'. [ 233.007652][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 233.015776][ C0] lec:lec_tx_timeout: lec0 [ 233.020380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 233.936924][T10438] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 233.954036][T10438] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1097'. [ 234.305742][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 235.281709][T10466] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1103'. [ 235.780034][T10492] lo speed is unknown, defaulting to 1000 [ 237.120499][T10514] tipc: Enabling of bearer rejected, failed to enable media [ 237.239924][T10517] lo speed is unknown, defaulting to 1000 [ 237.733909][T10538] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1118'. [ 237.828087][T10540] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 237.846244][T10540] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1119'. [ 238.027666][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 238.035766][ C0] lec:lec_tx_timeout: lec0 [ 238.040771][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.165972][T10546] lo speed is unknown, defaulting to 1000 [ 238.453737][T10557] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 238.461737][T10557] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1122'. [ 238.901123][T10568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1123'. [ 238.954455][T10566] lo speed is unknown, defaulting to 1000 [ 238.965510][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 238.994560][T10568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1123'. [ 239.016933][T10568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1123'. [ 239.064599][T10571] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 239.087929][T10571] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1125'. [ 240.470269][T10600] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1130'. [ 240.679713][T10603] lo speed is unknown, defaulting to 1000 [ 240.880514][T10609] tipc: Enabling of bearer rejected, failed to enable media [ 240.932382][T10611] syzkaller0: entered promiscuous mode [ 240.944633][T10611] syzkaller0: entered allmulticast mode [ 241.252516][T10619] lo speed is unknown, defaulting to 1000 [ 241.939952][T10636] lo speed is unknown, defaulting to 1000 [ 242.109737][T10652] syzkaller0: entered promiscuous mode [ 242.115360][T10652] syzkaller0: entered allmulticast mode [ 242.115375][T10651] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 242.130683][T10651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1142'. [ 242.984843][T10672] tipc: Enabled bearer , priority 0 [ 243.022770][T10667] lo speed is unknown, defaulting to 1000 [ 243.029426][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1144'. [ 243.041245][T10670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'. [ 243.051752][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1144'. [ 243.075605][T10672] tipc: Resetting bearer [ 243.093662][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1144'. [ 243.127371][T10669] tipc: Disabling bearer [ 243.440537][T10679] syzkaller0: entered promiscuous mode [ 243.446168][T10679] syzkaller0: entered allmulticast mode [ 243.465268][T10679] 0: reclassify loop, rule prio 0, protocol 700 [ 243.697924][T10684] lo speed is unknown, defaulting to 1000 [ 243.827647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 243.835723][ C0] lec:lec_tx_timeout: lec0 [ 243.841737][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 243.887548][T10692] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 243.896008][T10692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1150'. [ 244.426106][T10706] netlink: 'syz.1.1153': attribute type 1 has an invalid length. [ 244.445714][T10702] lo speed is unknown, defaulting to 1000 [ 244.448047][T10706] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1153'. [ 245.334873][T10717] lo speed is unknown, defaulting to 1000 [ 245.794344][T10739] lo speed is unknown, defaulting to 1000 [ 246.011921][T10750] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 246.023470][T10750] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1160'. [ 246.528367][T10732] lo speed is unknown, defaulting to 1000 [ 246.962462][T10768] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 246.970496][T10768] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1163'. [ 247.126173][T10771] netlink: 'syz.3.1164': attribute type 1 has an invalid length. [ 247.146089][T10771] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1164'. [ 247.870844][T10787] netlink: 'syz.4.1166': attribute type 1 has an invalid length. [ 247.883507][T10787] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1166'. [ 248.057097][T10790] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 248.066489][T10790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1167'. [ 248.867688][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 248.875808][ C0] lec:lec_tx_timeout: lec0 [ 248.880783][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 249.356470][T10839] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 249.374674][T10839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1178'. [ 249.384497][T10840] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 249.394816][T10840] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1177'. [ 249.405243][T10837] lo speed is unknown, defaulting to 1000 [ 250.026691][T10858] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 250.037252][T10858] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1180'. [ 250.493573][T10872] lo speed is unknown, defaulting to 1000 [ 250.733009][T10885] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1187'. [ 250.789347][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 250.805335][T10885] openvswitch: netlink: Missing key (keys=40, expected=80) [ 251.218932][T10894] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 251.226744][T10894] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1189'. [ 252.322887][T10927] lo speed is unknown, defaulting to 1000 [ 252.666140][T10939] lo speed is unknown, defaulting to 1000 [ 252.755748][T10943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1198'. [ 252.793214][T10945] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1200'. [ 252.802189][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'. [ 252.851286][T10945] openvswitch: netlink: Missing key (keys=40, expected=80) [ 253.887614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 253.895683][ C0] lec:lec_tx_timeout: lec0 [ 253.900445][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 254.122349][T10979] syzkaller0: entered promiscuous mode [ 254.137935][T10979] syzkaller0: entered allmulticast mode [ 254.153864][T10984] tipc: Enabling of bearer rejected, failed to enable media [ 254.192381][T10987] syzkaller0: entered promiscuous mode [ 254.197958][T10987] syzkaller0: entered allmulticast mode [ 255.587140][T10997] lo speed is unknown, defaulting to 1000 [ 255.681007][T11003] __nla_validate_parse: 3 callbacks suppressed [ 255.681028][T11003] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1213'. [ 255.760307][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 255.778757][T11003] openvswitch: netlink: Missing key (keys=40, expected=80) [ 255.917844][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1214'. [ 255.926860][T11014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1214'. [ 256.000989][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1214'. [ 256.015108][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1214'. [ 256.154367][T11009] lo speed is unknown, defaulting to 1000 [ 257.293535][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 257.672787][T11058] lo speed is unknown, defaulting to 1000 [ 258.221941][T11068] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1227'. [ 258.253977][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 258.278743][T11068] openvswitch: netlink: Missing key (keys=40, expected=80) [ 258.445488][T11074] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 258.456649][T11074] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1229'. [ 258.821018][T11077] lo speed is unknown, defaulting to 1000 [ 258.907638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 258.915752][ C0] lec:lec_tx_timeout: lec0 [ 258.920934][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 259.045956][T11099] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 259.304665][T11104] lo speed is unknown, defaulting to 1000 [ 260.294096][T11126] openvswitch: netlink: Missing key (keys=40, expected=80) [ 260.813823][T11146] lo speed is unknown, defaulting to 1000 [ 261.051766][T11157] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 261.061356][T11157] __nla_validate_parse: 4 callbacks suppressed [ 261.061399][T11157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1246'. [ 262.303707][T11184] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 262.333946][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1250'. [ 262.534193][T11191] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1253'. [ 262.552863][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 262.566128][T11191] openvswitch: netlink: Missing key (keys=40, expected=80) [ 263.243986][T11215] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 263.272154][T11215] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1258'. [ 263.498441][T11223] netlink: 'syz.4.1260': attribute type 1 has an invalid length. [ 263.530135][T11223] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1260'. [ 263.927642][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 263.935741][ C0] lec:lec_tx_timeout: lec0 [ 263.940454][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.253409][T11234] lo speed is unknown, defaulting to 1000 [ 264.620108][T11242] netlink: 'syz.3.1264': attribute type 1 has an invalid length. [ 264.638193][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1264'. [ 264.830425][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 265.007241][T11256] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 265.039965][T11256] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1270'. [ 265.067541][T11254] netlink: 'syz.4.1269': attribute type 1 has an invalid length. [ 265.090556][T11254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1269'. [ 265.842474][T11296] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 266.579089][T11308] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 266.586888][T11308] __nla_validate_parse: 1 callbacks suppressed [ 266.586906][T11308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1280'. [ 266.785520][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 266.917239][T11321] lo speed is unknown, defaulting to 1000 [ 267.344610][T11342] netlink: 'syz.4.1287': attribute type 1 has an invalid length. [ 267.376610][T11342] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1287'. [ 267.911094][T11356] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1291'. [ 267.989072][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 268.009117][T11356] openvswitch: netlink: Missing key (keys=40, expected=80) [ 268.256190][T11361] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 268.269754][T11361] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1292'. [ 268.496202][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 268.596825][T11369] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1296'. [ 268.653040][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 268.671530][T11369] openvswitch: netlink: Missing key (keys=40, expected=80) [ 268.746525][T11373] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 268.777641][T11373] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1298'. [ 268.947923][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 268.956092][ C0] lec:lec_tx_timeout: lec0 [ 268.961034][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.435803][T11407] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 269.605864][T11411] lo speed is unknown, defaulting to 1000 [ 270.235060][T11427] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 271.085174][T11441] lo speed is unknown, defaulting to 1000 [ 271.254953][T11458] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 272.379925][T11481] __nla_validate_parse: 4 callbacks suppressed [ 272.379943][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 272.692641][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 272.967435][T11498] lo speed is unknown, defaulting to 1000 [ 273.277502][T11506] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 273.308075][T11506] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1331'. [ 273.413025][T11510] lo speed is unknown, defaulting to 1000 [ 273.626997][T11517] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 273.646026][T11517] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1334'. [ 273.967620][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.975683][ C0] lec:lec_tx_timeout: lec0 [ 273.980489][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.527437][T11543] lo speed is unknown, defaulting to 1000 [ 274.567803][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1339'. [ 274.576928][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1339'. [ 274.586128][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1339'. [ 274.627269][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1339'. [ 274.911220][T11553] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 274.935581][T11553] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1343'. [ 275.496660][T11566] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1345'. [ 275.579704][T11566] openvswitch: netlink: Missing key (keys=40, expected=80) [ 275.787070][T11570] lo speed is unknown, defaulting to 1000 [ 277.085557][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 277.120434][T11595] syzkaller0: entered promiscuous mode [ 277.126047][T11595] syzkaller0: entered allmulticast mode [ 277.451154][T11605] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 277.478331][T11605] __nla_validate_parse: 2 callbacks suppressed [ 277.478350][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1354'. [ 277.890978][T11611] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 277.924836][T11611] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1357'. [ 278.594104][T11626] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1360'. [ 278.653909][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 278.680627][T11626] openvswitch: netlink: Missing key (keys=40, expected=80) [ 278.987832][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 278.995934][ C0] lec:lec_tx_timeout: lec0 [ 279.000664][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.653192][T11644] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 279.670614][T11644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1365'. [ 279.862099][T11648] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1367'. [ 279.930632][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'. [ 279.939757][T11648] openvswitch: netlink: Missing key (keys=40, expected=80) [ 280.100347][T11656] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 280.127689][T11656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1369'. [ 280.391124][T11662] lo speed is unknown, defaulting to 1000 [ 281.217039][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1372'. [ 281.247756][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1372'. [ 281.275802][T11674] lo speed is unknown, defaulting to 1000 [ 281.806967][T11690] lo speed is unknown, defaulting to 1000 [ 281.871299][T11696] tipc: Enabling of bearer rejected, failed to enable media [ 281.939884][T11698] syzkaller0: entered promiscuous mode [ 281.945584][T11698] syzkaller0: entered allmulticast mode [ 282.679592][T11715] syzkaller0: entered promiscuous mode [ 282.685410][T11715] syzkaller0: entered allmulticast mode [ 282.939627][T11723] __nla_validate_parse: 3 callbacks suppressed [ 282.939648][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 283.248244][T11728] lo speed is unknown, defaulting to 1000 [ 283.586745][T11729] lo speed is unknown, defaulting to 1000 [ 283.732076][T11748] netlink: 'syz.1.1387': attribute type 1 has an invalid length. [ 283.771226][T11748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1387'. [ 283.857242][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'. [ 284.007631][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.015734][ C0] lec:lec_tx_timeout: lec0 [ 284.020913][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.104475][T11739] lo speed is unknown, defaulting to 1000 [ 284.905354][T11776] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 284.917857][T11776] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1393'. [ 285.980023][T11802] netlink: 'syz.0.1398': attribute type 1 has an invalid length. [ 285.989065][T11802] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1398'. [ 287.000852][T11786] syzkaller0: entered promiscuous mode [ 287.006496][T11786] syzkaller0: entered allmulticast mode [ 287.226767][T11814] lo speed is unknown, defaulting to 1000 [ 287.333639][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 288.201506][T11847] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1407'. [ 288.233390][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 288.244610][T11847] openvswitch: netlink: Missing key (keys=40, expected=80) [ 288.267524][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 288.444560][T11853] lo speed is unknown, defaulting to 1000 [ 288.693792][T11860] tipc: Enabling of bearer rejected, failed to enable media [ 289.028064][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.036170][ C0] lec:lec_tx_timeout: lec0 [ 289.041053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.072326][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 289.110052][T11876] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1414'. [ 289.149645][T11868] lo speed is unknown, defaulting to 1000 [ 290.314549][T11911] tipc: Enabled bearer , priority 0 [ 290.343271][T11911] syzkaller0: entered promiscuous mode [ 290.357967][T11911] syzkaller0: entered allmulticast mode [ 290.392221][T11911] tipc: Resetting bearer [ 290.424949][T11908] tipc: Resetting bearer [ 290.487406][T11908] tipc: Disabling bearer [ 291.216873][T11924] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 291.230769][T11924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1426'. [ 291.246415][T11928] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1427'. [ 291.284010][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 292.292019][T11972] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1440'. [ 292.506861][T11979] lo speed is unknown, defaulting to 1000 [ 293.050698][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 294.145251][T12030] lo speed is unknown, defaulting to 1000 [ 294.179725][T12036] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1451'. [ 294.877606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms [ 294.885702][ C0] lec:lec_tx_timeout: lec0 [ 294.890988][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.145196][T12060] lo speed is unknown, defaulting to 1000 [ 295.197294][T12064] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 295.226445][T12064] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1458'. [ 295.283233][T12058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1457'. [ 295.325619][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'. [ 295.355786][T12068] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1459'. [ 295.361551][T12058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1457'. [ 295.394478][T12058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1457'. [ 295.494495][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 295.503737][T12068] openvswitch: netlink: Missing key (keys=40, expected=80) [ 295.601929][T12072] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 295.615693][T12072] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1460'. [ 295.972995][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 296.706675][T12103] lo speed is unknown, defaulting to 1000 [ 297.823687][T12125] openvswitch: netlink: Missing key (keys=40, expected=80) [ 298.261436][T12131] lo speed is unknown, defaulting to 1000 [ 298.279585][T12136] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 298.997211][T12156] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 299.152897][T12160] lo speed is unknown, defaulting to 1000 [ 299.201665][T12153] __nla_validate_parse: 4 callbacks suppressed [ 299.201682][T12153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1478'. [ 299.251707][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 299.310719][T12170] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1481'. [ 299.317997][T12153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1478'. [ 299.367915][T12153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1478'. [ 299.907627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 299.915699][ C0] lec:lec_tx_timeout: lec0 [ 299.920726][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.596419][T12183] tipc: Enabling of bearer rejected, failed to enable media [ 301.820262][T12216] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1491'. [ 301.915195][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 301.955129][T12225] openvswitch: netlink: Missing key (keys=40, expected=80) [ 301.969676][T12218] lo speed is unknown, defaulting to 1000 [ 302.016320][T12210] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1487'. [ 302.077776][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1487'. [ 302.114099][T12210] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1487'. [ 302.421034][T12226] lo speed is unknown, defaulting to 1000 [ 303.021654][T12250] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 303.041526][T12235] lo speed is unknown, defaulting to 1000 [ 303.546327][T12262] lo speed is unknown, defaulting to 1000 [ 304.449052][T12278] __nla_validate_parse: 2 callbacks suppressed [ 304.449072][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 304.927615][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 304.935670][ C0] lec:lec_tx_timeout: lec0 [ 304.940660][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.075504][T12295] lo speed is unknown, defaulting to 1000 [ 305.112132][T12299] tipc: Enabled bearer , priority 0 [ 305.120503][T12299] syzkaller0: entered promiscuous mode [ 305.128665][T12299] syzkaller0: entered allmulticast mode [ 305.170999][T12299] tipc: Resetting bearer [ 305.196368][T12298] tipc: Resetting bearer [ 305.220802][T12298] tipc: Disabling bearer [ 305.363194][T12307] tipc: Enabled bearer , priority 0 [ 305.375950][T12307] syzkaller0: entered promiscuous mode [ 305.382815][T12307] syzkaller0: entered allmulticast mode [ 305.418264][T12307] tipc: Resetting bearer [ 305.445719][T12306] tipc: Resetting bearer [ 305.469064][T12306] tipc: Disabling bearer [ 305.485826][T12297] lo speed is unknown, defaulting to 1000 [ 305.830802][T12329] tipc: Enabled bearer , priority 0 [ 305.878284][T12319] syzkaller0: entered promiscuous mode [ 305.883823][T12319] syzkaller0: entered allmulticast mode [ 305.939622][T12319] tipc: Resetting bearer [ 305.973718][T12318] tipc: Resetting bearer [ 306.032644][T12318] tipc: Disabling bearer [ 306.136058][T12333] lo speed is unknown, defaulting to 1000 [ 306.489529][T12346] syzkaller0: entered promiscuous mode [ 306.495120][T12346] syzkaller0: entered allmulticast mode [ 306.513035][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 307.683053][T12335] lo speed is unknown, defaulting to 1000 [ 307.839066][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 308.064324][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1516'. [ 308.073532][T12359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1516'. [ 308.083586][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1516'. [ 308.092702][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1516'. [ 308.127170][T12364] lo speed is unknown, defaulting to 1000 [ 308.832208][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 309.873854][T12398] lo speed is unknown, defaulting to 1000 [ 309.947619][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 309.955738][ C0] lec:lec_tx_timeout: lec0 [ 309.960693][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.971303][T12407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1524'. [ 309.992544][T12407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1524'. [ 310.016328][T12407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1524'. [ 310.057695][T12407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1524'. [ 310.450099][T12399] lo speed is unknown, defaulting to 1000 [ 311.072719][T12418] lo speed is unknown, defaulting to 1000 [ 311.498219][T12446] syzkaller0: entered promiscuous mode [ 311.509201][T12446] syzkaller0: entered allmulticast mode [ 311.549077][T12438] lo speed is unknown, defaulting to 1000 [ 311.567167][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 312.494643][T12458] tipc: Enabled bearer , priority 0 [ 312.506028][T12458] syzkaller0: entered promiscuous mode [ 312.511618][T12458] syzkaller0: entered allmulticast mode [ 312.531812][T12458] tipc: Resetting bearer [ 312.542312][T12457] tipc: Resetting bearer [ 312.562145][T12457] tipc: Disabling bearer [ 313.172226][T12481] syzkaller0: entered promiscuous mode [ 313.178010][T12481] syzkaller0: entered allmulticast mode [ 313.300322][T12479] lo speed is unknown, defaulting to 1000 [ 313.431330][T12489] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1543'. [ 313.450902][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 313.459931][T12489] openvswitch: netlink: Missing key (keys=40, expected=80) [ 313.900902][T12508] lo speed is unknown, defaulting to 1000 [ 314.017481][T12514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1547'. [ 314.095457][T12514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1547'. [ 314.145478][T12514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1547'. [ 314.967637][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 314.975744][ C0] lec:lec_tx_timeout: lec0 [ 314.980344][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.453482][T12541] __nla_validate_parse: 1 callbacks suppressed [ 315.453501][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 315.831126][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 316.041040][T12551] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 316.071869][T12551] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1556'. [ 316.732833][T12566] lo speed is unknown, defaulting to 1000 [ 317.703386][T12574] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1561'. [ 317.758659][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 317.768707][T12574] openvswitch: netlink: Missing key (keys=40, expected=80) [ 317.809660][T12577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1560'. [ 317.847650][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1560'. [ 317.856676][T12577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1560'. [ 317.924380][T12572] lo speed is unknown, defaulting to 1000 [ 317.937716][T12577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1560'. [ 318.176580][T12587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1562'. [ 318.282568][T12582] lo speed is unknown, defaulting to 1000 [ 318.891933][T12600] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 319.472806][T12614] syzkaller0: entered promiscuous mode [ 319.511328][T12614] syzkaller0: entered allmulticast mode [ 319.544580][T12620] 0: reclassify loop, rule prio 0, protocol 700 [ 319.987681][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.995738][ C0] lec:lec_tx_timeout: lec0 [ 320.000789][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 320.105603][T12628] tipc: Started in network mode [ 320.118076][T12628] tipc: Node identity 72a39c275455, cluster identity 4711 [ 320.137896][T12628] tipc: Enabled bearer , priority 0 [ 320.161751][T12631] syzkaller0: entered promiscuous mode [ 320.167360][T12631] syzkaller0: entered allmulticast mode [ 320.280006][T12624] tipc: Resetting bearer [ 320.338938][T12624] tipc: Disabling bearer [ 320.674618][T12642] lo speed is unknown, defaulting to 1000 [ 320.836488][T12653] __nla_validate_parse: 7 callbacks suppressed [ 320.836509][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 321.132018][T12658] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1580'. [ 321.152135][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 321.171338][T12658] openvswitch: netlink: Missing key (keys=40, expected=80) [ 321.739571][T12673] lo speed is unknown, defaulting to 1000 [ 322.096933][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1585'. [ 322.108656][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'. [ 322.117768][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1585'. [ 322.126863][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1585'. [ 322.229635][ C0] ================================================================== [ 322.237856][ C0] BUG: KASAN: slab-use-after-free in rose_t0timer_expiry+0x276/0x560 [ 322.245975][ C0] Write of size 8 at addr ffff88805a3a7018 by task syz.3.1586/12699 [ 322.253987][ C0] [ 322.256348][ C0] CPU: 0 UID: 0 PID: 12699 Comm: syz.3.1586 Not tainted syzkaller #0 PREEMPT(full) [ 322.256367][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 322.256384][ C0] Call Trace: [ 322.256391][ C0] [ 322.256397][ C0] dump_stack_lvl+0xe8/0x150 [ 322.256422][ C0] print_report+0xba/0x230 [ 322.256438][ C0] ? rose_t0timer_expiry+0x276/0x560 [ 322.256459][ C0] kasan_report+0x117/0x150 [ 322.256478][ C0] ? rose_t0timer_expiry+0x276/0x560 [ 322.256502][ C0] rose_t0timer_expiry+0x276/0x560 [ 322.256525][ C0] call_timer_fn+0x192/0x5a0 [ 322.256549][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 322.256569][ C0] ? call_timer_fn+0xd4/0x5a0 [ 322.256592][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 322.256619][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.256638][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 322.256659][ C0] __run_timer_base+0x652/0x8b0 [ 322.256680][ C0] ? ktime_get+0x45/0x200 [ 322.256703][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 322.256726][ C0] ? sched_clock_cpu+0x74/0x440 [ 322.256751][ C0] run_timer_softirq+0xb7/0x170 [ 322.256772][ C0] handle_softirqs+0x22a/0x7c0 [ 322.256788][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 322.256806][ C0] __irq_exit_rcu+0x5f/0x150 [ 322.256819][ C0] irq_exit_rcu+0x9/0x30 [ 322.256831][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.256857][ C0] [ 322.256863][ C0] [ 322.256869][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.256885][ C0] RIP: 0010:lock_release+0x25/0x3a0 [ 322.256913][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 60 02 53 11 48 89 44 24 28 <0f> 1f 44 00 00 65 8b 05 63 02 53 11 83 f8 08 0f 83 56 02 00 00 89 [ 322.256927][ C0] RSP: 0018:ffffc9001a8cf400 EFLAGS: 00000286 [ 322.256948][ C0] RAX: 484a376a61e67f00 RBX: ffff8880b863be40 RCX: ffffffff99fec403 [ 322.256960][ C0] RDX: 00000000b97e1ada RSI: ffffffff82355b1b RDI: ffff8880b863be40 [ 322.256972][ C0] RBP: ffff8880b863be68 R08: ffffffff82355b1b R09: ffff8880b863be40 [ 322.257002][ C0] R10: ffff88804ccb1500 R11: fffff52003519ebc R12: 0000000000000006 [ 322.257014][ C0] R13: ffffffff82355b1b R14: ffff8880b863be40 R15: 0000000000000108 [ 322.257026][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 322.257051][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 322.257074][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 322.257100][ C0] ? __mutex_trylock_common+0x158/0x260 [ 322.257118][ C0] obj_cgroup_charge_account+0x311/0x650 [ 322.257142][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 322.257165][ C0] __memcg_slab_post_alloc_hook+0x57d/0x8d0 [ 322.257196][ C0] __kvmalloc_node_noprof+0x691/0x8d0 [ 322.257214][ C0] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 322.257237][ C0] __nf_hook_entries_try_shrink+0x328/0x700 [ 322.257263][ C0] __nf_unregister_net_hook+0x4cc/0x6f0 [ 322.257286][ C0] nf_unregister_net_hooks+0xcb/0x140 [ 322.257308][ C0] nf_ct_netns_put+0x36d/0x520 [ 322.257329][ C0] ? __pfx_connmark_tg_destroy+0x10/0x10 [ 322.257347][ C0] cleanup_entry+0x298/0x360 [ 322.257369][ C0] ? __pfx_cleanup_entry+0x10/0x10 [ 322.257396][ C0] ? xt_find_target+0x1fa/0x240 [ 322.257419][ C0] translate_table+0x1ecd/0x20b0 [ 322.257449][ C0] ? __pfx_translate_table+0x10/0x10 [ 322.257469][ C0] ? __might_fault+0xaf/0x130 [ 322.257492][ C0] ? __might_fault+0xaf/0x130 [ 322.257538][ C0] ? _copy_from_user+0x94/0xb0 [ 322.257569][ C0] do_ip6t_set_ctl+0x9fe/0xe10 [ 322.257598][ C0] ? rcu_is_watching+0x15/0xb0 [ 322.257617][ C0] ? trace_contention_end+0x39/0x100 [ 322.257637][ C0] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 322.257668][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 322.257690][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.257722][ C0] nf_setsockopt+0x26f/0x290 [ 322.257746][ C0] rawv6_setsockopt+0x276/0x5f0 [ 322.257771][ C0] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 322.257793][ C0] ? aa_sock_opt_perm+0xff/0x1a0 [ 322.257814][ C0] ? sock_common_setsockopt+0x36/0xc0 [ 322.257832][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 322.257856][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 322.257879][ C0] __x64_sys_setsockopt+0x13d/0x1b0 [ 322.257903][ C0] do_syscall_64+0xe2/0xf80 [ 322.257926][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.257940][ C0] ? trace_irq_disable+0x37/0x100 [ 322.257957][ C0] ? clear_bhb_loop+0x60/0xb0 [ 322.257974][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.257989][ C0] RIP: 0033:0x7f65e779aeb9 [ 322.258007][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.258022][ C0] RSP: 002b:00007f65e8576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.258038][ C0] RAX: ffffffffffffffda RBX: 00007f65e7a16180 RCX: 00007f65e779aeb9 [ 322.258050][ C0] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000d [ 322.258059][ C0] RBP: 00007f65e7808c1f R08: 0000000000000460 R09: 0000000000000000 [ 322.258070][ C0] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 322.258080][ C0] R13: 00007f65e7a16218 R14: 00007f65e7a16180 R15: 00007fffd0517908 [ 322.258099][ C0] [ 322.258105][ C0] [ 322.768078][ C0] Allocated by task 6715: [ 322.772418][ C0] kasan_save_track+0x3e/0x80 [ 322.777110][ C0] __kasan_kmalloc+0x93/0xb0 [ 322.781709][ C0] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 322.787092][ C0] rose_add_node+0x23c/0xf00 [ 322.791707][ C0] rose_rt_ioctl+0xd35/0x12a0 [ 322.796426][ C0] rose_ioctl+0x3fb/0x8f0 [ 322.800771][ C0] sock_do_ioctl+0x101/0x320 [ 322.805374][ C0] sock_ioctl+0x5c6/0x7f0 [ 322.809712][ C0] __se_sys_ioctl+0xfc/0x170 [ 322.814320][ C0] do_syscall_64+0xe2/0xf80 [ 322.818846][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.824756][ C0] [ 322.827085][ C0] Freed by task 12673: [ 322.831163][ C0] kasan_save_track+0x3e/0x80 [ 322.835845][ C0] kasan_save_free_info+0x46/0x50 [ 322.840880][ C0] __kasan_slab_free+0x5c/0x80 [ 322.845659][ C0] kfree+0x1be/0x650 [ 322.849572][ C0] rose_timer_expiry+0x4cb/0x600 [ 322.854525][ C0] call_timer_fn+0x192/0x5a0 [ 322.859146][ C0] __run_timer_base+0x652/0x8b0 [ 322.864014][ C0] run_timer_softirq+0xb7/0x170 [ 322.868885][ C0] handle_softirqs+0x22a/0x7c0 [ 322.873673][ C0] __irq_exit_rcu+0x5f/0x150 [ 322.878276][ C0] irq_exit_rcu+0x9/0x30 [ 322.882528][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.888170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.894161][ C0] [ 322.896491][ C0] The buggy address belongs to the object at ffff88805a3a7000 [ 322.896491][ C0] which belongs to the cache kmalloc-512 of size 512 [ 322.910544][ C0] The buggy address is located 24 bytes inside of [ 322.910544][ C0] freed 512-byte region [ffff88805a3a7000, ffff88805a3a7200) [ 322.924267][ C0] [ 322.926618][ C0] The buggy address belongs to the physical page: [ 322.933061][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a3a5400 pfn:0x5a3a4 [ 322.943147][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 322.951657][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 322.960178][ C0] page_type: f5(slab) [ 322.964172][ C0] raw: 00fff00000000240 ffff88813fe26c80 ffffea0000c4e910 ffffea0001dc3b10 [ 322.972765][ C0] raw: ffff88805a3a5400 000000000010000a 00000000f5000000 0000000000000000 [ 322.981360][ C0] head: 00fff00000000240 ffff88813fe26c80 ffffea0000c4e910 ffffea0001dc3b10 [ 322.990068][ C0] head: ffff88805a3a5400 000000000010000a 00000000f5000000 0000000000000000 [ 322.998757][ C0] head: 00fff00000000002 ffffea000168e901 00000000ffffffff 00000000ffffffff [ 323.007435][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 323.016139][ C0] page dumped because: kasan: bad access detected [ 323.022580][ C0] page_owner tracks the page as allocated [ 323.028304][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6138, tgid 6137 (syz.1.49), ts 89631427155, free_ts 89031579224 [ 323.049332][ C0] post_alloc_hook+0x228/0x280 [ 323.054106][ C0] get_page_from_freelist+0x24dc/0x2580 [ 323.059657][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 323.065475][ C0] alloc_pages_mpol+0x232/0x4a0 [ 323.070334][ C0] allocate_slab+0x86/0x3a0 [ 323.074853][ C0] ___slab_alloc+0xd82/0x1760 [ 323.079549][ C0] __slab_alloc+0x65/0x100 [ 323.083978][ C0] __kmalloc_noprof+0x46c/0x7e0 [ 323.088834][ C0] copy_splice_read+0x16f/0xaa0 [ 323.093694][ C0] splice_direct_to_actor+0x4a0/0xc70 [ 323.099079][ C0] do_splice_direct+0x195/0x290 [ 323.103937][ C0] do_sendfile+0x535/0x7d0 [ 323.108370][ C0] __se_sys_sendfile64+0x144/0x1a0 [ 323.113492][ C0] do_syscall_64+0xe2/0xf80 [ 323.118014][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.123921][ C0] page last free pid 6138 tgid 6137 stack trace: [ 323.130246][ C0] __free_frozen_pages+0xbf8/0xd70 [ 323.135387][ C0] __slab_free+0x2ce/0x320 [ 323.139818][ C0] qlist_free_all+0x97/0x100 [ 323.144409][ C0] kasan_quarantine_reduce+0x148/0x160 [ 323.149880][ C0] __kasan_slab_alloc+0x22/0x80 [ 323.154739][ C0] __kmalloc_noprof+0x3c2/0x7e0 [ 323.159595][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 323.165154][ C0] tomoyo_path_number_perm+0x246/0x630 [ 323.170620][ C0] security_file_ioctl+0xc3/0x2a0 [ 323.175666][ C0] __se_sys_ioctl+0x47/0x170 [ 323.180265][ C0] do_syscall_64+0xe2/0xf80 [ 323.184782][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.190687][ C0] [ 323.193014][ C0] Memory state around the buggy address: [ 323.198662][ C0] ffff88805a3a6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.206739][ C0] ffff88805a3a6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.214807][ C0] >ffff88805a3a7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.222866][ C0] ^ [ 323.227729][ C0] ffff88805a3a7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.235805][ C0] ffff88805a3a7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.243870][ C0] ================================================================== [ 323.252155][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.259368][ C0] CPU: 0 UID: 0 PID: 12699 Comm: syz.3.1586 Not tainted syzkaller #0 PREEMPT(full) [ 323.268762][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 323.278863][ C0] Call Trace: [ 323.282169][ C0] [ 323.285044][ C0] vpanic+0x1e0/0x670 [ 323.289070][ C0] panic+0xc5/0xd0 [ 323.292827][ C0] ? __pfx_panic+0x10/0x10 [ 323.297291][ C0] ? rose_t0timer_expiry+0x276/0x560 [ 323.302625][ C0] ? rose_t0timer_expiry+0x276/0x560 [ 323.307940][ C0] check_panic_on_warn+0x89/0xb0 [ 323.312918][ C0] ? rose_t0timer_expiry+0x276/0x560 [ 323.318254][ C0] end_report+0x6f/0x140 [ 323.322529][ C0] kasan_report+0x128/0x150 [ 323.327052][ C0] ? rose_t0timer_expiry+0x276/0x560 [ 323.332380][ C0] rose_t0timer_expiry+0x276/0x560 [ 323.337559][ C0] call_timer_fn+0x192/0x5a0 [ 323.342193][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 323.347857][ C0] ? call_timer_fn+0xd4/0x5a0 [ 323.352579][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 323.357738][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.362969][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 323.368635][ C0] __run_timer_base+0x652/0x8b0 [ 323.373537][ C0] ? ktime_get+0x45/0x200 [ 323.377906][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 323.383310][ C0] ? sched_clock_cpu+0x74/0x440 [ 323.388194][ C0] run_timer_softirq+0xb7/0x170 [ 323.393088][ C0] handle_softirqs+0x22a/0x7c0 [ 323.397871][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 323.402668][ C0] __irq_exit_rcu+0x5f/0x150 [ 323.407278][ C0] irq_exit_rcu+0x9/0x30 [ 323.411550][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 323.417207][ C0] [ 323.420155][ C0] [ 323.423102][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.429103][ C0] RIP: 0010:lock_release+0x25/0x3a0 [ 323.434324][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 60 02 53 11 48 89 44 24 28 <0f> 1f 44 00 00 65 8b 05 63 02 53 11 83 f8 08 0f 83 56 02 00 00 89 [ 323.453946][ C0] RSP: 0018:ffffc9001a8cf400 EFLAGS: 00000286 [ 323.460042][ C0] RAX: 484a376a61e67f00 RBX: ffff8880b863be40 RCX: ffffffff99fec403 [ 323.468038][ C0] RDX: 00000000b97e1ada RSI: ffffffff82355b1b RDI: ffff8880b863be40 [ 323.476037][ C0] RBP: ffff8880b863be68 R08: ffffffff82355b1b R09: ffff8880b863be40 [ 323.484036][ C0] R10: ffff88804ccb1500 R11: fffff52003519ebc R12: 0000000000000006 [ 323.492037][ C0] R13: ffffffff82355b1b R14: ffff8880b863be40 R15: 0000000000000108 [ 323.500036][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 323.505880][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 323.511725][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 323.517571][ C0] ? __mutex_trylock_common+0x158/0x260 [ 323.523148][ C0] obj_cgroup_charge_account+0x311/0x650 [ 323.528810][ C0] ? obj_cgroup_charge_account+0x13b/0x650 [ 323.534655][ C0] __memcg_slab_post_alloc_hook+0x57d/0x8d0 [ 323.540599][ C0] __kvmalloc_node_noprof+0x691/0x8d0 [ 323.546013][ C0] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 323.552120][ C0] __nf_hook_entries_try_shrink+0x328/0x700 [ 323.558051][ C0] __nf_unregister_net_hook+0x4cc/0x6f0 [ 323.563635][ C0] nf_unregister_net_hooks+0xcb/0x140 [ 323.569046][ C0] nf_ct_netns_put+0x36d/0x520 [ 323.573853][ C0] ? __pfx_connmark_tg_destroy+0x10/0x10 [ 323.579512][ C0] cleanup_entry+0x298/0x360 [ 323.584142][ C0] ? __pfx_cleanup_entry+0x10/0x10 [ 323.589297][ C0] ? xt_find_target+0x1fa/0x240 [ 323.594179][ C0] translate_table+0x1ecd/0x20b0 [ 323.599159][ C0] ? __pfx_translate_table+0x10/0x10 [ 323.604473][ C0] ? __might_fault+0xaf/0x130 [ 323.609225][ C0] ? __might_fault+0xaf/0x130 [ 323.613952][ C0] ? _copy_from_user+0x94/0xb0 [ 323.618780][ C0] do_ip6t_set_ctl+0x9fe/0xe10 [ 323.623577][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.628371][ C0] ? trace_contention_end+0x39/0x100 [ 323.633686][ C0] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 323.639015][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 323.644078][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.650109][ C0] nf_setsockopt+0x26f/0x290 [ 323.654736][ C0] rawv6_setsockopt+0x276/0x5f0 [ 323.659628][ C0] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 323.665035][ C0] ? aa_sock_opt_perm+0xff/0x1a0 [ 323.670011][ C0] ? sock_common_setsockopt+0x36/0xc0 [ 323.675423][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 323.681353][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 323.686425][ C0] __x64_sys_setsockopt+0x13d/0x1b0 [ 323.691668][ C0] do_syscall_64+0xe2/0xf80 [ 323.696206][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.702301][ C0] ? trace_irq_disable+0x37/0x100 [ 323.707366][ C0] ? clear_bhb_loop+0x60/0xb0 [ 323.712106][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.718035][ C0] RIP: 0033:0x7f65e779aeb9 [ 323.722488][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.742127][ C0] RSP: 002b:00007f65e8576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.750573][ C0] RAX: ffffffffffffffda RBX: 00007f65e7a16180 RCX: 00007f65e779aeb9 [ 323.758586][ C0] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000d [ 323.766601][ C0] RBP: 00007f65e7808c1f R08: 0000000000000460 R09: 0000000000000000 [ 323.774612][ C0] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 323.782611][ C0] R13: 00007f65e7a16218 R14: 00007f65e7a16180 R15: 00007fffd0517908 [ 323.790624][ C0] [ 323.794274][ C0] Kernel Offset: disabled [ 323.798601][ C0] Rebooting in 86400 seconds..