last executing test programs: 4.988366902s ago: executing program 4 (id=12584): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000008800000140012800b0001006970766c616f00000400028008000500", @ANYRES32=r1, @ANYBLOB="1400350076657468315f746f5f62726964676500"], 0x50}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 4.843911272s ago: executing program 0 (id=12586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) close(0x3) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bind$inet6(r1, 0x0, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000010000100000000000000ec1cff5f8ab200000500000a50000000090a010400000000000000000a0000040900010073797a310000800008000540000000020800020073797a310000000008000a40ffffffff00000080080001400000000308000840000000011400000011000100000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x5, 0x6, '\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_emit_ethernet(0x3e, &(0x7f0000001280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6bd60000000000ffff"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x800}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f3e, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c000}, 0x10) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {0x0, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x48004) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000080)) close(r11) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000001000)) close(0x3) socket$rds(0x15, 0x5, 0x0) 4.788797564s ago: executing program 4 (id=12588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0xc}, {0x6, 0xc}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 4.379890731s ago: executing program 4 (id=12589): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}}, 0x4000000) 4.326979508s ago: executing program 0 (id=12590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@float={0xd, 0x0, 0x0, 0x10, 0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}, @struct={0x1, 0x6, 0x0, 0x4, 0x0, 0x3, [{0x2, 0x5, 0x40}, {0x10, 0x1, 0x52}, {0x0, 0x0, 0x2}, {0x3, 0x1, 0x30158dc7}, {0x3, 0x5, 0x7fff}, {0xc, 0x2, 0x76c}]}]}, {0x0, [0x61, 0x30, 0x2e, 0x30, 0x2e, 0x30]}}, &(0x7f00000002c0)=""/133, 0x90, 0x85, 0x0, 0x6}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newchain={0xa8, 0x64, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xb, 0x6}, {0x10, 0x67ba7613cc46406b}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x485}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0xffffff00, 0xffff00, 0xff000000]}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x401}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_INDEV={0x14, 0x2, 'pim6reg\x00'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0xddb1}, @TCA_CHAIN={0x8, 0xb, 0xfffffd42}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40005}, 0x8884) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, &(0x7f00000004c0)="efd2eba0c1", 0x0}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x100000000, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000006e93000000000000b50302000000000085000000b7000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.018359755s ago: executing program 4 (id=12593): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/19, 0x13}, 0x9}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000540)=0x90085, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) 3.508652964s ago: executing program 3 (id=12599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0xd096, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xe8, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x27}, 0xedd1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000290000000800000003000000000000001400000000000000290000003e00"], 0x30}}], 0x2, 0x5880) 3.407395921s ago: executing program 0 (id=12600): syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x5, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK]}, 0x40}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000045) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$netlink(0x10, 0x3, 0x8000000004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, 0x0, 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 3.374571059s ago: executing program 1 (id=12602): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES32], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1d", 0x9c}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 3.220165757s ago: executing program 0 (id=12603): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1ed8) 3.135933441s ago: executing program 3 (id=12605): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) shutdown(r1, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400000000fbb29756f53175a299502b76ea9dd4b6e681a78f965380509124f94ef00fa8a02954660b07ad9312a7b670b01f18c821f99f2b285d3a2fc3fc36dcdc39000000000000000000000000d246af8e20"], 0x60}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10001000}, 0x4040080) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x2, 0xa, 0x0, 0x2, 0x6ab]}, &(0x7f0000000280)=0x54) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000900000000", @ANYRES32=0x0, @ANYBLOB="0380000040020000140012800b0001006970766c616e0000040002800800", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.090798076s ago: executing program 4 (id=12606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x0, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0xfd4badcd6aaa7a73) r5 = socket$packet(0x11, 0x3, 0x300) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYBLOB='/'], 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r5, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8804) 3.05436905s ago: executing program 1 (id=12607): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffefc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1, @ANYRES32=r0], 0x1c}}, 0x0) 3.004598855s ago: executing program 2 (id=12608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@setneightbl={0x84, 0x43, 0x1, 0x70bd28, 0x25dfdbff, {0x7}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xc}, @NDTA_NAME={0xf, 0x1, '$#/\\-@)()[\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_QUEUE_LEN={0x8, 0x8, 0xffffffff}]}, @NDTA_THRESH2={0x8}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4f9a}, @NDTA_PARMS={0x34, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x6}, @NDTPA_LOCKTIME={0xc, 0xf, 0x1}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x5}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0xfffff19d}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x811}, 0x20004010) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x8013, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x63}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 2.795435158s ago: executing program 1 (id=12609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x40, 0x3bd0, 0x1000, 0x4, {{0x3b, 0x4, 0x3, 0x1c, 0xec, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0xda, [@multicast2, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xb3, 0x3, 0x1, [{@rand_addr=0x64010102, 0x7}, {@loopback}, {@broadcast, 0x7}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp={0x44, 0x8, 0x68, 0x0, 0x2, [0x9]}, @rr={0x7, 0x1b, 0x20, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x3a, 0x0, [{0x5, 0xa, "da7c8f03bb206858"}, {0x7, 0xd, "cfe6df3fa839839f57ed36"}, {0x5, 0xc, "8d0a40189a0703ebb577"}, {0x2, 0x11, "661385b1dc96292799cfb2978c4f6f"}]}, @timestamp={0x44, 0x14, 0x64, 0x0, 0xf, [0x4f, 0x8001, 0x5, 0x2]}, @timestamp_addr={0x44, 0x1c, 0xd4, 0x1, 0x3, [{@local, 0x7fff}, {@loopback, 0x8}, {@rand_addr=0x64010101, 0x7}]}]}}}}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.702462116s ago: executing program 2 (id=12610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x54, r1, 0xa3959ba9c9468c63, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\t\x00'}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1217e2db567c301abbceb673fdd6a765"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cf06bfe2fca8bdd508bdd02d661b4eec"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000c0080ffffff3d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.604687337s ago: executing program 4 (id=12611): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r1 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00022bbd7000fbdbc64dae309154cfa80300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) 2.351665283s ago: executing program 1 (id=12612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000090000000000000000000000090000000000000000000000090200000000"], 0x0, 0x96}, 0x28) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES16=0x0], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="04eee3eb2ab9fa1800000000000000000000000000000085100000030000a056200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendfile(r6, r7, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pselect6(0x40, &(0x7f0000000700)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0xc}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000130031032724bb6caa6411f5ef1b493f04b1bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04460200016004001400030064756d6d79300000000000000000000005002700260000001c001a80180002801400018006002100c00a000008001a00feffffff"], 0x58}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850) syz_genetlink_get_family_id$mptcp(0x0, r4) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000640)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) 2.321342669s ago: executing program 2 (id=12613): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x30}, 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff3, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x4, &(0x7f00000000c0)=""/4, 0x40f00, 0xb, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x0, 0x53b}, 0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff1e4}, 0x94) 2.270815728s ago: executing program 0 (id=12614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) bind(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x8, 0x2, 0x1c, {0xa, 0x4e23, 0xc2e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x28}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x36def4bb51ca43ab) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000440)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @broadcast}, 0x22, {0x2, 0x4e21, @broadcast}, 'macsec0\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x40) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x78}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x80) accept(r1, &(0x7f00000007c0)=@ax25={{0x3, @rose}, [@default, @rose, @null, @rose, @null, @default, @bcast, @netrom]}, &(0x7f0000000840)=0x80) (async) r6 = accept(r1, &(0x7f00000007c0)=@ax25={{0x3, @rose}, [@default, @rose, @null, @rose, @null, @default, @bcast, @netrom]}, &(0x7f0000000840)=0x80) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000900)={&(0x7f0000000880)=""/102, 0x1000, 0x0, 0x1000, 0x4}, 0x20) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000900)={&(0x7f0000000880)=""/102, 0x1000, 0x0, 0x1000, 0x4}, 0x20) socketpair(0x1d, 0x1, 0x299, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r7, &(0x7f0000002100)={&(0x7f0000000980)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)="dbec9220e5d1", 0x6}], 0x1, &(0x7f0000000a80)=[{0x78, 0x103, 0x5, "73638059bfe9d2d2e849e2d3ca3116d28ce1021cf14586a6fea1bd98e2390f0231783cca3a082d8e011c0d3b5a7fb4307fd660a4c60f0f9e275983ee13d5a682153b4a4b67011b7c920dce16bdfb50e5e162b81ebbcf4c80055476ad7046c59d4eec"}, {0x100, 0x29, 0x6, "4c31f2000bf75592dceac4f69a58fe09c8f44aa5bb863a184743ecbb16efddf62aeae0c5e20d6c61f7f6b326e42e14468bae732c50a69106109f07d764c9fa75e7dd8ff1893f183de935af5382bbf8c5557b02027f8d86131f41431dbd8c00a186e114746663891651543c84400c60b1d0379bbb39fc9ba566ba41e99a1a3bb8c620b59944e32e93f4cca455b5423ab1dcd62c996634d25490925fe46a0c2a100d73e279c4385d6212bda6209c429f54f1b923f1d0e34adb533a38e75417ab7a1d23e1b9687dd4eb2bf54b13e2bfd0058066eea7b5907d227c422afb4f07b67c113ffe8b41c8ae524763"}, {0x38, 0x0, 0x7, "84de580b8f620ee839a57076e4661c8a24985959c641040220ae45eec9e0e71281"}, {0xf0, 0x1, 0x6, "6873d82a013543ada241aa71b5d1f886cc16b16b63c1d9d155b7b67a8fbec86fc21c8fb4220ee69a26e058533507800f0434eb2a057d7950c9edd05cbd9b035cab44bdcd953245cd22ed1fb685188e8c684b471a766b69e0a671c5a458b1f7411a32c519fe8abfcead7be868a83330a2a60454455827f9fb9f6f5add18814d6b1cb1039d1b4c22410eca38e95097508409c5c119caef81ee93c190f3b1e23907f9a5f382fe7098d284e384a998116a3b187ef593f4584814789c34ead737d4ffd6e16df80e8d86a13a0128b91ebaba131ef649a172efc1216e"}, {0xe8, 0x6, 0x6, "67990387fb495116080c8af73e53b0f3694e0361629462f4d0061f2ee9a06e7e1067e9e13291c5bade361b9a14ec3e195a403d808e14a45c2703c2a00e44c867964cc679f78c2404367fe43476e008e22d030e9e2caddb40b4dc1f276b5b3526ec35fcd20b2db3b2c7f615990d25a08e62881b6d5e1566d9dbcc74f585b7532b0dfc84d7cbd89d24eb8886c53ecdc8a6f269a41cc5df4d83bfcd712ea68a849445cf983f37e5d51eae5fd47a12c098b4061ca8d23561500d56a7dd97f20bebda357f2e799840e8fe1533be42ead83040aebcfb0c3e"}, {0x1010, 0x108, 0xfffff800, "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"}, {0xf0, 0x1, 0xd3, "6747fb08b2bf94e4cbcfa1b712f00345465f44ca205543f0ad7f720c0e97cee0b360504f12614be8dad87415bbddcca80e4852e6365d60f37bf55a20fac2741be63542179be8e0ff3223d0d951d63538495f3869e66b8765a2904bf5feb064aac48efb8f215d61f0dbd8c55ff4ae18911afacc4a301166ff1fb0c4cd3d6260f01711bc8bb8b01a46a99374885f0f37e2ade07f50f0322c4be23267b5301e7d8ef0f6576a204b827a896dc464896c8c1a12c8cc96e812a8f4b74cae87e9a7d643cd589301468a005129e7a3c1961cc682cd4deff14097af8b85b1e0aa549ee9dd"}, {0xc8, 0x10b, 0x2, "c827ae22dfd742450852693b2b093288b8a5057c01dac39a04271d9e8fd048ebaa18eb491c4ae285d6ad80ba1eb2a6d166c956924200aab82e74f9d8c6ef299c4015f46c4e134c9d2b83d6b409b54f3728a1d390e9bd258bf4d869719dc919135384799c35ed15a97a6c4ecdd82a02be4e9dbf4e0339c9c88fe9ec0c03cb9ae42d8afe097284f7c76595841a2cfdaf66cdbc06df6342f065dd271fd5acadb39a414c074c8c9da8fffd5ba442b020ce206e08ffda535e25"}, {0xa8, 0x10c, 0x3, "28b7a917dcee295bedc86495ee3205a7d8ef6c5141756cd3c75cb2e669b7092d40fe085549c38f22e6f63baada47e040420dbb4d1722775795f37f4e42f1f1caa0df39daf97e586ab79679428af89ad47c3a72690dd033b3843c32426f3f720c2134634a6a7c9bc35ec9bac4d69d40331b6e7360e0e2d0f54846bd8d4395449a29a86067b856bcd4ff30bf07027ec7cea08b483a"}, {0x88, 0x101, 0x3, "f8c4e4ae4346cae17cc2c9db11de592ed44e75298b7c9d3410b12d2ce2b2a4f9a476618ec2934a990d93af3e30fcb04b0cf03c21ccea26e4481678f7d00306d6247c8999d387728b424c14847fc928a30dbb3b0e7c6873d2eb1798438542e2449ffac0df35139dbe5e594ce43c9492c64e9592"}], 0x1680}, 0x8081) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_b, @from_mac, {0x5, 0x7}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x2}}, 0xe, @val={0x8c, 0x10, {0x676, "ef7dc36b1f7c", @short="1140fe2b2b2c9dc9"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}]}, 0x68}, 0x1, 0x0, 0x0, 0x44001}, 0x20004010) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000022c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000002300)={0x1d, r10, 0x2, {0x2, 0x1, 0x4}, 0xfe}, 0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000002340)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x9, 0x6, 0xffffffff, 0x9, 0x40, 0xe6, 0xb2}, &(0x7f0000002400)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000002340)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x9, 0x6, 0xffffffff, 0x9, 0x40, 0xe6, 0xb2}, &(0x7f0000002400)=0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000002440)={r11, 0x1}, &(0x7f0000002480)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000002440)={r11, 0x1}, &(0x7f0000002480)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000024c0)={r12, @in={{0x2, 0x4e23, @multicast2}}, 0x1, 0x7}, &(0x7f0000002580)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000024c0)={r12, @in={{0x2, 0x4e23, @multicast2}}, 0x1, 0x7}, &(0x7f0000002580)=0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000025c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r1) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002800)={&(0x7f0000002680)={0x174, r13, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x24004000}, 0x88c0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000002980)={r0, &(0x7f0000002880)='*\x00', 0x189441, &(0x7f00000028c0)={@_ha_fsid={[0x100, 0x8]}, {0x7fff, 0x7, 0x10001}}, 0x3, &(0x7f0000002900), &(0x7f0000002940)=0xafd4}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000002980)={r0, &(0x7f0000002880)='*\x00', 0x189441, &(0x7f00000028c0)={@_ha_fsid={[0x100, 0x8]}, {0x7fff, 0x7, 0x10001}}, 0x3, &(0x7f0000002900), &(0x7f0000002940)=0xafd4}) bind$inet6(r14, &(0x7f00000029c0)={0xa, 0x4e23, 0x5, @private0, 0x6ac1da48}, 0x1c) (async) bind$inet6(r14, &(0x7f00000029c0)={0xa, 0x4e23, 0x5, @private0, 0x6ac1da48}, 0x1c) 1.171552051s ago: executing program 0 (id=12615): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x10, 0x40, 0x9, 0x3, {{0x25, 0x4, 0x1, 0x3e, 0x94, 0x68, 0x0, 0xa8, 0x2f, 0x0, @remote, @loopback, {[@cipso={0x86, 0x45, 0xffffffffffffffff, [{0x0, 0xe, "1ee651069ae5178f95f3f9e8"}, {0x5, 0x2}, {0x7, 0xf, "902da200d156e334b2dab22fc4"}, {0x0, 0xe, "7c7ca5987ccf2a1ea4534180"}, {0x1, 0xe, "2d0837a63d4c5601255915cd"}, {0x2, 0x4, "69ff"}]}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0x12, "95fb911f826641d831a9384dd444308b"}, {0xf2da4dbffd7e95d1, 0x6, "5658f1f5"}]}, @ssrr={0x89, 0x1b, 0xa9, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101, @empty, @private=0xa010102]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newtfilter={0x518, 0x2c, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xfff3, 0xfff2}, {0xc, 0x6}, {0x16, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x78, 0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x4c4, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_FW_ACT={0x1ec, 0x4, [@m_ife={0x110, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x10000000, 0x69cc2018, 0xfffffff7}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x8, 0xffffa3ef, 0x1}}}]}, {0x97, 0x6, "1588fe2ed2a4a16a1b884cb6214d5b835bb77067e8eb9c0de037325ee0c90295a809826f9c418f2d54909e35a16f0c4d9607dc7c5ab9e99fb8d2efc652112c6ed43ec9eb24da94505a142f2f12f3b8d390f189a5ff12d713354e0dad7d970af354bf6a89609f14aeda4576e6ab2b60691a5abb677064c5221417bef1dd67bdbd3827b164515e8be41c6607e2e1f04a28d265d1"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xd8, 0x0, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0x7, 0xa, 0x1}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf2c, 0x2e, 0x3, 0x0, 0x5}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xd, 0x7, 0x8000, 0x897}, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x5, 0x0, 0x2, 0xfff}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_INDEV={0x14, 0x3, 'batadv0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x290, 0x4, [@m_ct={0x68, 0x1f, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4a3c9dd1604eeb144096e643bb17e2b4"}, @TCA_CT_LABELS={0x14, 0x7, "48454ab0b6edccfcc6e0e977ca6d07f9"}, @TCA_CT_LABELS={0x14, 0x7, "681e795e8041437f0d1715c7914586bc"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_connmark={0xbc, 0xc, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xcc, 0x5, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa9, 0x401, 0x0, 0x2, 0x3}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x20000004, 0x2, 0x240000}, 0xfffe}}]}, {0x38, 0x6, "eefea31bbeff309bef2a2a44ebb3b179c05d221ee22f3d833a41147446e49c9fb839aa9697535788d536db15aed17b5105a388c9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x168, 0x1a, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfff, 0x4, 0x5, 0xdc1, 0x40}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x772}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xbeaa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc775}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0xe2, 0x6, "309452fc3bfac5bd78773f9a59c6bc2e6c8ea8d7334e7f7d1dad933f72cf42ed29affe1c7784d50472319174639a750b92fba76d84e1e0b5956136369d2fc49bc6e2ae3bcd6f1646bd49dfb8905f7e86046bc02b2e6ec95c75d1e3fe04d9f23782865e24fdd1689b7e1a940d61c15f82f2e74823bb8c9cb9241ce64a44e52282fbba3f454e7f82069c6c7735f8cfb52a1a4d3f327b12b1210adb5d36c40b8e13a00466a04067db00eeb7f61debfe45634c265a44bc2e17c49df9c5d4f3d42b872c1ed451ed27b7642face42bf436afa680cec109484adebcd978c34b4e69"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xe4}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x518}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r2, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x44}}, 0x20004055) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@default, @bcast, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 1.138344448s ago: executing program 2 (id=12616): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x4000088, @private2, 0xa77}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", '\x00', "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000440)="fcd0af043469009721e9fb74639d645818044886dbf1265c239986fe30d04700b09c196d6f77e99693caa87044c5a97ba5488c81a37f72ce2e39231d58461f7a7c3705d812110473ca89df586a3e1d0bf154e5827d8c82c809bf4e6e81eaddbdad6fb2deff16c8b9b762ab61061a1df75bcef22320409cc36e3d614a7c1bf814a56c3d175ef3627a6b96ddfa6f855b225021059244caf885111242fcfa7a0d57e0d5d2582ff864bce9ac87a47b01bcdfa693cc4d2b9029791fd29e60ccf980e659dd80ebdfecfd9f6a389d1b5f57c24f11e57df5dbdfed09151928f6728a0014be67fd91", 0xe4}, {&(0x7f0000000540)="30629e04ab42c5b9919642a2c61feea64a09fcca882c50df99897ab446e2dca2595a61c6d83f21378249bb3ff7b09e0db45049bd7fabc6f520bb08efdf7347f62863e0e973c2f8d09423959f3a48e606ab7dd6269d0fd0d5d1a2bc1053d1043b6eeea5da0b9240881aca706c82cd732c1aeef8e2b7973f7207a42248e6a03dcddce0a6d12f58a9fd55c934ff9315e50e0a6a72f99e388d67abacf839d50cd904401b8ab8a1aa1c1468e965059f5acc7e44389994fa73b7f1fe49850f9211566c00d9355507d3d487322223087ddd90c816c7a657", 0xd4}, {&(0x7f0000000640)="a36a79c8e1870ec6af97e8d076579d6cd0de6f60a8a52695d1d8198032fab5448b0de75eb465b07b4895710c1087ecdd332004c162d3bbb3742470956fa5af03c5f7877442961ceeb7fb2aeb4a584ffdb065bd4a8bf71763da4cb549d68952d068bdc40b61048a3e7079dd7a92250ff2975813f818e52487d01fe7bb3a322052f067a5d1711e929a7ec848118d69", 0x8e}, {&(0x7f0000000340)="3c1d9d020de4edd78b0228f3d11de92485eb7975a0ebcd0b4e03ea6c4555fc978b0ceda823d7c79af07666a40200a0aaaef1e2a16f0bfe7ca2d412e23e64e1090cf33879dd547fa7337a3fa810e8c99691a0ef3e17b05e3f48cd17f2fe3891c2e2", 0x61}, {&(0x7f0000000140)="8c1f931f75bf28a4", 0x8}], 0x5, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_ttl={{0x14}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000800)="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", 0xfe}, {&(0x7f0000000900)="a26816eea2b0b4f272113feba25132f67241f8dccceba4a88eeac40e87fe6adb504dd1d316cd48d702f1ef59700fb0613e80024f9ca8da8efdbbdcdf892c5737ff53f723953637032719c3794ad65c346cdbd033d6de4fa74420ea8321ae536aece35c01b6ed1cc5", 0x68}, {&(0x7f0000000280)="7b6c2307d857a8b1b82b0db992a48d5de3e3300b1623e446536c", 0x1a}, {&(0x7f0000000980)="2e921680bdd06cfaecdeb47fc43410730f6be9b76a86fd3442cafb48c3d3fc7cc45253045a113179a22ffb64af725fd52ae6790aa3a3304bace1f2a33bedd7b90b92fabaeb37da9eb5afaf85d4dbf20b0564f0996f75d049cb117038b81cefbfcc25672476f6d0da77ae5dd9962c7c18aef52487d536a555adbfec7064dde566c094589d2b9df73e0a1174156a4584c6d5b07521f4ae456b704f957783ff65e3509fd38ea5199f591967fe30125f9a60c90129801c5363df69cb9f956e12680332d5ae8c71becf2c", 0xc8}, {&(0x7f0000000a80)="9d6d15afaa0b845469004910c9206ea27bbcf4b498c23693800497f801e2f37be411f35c134059cc2ae24852f5c850d859b984b56d9baf8f5718f727e130b5b166c3caed2001193a82632a5bc0bc5a05fbe79c03d9c03b6aadae114b07574ee1fa336924d4b4737adf1373ac360665462f968911f96341d64dd9ea5b6eabc420888bd39e72e1233647bce96a5ca006a6bf1e11d95a2ca32daffaf77eeb09b8c0ff18bc90e437fb4b9ded565bf1c43e080000000000000022c92aba6062ae4541278f29d2f8e1895bf46686be64bd8076c8bfafd4a07749f7bb3126641ad7ba2e8b000000000000", 0xe7}, {&(0x7f0000000b80)="061badcb25f3dba941a04b2f543fd4198358fef412968c056e2dfa5b30569d92cc2672954ff58a4d210722bc4b6ff7ba333f820a194a6f66619c428387451b7f6e72484fb3c792b25aca5f0430b23c3a93a99175cb9f74029413b229788e1884702e263527d8469dface1439c4938559c05e", 0x72}, {&(0x7f0000000c00)="8ddcd9364347faabaade68efdfb61fc7ae64fe68cc0f9bfb759f8c2cac0b1c2c983e8166c8abf2a41279ba1c1087251da046078436d956360848a40b6cce01eac7811d7acfb07190778898d68e6e6d29f8beca7a67cd0a140372cec15ed92a47019cc9bac7ef25fbd0a613d3747681146d65a8381bb9d83ce17b60ad9797390b793a61b16fc3e567612f24a5", 0x8c}, {&(0x7f0000000cc0)="68f4e94254d9a4e096b0663b43e1925b28fe890826594f4154db150abfd906bde182fa6aead5ee8eb3cd823b8a0a3183096560cfd2e7ddd2326c64a6009eb0d2a090ce6ecc45ece15715ea351fc88cb04de4daf14dba94612db1ce", 0x5b}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000700)="1fb5369f4350748a16a2517b8a7ab843e83bee4958f52c28b877c175d8fa299c58d5", 0x22}], 0xa, &(0x7f00000028c0)=ANY=[@ANYBLOB="14000000000000000000000001000000d71040250000000090000000a800000000000000070000008907cfd92bcc4f831ff4e0000002ac141443ffffffff7f0000017f0000017f000001ac1e01018313840a0101007f0000017f000001ac14144144342c51e00000010000000964010101000006dcac1414aa000000027f00000100000008ac14141500000005ac1e00010000c51100000f4847789b214446a3ade1ab7e9f0020001c00000000000000000000000800000053ca88a38f76c1d5ae057523f597841c72c2845c1cf5c5", @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000980000000000000000000000070000004434e361ac14143e00000009e000000200000007ac141429000000050a01010200000008e000000200000002ac1414aa0000000289176ee0000001ac1414bbe0000001ac1414aae00000018617000000010111f0e8c588ea4b5426d891b5212f03ad862500000003050c0339681d21412bf04c5605099d042f85c6c65a000ac26930540893893500"], 0x160}}, {{&(0x7f0000002000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002340)=[{&(0x7f0000002040)="e510e6e54ba504000000000000007e0a28a0ea059e66a092421da136a9027e35", 0x20}, {&(0x7f0000002080)="d6b46378720194fbf6c041ddffbdd5fd1d6f1ece7fbb2681d71684e075cfb5b5026bc272eebbda0551bfcd43cf3cbf9476754dbf6375e7705c5fa0c5", 0x3c}, {&(0x7f00000020c0)="ff510c0b73ab0f61f7c6536da15348cc278274809a576ab87c6d29f4dccbb2e37e4748eb57e1e545a9e9ea27c49b38655723fed95390dfc613cc68b8b27292e975df926a9958b3bc64d29882d3d3afcd23167c260201770882d814347afe68da65d5cede1c7af00f785ba3a2cf3907494dbfad9524022a3cdf9efd8efe3f8ea787592c0dd105845f3734045d5d959f85f1a48a78523c6b4953f63a225be67d585059667701c97fef", 0xa8}, {&(0x7f0000002180)="e9d46d18c735b99e32e25caa9f37f1ab8686a6c911552eb8199660f09575403176ae3eacba8990a157e9e5f4de3f88a1b88002263939950ea324fed151a8a278a6464da841f89ec239d3b522066feedf084adc3d52900208400ec74d3ee45efb0b36822bb48e6518890d18bd278b65bab353f3bba745c3a4b9c73e054c64fa0c1ef5825713541b4f72c6f8d6157b0978024569675b7c4e47a340787fd60b806b21c33d9e60794b76b05ace8b440f44c42edd4dc15e082ed3399510849adcabb57e116cf3c9d77d7da297a5ba9c5d4f", 0xcf}, {&(0x7f0000002280)="306381ed2b2072a83a19610086f1780a194a2b67d59f91eb21519754385ae00d6e285747b7856d3a2420ff0d13e622e8e4d0c8ad7632f82c22f8829de41050795d45ff7aa0404887785fe3075413ecb276f220398a37b726213c8e9aa5c5f83c08630259f38a95a2ac4f2533471c2bed501c409dba8d97e88cd86d83f318aac72c5d8e274343d078f71f5ffd5b935e12727d28573239b1438dfccb0dab0565cd8b", 0xa1}], 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="1c000000000000000000fb8b08000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="0a010101ffffffff00000000110000000000000000000000010000004000000000000000"], 0x168}}, {{&(0x7f0000002540)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002580)="710ad40d299d", 0x6}, {&(0x7f00000025c0)="3c0630abd8f8b177848842ca4643229910d4bafeda32aace55f4444e2f7757b3a2947303ca0f64031991bae8c51605583cce60ac853576ac974d", 0x3a}], 0x2, &(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x150}}], 0x4, 0x9880) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @empty}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @private=0xa110102}, 0x5) 851.1259ms ago: executing program 3 (id=12617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x3f16, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x24004800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@deltclass={0x94, 0x29, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xdfc2844572332cc0}, {0x3, 0xfff9}, {0xe, 0xf}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x7a2, 0x400}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x5292cc0, 0x8a}}, @TCA_HFSC_RSC={0x10, 0x1, {0x79, 0x6, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x8b, 0x9}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_cake={0x9}]}, 0x94}}, 0x41) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r5) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01f427bd7020f9dbdf6dbfb3cf2295d1a200ff5efe7ef172541822f3b854d2f1971503574b1cd9a397fd6b89c1000000ee82df57802da94f4ae3c96b5bc28dd3832fc8a726ec052b0ec4dbf826dc76503792db80c8ddb599c619b1c1cb942d06797ce817bc35c12ffb031ea0e1d6d119cb4a4bfaa83a770be56951a9095f3bc4d706efc67930db9d373f9f7cb4bdc20f80da2ac6fb3fba368e35d19920aa25e49c48e6a28c349bcd24459137168e542a749590188b3d7705b50033c64b41caeac622f22ae3ae8e6b2d1a0a"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dd09725c5f04a4cd2e", @ANYRES16=r6, @ANYBLOB="20002bbd7000fddbdf25010000000800010003000000080002000200000008000100000000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x1, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x108) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x24000000, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x337) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 559.679327ms ago: executing program 3 (id=12618): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xffff}, {0x10, 0xffff}, {0x6, 0xf}}}, 0x24}}, 0x20040014) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1a0, 0x240, 0xffffffff, 0x0, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 536.047737ms ago: executing program 1 (id=12619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x2012, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="188534deff6511bf1100000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff000000000feee12b7fb7f5fd99d0e6f9a329e7180006bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000340)={0x0, "75398238079ac44447b1b28acae0a58d"}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000001540)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) write$nci(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="61050603"], 0x61) (async, rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000009fad734d37dd2848e16d6bbca71d0b3df53bdd2c844e08140a106b1470b6000000fe0700"/57], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) (async, rerun: 32) r8 = socket(0x1e, 0x6, 0x7) (rerun: 32) sendfile(r7, r8, &(0x7f0000001380)=0x9, 0x8) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000001440)=ANY=[@ANYBLOB="18020000000800000000000000000000850000008a000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000b00000000b70500000800000085000000a5000000950000000000000027aa76fd85e26c6c079fe12ea072a4168ffd1a03f4b605bf8485d9c881bfff33e18e2f4930160560e3b43ab683f107b6a5dd7a19706ab40c9de3449b421cdf07cb4f9f7c1f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES64=r7, @ANYRESHEX=r1], 0x13a0}, 0x1, 0x0, 0x0, 0x4040011}, 0xc000) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r10], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 496.84783ms ago: executing program 3 (id=12620): r0 = socket(0x2, 0x80805, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xd}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x8a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@can={0xc, {{0x3, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "cd95878946641af1"}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x34}], 0x1}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xd8, 0xa, 0x148, 0x0, 0x60, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8, 0x0, {0x200003ae, 0x7f00}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x1, 0x2, 0x2, 'syz0\x00', 'syz0\x00', {0x8}}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x2e, 0x0, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e21, 0x4e26], [0x4e20, 0x4e20], 0x7, 0x1, 0x80}}, @common=@ah={{0x30}, {[0xfffffffa, 0x3]}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) 129.027021ms ago: executing program 3 (id=12621): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 128.282909ms ago: executing program 1 (id=12622): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x7fff, 0x1, 0x2, 0x1, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x7fff, 0x1, 0x2, 0x1, 0x3, 0x9}, 0x20) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x40044) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x4, 0x300}, 0x6) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f00000001c0)={0x0, 0x6e}, 0x1, 0x0, 0x0, 0x1000}, 0x140) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r11}, 0xc) ioctl(r9, 0x8b32, &(0x7f0000000040)) 127.391749ms ago: executing program 2 (id=12623): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x26}, 0x0) 0s ago: executing program 2 (id=12624): syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000000, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050002a2000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000095f4cb6c66b029b090000000900010073797a300000000008000540000000213c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214000000100004"], 0xc0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000020010480"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) kernel console output (not intermixed with test programs): ppressed [ 1150.688962][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10953'. [ 1150.694485][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10954'. [ 1150.733630][T17215] ip6gre2: entered promiscuous mode [ 1150.742721][T17215] ip6gre2: entered allmulticast mode [ 1150.756872][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10953'. [ 1150.766692][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10954'. [ 1150.767947][T17215] netlink: 'syz.4.10957': attribute type 1 has an invalid length. [ 1150.800124][T17211] lo: entered promiscuous mode [ 1150.805538][T17211] tunl0: entered promiscuous mode [ 1150.811238][T17211] gre0: entered promiscuous mode [ 1150.828714][T17211] gretap0: entered promiscuous mode [ 1150.845504][T17211] erspan0: entered promiscuous mode [ 1150.856098][T17211] ip_vti0: entered promiscuous mode [ 1150.961602][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10961'. [ 1151.061789][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10961'. [ 1151.101933][T17239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10964'. [ 1151.158138][T17239] xfrm1: entered allmulticast mode [ 1151.200085][T17246] syzkaller0: entered promiscuous mode [ 1151.211593][T17246] syzkaller0: entered allmulticast mode [ 1151.224442][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10960'. [ 1151.280450][T17253] netlink: 'syz.4.10960': attribute type 2 has an invalid length. [ 1151.297034][T17253] netlink: 'syz.4.10960': attribute type 9 has an invalid length. [ 1151.312585][T17253] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10960'. [ 1151.406988][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10967'. [ 1151.412140][T17258] lo speed is unknown, defaulting to 1000 [ 1151.424643][T17258] wg1 speed is unknown, defaulting to 1000 [ 1151.433360][T17258] lo speed is unknown, defaulting to 1000 [ 1151.445373][T17265] x_tables: unsorted underflow at hook 3 [ 1151.447233][T17258] lo speed is unknown, defaulting to 1000 [ 1151.465854][T17266] geneve0: entered promiscuous mode [ 1151.472049][T17266] geneve0: entered allmulticast mode [ 1151.856362][T17288] gretap2: entered promiscuous mode [ 1151.868126][T17288] batman_adv: batadv0: Adding interface: gretap2 [ 1151.882862][T17288] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1151.944718][T17288] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1152.332126][T17311] netlink: 'syz.1.10977': attribute type 21 has an invalid length. [ 1152.571236][T17317] netlink: 'syz.2.10978': attribute type 1 has an invalid length. [ 1152.591274][T17317] netlink: 'syz.2.10978': attribute type 1 has an invalid length. [ 1152.790998][T17324] lo speed is unknown, defaulting to 1000 [ 1152.799987][T17324] wg1 speed is unknown, defaulting to 1000 [ 1152.809523][T17324] lo speed is unknown, defaulting to 1000 [ 1152.817593][T17324] lo speed is unknown, defaulting to 1000 [ 1153.097592][T17334] net_ratelimit: 2 callbacks suppressed [ 1153.097612][T17334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1153.165059][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 1153.513959][T17359] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1154.640274][T17394] vlan4: entered promiscuous mode [ 1154.646445][T17394] bridge0: entered promiscuous mode [ 1154.980041][T17407] syzkaller0: left promiscuous mode [ 1154.985963][T17407] syzkaller0: left allmulticast mode [ 1156.401098][T17352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1156.609277][T17414] ip6tnl0: Caught tx_queue_len zero misconfig [ 1156.676310][T17421] __nla_validate_parse: 2 callbacks suppressed [ 1156.676328][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11005'. [ 1156.714489][T17413] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1156.751890][T17421] vlan3: entered promiscuous mode [ 1156.775256][T17421] bridge0: entered promiscuous mode [ 1156.962761][T17445] ip6tnl0: Caught tx_queue_len zero misconfig [ 1156.972494][T17443] netlink: 'syz.0.11009': attribute type 39 has an invalid length. [ 1156.993094][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11011'. [ 1157.238731][T17461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11015'. [ 1157.265777][T17461] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11015'. [ 1157.299272][T17466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11018'. [ 1157.444156][T17480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11023'. [ 1157.507984][T17475] tipc: Disabling bearer [ 1157.515129][T17487] netlink: 'syz.2.11024': attribute type 4 has an invalid length. [ 1157.517843][T17490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1157.532896][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11024'. [ 1157.546342][T17487] netlink: 'syz.2.11024': attribute type 4 has an invalid length. [ 1157.558230][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11024'. [ 1158.200649][T17507] xt_CONNSECMARK: invalid mode: 253 [ 1158.249101][T17511] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11029'. [ 1158.587781][T17535] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11037'. [ 1158.635277][T17537] lo: Caught tx_queue_len zero misconfig [ 1158.770699][T17552] syzkaller1: entered allmulticast mode [ 1158.842200][T17557] netlink: 'syz.1.11043': attribute type 1 has an invalid length. [ 1158.882418][T17560] SET target dimension over the limit! [ 1159.015287][T17567] tipc: Enabled bearer , priority 0 [ 1159.024653][T17567] syzkaller0: entered promiscuous mode [ 1159.030542][T17567] syzkaller0: entered allmulticast mode [ 1159.088739][T17567] tipc: Resetting bearer [ 1159.108552][T17567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.189765][T17581] sctp: [Deprecated]: syz.3.11052 (pid 17581) Use of int in maxseg socket option. [ 1159.189765][T17581] Use struct sctp_assoc_value instead [ 1159.244766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.376011][T17566] tipc: Resetting bearer [ 1159.422094][T17566] tipc: Disabling bearer [ 1159.513041][T17586] syzkaller0: Caught tx_queue_len zero misconfig [ 1159.836035][T17606] lo speed is unknown, defaulting to 1000 [ 1159.907026][T17606] wg1 speed is unknown, defaulting to 1000 [ 1159.914698][T17606] lo speed is unknown, defaulting to 1000 [ 1159.922142][T17606] lo speed is unknown, defaulting to 1000 [ 1160.066112][T17616] netlink: 'syz.4.11060': attribute type 1 has an invalid length. [ 1160.074265][T17616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.670040][T17650] 8021q: VLANs not supported on ip6gre0 [ 1160.743017][T17650] netlink: 'syz.1.11072': attribute type 7 has an invalid length. [ 1160.750670][T17647] lo speed is unknown, defaulting to 1000 [ 1160.831460][T17647] wg1 speed is unknown, defaulting to 1000 [ 1160.854680][T17647] lo speed is unknown, defaulting to 1000 [ 1160.875498][T17647] lo speed is unknown, defaulting to 1000 [ 1161.170300][ T25] block nbd9: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 150 seconds [ 1161.183625][ T25] block nbd9: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 150 seconds [ 1161.195223][ T25] block nbd9: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 150 seconds [ 1161.207271][ T25] block nbd9: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 150 seconds [ 1162.807901][T17764] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1163.138460][T17780] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1163.206680][T17788] __nla_validate_parse: 7 callbacks suppressed [ 1163.206698][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11100'. [ 1163.250233][T17791] mac80211_hwsim hwsim97 wlan0: Caught tx_queue_len zero misconfig [ 1163.288538][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11102'. [ 1163.361087][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11104'. [ 1163.383071][T17790] netlink: 'syz.2.11102': attribute type 23 has an invalid length. [ 1163.489392][T17802] netlink: 'syz.0.11105': attribute type 39 has an invalid length. [ 1163.653803][T17807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11106'. [ 1163.679020][T17807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11106'. [ 1163.747258][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11109'. [ 1163.805465][T17821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11105'. [ 1163.831044][T17821] netlink: 43 bytes leftover after parsing attributes in process `syz.0.11105'. [ 1163.866669][T17821] netlink: 43 bytes leftover after parsing attributes in process `syz.0.11105'. [ 1163.896606][T17826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1164.020479][T17832] netlink: zone id is out of range [ 1164.030215][T17832] netlink: zone id is out of range [ 1164.040749][T17832] netlink: zone id is out of range [ 1164.059760][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11116'. [ 1164.085053][T17832] netlink: zone id is out of range [ 1164.095426][T17832] netlink: zone id is out of range [ 1164.100600][T17832] netlink: zone id is out of range [ 1164.107421][T17837] netlink: 'syz.1.11116': attribute type 14 has an invalid length. [ 1164.126369][T17832] netlink: zone id is out of range [ 1164.141633][T17832] netlink: zone id is out of range [ 1164.186936][T17832] netlink: zone id is out of range [ 1164.208451][T17832] netlink: zone id is out of range [ 1164.229049][T17832] netlink: zone id is out of range [ 1164.246026][T17832] netlink: zone id is out of range [ 1164.258367][T17832] netlink: zone id is out of range [ 1164.271374][T17832] netlink: zone id is out of range [ 1164.279011][T17832] netlink: zone id is out of range [ 1164.293157][T17832] netlink: zone id is out of range [ 1164.556549][T17864] lo speed is unknown, defaulting to 1000 [ 1164.614479][T17864] wg1 speed is unknown, defaulting to 1000 [ 1164.639817][T17864] lo speed is unknown, defaulting to 1000 [ 1164.685259][T17864] lo speed is unknown, defaulting to 1000 [ 1164.754991][T17883] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 1165.111081][T17897] netlink: 'syz.1.11130': attribute type 58 has an invalid length. [ 1166.175327][T17943] netlink: 'syz.4.11144': attribute type 1 has an invalid length. [ 1166.322395][T17951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.362804][T17955] macsec1: entered promiscuous mode [ 1166.571890][T17966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.653280][T18019] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1168.029467][T18041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1168.270998][T18055] macsec0: entered promiscuous mode [ 1168.298903][T18063] xt_CT: No such helper "syz0" [ 1168.304327][T18055] dummy0: entered promiscuous mode [ 1168.315807][T18055] macsec0: entered allmulticast mode [ 1168.321289][T18055] dummy0: entered allmulticast mode [ 1168.376877][T18055] dummy0: left allmulticast mode [ 1168.382695][T18055] dummy0: left promiscuous mode [ 1168.486848][T18064] lo speed is unknown, defaulting to 1000 [ 1168.565456][T18064] wg1 speed is unknown, defaulting to 1000 [ 1168.580672][T18086] wg1: entered promiscuous mode [ 1168.593771][T18086] wg1: entered allmulticast mode [ 1168.599716][T18064] lo speed is unknown, defaulting to 1000 [ 1168.600798][T18086] __nla_validate_parse: 20 callbacks suppressed [ 1168.600813][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11185'. [ 1168.628368][T18064] lo speed is unknown, defaulting to 1000 [ 1168.698490][T18095] tipc: Enabled bearer , priority 0 [ 1168.721885][T18095] syzkaller0: entered promiscuous mode [ 1168.751070][T18095] syzkaller0: entered allmulticast mode [ 1168.820986][T18101] syzkaller0: entered promiscuous mode [ 1168.830648][T18101] syzkaller0: entered allmulticast mode [ 1168.840505][T18095] tipc: Resetting bearer [ 1168.844712][T18106] netlink: 'syz.3.11192': attribute type 1 has an invalid length. [ 1168.851536][T18101] netlink: 'syz.0.11188': attribute type 1 has an invalid length. [ 1168.916506][T18106] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1168.925899][T18087] tipc: Resetting bearer [ 1168.951415][T18087] tipc: Disabling bearer [ 1169.057443][T18113] tipc: Enabling of bearer rejected, already enabled [ 1169.167603][T18125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11195'. [ 1169.205871][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11195'. [ 1169.254906][T18130] syzkaller0: entered promiscuous mode [ 1169.260885][T18130] syzkaller0: entered allmulticast mode [ 1169.270655][T18136] bridge0: entered allmulticast mode [ 1169.277337][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11200'. [ 1169.529849][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11206'. [ 1169.634520][T18157] netlink: 'syz.1.11207': attribute type 1 has an invalid length. [ 1169.638698][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11208'. [ 1169.655444][T18160] net_ratelimit: 28 callbacks suppressed [ 1169.655459][T18160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.691646][T18157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1169.738036][T18157] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1169.785924][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1169.852736][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11212'. [ 1169.899921][T18173] veth0_to_bridge: entered promiscuous mode [ 1169.908833][T18173] veth0_to_bridge: entered allmulticast mode [ 1169.982329][T18181] netlink: 'syz.4.11214': attribute type 1 has an invalid length. [ 1170.087680][T18188] lo speed is unknown, defaulting to 1000 [ 1170.107202][T18188] wg1 speed is unknown, defaulting to 1000 [ 1170.124719][T18188] lo speed is unknown, defaulting to 1000 [ 1170.148396][T18188] lo speed is unknown, defaulting to 1000 [ 1170.200056][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11219'. [ 1170.549651][T18212] x_tables: duplicate underflow at hook 1 [ 1170.557776][T18213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.696033][T18221] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11226'. [ 1171.238788][T18248] sctp: [Deprecated]: syz.2.11231 (pid 18248) Use of int in max_burst socket option. [ 1171.238788][T18248] Use struct sctp_assoc_value instead [ 1171.655506][T18281] netlink: 'syz.3.11239': attribute type 13 has an invalid length. [ 1171.700597][T18284] m5n: entered promiscuous mode [ 1171.762481][T18289] lo speed is unknown, defaulting to 1000 [ 1171.801806][T18289] wg1 speed is unknown, defaulting to 1000 [ 1171.821560][T18289] lo speed is unknown, defaulting to 1000 [ 1171.829367][T18289] lo speed is unknown, defaulting to 1000 [ 1171.930402][T18308] syzkaller0: left promiscuous mode [ 1171.935761][T18308] syzkaller0: left allmulticast mode [ 1172.419482][T18346] pim6reg: entered allmulticast mode [ 1172.426297][T18346] pim6reg: left allmulticast mode [ 1173.256165][T18346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.701641][T18346] tipc: Resetting bearer [ 1173.772182][T19039] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.803762][T19039] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.829994][T19039] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.854177][T19039] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.867536][T19039] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.872004][T18403] __nla_validate_parse: 5 callbacks suppressed [ 1173.872018][T18403] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11273'. [ 1173.891651][T19039] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.892136][T19039] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.892162][T19039] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.898984][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11274'. [ 1174.087634][T18418] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11277'. [ 1174.103268][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11278'. [ 1174.175770][T18430] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1174.183348][T18428] mac80211_hwsim hwsim133 wlan0: entered promiscuous mode [ 1174.195314][T18428] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1174.273616][T18437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.416564][T18443] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11283'. [ 1174.526781][T18446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11283'. [ 1174.579113][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11283'. [ 1174.589666][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11283'. [ 1174.777169][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11285'. [ 1174.847882][T18446] bond5: entered promiscuous mode [ 1174.853420][T18446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1175.232252][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11291'. [ 1175.319031][T18476] openvswitch: netlink: Flow key attr not present in new flow. [ 1175.349847][T18481] vlan7: entered promiscuous mode [ 1175.368826][T18481] batadv0: entered promiscuous mode [ 1175.674161][T18505] netlink: 'syz.0.11302': attribute type 12 has an invalid length. [ 1176.009027][T18526] tipc: Enabled bearer , priority 0 [ 1176.027121][T18526] syzkaller0: entered promiscuous mode [ 1176.045910][T18526] syzkaller0: entered allmulticast mode [ 1176.166394][T18523] tipc: Resetting bearer [ 1176.189945][T18521] tipc: Resetting bearer [ 1176.237298][T18521] tipc: Disabling bearer [ 1177.170568][ T1296] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1177.176959][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1179.035978][T18529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1179.192328][T18596] __nla_validate_parse: 7 callbacks suppressed [ 1179.192347][T18596] netlink: 732 bytes leftover after parsing attributes in process `syz.2.11321'. [ 1179.215385][T18596] netlink: 732 bytes leftover after parsing attributes in process `syz.2.11321'. [ 1179.261325][T18608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11325'. [ 1179.277769][T18605] syzkaller0: entered promiscuous mode [ 1179.295967][T18605] syzkaller0: entered allmulticast mode [ 1179.347797][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11326'. [ 1179.520817][T18623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1179.611042][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11331'. [ 1179.669923][T18631] netlink: 'syz.2.11333': attribute type 1 has an invalid length. [ 1179.733023][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1179.787325][T18635] 0: reclassify loop, rule prio 0, protocol 800 [ 1179.910265][T18638] lo speed is unknown, defaulting to 1000 [ 1179.948539][T18638] wg1 speed is unknown, defaulting to 1000 [ 1179.958485][T18638] lo speed is unknown, defaulting to 1000 [ 1179.983484][T18638] lo speed is unknown, defaulting to 1000 [ 1180.137524][T18660] tipc: Enabling of bearer rejected, already enabled [ 1180.164616][T18658] lo speed is unknown, defaulting to 1000 [ 1180.166273][T18661] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1180.174383][T18656] batadv0: entered promiscuous mode [ 1180.185640][T18656] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1180.207027][T18658] wg1 speed is unknown, defaulting to 1000 [ 1180.225028][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1180.320291][T18658] lo speed is unknown, defaulting to 1000 [ 1180.330335][T18658] lo speed is unknown, defaulting to 1000 [ 1180.491931][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11346'. [ 1180.505667][T18677] bond0: Master is either lo or non-ether device [ 1180.777060][T18694] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11350'. [ 1180.799951][T18694] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11350'. [ 1180.853541][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11350'. [ 1181.007182][ T6973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1181.061352][T18714] bridge_slave_0: left allmulticast mode [ 1181.071499][T18714] bridge_slave_0: left promiscuous mode [ 1181.077411][T18714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.244300][ T5822] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1181.350083][T18714] bridge_slave_1: left allmulticast mode [ 1181.366183][T18714] bridge_slave_1: left promiscuous mode [ 1181.381180][T18714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.465352][T18734] netlink: 'syz.1.11360': attribute type 1 has an invalid length. [ 1181.850655][T18714] bond0: (slave bond_slave_0): Releasing backup interface [ 1181.891771][T18714] bond0: (slave bond_slave_1): Releasing backup interface [ 1181.909381][T18714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.918827][T18714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.929372][T18714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1182.082340][ T6973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1182.092122][ T6973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1182.135399][T18745] bond5: option resend_igmp: invalid value (2878) [ 1182.141912][T18745] bond5: option resend_igmp: allowed values 0 - 255 [ 1182.153018][T18745] bond5 (unregistering): Released all slaves [ 1182.282532][T18761] netlink: 'syz.4.11366': attribute type 1 has an invalid length. [ 1182.416990][T18766] tipc: Enabling of bearer rejected, already enabled [ 1182.536589][T18776] lo speed is unknown, defaulting to 1000 [ 1182.568424][T18776] wg1 speed is unknown, defaulting to 1000 [ 1182.595913][T18776] lo speed is unknown, defaulting to 1000 [ 1182.613530][T18776] lo speed is unknown, defaulting to 1000 [ 1182.764655][ T5822] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1182.773843][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 1182.781818][ C0] lec:lec_tx_timeout: lec0 [ 1182.786989][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1182.884921][T18792] IPVS: set_ctl: invalid protocol: 43 172.20.20.23:20003 [ 1182.974307][T18794] netlink: 'syz.0.11377': attribute type 2 has an invalid length. [ 1183.305677][T18831] netlink: 'syz.3.11385': attribute type 1 has an invalid length. [ 1183.319572][T18824] bond7: option fail_over_mac: invalid value (127) [ 1183.347168][T18824] bond7 (unregistering): Released all slaves [ 1183.376549][T18822] macsec1: entered promiscuous mode [ 1183.381786][T18822] macsec1: entered allmulticast mode [ 1183.421151][T18831] bond8: entered promiscuous mode [ 1183.446725][T18831] bond8: entered allmulticast mode [ 1183.475386][T18831] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1183.657717][T18844] lo speed is unknown, defaulting to 1000 [ 1183.665634][T18844] wg1 speed is unknown, defaulting to 1000 [ 1183.676062][T18844] lo speed is unknown, defaulting to 1000 [ 1183.692543][T18844] lo speed is unknown, defaulting to 1000 [ 1183.822074][T18857] netlink: 'syz.0.11390': attribute type 13 has an invalid length. [ 1183.835372][T18861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.924020][ T5822] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1183.940822][T18857] syzkaller0: Caught tx_queue_len zero misconfig [ 1183.994803][T18857] tipc: Enabling of bearer rejected, already enabled [ 1184.068277][T18874] netlink: 'syz.0.11396': attribute type 1 has an invalid length. [ 1184.191997][T18875] lo speed is unknown, defaulting to 1000 [ 1184.203529][T18875] wg1 speed is unknown, defaulting to 1000 [ 1184.210263][ T5822] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1184.283551][T18886] __nla_validate_parse: 11 callbacks suppressed [ 1184.283571][T18886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11395'. [ 1184.304959][T18875] lo speed is unknown, defaulting to 1000 [ 1184.327610][T18875] lo speed is unknown, defaulting to 1000 [ 1184.327675][T18886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11395'. [ 1184.370459][T18883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11396'. [ 1184.384545][T18883] tunl0: Caught tx_queue_len zero misconfig [ 1184.651803][T18903] SET target dimension over the limit! [ 1184.660840][T18903] : renamed from veth0_to_bond (while UP) [ 1184.806933][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11403'. [ 1184.841643][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11403'. [ 1184.916210][T18907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11403'. [ 1185.119110][T18922] lo speed is unknown, defaulting to 1000 [ 1185.135041][T18922] wg1 speed is unknown, defaulting to 1000 [ 1185.141578][T18928] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11407'. [ 1185.158022][T18922] lo speed is unknown, defaulting to 1000 [ 1185.186277][T18922] lo speed is unknown, defaulting to 1000 [ 1185.523383][T18956] netlink: 'syz.2.11414': attribute type 5 has an invalid length. [ 1185.623020][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11414'. [ 1185.636800][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11414'. [ 1185.747630][T18968] ip6erspan1: entered allmulticast mode [ 1185.756675][T18969] lo: Caught tx_queue_len zero misconfig [ 1185.884069][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1186.164911][T18995] netlink: 212048 bytes leftover after parsing attributes in process `syz.3.11421'. [ 1186.505019][T19012] netlink: 'syz.1.11425': attribute type 13 has an invalid length. [ 1187.794582][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1187.802667][ C0] lec:lec_tx_timeout: lec0 [ 1189.084190][ T5832] Bluetooth: hci3: command 0x0401 tx timeout [ 1189.627861][T19017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1189.638890][T19032] __nla_validate_parse: 1 callbacks suppressed [ 1189.638907][T19032] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11430'. [ 1189.861714][T19084] netlink: 'syz.0.11436': attribute type 4 has an invalid length. [ 1189.878879][T19084] netlink: 'syz.0.11436': attribute type 4 has an invalid length. [ 1189.963014][T19088] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1189.990177][T19093] batadv_slave_0: entered promiscuous mode [ 1190.002154][T19087] batadv_slave_0: left promiscuous mode [ 1190.041617][T19081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11439'. [ 1190.271385][T19113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1190.392833][T19119] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11449'. [ 1190.480056][T19121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11448'. [ 1190.850145][T19127] syzkaller0: entered allmulticast mode [ 1190.857076][T19127] syzkaller0: entered promiscuous mode [ 1190.866470][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11452'. [ 1190.878251][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11452'. [ 1190.928317][T19127] syzkaller0 (unregistering): left allmulticast mode [ 1190.945675][T19127] syzkaller0 (unregistering): left promiscuous mode [ 1190.992509][ T5832] block nbd12: Receive control failed (result -32) [ 1191.007918][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11453'. [ 1191.222671][T19139] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 1191.248946][ T25] block nbd9: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 180 seconds [ 1191.261464][ T25] block nbd9: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 180 seconds [ 1191.272757][ T25] block nbd9: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 180 seconds [ 1191.284450][ T25] block nbd9: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 180 seconds [ 1191.424493][ T2976] nci: nci_rx_work: unknown MT 0x7 [ 1191.672253][T19165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11460'. [ 1191.913977][T19177] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11459'. [ 1192.155556][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11466'. [ 1192.348908][T19197] lo speed is unknown, defaulting to 1000 [ 1192.357251][T19197] wg1 speed is unknown, defaulting to 1000 [ 1192.375842][T19197] lo speed is unknown, defaulting to 1000 [ 1192.383292][T19197] lo speed is unknown, defaulting to 1000 [ 1193.031346][T19228] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1193.189990][T19234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1193.490195][T19249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.772696][T19259] bond9: option broadcast_neighbor: invalid value (30) [ 1193.788353][T19259] bond9 (unregistering): Released all slaves [ 1193.803974][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1194.935968][T19314] __nla_validate_parse: 5 callbacks suppressed [ 1194.935986][T19314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11500'. [ 1195.170382][T19329] "syz.0.11504" (19329) uses obsolete ecb(arc4) skcipher [ 1195.383332][T19340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11508'. [ 1195.634107][ T5835] block nbd13: Receive control failed (result -32) [ 1196.201182][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11515'. [ 1196.214287][T19372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11515'. [ 1196.216084][T19346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1196.237453][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11515'. [ 1196.241054][T19346] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1196.247567][T19372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11515'. [ 1196.264603][T19372] netlink: 'syz.2.11515': attribute type 6 has an invalid length. [ 1196.316244][T19346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1196.344243][T19346] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1196.377538][T19346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1196.383463][T19346] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1196.422472][T19346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1196.428902][T19346] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1196.451135][T19346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1196.458998][T19346] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1196.585403][T19391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.836956][T19411] syzkaller0: entered promiscuous mode [ 1196.843216][T19411] syzkaller0: entered allmulticast mode [ 1197.000180][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11527'. [ 1197.008201][T19425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1197.022199][T19424] netlink: 'syz.0.11527': attribute type 3 has an invalid length. [ 1197.055914][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11527'. [ 1197.067303][T19425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1197.166331][T19432] bridge0: port 1(bond0) entered disabled state [ 1197.173153][T19432] bond0: left allmulticast mode [ 1197.183119][T19432] bond_slave_0: left allmulticast mode [ 1197.203397][T19432] bond_slave_1: left allmulticast mode [ 1197.215978][T19432] bond0: left promiscuous mode [ 1197.232758][T19432] bond_slave_0: left promiscuous mode [ 1197.238771][T19432] bond_slave_1: left promiscuous mode [ 1197.246990][T19432] bridge0: port 1(bond0) entered disabled state [ 1199.561912][ T5191] udevd[5191]: worker [10078] /devices/virtual/block/nbd9 timeout; kill it [ 1199.574390][ T5191] udevd[5191]: seq 65191 '/devices/virtual/block/nbd9' killed [ 1199.702570][T19488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11536'. [ 1199.719118][T19488] lo: entered allmulticast mode [ 1199.750045][T19496] veth1_to_team: Caught tx_queue_len zero misconfig [ 1199.773933][T19496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11538'. [ 1199.978098][T19518] netlink: 'syz.0.11544': attribute type 22 has an invalid length. [ 1200.008838][T19518] __nla_validate_parse: 1 callbacks suppressed [ 1200.008855][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11544'. [ 1200.048253][T19522] netlink: 'syz.2.11545': attribute type 1 has an invalid length. [ 1200.167632][T19518] netlink: 'syz.0.11544': attribute type 22 has an invalid length. [ 1200.189331][T19536] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1200.203488][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11544'. [ 1200.222764][ T6971] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.233500][ T6971] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.272951][ T6971] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.286467][ T6971] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.385424][T19546] vlan1: entered promiscuous mode [ 1200.390587][T19546] geneve1: entered promiscuous mode [ 1200.396834][T19546] vlan1: entered allmulticast mode [ 1200.402012][T19546] geneve1: entered allmulticast mode [ 1200.554147][T19557] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11555'. [ 1200.563456][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11555'. [ 1200.942228][T19596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1201.019049][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11566'. [ 1201.037978][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11567'. [ 1201.048321][T19598] netlink: 'syz.2.11566': attribute type 12 has an invalid length. [ 1201.112256][T19606] netlink: 'syz.3.11568': attribute type 6 has an invalid length. [ 1201.144943][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11566'. [ 1201.184695][T19598] netlink: 'syz.2.11566': attribute type 12 has an invalid length. [ 1201.592511][T19641] xt_hashlimit: size too large, truncated to 1048576 [ 1201.798764][T19658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11581'. [ 1201.818735][T19652] lo speed is unknown, defaulting to 1000 [ 1201.825303][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11581'. [ 1201.837341][T19652] wg1 speed is unknown, defaulting to 1000 [ 1201.867261][T19652] lo speed is unknown, defaulting to 1000 [ 1201.892315][T19652] lo speed is unknown, defaulting to 1000 [ 1201.960765][T19667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11585'. [ 1202.018691][T19674] ip6tnl4: entered promiscuous mode [ 1202.027081][T19674] ip6tnl4: entered allmulticast mode [ 1202.053220][T19672] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1202.066670][T19672] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1202.086419][T19679] netlink: 'syz.3.11588': attribute type 2 has an invalid length. [ 1202.961323][T19719] tunl0: Caught tx_queue_len zero misconfig [ 1203.222346][T19740] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1203.305034][T19747] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1203.602878][T19771] syzkaller0: entered promiscuous mode [ 1203.622337][T19771] syzkaller0: entered allmulticast mode [ 1203.632943][T19769] tipc: Enabling of bearer rejected, already enabled [ 1203.755820][T19776] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1205.441642][T19782] lo speed is unknown, defaulting to 1000 [ 1205.531816][T19782] wg1 speed is unknown, defaulting to 1000 [ 1205.553254][T19782] lo speed is unknown, defaulting to 1000 [ 1205.573240][T19782] lo speed is unknown, defaulting to 1000 [ 1205.720694][T19806] tipc: Enabled bearer , priority 0 [ 1205.741660][T19806] syzkaller0: entered promiscuous mode [ 1205.757911][T19806] syzkaller0: entered allmulticast mode [ 1205.820079][T19806] tipc: Resetting bearer [ 1205.945953][T19805] tipc: Resetting bearer [ 1205.976000][T19805] tipc: Disabling bearer [ 1206.012468][T19821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.042695][T19813] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1206.055723][T19813] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1206.056751][T19821] __nla_validate_parse: 11 callbacks suppressed [ 1206.056766][T19821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11626'. [ 1206.073702][T19813] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1206.319200][T19843] veth0: Caught tx_queue_len zero misconfig [ 1206.422777][T19852] netlink: 'syz.1.11632': attribute type 1 has an invalid length. [ 1206.434595][T19852] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1206.626781][T19862] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11639'. [ 1206.903321][T19876] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11644'. [ 1206.931808][T19876] nbd: must specify an index to disconnect [ 1206.982035][T19882] tipc: Enabled bearer , priority 0 [ 1207.047526][T19882] syzkaller0: entered promiscuous mode [ 1207.057423][T19882] syzkaller0: entered allmulticast mode [ 1207.065000][T19882] tipc: Resetting bearer [ 1207.071893][T19888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11647'. [ 1207.073192][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11649'. [ 1207.091676][T19889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11647'. [ 1207.106492][T19881] tipc: Resetting bearer [ 1207.867082][T19911] netlink: 'syz.0.11651': attribute type 5 has an invalid length. [ 1208.796562][T19915] netlink: 'syz.0.11652': attribute type 27 has an invalid length. [ 1208.811480][T19881] tipc: Disabling bearer [ 1208.957417][T19917] vlan3: entered promiscuous mode [ 1208.967838][T19917] geneve1: entered promiscuous mode [ 1208.973219][T19917] vlan3: entered allmulticast mode [ 1208.978751][T19917] geneve1: entered allmulticast mode [ 1209.082401][T19921] tipc: Enabling of bearer rejected, already enabled [ 1209.112254][T19932] erspan0: entered promiscuous mode [ 1209.120785][T19920] netlink: 'syz.4.11656': attribute type 39 has an invalid length. [ 1209.132108][T19932] erspan0: entered allmulticast mode [ 1209.173792][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1209.287771][T19941] netlink: 'syz.3.11659': attribute type 10 has an invalid length. [ 1209.304418][T19941] netlink: 228 bytes leftover after parsing attributes in process `syz.3.11659'. [ 1209.554564][T19959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11663'. [ 1209.598615][T19964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11664'. [ 1209.705337][T19971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1209.712699][T19971] IPv6: NLM_F_CREATE should be set when creating new route [ 1209.719977][T19971] IPv6: NLM_F_CREATE should be set when creating new route [ 1209.745261][T19971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1209.763571][T19976] syzkaller0: entered promiscuous mode [ 1209.804421][T19976] syzkaller0: entered allmulticast mode [ 1209.823431][T19976] macsec1: entered promiscuous mode [ 1210.098422][T20002] lo speed is unknown, defaulting to 1000 [ 1210.125813][T20002] wg1 speed is unknown, defaulting to 1000 [ 1210.151460][T20002] lo speed is unknown, defaulting to 1000 [ 1210.200456][T20002] lo speed is unknown, defaulting to 1000 [ 1210.269154][T20013] syzkaller0: entered promiscuous mode [ 1210.280586][T20013] syzkaller0: entered allmulticast mode [ 1211.087860][T20048] __nla_validate_parse: 9 callbacks suppressed [ 1211.087879][T20048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11685'. [ 1211.362959][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11687'. [ 1211.506235][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11688'. [ 1211.528495][T20062] xt_hashlimit: overflow, rate too high: 0 [ 1211.536629][T20062] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11689'. [ 1211.547506][T20058] ip6tnl2: entered allmulticast mode [ 1211.558087][T20058] bond8: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 1211.613748][T20058] bond8: (slave ip6tnl2): Error -95 calling set_mac_address [ 1211.865344][T20081] openvswitch: netlink: Message has 572 unknown bytes. [ 1211.887852][T20081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.887987][T20082] openvswitch: netlink: Message has 572 unknown bytes. [ 1211.905649][T20086] netlink: 'syz.0.11697': attribute type 30 has an invalid length. [ 1211.913552][T20086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11697'. [ 1212.007763][T20086] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1212.023681][T20082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1212.079841][T20094] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11699'. [ 1212.089725][T20086] bond5 (unregistering): Released all slaves [ 1212.547871][T20122] sctp: [Deprecated]: syz.0.11706 (pid 20122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1212.547871][T20122] Use struct sctp_sack_info instead [ 1212.601384][T20126] netlink: 'syz.1.11709': attribute type 1 has an invalid length. [ 1212.610311][T20126] netlink: 'syz.1.11709': attribute type 1 has an invalid length. [ 1212.721073][T20130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11712'. [ 1212.769903][T20131] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11710'. [ 1212.780799][T20131] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11710'. [ 1212.977823][T20140] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11713'. [ 1213.260931][T20163] netlink: 'syz.3.11720': attribute type 30 has an invalid length. [ 1213.421929][T20170] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 1213.434880][T20167] syzkaller0: left promiscuous mode [ 1213.440321][T20167] syzkaller0: left allmulticast mode [ 1213.468912][T20163] netlink: 'syz.3.11720': attribute type 30 has an invalid length. [ 1214.245853][T20199] syzkaller0: entered promiscuous mode [ 1214.274035][T20199] syzkaller0: entered allmulticast mode [ 1214.335899][T20204] team_slave_0: left promiscuous mode [ 1214.348728][T20204] team_slave_1: left promiscuous mode [ 1214.542988][T20208] lo speed is unknown, defaulting to 1000 [ 1214.681038][T20216] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 1214.712632][T20216] bridge10: entered allmulticast mode [ 1214.768115][T20208] wg1 speed is unknown, defaulting to 1000 [ 1214.804696][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1214.816984][T20208] lo speed is unknown, defaulting to 1000 [ 1214.835629][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1214.848425][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1214.856544][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1214.865350][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1214.889132][T20208] lo speed is unknown, defaulting to 1000 [ 1214.930389][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1214.938010][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1214.948402][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1214.962870][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1214.973146][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1215.210350][T20225] lo speed is unknown, defaulting to 1000 [ 1215.278118][T20225] wg1 speed is unknown, defaulting to 1000 [ 1215.323515][T20239] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 1215.362588][T20225] lo speed is unknown, defaulting to 1000 [ 1215.540323][T20225] lo speed is unknown, defaulting to 1000 [ 1215.549661][T20257] openvswitch: netlink: Flow key attr not present in new flow. [ 1215.604822][T20254] netlink: 'syz.2.11742': attribute type 1 has an invalid length. [ 1215.809838][ T77] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.967599][ T77] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.003893][ T5822] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1216.078019][ T77] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.183251][ T77] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.265602][T20294] __nla_validate_parse: 7 callbacks suppressed [ 1216.265621][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11751'. [ 1216.319554][T20297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11752'. [ 1216.362921][T20297] netlink: 'syz.0.11752': attribute type 12 has an invalid length. [ 1216.465588][T20297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11752'. [ 1216.474560][ T5822] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1216.475521][T20297] netlink: 'syz.0.11752': attribute type 12 has an invalid length. [ 1216.699813][T20225] chnl_net:caif_netlink_parms(): no params data found [ 1216.711458][T20314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11755'. [ 1216.742416][T20318] x_tables: duplicate underflow at hook 2 [ 1216.745305][T20314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11755'. [ 1216.948850][ T77] bridge_slave_1: left allmulticast mode [ 1216.963708][ T77] bridge_slave_1: left promiscuous mode [ 1216.986214][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.084491][ T5832] Bluetooth: hci1: command tx timeout [ 1217.576210][ T77] batman_adv: batadv0: Removing interface: gretap2 [ 1217.779571][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.791141][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.801518][ T77] bond0 (unregistering): Released all slaves [ 1217.812282][ T77] bond1 (unregistering): Released all slaves [ 1217.825701][ T77] bond2 (unregistering): Released all slaves [ 1217.841958][ T77] bond3 (unregistering): Released all slaves [ 1217.862500][ T77] bond4 (unregistering): Released all slaves [ 1217.878283][ T77] bond5 (unregistering): (slave veth9): Releasing active interface [ 1217.889169][ T77] bond5 (unregistering): Released all slaves [ 1217.904756][ T77] bond6 (unregistering): Released all slaves [ 1218.051612][T20225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.060368][T20225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.070847][T20225] bridge_slave_0: entered allmulticast mode [ 1218.082054][T20225] bridge_slave_0: entered promiscuous mode [ 1218.089822][ T77] m5n: left promiscuous mode [ 1218.138867][T20225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.148695][T20225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.159450][T20225] bridge_slave_1: entered allmulticast mode [ 1218.167996][T20225] bridge_slave_1: entered promiscuous mode [ 1218.204980][T20380] netlink: 'syz.3.11766': attribute type 5 has an invalid length. [ 1218.222458][ T77] tipc: Left network mode [ 1218.323514][T20225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.398161][T20225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.438002][T20399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1218.448259][T20391] syzkaller0: Caught tx_queue_len zero misconfig [ 1218.501884][T20391] netlink: 'syz.0.11769': attribute type 1 has an invalid length. [ 1218.511253][T20405] SET target dimension over the limit! [ 1218.542208][T20392] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11769'. [ 1218.647404][T20225] team0: Port device team_slave_0 added [ 1218.706560][T20225] team0: Port device team_slave_1 added [ 1218.868276][T20225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.894053][T20225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.924834][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11777'. [ 1219.058515][T20225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.088343][T20225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.099993][T20225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.159542][T20225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.172000][ T5832] Bluetooth: hci1: command tx timeout [ 1219.327383][T20461] netlink: 'syz.3.11782': attribute type 10 has an invalid length. [ 1219.596666][T20225] hsr_slave_0: entered promiscuous mode [ 1219.610333][T20225] hsr_slave_1: entered promiscuous mode [ 1219.644630][T20225] debugfs: 'hsr0' already exists in 'hsr' [ 1219.660558][T20225] Cannot create hsr debugfs directory [ 1220.216087][T20511] syzkaller1: entered promiscuous mode [ 1220.235850][T20511] syzkaller1: entered allmulticast mode [ 1220.581393][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11793'. [ 1221.048324][T20550] veth0: entered promiscuous mode [ 1221.132371][T20549] veth0: left promiscuous mode [ 1221.198587][T20552] netlink: 'syz.0.11798': attribute type 21 has an invalid length. [ 1221.215297][T20552] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11798'. [ 1221.245318][ T5832] Bluetooth: hci1: command tx timeout [ 1221.263534][T20552] netlink: 'syz.0.11798': attribute type 4 has an invalid length. [ 1221.271602][T20552] netlink: 'syz.0.11798': attribute type 5 has an invalid length. [ 1221.286179][T20552] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11798'. [ 1221.319852][T20568] netlink: 'syz.2.11801': attribute type 13 has an invalid length. [ 1221.334189][ T25] block nbd9: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 210 seconds [ 1221.346035][ T25] block nbd9: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 210 seconds [ 1221.357314][ T25] block nbd9: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 210 seconds [ 1221.368589][ T25] block nbd9: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 210 seconds [ 1221.413106][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1221.445967][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1221.457414][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1221.468923][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11800'. [ 1221.487782][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1221.516764][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1221.534348][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1221.545021][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1221.597509][T20572] syzkaller0: Caught tx_queue_len zero misconfig [ 1221.960462][T20225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1222.044899][T20225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1222.068536][T20600] tap0: tun_chr_ioctl cmd 2148553947 [ 1222.107265][T20225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1222.193182][T20225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1222.459360][T20625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11816'. [ 1222.510837][T20626] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1222.553290][T20626] syzkaller0: entered promiscuous mode [ 1222.600372][T20626] syzkaller0: entered allmulticast mode [ 1222.679821][ T77] hsr_slave_0: left promiscuous mode [ 1222.739722][ T77] hsr_slave_1: left promiscuous mode [ 1222.776471][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.797847][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.821240][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.833185][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.869002][ T77] veth1_macvtap: left promiscuous mode [ 1222.883345][ T77] veth0_macvtap: left promiscuous mode [ 1223.079176][ T77] pimreg3 (unregistering): left allmulticast mode [ 1223.326316][ T5832] Bluetooth: hci1: command tx timeout [ 1223.667788][T22855] lo speed is unknown, defaulting to 1000 [ 1223.694090][T20663] tipc: Enabling of bearer rejected, already enabled [ 1223.716190][T22855] infiniband syz2: ib_query_port failed (-19) [ 1223.868738][T20225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.941525][T20693] netlink: 'syz.2.11828': attribute type 2 has an invalid length. [ 1224.007978][T20693] !: entered promiscuous mode [ 1224.019265][T20699] block nbd0: NBD_DISCONNECT [ 1224.030108][T20699] block nbd0: Send disconnect failed -32 [ 1224.046380][T20225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.074204][T20699] block nbd0: shutting down sockets [ 1224.076655][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.086554][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.148545][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.155737][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.606194][T20225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.618145][T20724] netlink: 'syz.3.11832': attribute type 4 has an invalid length. [ 1224.711259][T20225] veth0_vlan: entered promiscuous mode [ 1224.725893][T20225] veth1_vlan: entered promiscuous mode [ 1224.770075][T20225] veth0_macvtap: entered promiscuous mode [ 1224.784792][T20225] veth1_macvtap: entered promiscuous mode [ 1224.812489][T20225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.832760][T20225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.879895][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.890841][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.906004][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.916847][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.007064][T20733] syzkaller0: left promiscuous mode [ 1225.013190][T20733] syzkaller0: left allmulticast mode [ 1225.050225][T20733] tipc: Resetting bearer [ 1225.104337][T19052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.126464][T19052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.192479][T19052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.213927][T19052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.509092][T20762] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1225.569216][T20769] tipc: Enabling of bearer rejected, already enabled [ 1225.626170][T20762] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1225.658008][T20772] tipc: Started in network mode [ 1225.664629][T20772] tipc: Node identity 3a73d5dd51b, cluster identity 4711 [ 1225.673204][T20772] tipc: Enabled bearer , priority 0 [ 1225.687179][T20762] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1225.716420][T20772] syzkaller0: entered promiscuous mode [ 1225.723071][T20772] syzkaller0: entered allmulticast mode [ 1225.762840][T20762] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1225.789667][T20772] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1225.844719][T20772] tipc: Resetting bearer [ 1225.865252][T20771] tipc: Resetting bearer [ 1225.901156][T20771] tipc: Disabling bearer [ 1226.042669][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1226.072718][T20794] mac80211_hwsim hwsim116 wlan1: Caught tx_queue_len zero misconfig [ 1226.116569][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1226.177123][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1226.211155][T19052] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1226.267267][T20806] netlink: 'syz.2.11856': attribute type 2 has an invalid length. [ 1226.459817][T20822] ip6tnl0: Caught tx_queue_len zero misconfig [ 1226.594652][T20825] __nla_validate_parse: 15 callbacks suppressed [ 1226.594668][T20825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11860'. [ 1226.605406][T20826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11859'. [ 1226.660324][T20826] netlink: 'syz.2.11859': attribute type 1 has an invalid length. [ 1226.732209][T20838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11863'. [ 1226.742643][T20838] tipc: Invalid UDP bearer configuration [ 1226.742688][T20838] tipc: Enabling of bearer rejected, failed to enable media [ 1226.795705][T20845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11859'. [ 1226.951575][T20860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11864'. [ 1227.001661][T20854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11864'. [ 1227.017293][T20828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11861'. [ 1227.817504][T20871] vlan7: entered allmulticast mode [ 1227.886269][T20871] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11868'. [ 1228.086329][T20884] lo speed is unknown, defaulting to 1000 [ 1228.104745][T20884] wg1 speed is unknown, defaulting to 1000 [ 1228.121758][T20884] lo speed is unknown, defaulting to 1000 [ 1228.288116][T20826] netlink: 'syz.2.11859': attribute type 1 has an invalid length. [ 1228.435493][T20896] netlink: 'syz.2.11876': attribute type 2 has an invalid length. [ 1228.465351][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11876'. [ 1228.476873][T20899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11878'. [ 1228.497398][T20901] ip6tnl0: Caught tx_queue_len zero misconfig [ 1228.537504][T20907] netlink: zone id is out of range [ 1228.542650][T20907] netlink: zone id is out of range [ 1228.582626][T20907] netlink: zone id is out of range [ 1228.624000][T20907] netlink: zone id is out of range [ 1228.629187][T20907] netlink: zone id is out of range [ 1228.662360][T20907] netlink: zone id is out of range [ 1228.690432][T20907] netlink: zone id is out of range [ 1229.007283][T20929] lo speed is unknown, defaulting to 1000 [ 1229.028433][T20929] wg1 speed is unknown, defaulting to 1000 [ 1229.045797][T20929] lo speed is unknown, defaulting to 1000 [ 1229.173164][T20939] ip6gretap0: entered promiscuous mode [ 1229.199890][T20941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1229.213108][T20939] ip6gretap0: left promiscuous mode [ 1229.913427][T20960] lo speed is unknown, defaulting to 1000 [ 1229.921077][T20960] wg1 speed is unknown, defaulting to 1000 [ 1229.925195][T20962] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1229.930392][T20960] lo speed is unknown, defaulting to 1000 [ 1229.947677][T20964] netlink: 'syz.0.11891': attribute type 13 has an invalid length. [ 1229.958422][T20962] bond1: Unable to set down delay as MII monitoring is disabled [ 1229.968162][T20962] bond1 (unregistering): Released all slaves [ 1230.030502][T20965] lo speed is unknown, defaulting to 1000 [ 1230.050130][T20965] wg1 speed is unknown, defaulting to 1000 [ 1230.069248][T20965] lo speed is unknown, defaulting to 1000 [ 1230.107764][T20962] netlink: set zone limit has 4 unknown bytes [ 1230.329261][T20976] bond0: Caught tx_queue_len zero misconfig [ 1230.499879][T20988] netlink: 'syz.0.11899': attribute type 1 has an invalid length. [ 1230.536499][T20988] bond6: entered promiscuous mode [ 1230.541662][T20988] bond6: entered allmulticast mode [ 1230.579280][T20988] bond6: (slave ip6gretap3): making interface the new active one [ 1230.589134][T20988] ip6gretap3: entered promiscuous mode [ 1230.594846][T20988] ip6gretap3: entered allmulticast mode [ 1230.601158][T20988] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1230.611488][T20992] netlink: 'syz.3.11901': attribute type 12 has an invalid length. [ 1230.682114][T20988] bond6: left promiscuous mode [ 1230.691537][T20988] ip6gretap3: left promiscuous mode [ 1230.697072][T20988] bond6: left allmulticast mode [ 1230.702092][T20988] ip6gretap3: left allmulticast mode [ 1230.709004][T20988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1230.722275][T20997] syzkaller0: entered promiscuous mode [ 1230.727863][T20997] syzkaller0: entered allmulticast mode [ 1231.370819][T21001] netlink: 'syz.1.11904': attribute type 2 has an invalid length. [ 1231.558435][T21008] tunl0: Caught tx_queue_len zero misconfig [ 1231.640921][T21011] netlink: 'syz.1.11908': attribute type 4 has an invalid length. [ 1231.671920][T21011] __nla_validate_parse: 10 callbacks suppressed [ 1231.671936][T21011] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.11908'. [ 1231.689750][T21017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11905'. [ 1231.926068][T21035] syzkaller0: entered promiscuous mode [ 1231.946248][T21035] syzkaller0: entered allmulticast mode [ 1231.962602][T21033] tipc: Enabled bearer , priority 0 [ 1231.976830][T21039] sch_tbf: burst 1 is lower than device syzkaller0 mtu (313) ! [ 1231.986675][T21041] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11916'. [ 1232.018686][T21033] tipc: Resetting bearer [ 1232.037876][T21033] tipc: Disabling bearer [ 1232.193490][T21048] block nbd0: not configured, cannot reconfigure [ 1232.270561][T21050] macsec2: entered allmulticast mode [ 1232.279719][T21050] macsec0: entered allmulticast mode [ 1232.287679][T21050] veth1_macvtap: entered allmulticast mode [ 1232.334277][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11921'. [ 1232.525314][T21075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11925'. [ 1232.628076][T21066] syzkaller0: entered promiscuous mode [ 1232.633576][T21066] syzkaller0: entered allmulticast mode [ 1232.767886][T21088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11927'. [ 1232.985768][T21099] netlink: 'syz.4.11928': attribute type 2 has an invalid length. [ 1235.026190][T21105] netlink: 'syz.4.11928': attribute type 14 has an invalid length. [ 1235.034430][T21105] netem: change failed [ 1235.047102][T21099] 9: entered promiscuous mode [ 1235.057707][T21130] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1235.250490][T21143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11936'. [ 1235.274104][T21143] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1235.274194][T21143] block (null): Could not allocate knbd recv work queue. [ 1235.355203][T21143] nbd: failed to add new device [ 1235.474355][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1235.505876][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1235.505886][T21156] netlink: zone id is out of range [ 1235.512839][T21156] netlink: zone id is out of range [ 1235.512852][T21156] netlink: zone id is out of range [ 1235.512861][T21156] netlink: zone id is out of range [ 1235.537522][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1235.553227][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1235.561244][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1235.603899][T21156] netlink: zone id is out of range [ 1235.609102][T21156] netlink: zone id is out of range [ 1235.616146][T21156] netlink: zone id is out of range [ 1235.621271][T21156] netlink: zone id is out of range [ 1235.626632][T21156] netlink: zone id is out of range [ 1235.710149][T21152] lo speed is unknown, defaulting to 1000 [ 1235.751416][T21152] wg1 speed is unknown, defaulting to 1000 [ 1235.795613][T21152] lo speed is unknown, defaulting to 1000 [ 1236.166501][T21195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11950'. [ 1236.187680][T21197] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:8188 [ 1236.202184][T21152] chnl_net:caif_netlink_parms(): no params data found [ 1236.331851][T21208] netlink: 'syz.0.11956': attribute type 12 has an invalid length. [ 1236.340132][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11955'. [ 1236.390586][T21152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.401178][T21152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.408609][T21152] bridge_slave_0: entered allmulticast mode [ 1236.416336][T21152] bridge_slave_0: entered promiscuous mode [ 1236.426596][T21152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.434552][T21152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.441739][T21152] bridge_slave_1: entered allmulticast mode [ 1236.449469][T21152] bridge_slave_1: entered promiscuous mode [ 1236.532717][T21152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.542368][T21206] lo speed is unknown, defaulting to 1000 [ 1236.571969][T21152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.617076][T21206] wg1 speed is unknown, defaulting to 1000 [ 1236.624678][T21206] lo speed is unknown, defaulting to 1000 [ 1236.679058][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11960'. [ 1236.708586][T21204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.726936][T21224] macvlan2: entered promiscuous mode [ 1236.733203][T21224] macvlan2: entered allmulticast mode [ 1236.739194][T21224] mac80211_hwsim hwsim136 wlan0: entered allmulticast mode [ 1236.750905][T21152] team0: Port device team_slave_0 added [ 1236.776490][T21152] team0: Port device team_slave_1 added [ 1236.812881][T21152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.820687][T21152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.849128][T21152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.861908][T21152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.870670][T21152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.897956][T21152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.970793][T21152] hsr_slave_0: entered promiscuous mode [ 1236.978943][T21152] hsr_slave_1: entered promiscuous mode [ 1236.993035][T21152] debugfs: 'hsr0' already exists in 'hsr' [ 1236.999737][T21152] Cannot create hsr debugfs directory [ 1237.088165][T21236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11964'. [ 1237.229154][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11964'. [ 1237.273573][T21152] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1237.436162][T21152] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1237.446041][T21252] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11972'. [ 1237.549615][T21152] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1237.643823][ T5835] Bluetooth: hci0: command tx timeout [ 1237.676773][T21152] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1237.751497][T21265] netlink: 'syz.1.11975': attribute type 12 has an invalid length. [ 1237.761781][T21265] netlink: 'syz.1.11975': attribute type 29 has an invalid length. [ 1237.786044][T21265] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11975'. [ 1238.032550][T21152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1238.089199][T21152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1238.110418][T21152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1238.127008][T21278] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1238.174815][T21152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1238.350474][T21152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.358709][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11983'. [ 1238.394661][T21152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.464180][T19052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.471344][T19052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.507545][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.514741][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.611011][ T1296] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1238.618108][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1238.830107][T21319] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11989'. [ 1238.935964][T21324] x_tables: duplicate underflow at hook 2 [ 1239.010335][T21307] netlink: 'syz.0.11987': attribute type 21 has an invalid length. [ 1239.019209][T21307] netlink: 'syz.0.11987': attribute type 22 has an invalid length. [ 1239.029945][T21328] netlink: 'syz.2.11992': attribute type 4 has an invalid length. [ 1239.039560][T21307] netlink: 'syz.0.11987': attribute type 23 has an invalid length. [ 1239.060375][T21307] netlink: 'syz.0.11987': attribute type 25 has an invalid length. [ 1239.083580][T21307] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11987'. [ 1239.157668][T21152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.203570][T21342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11993'. [ 1239.246038][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1239.366058][T21346] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11993'. [ 1239.594324][T21364] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1239.682586][T21370] netlink: 'syz.2.12001': attribute type 3 has an invalid length. [ 1239.725034][ T5835] Bluetooth: hci0: command tx timeout [ 1239.752451][T21152] veth0_vlan: entered promiscuous mode [ 1239.790116][T21152] veth1_vlan: entered promiscuous mode [ 1239.840425][T21152] veth0_macvtap: entered promiscuous mode [ 1239.851701][T21152] veth1_macvtap: entered promiscuous mode [ 1239.875267][T21152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.898308][T21152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.981010][ T6975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.997293][ T6975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.062383][ T6975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.086211][ T6975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.100761][T21387] sctp: [Deprecated]: syz.1.12006 (pid 21387) Use of int in max_burst socket option deprecated. [ 1240.100761][T21387] Use struct sctp_assoc_value instead [ 1240.153577][T21385] dummy0: entered allmulticast mode [ 1240.251573][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.294180][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.320335][T21391] validate_nla: 2 callbacks suppressed [ 1240.320352][T21391] netlink: 'syz.0.12008': attribute type 13 has an invalid length. [ 1240.370109][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.388361][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.424514][ T8575] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1240.447363][T21391] syzkaller0: Caught tx_queue_len zero misconfig [ 1240.586937][T21403] syzkaller0: entered promiscuous mode [ 1240.592447][T21403] syzkaller0: entered allmulticast mode [ 1240.612270][T21404] netlink: 'syz.3.12011': attribute type 13 has an invalid length. [ 1240.628832][T21403] netlink: 'syz.4.11937': attribute type 1 has an invalid length. [ 1240.668946][T21403] bond1 (unregistering): Released all slaves [ 1240.996630][ T8571] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1241.350702][T21450] netlink: 'syz.2.12023': attribute type 13 has an invalid length. [ 1241.530916][T21450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.776548][T21450] tipc: Resetting bearer [ 1241.790981][T21450] batman_adv: batadv0: Interface deactivated: geneve3 [ 1241.805176][ T5835] Bluetooth: hci0: command tx timeout [ 1241.881591][ T2976] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.891086][ T2976] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.902055][ T6971] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.932113][ T6971] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.950160][T21471] lo speed is unknown, defaulting to 1000 [ 1241.961294][ T6971] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.985985][ T6971] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.000324][T21471] wg1 speed is unknown, defaulting to 1000 [ 1242.029179][ T6971] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.052632][ T6971] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.063446][T21471] lo speed is unknown, defaulting to 1000 [ 1242.096666][T21483] netlink: 'syz.1.12029': attribute type 2 has an invalid length. [ 1242.136255][T21483] hmac(sha224: entered promiscuous mode [ 1242.267926][T21492] __nla_validate_parse: 3 callbacks suppressed [ 1242.267946][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12033'. [ 1242.370159][T21499] nbd: must specify a size in bytes for the device [ 1242.426347][T21494] syzkaller0: entered promiscuous mode [ 1242.442490][T21494] syzkaller0: entered allmulticast mode [ 1242.512933][T21494] tipc: Enabled bearer , priority 0 [ 1242.535253][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12035'. [ 1242.557572][T21493] tipc: Resetting bearer [ 1242.948443][T21516] xt_hashlimit: size too large, truncated to 1048576 [ 1242.989017][T21517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12039'. [ 1243.020817][T21517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12039'. [ 1243.434809][T21528] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12041'. [ 1243.726856][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1243.734880][ C0] lec:lec_tx_timeout: lec0 [ 1243.740769][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1243.896899][ T5835] Bluetooth: hci0: command tx timeout [ 1244.357877][T21493] tipc: Disabling bearer [ 1244.369095][T21517] bridge_slave_0 (unregistering): left allmulticast mode [ 1244.376290][T21517] bridge_slave_0 (unregistering): left promiscuous mode [ 1244.383276][T21517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.416497][ T8573] tipc: Node number set to 1807996381 [ 1244.537544][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12044'. [ 1244.811704][T21556] tipc: Enabled bearer , priority 0 [ 1244.826920][T21556] syzkaller0: entered promiscuous mode [ 1244.846277][T21556] syzkaller0: entered allmulticast mode [ 1244.888901][T21556] tipc: Resetting bearer [ 1245.009410][T21563] xt_HMARK: spi-set and port-set can't be combined [ 1245.030316][T21563] net_ratelimit: 33 callbacks suppressed [ 1245.030335][T21563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1245.100346][T21571] netlink: 'syz.0.12054': attribute type 61 has an invalid length. [ 1245.124820][T21571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12054'. [ 1245.232491][T21555] tipc: Resetting bearer [ 1245.291790][T21555] tipc: Disabling bearer [ 1245.341047][T21578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12057'. [ 1245.492596][T21590] xfrm1: entered allmulticast mode [ 1245.576323][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12062'. [ 1245.595289][T14106] udevd[14106]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1245.633872][T21590] IPv6: Can't replace route, no match found [ 1245.634995][T21594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12062'. [ 1245.846066][T21610] syzkaller0: entered promiscuous mode [ 1245.851567][T21610] syzkaller0: entered allmulticast mode [ 1246.390653][T21646] lo speed is unknown, defaulting to 1000 [ 1246.400462][T21646] wg1 speed is unknown, defaulting to 1000 [ 1246.418051][T21646] lo speed is unknown, defaulting to 1000 [ 1246.617228][T21667] syzkaller1: entered allmulticast mode [ 1246.831458][T21676] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1247.078332][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1247.103558][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1247.112602][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1247.125794][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1247.134084][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1247.268009][T21682] lo speed is unknown, defaulting to 1000 [ 1247.275969][T21682] wg1 speed is unknown, defaulting to 1000 [ 1247.283361][T21682] lo speed is unknown, defaulting to 1000 [ 1247.325811][T21676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1247.426621][T21689] syzkaller0: entered promiscuous mode [ 1247.432560][T21689] syzkaller0: entered allmulticast mode [ 1247.741242][T21693] lo speed is unknown, defaulting to 1000 [ 1247.752561][T21702] xt_recent: hitcount (67108870) is larger than allowed maximum (65535) [ 1247.763542][T21693] wg1 speed is unknown, defaulting to 1000 [ 1247.797026][T21693] lo speed is unknown, defaulting to 1000 [ 1247.836147][T21682] chnl_net:caif_netlink_parms(): no params data found [ 1248.022935][T21708] syzkaller0: left promiscuous mode [ 1248.028874][T21708] syzkaller0: left allmulticast mode [ 1248.090219][T21682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.097765][T21682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.105829][T21682] bridge_slave_0: entered allmulticast mode [ 1248.113575][T21682] bridge_slave_0: entered promiscuous mode [ 1248.122160][T21682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.130181][T21682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.139730][T21682] bridge_slave_1: entered allmulticast mode [ 1248.147733][T21682] bridge_slave_1: entered promiscuous mode [ 1248.184358][T21682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.197072][T21682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.268663][T21682] team0: Port device team_slave_0 added [ 1248.287883][T21682] team0: Port device team_slave_1 added [ 1248.405917][T21682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.413385][T21682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.444711][T21682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.460281][T21682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.468060][T21682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.499468][T21682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.763788][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1248.771860][ C0] lec:lec_tx_timeout: lec0 [ 1249.160561][T21682] hsr_slave_0: entered promiscuous mode [ 1249.186528][T21682] hsr_slave_1: entered promiscuous mode [ 1249.206415][T21682] debugfs: 'hsr0' already exists in 'hsr' [ 1249.224049][T21682] Cannot create hsr debugfs directory [ 1249.245814][ T5832] Bluetooth: hci3: command tx timeout [ 1249.498041][T21734] lo speed is unknown, defaulting to 1000 [ 1249.538992][T21734] wg1 speed is unknown, defaulting to 1000 [ 1249.561883][T21734] lo speed is unknown, defaulting to 1000 [ 1249.563907][T21740] delete_channel: no stack [ 1249.589509][T21739] syzkaller0: entered promiscuous mode [ 1249.595575][T21739] syzkaller0: entered allmulticast mode [ 1249.821010][T21753] __nla_validate_parse: 3 callbacks suppressed [ 1249.821031][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12102'. [ 1249.877634][T21760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12102'. [ 1249.909566][T21760] netlink: 'syz.3.12102': attribute type 12 has an invalid length. [ 1249.972798][T21748] lo speed is unknown, defaulting to 1000 [ 1250.007963][T21765] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12106'. [ 1250.060346][T21748] wg1 speed is unknown, defaulting to 1000 [ 1250.095893][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12105'. [ 1250.101552][T21768] Cannot find del_set index 0 as target [ 1250.115625][T21768] openvswitch: netlink: Missing valid actions attribute. [ 1250.122980][T21748] lo speed is unknown, defaulting to 1000 [ 1250.123070][T21768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.240066][T21682] .`: (slave netdevsim0): Releasing backup interface [ 1250.347808][T21772] netlink: 'syz.4.12107': attribute type 4 has an invalid length. [ 1250.671079][T21682] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1250.702492][T21777] syzkaller0: entered promiscuous mode [ 1250.709244][T21777] syzkaller0: entered allmulticast mode [ 1250.717692][T21682] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1250.755459][T21682] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1250.803481][T21777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12108'. [ 1250.831036][T21682] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1251.000164][T21792] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1251.032593][T21682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.120384][T21794] syzkaller0: entered promiscuous mode [ 1251.126474][T21794] syzkaller0: entered allmulticast mode [ 1251.136577][T21682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.327174][ T5832] Bluetooth: hci3: command tx timeout [ 1251.412185][ T25] block nbd9: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 240 seconds [ 1251.424370][ T25] block nbd9: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 240 seconds [ 1251.435526][ T25] block nbd9: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 240 seconds [ 1251.446877][ T25] block nbd9: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 240 seconds [ 1252.140425][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12115'. [ 1252.253125][T21815] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12115'. [ 1253.292597][T19052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.299778][T19052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.387148][T19052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.394341][T19052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.409089][ T5832] Bluetooth: hci3: command tx timeout [ 1253.456630][T21824] netlink: 'syz.3.12119': attribute type 16 has an invalid length. [ 1253.472720][T21824] netlink: 'syz.3.12119': attribute type 17 has an invalid length. [ 1253.761936][T21837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12121'. [ 1253.831385][T21842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12121'. [ 1253.890751][T21837] hsr_slave_1 (unregistering): left promiscuous mode [ 1253.958525][T21682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.111370][T21682] veth0_vlan: entered promiscuous mode [ 1254.165243][T21682] veth1_vlan: entered promiscuous mode [ 1254.275750][T21682] veth0_macvtap: entered promiscuous mode [ 1254.308072][T21682] veth1_macvtap: entered promiscuous mode [ 1254.388193][T21682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.421761][T21682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.430543][T21863] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12128'. [ 1254.450660][T21863] block nbd0: not configured, cannot reconfigure [ 1254.472429][T19039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.522324][T21861] lo speed is unknown, defaulting to 1000 [ 1254.546350][T19039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.577496][T19039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.645212][T21861] wg1 speed is unknown, defaulting to 1000 [ 1254.647583][T19039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.732393][T21861] lo speed is unknown, defaulting to 1000 [ 1254.904917][T19039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.912752][T19039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.093903][ T6971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.102721][ T6971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.140163][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12134'. [ 1255.165711][T21888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12134'. [ 1255.235680][T21879] lo speed is unknown, defaulting to 1000 [ 1255.243073][T21879] wg1 speed is unknown, defaulting to 1000 [ 1255.286238][T21879] lo speed is unknown, defaulting to 1000 [ 1255.315938][T21888] pim6reg1: entered promiscuous mode [ 1255.321265][T21888] pim6reg1: entered allmulticast mode [ 1255.323160][T21897] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12135'. [ 1255.339142][T21897] netlink: 43 bytes leftover after parsing attributes in process `syz.4.12135'. [ 1255.349683][T21897] netlink: 'syz.4.12135': attribute type 6 has an invalid length. [ 1255.354530][T21893] netlink: 'syz.2.12084': attribute type 1 has an invalid length. [ 1255.358319][T21897] netlink: 'syz.4.12135': attribute type 5 has an invalid length. [ 1255.375174][T21897] netlink: 43 bytes leftover after parsing attributes in process `syz.4.12135'. [ 1255.459524][T21900] netlink: 'syz.4.12136': attribute type 10 has an invalid length. [ 1255.467971][T21900] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12136'. [ 1255.494363][ T5832] Bluetooth: hci3: command tx timeout [ 1255.530869][T21902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1255.654444][T21908] netlink: 'syz.3.12138': attribute type 13 has an invalid length. [ 1255.677468][T21908] netlink: 'syz.3.12138': attribute type 17 has an invalid length. [ 1255.907587][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12140'. [ 1256.214631][T21917] lo speed is unknown, defaulting to 1000 [ 1256.237952][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1256.248303][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1256.259685][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1256.268055][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1256.275115][T21917] wg1 speed is unknown, defaulting to 1000 [ 1256.276695][T21917] lo speed is unknown, defaulting to 1000 [ 1256.284422][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1256.631879][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12143'. [ 1256.664102][T21929] lo speed is unknown, defaulting to 1000 [ 1256.753676][T21929] wg1 speed is unknown, defaulting to 1000 [ 1256.789059][T21929] lo speed is unknown, defaulting to 1000 [ 1256.789375][T21945] lo speed is unknown, defaulting to 1000 [ 1256.876094][T21945] wg1 speed is unknown, defaulting to 1000 [ 1256.897242][T21945] lo speed is unknown, defaulting to 1000 [ 1257.197180][T21971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12150'. [ 1257.227290][T21971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12150'. [ 1257.317855][T21973] bond1: option xmit_hash_policy: invalid value (10) [ 1257.327228][T21973] bond1 (unregistering): Released all slaves [ 1257.457887][ T6975] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.556797][ T6975] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.653240][ T6975] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.770037][ T6975] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.791444][T22000] syzkaller0: entered promiscuous mode [ 1257.800917][T22000] syzkaller0: entered allmulticast mode [ 1257.820808][T21929] chnl_net:caif_netlink_parms(): no params data found [ 1258.161571][T21929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.170760][T21929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.185056][T21929] bridge_slave_0: entered allmulticast mode [ 1258.199458][T21929] bridge_slave_0: entered promiscuous mode [ 1258.260433][T21929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.297790][T21929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.305298][T21929] bridge_slave_1: entered allmulticast mode [ 1258.312937][T21929] bridge_slave_1: entered promiscuous mode [ 1258.370151][ T5832] Bluetooth: hci2: command tx timeout [ 1258.426288][T22038] syzkaller0: entered promiscuous mode [ 1258.451385][T22038] syzkaller0: entered allmulticast mode [ 1258.514589][T22051] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1258.534108][T22050] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1258.562665][T21929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.589453][T21929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.689113][ T6975] bridge_slave_1: left allmulticast mode [ 1258.698468][ T6975] bridge_slave_1: left promiscuous mode [ 1258.713153][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.748285][ T6975] tipc: Resetting bearer [ 1258.911925][ T6975] bond6 (unregistering): (slave ip6gretap3): Releasing active interface [ 1259.109096][ T6975] batman_adv: batadv0: Removing interface: gretap2 [ 1259.249423][ T6975] tipc: Disabling bearer [ 1259.286987][ T6975] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1259.411368][ T6975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.422081][ T6975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.431503][ T6975] bond0 (unregistering): Released all slaves [ 1259.444809][ T6975] bond1 (unregistering): Released all slaves [ 1259.461743][ T6975] bond2 (unregistering): Released all slaves [ 1259.476562][ T6975] bond3 (unregistering): Released all slaves [ 1259.491002][ T6975] bond4 (unregistering): Released all slaves [ 1259.505962][ T6975] bond5 (unregistering): Released all slaves [ 1259.520551][ T6975] bond6 (unregistering): Released all slaves [ 1259.534170][ T6975] bond7 (unregistering): Released all slaves [ 1259.632551][T22077] pim6reg: entered allmulticast mode [ 1259.670049][ T6975] tipc: Disabling bearer [ 1259.680366][ T6975] tipc: Left network mode [ 1259.711843][T21929] team0: Port device team_slave_0 added [ 1259.730355][T21929] team0: Port device team_slave_1 added [ 1259.833244][T21929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.840532][T21929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.869880][T21929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.940831][T21929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.961104][T21929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.014336][T21929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.038658][T22083] lo speed is unknown, defaulting to 1000 [ 1260.116692][T22099] netlink: 'syz.4.12174': attribute type 1 has an invalid length. [ 1260.135264][T22083] wg1 speed is unknown, defaulting to 1000 [ 1260.149004][T22091] syzkaller1: entered promiscuous mode [ 1260.164354][T22091] syzkaller1: entered allmulticast mode [ 1260.278583][T22099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1260.292764][T21929] hsr_slave_0: entered promiscuous mode [ 1260.299930][T21929] hsr_slave_1: entered promiscuous mode [ 1260.309651][T21929] debugfs: 'hsr0' already exists in 'hsr' [ 1260.315738][T21929] Cannot create hsr debugfs directory [ 1260.322371][T22083] lo speed is unknown, defaulting to 1000 [ 1260.446497][ T5832] Bluetooth: hci2: command tx timeout [ 1261.278231][T22165] __nla_validate_parse: 6 callbacks suppressed [ 1261.278250][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12186'. [ 1261.717789][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12192'. [ 1261.782030][ T6975] hsr_slave_0: left promiscuous mode [ 1261.795954][ T6975] hsr_slave_1: left promiscuous mode [ 1261.802181][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.229476][T22196] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12189'. [ 1262.405069][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12194'. [ 1262.524042][ T5832] Bluetooth: hci2: command tx timeout [ 1262.609219][T22224] netlink: 'syz.2.12194': attribute type 9 has an invalid length. [ 1262.680859][T14106] udevd[14106]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1262.695783][T21929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1262.785658][T21929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1262.827063][T21929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1262.881525][T21929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1262.898324][ T6975] IPVS: stop unused estimator thread 0... [ 1262.898973][T22237] netlink: 'syz.2.12199': attribute type 1 has an invalid length. [ 1263.036724][T22241] syzkaller0: entered promiscuous mode [ 1263.052400][T22241] syzkaller0: entered allmulticast mode [ 1263.138325][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12199'. [ 1263.637640][ T29] audit: type=1800 audit(1771164409.783:22): pid=22240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12201" name="memory.events" dev="tmpfs" ino=2610 res=0 errno=0 [ 1263.699441][T22277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12202'. [ 1264.605379][ T5832] Bluetooth: hci2: command tx timeout [ 1265.575990][T22305] netlink: 308 bytes leftover after parsing attributes in process `syz.2.12203'. [ 1265.718208][T21929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.728289][T22309] lo speed is unknown, defaulting to 1000 [ 1265.740407][T21929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.748494][T22307] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12204'. [ 1265.758943][T22313] netlink: 'syz.1.12206': attribute type 11 has an invalid length. [ 1265.769331][T22309] wg1 speed is unknown, defaulting to 1000 [ 1265.781044][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.788180][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.830383][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.837549][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.848348][T22309] lo speed is unknown, defaulting to 1000 [ 1266.204167][T22332] veth1_virt_wifi: entered allmulticast mode [ 1266.490710][T21929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.688187][T21929] veth0_vlan: entered promiscuous mode [ 1266.714914][T22358] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12216'. [ 1266.746232][T21929] veth1_vlan: entered promiscuous mode [ 1266.826157][T21929] veth0_macvtap: entered promiscuous mode [ 1266.847122][T21929] veth1_macvtap: entered promiscuous mode [ 1266.882331][T21929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.918365][T22364] pimreg: entered allmulticast mode [ 1266.928805][T21929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.961591][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.981290][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.008059][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.017977][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.195967][T19052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.204704][T19052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.739301][T22390] syzkaller0: entered promiscuous mode [ 1267.745728][T22390] syzkaller0: entered allmulticast mode [ 1267.811517][T22394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12226'. [ 1267.822613][T22395] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1269.910974][T22366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1269.975335][T19052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.004357][T19052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.122142][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12230'. [ 1270.132261][T22410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12230'. [ 1270.158914][T22411] lo speed is unknown, defaulting to 1000 [ 1270.179074][T22411] wg1 speed is unknown, defaulting to 1000 [ 1270.230277][T22411] lo speed is unknown, defaulting to 1000 [ 1270.506444][T22447] openvswitch: netlink: Key type 30 is not supported [ 1270.519554][T22450] netlink: 348 bytes leftover after parsing attributes in process `syz.3.12236'. [ 1270.521354][T22451] netlink: 364 bytes leftover after parsing attributes in process `syz.2.12238'. [ 1270.596445][T22455] netlink: 364 bytes leftover after parsing attributes in process `syz.2.12238'. [ 1270.727246][T22463] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12242'. [ 1270.858805][T22470] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1270.886197][T22470] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12244'. [ 1270.913036][T22470] vcan1: entered promiscuous mode [ 1270.919256][T22470] vcan1: entered allmulticast mode [ 1271.082996][T22489] syzkaller1: entered promiscuous mode [ 1271.090843][T22489] syzkaller1: entered allmulticast mode [ 1271.096470][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12251'. [ 1271.252054][T22492] ipvlan2: entered allmulticast mode [ 1271.269058][T22492] veth0_vlan: entered allmulticast mode [ 1271.473094][T22514] netlink: 'syz.3.12259': attribute type 1 has an invalid length. [ 1271.535932][T22514] bond9: (slave geneve2): making interface the new active one [ 1271.547218][T22514] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1271.556067][ T6973] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1271.585338][ T6973] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1271.600819][T22514] bond9 (unregistering): (slave geneve2): Releasing active interface [ 1271.615309][T22514] bond9 (unregistering): Released all slaves [ 1271.691802][ T6973] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1271.707007][ T6973] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1271.970589][T22540] lo speed is unknown, defaulting to 1000 [ 1271.979097][T22540] wg1 speed is unknown, defaulting to 1000 [ 1271.984580][T22546] __nla_validate_parse: 4 callbacks suppressed [ 1271.984596][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12270'. [ 1271.987044][T22540] lo speed is unknown, defaulting to 1000 [ 1272.138864][T22551] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1272.234742][T22562] syzkaller0: entered promiscuous mode [ 1272.260751][T22562] syzkaller0: entered allmulticast mode [ 1272.289903][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1272.300098][T22574] openvswitch: netlink: Message has -1 unknown bytes. [ 1272.690668][T22574] ipvlan3: entered promiscuous mode [ 1273.024682][T22592] nbd14: detected capacity change from 0 to 127 [ 1273.074297][ T5832] block nbd14: Receive control failed (result -104) [ 1273.256865][T22618] netlink: 'syz.4.12289': attribute type 27 has an invalid length. [ 1273.289526][T22619] netlink: 'syz.4.12289': attribute type 27 has an invalid length. [ 1273.346300][T22628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12292'. [ 1273.366439][T22634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1273.381858][T22628] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12292'. [ 1273.389298][T22632] ip6gretap1: entered promiscuous mode [ 1273.422898][T22619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1273.513058][T22628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1273.539942][T22641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12294'. [ 1273.757541][T22645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12296'. [ 1273.780712][T22662] netlink: 'syz.1.12301': attribute type 1 has an invalid length. [ 1273.784133][T22658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12300'. [ 1273.791100][T22645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12296'. [ 1273.934380][T22662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.036969][T22662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.139348][T22662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.194914][T22686] netlink: 'syz.3.12307': attribute type 16 has an invalid length. [ 1274.202842][T22686] netlink: 'syz.3.12307': attribute type 17 has an invalid length. [ 1274.287572][T22692] netlink: 'syz.4.12306': attribute type 3 has an invalid length. [ 1274.305034][T22692] netlink: 'syz.4.12306': attribute type 2 has an invalid length. [ 1274.337795][T22662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.397771][T22686] team_slave_0: entered promiscuous mode [ 1274.403801][T22686] team_slave_1: entered promiscuous mode [ 1274.411381][T22686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.427190][T22686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1274.644303][ T2976] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.652543][ T2976] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.693218][ T2976] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.713207][ T2976] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.205776][T22738] netlink: 'syz.4.12324': attribute type 1 has an invalid length. [ 1275.222167][T22738] netlink: 'syz.4.12324': attribute type 1 has an invalid length. [ 1275.328286][T22743] lo speed is unknown, defaulting to 1000 [ 1275.339182][T22743] wg1 speed is unknown, defaulting to 1000 [ 1275.349773][T22743] lo speed is unknown, defaulting to 1000 [ 1275.733313][ T24] IPVS: starting estimator thread 0... [ 1275.735604][T22767] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1275.824419][T22770] IPVS: using max 29 ests per chain, 69600 per kthread [ 1275.965904][T22788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1275.973197][T22788] IPv6: NLM_F_CREATE should be set when creating new route [ 1275.978997][T22791] syzkaller0: entered promiscuous mode [ 1275.987574][T22791] syzkaller0: entered allmulticast mode [ 1276.165364][T22800] atomic_op ffff88803a719998 conn xmit_atomic 0000000000000000 [ 1276.190956][T22800] syzkaller0: entered promiscuous mode [ 1276.205338][T22800] syzkaller0: entered allmulticast mode [ 1276.674135][T22838] dummy0: entered promiscuous mode [ 1276.679620][T22838] macsec1: entered allmulticast mode [ 1276.685346][T22838] dummy0: entered allmulticast mode [ 1276.695548][T22838] dummy0: left allmulticast mode [ 1276.700574][T22838] dummy0: left promiscuous mode [ 1276.779800][T22839] syzkaller0: entered promiscuous mode [ 1276.786642][T22839] syzkaller0: entered allmulticast mode [ 1276.889922][T22850] Cannot find add_set index 3 as target [ 1276.906429][T22852] validate_nla: 3 callbacks suppressed [ 1276.906448][T22852] netlink: 'syz.2.12361': attribute type 1 has an invalid length. [ 1277.089844][T22864] __nla_validate_parse: 19 callbacks suppressed [ 1277.089863][T22864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12364'. [ 1277.100127][T22860] netlink: 277 bytes leftover after parsing attributes in process `syz.3.12363'. [ 1277.308372][T22877] openvswitch: netlink: Actions may not be safe on all matching packets [ 1277.309070][T22875] syzkaller0: entered promiscuous mode [ 1277.327262][T22875] syzkaller0: entered allmulticast mode [ 1277.343074][T22875] 0: reclassify loop, rule prio 0, protocol 800 [ 1277.443018][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12372'. [ 1277.720260][T22902] netlink: 'syz.3.12376': attribute type 3 has an invalid length. [ 1277.737111][T22904] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12377'. [ 1277.954305][T22921] syzkaller0: entered promiscuous mode [ 1277.961681][T22921] syzkaller0: entered allmulticast mode [ 1277.976301][T22921] tipc: Started in network mode [ 1277.985869][T22921] tipc: Node identity 6a8028d54977, cluster identity 4711 [ 1277.993341][T22921] tipc: Enabled bearer , priority 0 [ 1278.026312][T22918] tipc: Resetting bearer [ 1278.085556][T22918] tipc: Disabling bearer [ 1278.098011][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12386'. [ 1278.517624][T22952] netlink: 'syz.1.12393': attribute type 1 has an invalid length. [ 1278.593213][T22952] netlink: 'syz.1.12393': attribute type 4 has an invalid length. [ 1278.655191][T22952] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.12393'. [ 1278.655572][T22961] netlink: 'syz.1.12393': attribute type 1 has an invalid length. [ 1278.689216][ T5832] Bluetooth: hci2: command tx timeout [ 1278.736130][T22961] netlink: 'syz.1.12393': attribute type 4 has an invalid length. [ 1278.746645][T22961] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.12393'. [ 1278.770312][T22960] lo speed is unknown, defaulting to 1000 [ 1278.876007][T22960] wg1 speed is unknown, defaulting to 1000 [ 1278.885019][T22960] lo speed is unknown, defaulting to 1000 [ 1279.309510][T22986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12401'. [ 1279.335801][T22987] netlink: 'syz.0.12399': attribute type 3 has an invalid length. [ 1279.364229][T22987] netlink: 'syz.0.12399': attribute type 1 has an invalid length. [ 1279.377538][T22987] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12399'. [ 1279.387045][T22987] NCSI netlink: No device for ifindex 808464432 [ 1279.399235][T22989] netlink: 'syz.4.12402': attribute type 11 has an invalid length. [ 1279.416463][T22989] netlink: 268 bytes leftover after parsing attributes in process `syz.4.12402'. [ 1279.714857][T23002] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1279.736338][T23002] syzkaller1: linktype set to 825 [ 1280.515210][T23050] syzkaller0: entered promiscuous mode [ 1280.520868][T23050] syzkaller0: entered allmulticast mode [ 1280.664271][T23050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.777349][T23070] netlink: 'syz.4.12423': attribute type 89 has an invalid length. [ 1280.939571][T23078] netlink: 'syz.4.12425': attribute type 7 has an invalid length. [ 1281.014487][T23084] Bluetooth: MGMT ver 1.23 [ 1281.492320][ T25] block nbd9: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 270 seconds [ 1281.505496][ T25] block nbd9: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 270 seconds [ 1281.517184][ T25] block nbd9: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 270 seconds [ 1281.530806][ T25] block nbd9: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 270 seconds [ 1282.732696][T23078] validate_nla: 3 callbacks suppressed [ 1282.732715][T23078] netlink: 'syz.4.12425': attribute type 7 has an invalid length. [ 1282.741749][T23084] __nla_validate_parse: 8 callbacks suppressed [ 1282.741770][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12428'. [ 1282.773547][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12428'. [ 1282.809259][T23084] netlink: 'syz.2.12428': attribute type 6 has an invalid length. [ 1282.825049][T23084] netlink: 'syz.2.12428': attribute type 5 has an invalid length. [ 1282.978093][T23099] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1282.979478][T23100] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1283.000344][T23113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12436'. [ 1283.049397][ T77] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.102584][T23113] bond0: entered promiscuous mode [ 1283.112580][T23113] bond_slave_0: entered promiscuous mode [ 1283.128047][T23113] bond_slave_1: entered promiscuous mode [ 1283.155888][T23113] gretap0: entered promiscuous mode [ 1283.163145][T23113] hsr1: entered promiscuous mode [ 1283.201386][ T77] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.238945][ T77] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.276901][ T77] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.285823][ T77] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.296631][T23126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12439'. [ 1283.306451][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.334994][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.429692][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.489009][T23140] netlink: 'syz.1.12442': attribute type 21 has an invalid length. [ 1283.556288][T23140] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12442'. [ 1283.815439][T23155] : renamed from bond_slave_0 (while UP) [ 1283.831333][T23140] lo speed is unknown, defaulting to 1000 [ 1283.841903][T23140] wg1 speed is unknown, defaulting to 1000 [ 1283.922739][T23140] lo speed is unknown, defaulting to 1000 [ 1284.395977][T23178] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1284.411992][ T8573] IPVS: starting estimator thread 0... [ 1284.423570][T23176] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1284.514181][T23179] IPVS: using max 28 ests per chain, 67200 per kthread [ 1284.809611][T23195] lo speed is unknown, defaulting to 1000 [ 1284.882008][T23190] lo speed is unknown, defaulting to 1000 [ 1284.906297][T23195] wg1 speed is unknown, defaulting to 1000 [ 1284.953486][T23195] lo speed is unknown, defaulting to 1000 [ 1284.955878][T23211] netlink: 'syz.0.12460': attribute type 1 has an invalid length. [ 1285.044596][T23211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1285.051878][T23190] wg1 speed is unknown, defaulting to 1000 [ 1285.106132][T23210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12460'. [ 1285.212987][T23190] lo speed is unknown, defaulting to 1000 [ 1285.335205][T23222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12463'. [ 1285.703493][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12469'. [ 1285.746011][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12469'. [ 1285.778830][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12469'. [ 1285.819608][T23240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1285.906692][T23253] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1286.150910][T23272] netlink: 'syz.3.12478': attribute type 2 has an invalid length. [ 1286.179999][T23272] netlink: 'syz.3.12478': attribute type 1 has an invalid length. [ 1286.340100][T23284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1286.399821][T23286] netlink: 'syz.2.12484': attribute type 29 has an invalid length. [ 1286.408855][T23286] netlink: 'syz.2.12484': attribute type 29 has an invalid length. [ 1286.632575][T23297] lo speed is unknown, defaulting to 1000 [ 1286.651727][T23297] wg1 speed is unknown, defaulting to 1000 [ 1286.666574][T23297] lo speed is unknown, defaulting to 1000 [ 1286.700906][T23306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.710224][T23306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.729720][T23310] netlink: 'syz.2.12489': attribute type 16 has an invalid length. [ 1286.895744][T23318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1287.069091][T23330] syzkaller1: entered promiscuous mode [ 1287.104636][T23330] syzkaller1: entered allmulticast mode [ 1287.458585][T23349] hsr0: entered allmulticast mode [ 1287.488321][T23349] hsr_slave_0: entered allmulticast mode [ 1287.499671][T23349] hsr_slave_1: entered allmulticast mode [ 1287.575710][T23349] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1287.602293][T23349] hsr0: entered promiscuous mode [ 1287.661286][T23368] netlink: 'syz.1.12507': attribute type 11 has an invalid length. [ 1287.752940][T23372] siw: device registration error -23 [ 1287.802992][T23348] hsr0: left promiscuous mode [ 1287.812486][T23348] hsr0: left allmulticast mode [ 1287.834690][T23348] hsr_slave_0: left allmulticast mode [ 1287.840088][T23348] hsr_slave_1: left allmulticast mode [ 1287.861443][T23382] __nla_validate_parse: 58 callbacks suppressed [ 1287.861459][T23382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12511'. [ 1287.914258][T23382] validate_nla: 5 callbacks suppressed [ 1287.914276][T23382] netlink: 'syz.2.12511': attribute type 1 has an invalid length. [ 1287.984809][T23383] lo speed is unknown, defaulting to 1000 [ 1288.015085][T23383] wg1 speed is unknown, defaulting to 1000 [ 1288.049628][T23382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12511'. [ 1288.058280][T23383] lo speed is unknown, defaulting to 1000 [ 1288.184007][T23398] Cannot find add_set index 2 as target [ 1288.336710][T23396] netlink: 'syz.0.12514': attribute type 6 has an invalid length. [ 1288.380380][T23396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12514'. [ 1288.599797][T23426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12521'. [ 1288.699952][T23433] netlink: 'syz.4.12522': attribute type 11 has an invalid length. [ 1288.898124][T23438] lo speed is unknown, defaulting to 1000 [ 1288.906476][T23438] wg1 speed is unknown, defaulting to 1000 [ 1288.915019][T23438] lo speed is unknown, defaulting to 1000 [ 1288.953556][T23444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12525'. [ 1289.093020][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12527'. [ 1289.105947][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12527'. [ 1289.160744][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12527'. [ 1289.235280][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12527'. [ 1289.248252][ T6973] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.261303][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12527'. [ 1289.272593][ T6973] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.301044][ T6973] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.331053][ T6973] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.759145][T23479] lo speed is unknown, defaulting to 1000 [ 1289.769523][T23479] wg1 speed is unknown, defaulting to 1000 [ 1289.779045][T23479] lo speed is unknown, defaulting to 1000 [ 1292.557756][T23481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1293.009698][T23548] __nla_validate_parse: 6 callbacks suppressed [ 1293.009717][T23548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12556'. [ 1293.040357][T23548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12556'. [ 1293.142645][T23552] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1293.189363][T23562] gretap1: entered promiscuous mode [ 1293.296311][T23554] netlink: 'syz.0.12561': attribute type 1 has an invalid length. [ 1293.306251][T23554] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12561'. [ 1293.749716][T23604] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12570'. [ 1293.818659][T23609] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1293.880894][T23611] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12572'. [ 1294.020323][T23611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12572'. [ 1294.138053][T23608] : renamed from bond_slave_0 (while UP) [ 1294.452150][T23627] Cannot find add_set index 0 as target [ 1294.578340][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12578'. [ 1294.879484][ T5832] block nbd15: Receive control failed (result -32) [ 1295.279747][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12588'. [ 1295.380338][T23669] lo speed is unknown, defaulting to 1000 [ 1295.388161][T19052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.396632][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.407927][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.424151][T19052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.438339][T23660] geneve0: entered promiscuous mode [ 1295.457648][T23660] geneve0: entered allmulticast mode [ 1295.480612][T23669] wg1 speed is unknown, defaulting to 1000 [ 1295.500345][T23669] lo speed is unknown, defaulting to 1000 [ 1296.607001][T23730] netlink: 'syz.0.12600': attribute type 9 has an invalid length. [ 1296.711826][T23733] x_tables: duplicate underflow at hook 3 [ 1297.043739][T23752] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1297.167651][T23758] bond0: option all_slaves_active: invalid value (99) [ 1297.286897][T23762] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1297.309562][T23742] lo speed is unknown, defaulting to 1000 [ 1297.336131][T23742] wg1 speed is unknown, defaulting to 1000 [ 1297.364918][T23742] lo speed is unknown, defaulting to 1000 [ 1297.470675][T23778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12611'. [ 1297.629150][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12611'. [ 1298.032203][T23778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.039859][T23778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.337750][T23778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.358375][T23778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.730642][T23778] hsr1: left promiscuous mode [ 1298.743199][T23779] hsr_slave_0: left promiscuous mode [ 1298.752839][T23779] hsr_slave_1: left promiscuous mode [ 1298.866259][ T6975] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.876352][ T6975] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.886172][ T6975] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.897426][ T6975] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.927521][ T6975] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.938331][T23806] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1298.957850][ T6975] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.032397][ T6975] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.047394][ T6975] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.061780][T23808] netlink: 'syz.2.12616': attribute type 4 has an invalid length. [ 1299.125297][T23808] netlink: 'syz.2.12616': attribute type 4 has an invalid length. [ 1299.450024][T23820] xt_nat: multiple ranges no longer supported [ 1299.623131][T23827] __nla_validate_parse: 1 callbacks suppressed [ 1299.623150][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12620'. [ 1299.671173][T23827] netlink: 'syz.3.12620': attribute type 58 has an invalid length. [ 1299.724067][T23830] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1299.973484][T23848] netlink: 'syz.3.12621': attribute type 1 has an invalid length. [ 1300.045209][ C1] ------------[ cut here ]------------ [ 1300.051275][ C1] ODEBUG: free active (active state 0) object: ffff88807d6f5890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1300.060619][T23848] netlink: 'syz.3.12621': attribute type 4 has an invalid length. [ 1300.064208][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: modprobe/23851 [ 1300.064275][ C1] Modules linked in: [ 1300.064326][ C1] CPU: 1 UID: 0 PID: 23851 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 1300.064348][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1300.064362][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1300.064391][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1300.064410][ C1] RSP: 0000:ffffc90000a08b68 EFLAGS: 00010246 [ 1300.064429][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4af930 RCX: 0000000000000000 [ 1300.064444][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 1300.064460][ C1] RBP: ffffffff8bcf4a00 R08: ffff88807d6f5890 R09: ffffffff8bcf5d20 [ 1300.064476][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88807d6f5a00 [ 1300.064492][ C1] R13: ffffffff901b4570 R14: ffff88807d6f5000 R15: ffff88807d6f5890 [ 1300.064508][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 1300.064525][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1300.064538][ C1] CR2: 00007f24c62e8010 CR3: 000000009db2c000 CR4: 00000000003526f0 [ 1300.064557][ C1] Call Trace: [ 1300.106163][T23848] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12621'. [ 1300.112360][ C1] [ 1300.216934][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1300.222606][ C1] kfree+0x13a/0x610 [ 1300.226564][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1300.231701][ C1] rose_timer_expiry+0x4cb/0x600 [ 1300.236582][ T1296] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.236705][ C1] ? call_timer_fn+0x178/0x5a0 [ 1300.243065][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1300.247395][ C1] call_timer_fn+0x192/0x5a0 [ 1300.257887][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1300.263371][ C1] ? call_timer_fn+0xd4/0x5a0 [ 1300.268116][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1300.273253][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1300.278508][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1300.284025][ C1] __run_timer_base+0x652/0x8b0 [ 1300.288895][ C1] ? ktime_get+0x45/0x200 [ 1300.293255][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1300.298681][ C1] ? sched_clock_cpu+0x74/0x440 [ 1300.303560][ C1] run_timer_softirq+0xb7/0x170 [ 1300.308458][ C1] handle_softirqs+0x22a/0x7c0 [ 1300.313244][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1300.318064][ C1] __irq_exit_rcu+0x5f/0x150 [ 1300.322677][ C1] irq_exit_rcu+0x9/0x30 [ 1300.326968][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1300.332620][ C1] [ 1300.335594][ C1] [ 1300.338538][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1300.344565][ C1] RIP: 0010:lock_release+0x2d7/0x3a0 [ 1300.345795][T23858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12627'. [ 1300.349866][ C1] Code: b7 76 11 00 00 00 00 eb b5 e8 25 b4 fd 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 71 76 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8a 98 00 0a cc 48 8d 3d c2 51 73 [ 1300.349887][ C1] RSP: 0000:ffffc90002fb7d08 EFLAGS: 00000282 [ 1300.349908][ C1] RAX: 776d730b973e8100 RBX: 0000000000000202 RCX: 0000000000000046 [ 1300.366738][T23859] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12625'. [ 1300.378557][ C1] RDX: 00000000d8d02893 RSI: ffffffff8e151802 RDI: ffffffff8c276500 [ 1300.378579][ C1] RBP: ffff88802f21c788 R08: ffffffff82115f41 R09: ffff888033a10088 [ 1300.378595][ C1] R10: 0000000000000000 R11: fffff520005f6f98 R12: 0000000000000001 [ 1300.378608][ C1] R13: 0000000000000001 R14: ffffffff8e75e0a0 R15: ffff88802f21bc80 [ 1300.378630][ C1] ? lock_vma_under_rcu+0x1d1/0x500 [ 1300.378669][ C1] ? lock_vma_under_rcu+0x116/0x500 [ 1300.378694][ C1] lock_vma_under_rcu+0x3ec/0x500 [ 1300.378720][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1300.378749][ C1] ? __fget_files+0x2a/0x420 [ 1300.378774][ C1] do_user_addr_fault+0x2d8/0x1360 [ 1300.378805][ C1] ? rcu_is_watching+0x15/0xb0 [ 1300.378827][ C1] ? trace_page_fault_user+0x84/0x1c0 [ 1300.378853][ C1] exc_page_fault+0x6a/0xc0 [ 1300.378877][ C1] asm_exc_page_fault+0x26/0x30 [ 1300.378896][ C1] RIP: 0033:0x7f24c661d070 [ 1300.378914][ C1] Code: 30 c3 0f 1f 84 00 00 00 00 00 66 48 0f 7e c6 83 fa 08 7d 16 83 fa 04 7d 1a 83 fa 01 7f 1c 7c 03 40 88 37 c3 66 0f 1f 44 00 00 <48> 89 37 48 89 74 17 f8 c3 89 37 89 74 17 fc c3 66 89 37 40 88 74 [ 1300.508432][ C1] RSP: 002b:00007ffcabaafe08 EFLAGS: 00010246 [ 1300.514546][ C1] RAX: 00007f24c62e8010 RBX: 0000000000000004 RCX: 00007f24c62e8018 [ 1300.522527][ C1] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00007f24c62e8010 [ 1300.530557][ C1] RBP: 00007ffcabab0190 R08: 00007f24c62e8010 R09: 0000000000000003 [ 1300.538568][ C1] R10: 0000000000000812 R11: 00007ffcabab0278 R12: 00007ffcabaafeb8 [ 1300.546598][ C1] R13: 00007f24c62f36b0 R14: 00007ffcabab0230 R15: 00007f24c62e8018 [ 1300.554638][ C1] [ 1300.557677][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1300.564966][ C1] CPU: 1 UID: 0 PID: 23851 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 1300.574151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1300.584209][ C1] Call Trace: [ 1300.587477][ C1] [ 1300.590308][ C1] vpanic+0x1e0/0x670 [ 1300.594297][ C1] panic+0xc5/0xd0 [ 1300.598011][ C1] ? __pfx_panic+0x10/0x10 [ 1300.602431][ C1] __warn+0x315/0x4a0 [ 1300.606403][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1300.612116][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1300.617831][ C1] __report_bug+0x29a/0x540 [ 1300.622333][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1300.627706][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1300.633519][ C1] ? __pfx___report_bug+0x10/0x10 [ 1300.638543][ C1] ? kfree+0x1c1/0x610 [ 1300.642599][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 1300.647701][ C1] ? call_timer_fn+0x192/0x5a0 [ 1300.652459][ C1] ? __run_timer_base+0x652/0x8b0 [ 1300.657464][ C1] ? run_timer_softirq+0xb7/0x170 [ 1300.662473][ C1] ? handle_softirqs+0x22a/0x7c0 [ 1300.667398][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1300.672152][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1300.677947][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1300.684086][ C1] ? lock_release+0x2d7/0x3a0 [ 1300.688750][ C1] ? lock_vma_under_rcu+0x3ec/0x500 [ 1300.693944][ C1] ? do_user_addr_fault+0x2d8/0x1360 [ 1300.699219][ C1] report_bug_entry+0x19a/0x290 [ 1300.704062][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1300.709773][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1300.715487][ C1] handle_bug+0xca/0x200 [ 1300.719735][ C1] exc_invalid_op+0x1a/0x50 [ 1300.724237][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1300.729077][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1300.735397][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1300.754990][ C1] RSP: 0000:ffffc90000a08b68 EFLAGS: 00010246 [ 1300.761050][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4af930 RCX: 0000000000000000 [ 1300.769008][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 1300.776971][ C1] RBP: ffffffff8bcf4a00 R08: ffff88807d6f5890 R09: ffffffff8bcf5d20 [ 1300.784928][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88807d6f5a00 [ 1300.792899][ C1] R13: ffffffff901b4570 R14: ffff88807d6f5000 R15: ffff88807d6f5890 [ 1300.800861][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1300.806223][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1300.811849][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1300.817480][ C1] kfree+0x13a/0x610 [ 1300.821367][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1300.826473][ C1] rose_timer_expiry+0x4cb/0x600 [ 1300.831402][ C1] ? call_timer_fn+0x178/0x5a0 [ 1300.836159][ C1] call_timer_fn+0x192/0x5a0 [ 1300.840737][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1300.846186][ C1] ? call_timer_fn+0xd4/0x5a0 [ 1300.850848][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1300.855956][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1300.861145][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1300.866596][ C1] __run_timer_base+0x652/0x8b0 [ 1300.871436][ C1] ? ktime_get+0x45/0x200 [ 1300.875764][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1300.881130][ C1] ? sched_clock_cpu+0x74/0x440 [ 1300.885971][ C1] run_timer_softirq+0xb7/0x170 [ 1300.890806][ C1] handle_softirqs+0x22a/0x7c0 [ 1300.895560][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1300.900316][ C1] __irq_exit_rcu+0x5f/0x150 [ 1300.904894][ C1] irq_exit_rcu+0x9/0x30 [ 1300.909122][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1300.914746][ C1] [ 1300.917666][ C1] [ 1300.920583][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1300.926549][ C1] RIP: 0010:lock_release+0x2d7/0x3a0 [ 1300.931822][ C1] Code: b7 76 11 00 00 00 00 eb b5 e8 25 b4 fd 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 71 76 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8a 98 00 0a cc 48 8d 3d c2 51 73 [ 1300.951413][ C1] RSP: 0000:ffffc90002fb7d08 EFLAGS: 00000282 [ 1300.957470][ C1] RAX: 776d730b973e8100 RBX: 0000000000000202 RCX: 0000000000000046 [ 1300.965435][ C1] RDX: 00000000d8d02893 RSI: ffffffff8e151802 RDI: ffffffff8c276500 [ 1300.973397][ C1] RBP: ffff88802f21c788 R08: ffffffff82115f41 R09: ffff888033a10088 [ 1300.981357][ C1] R10: 0000000000000000 R11: fffff520005f6f98 R12: 0000000000000001 [ 1300.989324][ C1] R13: 0000000000000001 R14: ffffffff8e75e0a0 R15: ffff88802f21bc80 [ 1300.997294][ C1] ? lock_vma_under_rcu+0x1d1/0x500 [ 1301.002501][ C1] ? lock_vma_under_rcu+0x116/0x500 [ 1301.007688][ C1] lock_vma_under_rcu+0x3ec/0x500 [ 1301.012704][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1301.018249][ C1] ? __fget_files+0x2a/0x420 [ 1301.022843][ C1] do_user_addr_fault+0x2d8/0x1360 [ 1301.027954][ C1] ? rcu_is_watching+0x15/0xb0 [ 1301.032711][ C1] ? trace_page_fault_user+0x84/0x1c0 [ 1301.038076][ C1] exc_page_fault+0x6a/0xc0 [ 1301.042574][ C1] asm_exc_page_fault+0x26/0x30 [ 1301.047410][ C1] RIP: 0033:0x7f24c661d070 [ 1301.051814][ C1] Code: 30 c3 0f 1f 84 00 00 00 00 00 66 48 0f 7e c6 83 fa 08 7d 16 83 fa 04 7d 1a 83 fa 01 7f 1c 7c 03 40 88 37 c3 66 0f 1f 44 00 00 <48> 89 37 48 89 74 17 f8 c3 89 37 89 74 17 fc c3 66 89 37 40 88 74 [ 1301.071407][ C1] RSP: 002b:00007ffcabaafe08 EFLAGS: 00010246 [ 1301.077468][ C1] RAX: 00007f24c62e8010 RBX: 0000000000000004 RCX: 00007f24c62e8018 [ 1301.085427][ C1] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00007f24c62e8010 [ 1301.093392][ C1] RBP: 00007ffcabab0190 R08: 00007f24c62e8010 R09: 0000000000000003 [ 1301.101349][ C1] R10: 0000000000000812 R11: 00007ffcabab0278 R12: 00007ffcabaafeb8 [ 1301.109308][ C1] R13: 00007f24c62f36b0 R14: 00007ffcabab0230 R15: 00007f24c62e8018 [ 1301.117285][ C1] [ 1301.120632][ C1] Kernel Offset: disabled [ 1301.124968][ C1] Rebooting in 86400 seconds..