last executing test programs: 9.742056903s ago: executing program 2 (id=2470): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="549910ecb66b3a50e59ff190bf", 0xd}, {&(0x7f0000000280)="41b6e0e7411e50f9333f14c3af0eb5c45340546ee407da39df", 0x19}, {&(0x7f00000002c0)="18473e988f4c37c635c0fc6806111e8aa416b2d5864238e97236aa44f3be13a036353cba80adfcdc52440f97078677bae93a558d5f6f9d9fa8ef2e487a5c89af084036e228157b0974", 0x49}], 0x3, &(0x7f00000005c0), 0x0, 0x20000000}], 0x1, 0x800) recvmmsg(r2, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.901883567s ago: executing program 3 (id=2472): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)="41b6e0e7411e50f9333f14c3af0eb5c45340546ee407da39df", 0x19}, {&(0x7f00000002c0)="18473e988f4c37c635c0fc6806111e8aa416b2d5864238e97236aa44f3be13a036353cba80adfcdc52440f97078677bae93a558d5f6f9d9fa8ef2e487a5c89af084036e228157b0974", 0x49}], 0x3, &(0x7f00000005c0), 0x0, 0x20000000}], 0x1, 0x800) recvmmsg(r2, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.730210344s ago: executing program 2 (id=2474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="050c1f6d9525d293783da3a0f1b304aa19dc525561f5bfcdec16fe120c1b0949e0ab27c8b6789aec1571c450e9453a13f89418a7977802c4ecbd93a72fb73e2895b068c053cf64e12f2a7af84c852a8e5fd8f1c9f050efa6220e7807c0f890c4de3386a8ba3dc386db886db8912c09597c3fbdf9cce3877b3044f6", @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0xc004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) close(0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 8.282865618s ago: executing program 1 (id=2476): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 8.207494419s ago: executing program 1 (id=2477): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) 7.965200091s ago: executing program 3 (id=2478): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[], 0x1c}}, 0x0) close(0x4) unshare(0x6a040000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 7.307680305s ago: executing program 1 (id=2480): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x40, 0xe4, &(0x7f0000000200)=""/228, 0x40f00, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0xde, &(0x7f0000000c40)=ANY=[], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(r1) socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 6.578025537s ago: executing program 2 (id=2482): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000f00000061119c0001000000180000000000ffff"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@random="0f68f1e7312e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x17, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800}, {"056f56"}}}}}}}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) 6.041923061s ago: executing program 3 (id=2484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="050c1f6d9525d293783da3a0f1b304aa19dc525561f5bfcdec16fe120c1b0949e0ab27c8b6789aec1571c450e9453a13f89418a7977802c4ecbd93a72fb73e2895b068c053cf64e12f2a7af84c852a8e5fd8f1c9f050efa6220e7807c0f890c4de3386a8ba3dc386db886db8912c09597c3fbdf9cce3877b3044f6", @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000740)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0xc004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) close(0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 5.640858362s ago: executing program 2 (id=2486): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="549910ecb66b3a50e59ff190bf70", 0xe}, {&(0x7f0000000280)="41b6e0e7411e50f9333f14c3af0eb5c45340546ee407da39df", 0x19}], 0x2, &(0x7f00000005c0), 0x0, 0x20000000}], 0x1, 0x800) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.317002952s ago: executing program 0 (id=2488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r1, &(0x7f0000004580)=[{{&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x20}}], 0x1, 0x20000000) 5.17471923s ago: executing program 4 (id=2489): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) 4.208048684s ago: executing program 1 (id=2490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="050c1f6d9525d293783da3a0f1b304aa19dc525561f5bfcdec16fe120c1b0949e0ab27c8b6789aec1571c450e9453a13f89418a7977802c4ecbd93a72fb73e2895b068c053cf64e12f2a7af84c852a8e5fd8f1c9f050efa6220e7807c0f890c4de3386a8ba3dc386db886db8912c09597c3fbdf9cce3877b3044f6", @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0xc004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) close(0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 3.508187689s ago: executing program 0 (id=2491): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x10000) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) 3.492934498s ago: executing program 4 (id=2492): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x6}, @alu={0x7, 0x0, 0x6, 0x1, 0xd, 0x8, 0x4}, @map_fd={0x18, 0x4}, @map_fd={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfe5, 0x13, &(0x7f00000000c0)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0x3119, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x1ff}, 0x94) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x3}, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="b7f41f95eb1aba08b5b878be6f1b7049f57b8f860675459bd56bd9c2295c2867", 0x20, 0x0, &(0x7f0000000440)={0x2, 0x19b, {0x1, 0xc, 0xa3, "7ee8acb82a3b4b1ec5dbd4b7a23ae221a91f7bdbca2c7bf338a1bf9eae46847cc90dc01a7e0c841553caea1a48dc19e30406712b83c5f5f174f2d11c51f13a13eb52a1e144ee6efcc5b7499e5922c06aa47fa03e95237032f7a11622a9074229f7ecae96d30c6d2875a26197461fb3dd6f86da2d3c876e513627140ebc5b2ced669700b90ed1335a3dab217dec254ab4ae2cf4f4874b40cc1c43f68be5ee89267131fd", 0xeb, "22e2e1949b8932d551a031d282b10ff36c659baf1ccf39ce3e8f0114af78ab201af8a9445fb0ee14e0d0d340b6082dea4a92e94b277dbdcda1cefac90d967f14ad9a626a778fe74c6bc66042c42574ef31b58e57c8fa589d96be0f9f1c7bf13876eb93d8a5149ff715b079265e79a6fa52e31bab987e6c1a5a2386068825b16a4215be40981540b4d92d9ff53fdcf9565abfa3baa75301ffcab275423dc82252cecd8c6986aa142bb09eca41f6599890db25a7bddb2cc01528b2bfbb69191d478c201883eb15d5bb2662cd3738436922d7d852241c9c982f4ec8806cce05c4dcc67bbe95e9d471e4330794"}, 0xc2, "2f015b294a176958929695f720ab6f521554d937daee19f99ffd99c600ff612a625da39594acf22dcb45e1f655b4e39f8008d77ec11d430f67c9bfb73f4db27e61556c8765de387d446b2388c4b014a7fc092769dcb25b9aca87bb1fe764fe6a9bd9309033f07e6f90583452d99cc2e2b7787a0ac28a1ab8fe4394991605beddfb45fbea6280d91e5dba2e94fed39cb6aaeccd298a07413653a5df713b34e6c4605e5337f90addd5842ffbbd8fe517b3aef7699f4f3a3241aec9469a9f1e4f046625"}, 0x269}) r3 = epoll_create1(0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r7, &(0x7f00000007c0), 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) write$nci(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="50040383"], 0x7) tee(r4, r6, 0xe0, 0xe) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002180)=ANY=[@ANYBLOB="000086dd00000a0000008d00000867650db711c8000020010000000000000000000000000001fc0200000000000000000000000000007301"], 0x11fe) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 3.048758983s ago: executing program 4 (id=2493): shutdown(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2.54879054s ago: executing program 0 (id=2494): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3b8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r8, 0x10c, 0x9, &(0x7f0000000140)=0x503f, 0x4) unshare(0x20000400) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r9, 0x29, 0x39, 0x0, &(0x7f00000002c0)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) socket$netlink(0x10, 0x3, 0xc) 2.174502803s ago: executing program 0 (id=2495): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[], 0x1c}}, 0x0) close(0x4) unshare(0x6a040000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 1.648524229s ago: executing program 4 (id=2496): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) 1.600530919s ago: executing program 2 (id=2497): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000f00000061119c0001000000180000000000ffff"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@random="0f68f1e7312e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x17, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800}, {"056f56"}}}}}}}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) 1.542423164s ago: executing program 3 (id=2498): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 1.427052777s ago: executing program 3 (id=2499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="050c1f6d9525d293783da3a0f1b304aa19dc525561f5bfcdec16fe120c1b0949e0ab27c8b6789aec1571c450e9453a13f89418a7977802c4ecbd93a72fb73e2895b068c053cf64e12f2a7af84c852a8e5fd8f1c9f050efa6220e7807c0f890c4de3386a8ba3dc386db886db8912c09597c3fbdf9cce3877b3044f6", @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0xc004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) close(0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 1.098833192s ago: executing program 0 (id=2500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, 0x0}, 0x4) 850.23018ms ago: executing program 1 (id=2501): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x6}, @alu={0x7, 0x0, 0x6, 0x1, 0xd, 0x8, 0x4}, @map_fd={0x18, 0x4}, @map_fd={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfe5, 0x13, &(0x7f00000000c0)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0x3119, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x1ff}, 0x94) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x3}, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="b7f41f95eb1aba08b5b878be6f1b7049f57b8f860675459bd56bd9c2295c2867", 0x20, 0x0, &(0x7f0000000440)={0x2, 0xb2, {0x1, 0xc, 0xa5, "7ee8acb82a3b4b1ec5dbd4b7a23ae221a91f7bdbca2c7bf338a1bf9eae46847cc90dc01a7e0c841553caea1a48dc19e30406712b83c5f5f174f2d11c51f13a13eb52a1e144ee6efcc5b7499e5922c06aa47fa03e95237032f7a11622a9074229f7ecae96d30c6d2875a26197461fb3dd6f86da2d3c876e513627140ebc5b2ced669700b90ed1335a3dab217dec254ab4ae2cf4f4874b40cc1c43f68be5ee89267131fd30eb"}, 0xc2, "2f015b294a176958929695f720ab6f521554d937daee19f99ffd99c600ff612a625da39594acf22dcb45e1f655b4e39f8008d77ec11d430f67c9bfb73f4db27e61556c8765de387d446b2388c4b014a7fc092769dcb25b9aca87bb1fe764fe6a9bd9309033f07e6f90583452d99cc2e2b7787a0ac28a1ab8fe4394991605beddfb45fbea6280d91e5dba2e94fed39cb6aaeccd298a07413653a5df713b34e6c4605e5337f90addd5842ffbbd8fe517b3aef7699f4f3a3241aec9469a9f1e4f046625"}, 0x180}) r3 = epoll_create1(0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r7, &(0x7f00000007c0), 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) write$nci(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="50040383"], 0x7) tee(r4, r6, 0xe0, 0xe) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002180)=ANY=[@ANYBLOB="000086dd00000a0000008d00000867650db711c8000020010000000000000000000000000001fc0200000000000000000000000000007301"], 0x11fe) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 793.221763ms ago: executing program 0 (id=2502): shutdown(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 678.326127ms ago: executing program 2 (id=2503): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) 611.867823ms ago: executing program 4 (id=2504): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r8, 0x10c, 0x9, &(0x7f0000000140)=0x503f, 0x4) unshare(0x20000400) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r9, 0x29, 0x39, 0x0, &(0x7f00000002c0)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) socket$netlink(0x10, 0x3, 0xc) 231.24745ms ago: executing program 1 (id=2505): shutdown(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 199.409426ms ago: executing program 3 (id=2506): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x6}, @alu={0x7, 0x0, 0x6, 0x1, 0xd, 0x8, 0x4}, @map_fd={0x18, 0x4}, @map_fd={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfe5, 0x13, &(0x7f00000000c0)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0x3119, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x1ff}, 0x94) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x3}, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="b7f41f95eb1aba08b5b878be6f1b7049f57b8f860675459bd56bd9c2295c2867", 0x20, 0x0, &(0x7f0000000440)={0x2, 0x19b, {0x1, 0xc, 0xa3, "7ee8acb82a3b4b1ec5dbd4b7a23ae221a91f7bdbca2c7bf338a1bf9eae46847cc90dc01a7e0c841553caea1a48dc19e30406712b83c5f5f174f2d11c51f13a13eb52a1e144ee6efcc5b7499e5922c06aa47fa03e95237032f7a11622a9074229f7ecae96d30c6d2875a26197461fb3dd6f86da2d3c876e513627140ebc5b2ced669700b90ed1335a3dab217dec254ab4ae2cf4f4874b40cc1c43f68be5ee89267131fd", 0xeb, "22e2e1949b8932d551a031d282b10ff36c659baf1ccf39ce3e8f0114af78ab201af8a9445fb0ee14e0d0d340b6082dea4a92e94b277dbdcda1cefac90d967f14ad9a626a778fe74c6bc66042c42574ef31b58e57c8fa589d96be0f9f1c7bf13876eb93d8a5149ff715b079265e79a6fa52e31bab987e6c1a5a2386068825b16a4215be40981540b4d92d9ff53fdcf9565abfa3baa75301ffcab275423dc82252cecd8c6986aa142bb09eca41f6599890db25a7bddb2cc01528b2bfbb69191d478c201883eb15d5bb2662cd3738436922d7d852241c9c982f4ec8806cce05c4dcc67bbe95e9d471e4330794"}, 0xc2, "2f015b294a176958929695f720ab6f521554d937daee19f99ffd99c600ff612a625da39594acf22dcb45e1f655b4e39f8008d77ec11d430f67c9bfb73f4db27e61556c8765de387d446b2388c4b014a7fc092769dcb25b9aca87bb1fe764fe6a9bd9309033f07e6f90583452d99cc2e2b7787a0ac28a1ab8fe4394991605beddfb45fbea6280d91e5dba2e94fed39cb6aaeccd298a07413653a5df713b34e6c4605e5337f90addd5842ffbbd8fe517b3aef7699f4f3a3241aec9469a9f1e4f046625"}, 0x269}) r3 = epoll_create1(0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r7, &(0x7f00000007c0), 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) write$nci(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="50040383"], 0x7) tee(r4, r6, 0xe0, 0xe) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002180)=ANY=[@ANYBLOB="000086dd00000a0000008d00000867650db711c8000020010000000000000000000000000001fc0200000000000000000000000000007301"], 0x11fe) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 0s ago: executing program 4 (id=2507): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000000a01010200000000000000000000009f907ef2ba0ea6fec20814607d27174b74d9362a3e0ad0142528c9350d65775e7873d0ba2a2aa3186b0886b84565c21a152f3ec686c308bd1ce813c4d20ca2d005f0d55b3a23a9699b272eb310cf4a4e91c492bcafcd01a68b2fea254d77088a97d54647d6a0bb9e594de4ea8af160485372f1353ec9e51a3d00702e15b40700000000000000329f896c1453773d94cca57951955975d11a6279be8a6ceda2"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85b800000800010044001280090001007866726d000000003400028008000100040000000800020003000000080002000100000008000100000000000800010003000000080001000100000055ccf8fce45dbf770dd540a722ece0a0dbdd72b4343b573dffa09715254816d005e31dbbc137d875a1f3f248e582f12d682139e5b1f27a78926fe9e7937d0bf907cf1c7eb930f0a040ba0aed193efc6ca597e93685732d697fe1e8dbbeb20505ddce48851a27e5d7d1db0f8499299dd571e4253927099d39a101394cf7575f29234345293455abaa09ecdd69c934b2be8d"], 0x64}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400020000000300000000000000001003000004080003400000000208005c3d01000022"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000100)=0x14) kernel console output (not intermixed with test programs): 44.208695][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.259015][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.271150][ T7975] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 144.338694][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.366577][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.645502][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 145.653574][ C0] lec:lec_tx_timeout: lec0 [ 145.658178][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 145.995935][ T8004] __nla_validate_parse: 6 callbacks suppressed [ 145.995953][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.534'. [ 146.109826][ T8008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.535'. [ 146.135550][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'. [ 146.164861][ T8008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.535'. [ 146.205815][ T8008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.535'. [ 146.682890][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 146.770182][ T8021] bond2: entered promiscuous mode [ 146.800293][ T8021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.181114][ T8046] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.543'. [ 147.219762][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 147.737825][ T8066] netlink: 220 bytes leftover after parsing attributes in process `syz.1.552'. [ 147.748768][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 148.644347][ T8097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.760530][ T7957] Set syz1 is full, maxelem 65536 reached [ 149.099834][ T8114] Bluetooth: MGMT ver 1.23 [ 149.164887][ T8117] openvswitch: netlink: IP tunnel dst address not specified [ 150.212431][ T8136] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.313439][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.341784][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.685457][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 150.691735][ T5139] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 150.693518][ C0] lec:lec_tx_timeout: lec0 [ 150.704547][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 150.792025][ T8154] lo speed is unknown, defaulting to 1000 [ 150.893577][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.901389][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.090154][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.137477][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.424885][ T8154] lo speed is unknown, defaulting to 1000 [ 151.469988][ T8170] __nla_validate_parse: 4 callbacks suppressed [ 151.470002][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 151.521792][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.549170][ T8154] lo speed is unknown, defaulting to 1000 [ 151.575335][ T8154] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.635809][ T8182] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 151.643597][ T8182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.578'. [ 151.655028][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.671806][ T8154] lo speed is unknown, defaulting to 1000 [ 151.723488][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.753581][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.781727][ T8154] lo speed is unknown, defaulting to 1000 [ 151.820961][ T8154] lo speed is unknown, defaulting to 1000 [ 151.941960][ T8154] lo speed is unknown, defaulting to 1000 [ 151.960163][ T8154] lo speed is unknown, defaulting to 1000 [ 151.987433][ T8154] lo speed is unknown, defaulting to 1000 [ 152.886706][ T8198] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 152.906350][ T8198] netlink: 224 bytes leftover after parsing attributes in process `syz.1.582'. [ 153.185396][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.586'. [ 153.196840][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'. [ 153.215251][ T8206] lo speed is unknown, defaulting to 1000 [ 153.215600][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.586'. [ 153.262757][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.586'. [ 153.508988][ T8223] netlink: 104 bytes leftover after parsing attributes in process `syz.0.588'. [ 153.891059][ T8229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.593'. [ 153.923519][ T8237] lo speed is unknown, defaulting to 1000 [ 153.980501][ T8227] lo speed is unknown, defaulting to 1000 [ 153.982687][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'. [ 154.195043][ T8251] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 154.201597][ T8244] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.462407][ T8249] lo speed is unknown, defaulting to 1000 [ 155.516550][ T8287] lo speed is unknown, defaulting to 1000 [ 155.730160][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 155.738320][ C0] lec:lec_tx_timeout: lec0 [ 155.743482][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 156.187663][ T8321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.328452][ T8322] erspan0: entered promiscuous mode [ 156.780584][ T8344] __nla_validate_parse: 13 callbacks suppressed [ 156.780600][ T8344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.626'. [ 157.429456][ T8358] netlink: 'syz.4.633': attribute type 6 has an invalid length. [ 157.823050][ T8372] netlink: 152 bytes leftover after parsing attributes in process `syz.4.639'. [ 157.866107][ T8372] block nbd0: not configured, cannot reconfigure [ 158.113547][ T8232] Set syz1 is full, maxelem 65536 reached [ 158.197320][ T8389] team_slave_0: entered promiscuous mode [ 158.203058][ T8389] team_slave_1: entered promiscuous mode [ 158.246926][ T8389] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.267235][ T8389] team0: Device macvlan2 is already an upper device of the team interface [ 158.287839][ T8389] team_slave_0: left promiscuous mode [ 158.293332][ T8389] team_slave_1: left promiscuous mode [ 158.485151][ T8405] lo speed is unknown, defaulting to 1000 [ 158.561836][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.650'. [ 158.581024][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.650'. [ 158.598281][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.650'. [ 158.612192][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.650'. [ 158.698965][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 159.191593][ T8451] team0: Port device syz_tun added [ 159.939794][ T8478] macsec1: entered promiscuous mode [ 159.945132][ T8478] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 160.132250][ T8484] netlink: 192 bytes leftover after parsing attributes in process `syz.4.684'. [ 160.349348][ T8488] lo speed is unknown, defaulting to 1000 [ 160.381578][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'. [ 160.414992][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'. [ 160.759677][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 160.767746][ C0] lec:lec_tx_timeout: lec0 [ 160.772588][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 161.806193][ T8541] __nla_validate_parse: 4 callbacks suppressed [ 161.806209][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.708'. [ 162.180146][ T5139] Bluetooth: hci4: link tx timeout [ 162.185675][ T5139] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.195250][ T5836] Bluetooth: hci4: link tx timeout [ 162.200758][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.161725][ T5896] IPVS: starting estimator thread 0... [ 163.265545][ T8595] IPVS: using max 34 ests per chain, 81600 per kthread [ 163.351285][ T8597] lo speed is unknown, defaulting to 1000 [ 163.393422][ T8603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.732'. [ 163.446773][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.732'. [ 163.521734][ T8603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.732'. [ 163.567076][ T8603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.732'. [ 163.582809][ T8612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 163.641959][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.734'. [ 163.653842][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'. [ 163.698504][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.734'. [ 163.719559][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.734'. [ 163.777628][ T8609] lo speed is unknown, defaulting to 1000 [ 164.209365][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 164.652854][ T8641] lo speed is unknown, defaulting to 1000 [ 165.309572][ T8686] netlink: 27 bytes leftover after parsing attributes in process `syz.2.763'. [ 165.510897][ T8453] Set syz1 is full, maxelem 65536 reached [ 165.785455][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 165.793528][ C0] lec:lec_tx_timeout: lec0 [ 165.798133][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 165.818890][ T8702] lo speed is unknown, defaulting to 1000 [ 165.828582][ T8711] syzkaller1: entered promiscuous mode [ 165.834169][ T8711] syzkaller1: entered allmulticast mode [ 166.357716][ T8736] lo speed is unknown, defaulting to 1000 [ 167.035284][ T8777] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.275115][ T8780] lo speed is unknown, defaulting to 1000 [ 167.389161][ T8789] __nla_validate_parse: 6 callbacks suppressed [ 167.389176][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 167.426541][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.795'. [ 167.436669][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 167.447231][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 167.925819][ T8799] block nbd0: server does not support multiple connections per device. [ 167.960360][ T8799] block nbd0: shutting down sockets [ 168.166288][ T8807] netlink: 'syz.0.804': attribute type 13 has an invalid length. [ 168.192849][ T8811] netlink: 'syz.2.806': attribute type 3 has an invalid length. [ 168.415232][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.422914][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.572047][ T8807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.584285][ T8807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.790658][ T8807] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 168.816935][ T1625] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.826997][ T1625] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.870589][ T1625] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.920768][ T1625] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.478574][ T8857] netlink: 41 bytes leftover after parsing attributes in process `syz.0.822'. [ 169.504454][ T8857] netlink: 140 bytes leftover after parsing attributes in process `syz.0.822'. [ 169.529136][ T8857] netlink: 41 bytes leftover after parsing attributes in process `syz.0.822'. [ 170.065132][ T8884] lo speed is unknown, defaulting to 1000 [ 170.805451][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 170.813543][ C0] lec:lec_tx_timeout: lec0 [ 170.818395][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 171.663425][ T8931] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 171.735070][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.749187][ T8933] bond2: (slave batadv1): making interface the new active one [ 171.761883][ T8935] netlink: 64 bytes leftover after parsing attributes in process `syz.1.850'. [ 171.773849][ T8933] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 171.882073][ T8743] Set syz1 is full, maxelem 65536 reached [ 172.179476][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055017400: rx timeout, send abort [ 172.187938][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055017400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.658815][ T8987] lo speed is unknown, defaulting to 1000 [ 172.758041][ T8995] lo speed is unknown, defaulting to 1000 [ 172.947387][ T9009] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 172.955256][ T9009] netlink: 224 bytes leftover after parsing attributes in process `syz.4.870'. [ 173.476744][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055017800: rx timeout, send abort [ 173.485212][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055017800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 173.627653][ T9022] lo speed is unknown, defaulting to 1000 [ 173.638290][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 173.701161][ T9025] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 174.012573][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 174.081869][ T9051] netlink: 7 bytes leftover after parsing attributes in process `syz.2.885'. [ 174.116501][ T9052] lo speed is unknown, defaulting to 1000 [ 174.163867][ T9047] lo speed is unknown, defaulting to 1000 [ 174.426462][ T9076] xfrm0: entered promiscuous mode [ 174.533301][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 174.779730][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 175.070704][ T9095] xt_hashlimit: size too large, truncated to 1048576 [ 175.355074][ T9106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.902'. [ 175.388962][ T9106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.902'. [ 175.449135][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 175.550064][ T9111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.626941][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 175.718950][ T9121] bridge0: entered promiscuous mode [ 175.729249][ T9121] bridge0: left promiscuous mode [ 175.780972][ T9124] lo speed is unknown, defaulting to 1000 [ 175.825451][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 175.833496][ C0] lec:lec_tx_timeout: lec0 [ 175.838517][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 175.928152][ T9128] lo speed is unknown, defaulting to 1000 [ 175.999902][ T9138] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 176.852225][ T9176] lo speed is unknown, defaulting to 1000 [ 177.084314][ T9188] Bluetooth: MGMT ver 1.23 [ 177.445081][ T9202] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 177.662876][ T9214] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 178.329899][ T9235] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 178.348029][ T9235] __nla_validate_parse: 3 callbacks suppressed [ 178.348043][ T9235] netlink: 224 bytes leftover after parsing attributes in process `syz.4.939'. [ 178.992181][ T9241] lo speed is unknown, defaulting to 1000 [ 179.876645][ T9302] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 179.884599][ T9302] netlink: 224 bytes leftover after parsing attributes in process `syz.1.955'. [ 180.304383][ T9317] syzkaller0: entered promiscuous mode [ 180.338226][ T9317] syzkaller0: entered allmulticast mode [ 180.492808][ T9329] lo speed is unknown, defaulting to 1000 [ 180.796259][ T9347] syzkaller0: entered promiscuous mode [ 180.804184][ T9347] syzkaller0: entered allmulticast mode [ 180.845553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 180.853718][ C0] lec:lec_tx_timeout: lec0 [ 180.858418][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 181.357123][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 181.437409][ T30] audit: type=1107 audit(1770383713.484:2): pid=9365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' Û—žD»ùÖª,b†Ø”z‚"ƶ­?0Éy’£½çYÙY˜ÎÒ»Àe) ƒ4' [ 182.235871][ T9373] tipc: Enabling of bearer rejected, failed to enable media [ 182.379889][ T9395] syzkaller0: entered promiscuous mode [ 182.392672][ T9395] syzkaller0: entered allmulticast mode [ 182.521712][ T9403] netlink: 'syz.1.976': attribute type 4 has an invalid length. [ 182.710554][ T9411] tipc: Enabled bearer , priority 0 [ 182.722616][ T9411] syzkaller0: entered promiscuous mode [ 182.732076][ T9411] syzkaller0: entered allmulticast mode [ 182.762938][ T9411] tipc: Resetting bearer [ 182.770452][ T9410] tipc: Resetting bearer [ 182.791865][ T9410] tipc: Disabling bearer [ 183.305379][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.983'. [ 183.418507][ T9436] geneve3: entered promiscuous mode [ 183.429624][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 183.474025][ T9438] team0: No ports can be present during mode change [ 183.576076][ T9445] xt_hashlimit: size too large, truncated to 1048576 [ 183.606158][ T9445] xt_hashlimit: max too large, truncated to 1048576 [ 183.641397][ T9445] netlink: 72 bytes leftover after parsing attributes in process `syz.3.993'. [ 183.751502][ T9456] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 183.777411][ T9456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.997'. [ 183.799201][ T9456] bond3: (slave gretap1): making interface the new active one [ 183.808511][ T9456] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 183.967016][ T9468] lo speed is unknown, defaulting to 1000 [ 184.071687][ T9468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.999'. [ 184.080841][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.999'. [ 184.091762][ T9468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.999'. [ 184.100978][ T9468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.999'. [ 184.321930][ T9476] lo speed is unknown, defaulting to 1000 [ 184.733975][ T9492] lo speed is unknown, defaulting to 1000 [ 184.882977][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.891900][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.903500][ T9499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.943079][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1004'. [ 185.457060][ T9497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.679717][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 185.698660][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 185.953339][ T9536] lo speed is unknown, defaulting to 1000 [ 186.203258][ T9562] pim6reg1: entered promiscuous mode [ 186.213024][ T9562] pim6reg1: entered allmulticast mode [ 186.247658][ T9561] lo speed is unknown, defaulting to 1000 [ 186.685454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 186.693547][ C0] lec:lec_tx_timeout: lec0 [ 186.698305][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 186.824937][ T9589] xt_hashlimit: size too large, truncated to 1048576 [ 187.293947][ T9615] openvswitch: netlink: Missing key (keys=40, expected=80) [ 188.442285][ T9638] tap0: tun_chr_ioctl cmd 35111 [ 188.672221][ T9650] lo speed is unknown, defaulting to 1000 [ 188.785222][ T9658] syzkaller0: entered promiscuous mode [ 188.810975][ T9658] syzkaller0: entered allmulticast mode [ 189.149551][ T9673] syzkaller0: entered promiscuous mode [ 189.155297][ T9673] syzkaller0: entered allmulticast mode [ 189.184325][ T9670] lo speed is unknown, defaulting to 1000 [ 189.782750][ T9696] lo speed is unknown, defaulting to 1000 [ 189.906350][ T9701] __nla_validate_parse: 7 callbacks suppressed [ 189.906366][ T9701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1048'. [ 189.951079][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 189.990821][ T9701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1048'. [ 190.009157][ T9701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1048'. [ 190.449911][ T9712] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 190.460243][ T9712] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1053'. [ 190.827100][ T9731] lo speed is unknown, defaulting to 1000 [ 190.990144][ T9740] lo speed is unknown, defaulting to 1000 [ 191.314099][ T9] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 191.676052][ T9769] syzkaller0: entered promiscuous mode [ 191.682190][ T9769] syzkaller0: entered allmulticast mode [ 191.705426][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 191.713439][ C0] lec:lec_tx_timeout: lec0 [ 191.718025][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 193.044977][ T9777] Bluetooth: MGMT ver 1.23 [ 193.109735][ T30] audit: type=1800 audit(1770383725.164:3): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1072" name="x000000000000000b00000000000000000000013" dev="tmpfs" ino=1155 res=0 errno=0 [ 193.134193][ T30] audit: type=1804 audit(1770383725.194:4): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1072" name="x000000000000000b00000000000000000000013" dev="tmpfs" ino=1155 res=1 errno=0 [ 193.287261][ T9782] lo speed is unknown, defaulting to 1000 [ 193.828609][ T9733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.051711][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.061708][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.077229][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 194.115247][ T9798] syzkaller0: entered promiscuous mode [ 194.124636][ T9798] syzkaller0: entered allmulticast mode [ 194.483924][ T9816] lo speed is unknown, defaulting to 1000 [ 195.085463][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 195.085697][ T5139] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 195.883087][ T9853] lo speed is unknown, defaulting to 1000 [ 196.000144][ T9860] lo speed is unknown, defaulting to 1000 [ 196.146220][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 196.563983][ T9886] lo speed is unknown, defaulting to 1000 [ 196.632232][ T9890] tipc: Started in network mode [ 196.637356][ T9890] tipc: Node identity 120e52732505, cluster identity 4711 [ 196.644599][ T9890] tipc: Enabled bearer , priority 0 [ 196.653822][ T9890] syzkaller0: entered promiscuous mode [ 196.659927][ T9890] syzkaller0: entered allmulticast mode [ 196.679314][ T9890] tipc: Resetting bearer [ 196.725432][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 196.733553][ C0] lec:lec_tx_timeout: lec0 [ 196.738171][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 196.754474][ T9889] tipc: Resetting bearer [ 196.796242][ T9889] tipc: Disabling bearer [ 196.836760][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 197.130100][ T9906] lo speed is unknown, defaulting to 1000 [ 197.174162][ T9909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1106'. [ 197.235467][ T9909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1106'. [ 197.295900][ T9909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1106'. [ 197.330256][ T9909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1106'. [ 197.750951][ T9917] lo speed is unknown, defaulting to 1000 [ 198.349512][ T9933] tipc: Enabled bearer , priority 0 [ 198.388061][ T9928] syzkaller0: entered promiscuous mode [ 198.420203][ T9928] syzkaller0: entered allmulticast mode [ 198.495107][ T9928] tipc: Resetting bearer [ 198.548527][ T9926] tipc: Resetting bearer [ 198.603781][ T9926] tipc: Disabling bearer [ 198.864069][ T9940] lo speed is unknown, defaulting to 1000 [ 199.411408][ T9960] lo speed is unknown, defaulting to 1000 [ 199.460204][ T9961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'. [ 199.481489][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 199.517466][ T9961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'. [ 199.541707][ T9961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'. [ 200.137292][ T9971] syzkaller0: entered promiscuous mode [ 200.142896][ T9971] syzkaller0: entered allmulticast mode [ 200.398079][ T9979] tipc: Enabled bearer , priority 0 [ 200.426442][ T9979] syzkaller0: entered promiscuous mode [ 200.435280][ T9979] syzkaller0: entered allmulticast mode [ 200.478881][ T9978] tipc: Resetting bearer [ 200.514434][ T9978] tipc: Disabling bearer [ 200.593359][ T9984] lo speed is unknown, defaulting to 1000 [ 200.962292][ T9995] tipc: Enabled bearer , priority 0 [ 200.979023][ T9992] syzkaller0: entered promiscuous mode [ 200.984597][ T9992] syzkaller0: entered allmulticast mode [ 201.027099][ T9992] tipc: Resetting bearer [ 201.051831][ T9991] tipc: Resetting bearer [ 201.101842][ T9991] tipc: Disabling bearer [ 201.146669][ T9998] lo speed is unknown, defaulting to 1000 [ 201.250809][ T5833] Bluetooth: hci2: command 0x0401 tx timeout [ 201.257232][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 201.257245][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 201.551257][T10005] lo speed is unknown, defaulting to 1000 [ 201.653900][T10015] lo speed is unknown, defaulting to 1000 [ 201.745421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 201.753552][ C0] lec:lec_tx_timeout: lec0 [ 201.758306][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 202.051061][T10027] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 202.090273][T10027] __nla_validate_parse: 1 callbacks suppressed [ 202.090288][T10027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1135'. [ 202.159743][T10029] tipc: Enabled bearer , priority 0 [ 202.168791][T10029] syzkaller0: entered promiscuous mode [ 202.174293][T10029] syzkaller0: entered allmulticast mode [ 202.199948][T10028] tipc: Resetting bearer [ 202.243867][T10028] tipc: Disabling bearer [ 202.670872][T10047] lo speed is unknown, defaulting to 1000 [ 203.108106][T10053] lo speed is unknown, defaulting to 1000 [ 203.332083][T10057] lo speed is unknown, defaulting to 1000 [ 204.250620][T10087] lo speed is unknown, defaulting to 1000 [ 205.130892][T10101] netlink: 'syz.4.1152': attribute type 1 has an invalid length. [ 205.138937][T10101] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1152'. [ 206.765442][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 206.773601][ C0] lec:lec_tx_timeout: lec0 [ 206.778284][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.493575][T10099] lo speed is unknown, defaulting to 1000 [ 207.520510][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1153'. [ 207.568820][T10110] tipc: Started in network mode [ 207.576045][T10110] tipc: Node identity ee50e2acdc72, cluster identity 4711 [ 207.586319][T10110] tipc: Enabled bearer , priority 0 [ 207.602120][T10107] lo speed is unknown, defaulting to 1000 [ 207.603677][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 207.626529][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1153'. [ 207.649422][T10114] syzkaller0: entered promiscuous mode [ 207.655060][T10114] syzkaller0: entered allmulticast mode [ 207.711931][T10110] tipc: Resetting bearer [ 207.740149][T10109] tipc: Resetting bearer [ 207.754278][T10109] tipc: Disabling bearer [ 208.322865][T10146] lo speed is unknown, defaulting to 1000 [ 208.560651][T10150] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 208.590255][T10150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1160'. [ 208.722096][T10159] lo speed is unknown, defaulting to 1000 [ 208.753040][T10164] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 208.761378][T10164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1165'. [ 208.869369][T10167] tipc: Enabled bearer , priority 0 [ 208.946760][T10167] tipc: Resetting bearer [ 208.991536][T10166] tipc: Disabling bearer [ 209.159594][T10175] lo speed is unknown, defaulting to 1000 [ 209.776220][T10192] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 209.804410][T10192] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1171'. [ 209.981761][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 211.241082][T10223] syzkaller0: entered promiscuous mode [ 211.260952][T10223] syzkaller0: entered allmulticast mode [ 211.473700][T10225] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 211.481622][T10225] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1179'. [ 211.785452][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 211.793514][ C0] lec:lec_tx_timeout: lec0 [ 211.798403][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 211.893136][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 212.042955][T10241] lo speed is unknown, defaulting to 1000 [ 212.110243][T10244] lo speed is unknown, defaulting to 1000 [ 212.138114][T10238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1182'. [ 212.594525][T10256] __nla_validate_parse: 1 callbacks suppressed [ 212.594542][T10256] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1187'. [ 212.620276][T10258] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 212.628436][T10258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1188'. [ 212.903464][T10263] lo speed is unknown, defaulting to 1000 [ 213.712622][T10284] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 213.814136][T10284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1194'. [ 214.157776][T10289] syzkaller0: entered promiscuous mode [ 214.163289][T10289] syzkaller0: entered allmulticast mode [ 214.391347][T10293] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 214.431749][T10293] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1197'. [ 214.463705][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 214.560402][T10298] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1199'. [ 214.970947][T10311] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 214.979109][T10311] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1202'. [ 215.382536][T10318] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 215.411544][T10318] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1204'. [ 215.678441][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 215.782224][T10326] lo speed is unknown, defaulting to 1000 [ 215.793408][T10327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1206'. [ 215.964195][T10330] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 216.328264][T10343] lo speed is unknown, defaulting to 1000 [ 216.744900][T10358] lo speed is unknown, defaulting to 1000 [ 216.815506][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 216.823559][ C0] lec:lec_tx_timeout: lec0 [ 216.828160][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 216.956163][T10364] lo speed is unknown, defaulting to 1000 [ 216.970968][T10364] lo speed is unknown, defaulting to 1000 [ 216.979750][T10364] lo speed is unknown, defaulting to 1000 [ 217.399154][T10379] lo speed is unknown, defaulting to 1000 [ 217.460413][T10364] infiniband syz0: set down [ 217.476546][ T10] lo speed is unknown, defaulting to 1000 [ 217.545969][T10364] infiniband syz0: added lo [ 217.717642][T10364] RDS/IB: syz0: added [ 217.722128][T10364] smc: adding ib device syz0 with port count 1 [ 217.766653][T10364] smc: ib device syz0 port 1 has no pnetid [ 217.774642][ T6060] lo speed is unknown, defaulting to 1000 [ 217.873923][T10364] lo speed is unknown, defaulting to 1000 [ 218.258932][T10364] lo speed is unknown, defaulting to 1000 [ 218.611112][T10364] lo speed is unknown, defaulting to 1000 [ 218.748943][T10398] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 218.895423][T10398] __nla_validate_parse: 4 callbacks suppressed [ 218.895440][T10398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1221'. [ 218.987682][T10403] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 219.025500][T10403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1223'. [ 219.068364][T10364] lo speed is unknown, defaulting to 1000 [ 219.926514][T10364] lo speed is unknown, defaulting to 1000 [ 220.234056][T10364] lo speed is unknown, defaulting to 1000 [ 220.323904][T10426] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 220.349719][T10426] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1228'. [ 220.451636][T10429] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 220.460754][T10429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1229'. [ 220.488489][T10364] lo speed is unknown, defaulting to 1000 [ 220.826101][T10418] lo speed is unknown, defaulting to 1000 [ 221.156075][T10438] lo speed is unknown, defaulting to 1000 [ 221.164721][T10438] lo speed is unknown, defaulting to 1000 [ 221.541653][T10448] syzkaller0: entered promiscuous mode [ 221.550188][T10448] syzkaller0: entered allmulticast mode [ 221.576887][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 221.697223][T10459] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 221.727680][T10459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1237'. [ 221.845440][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 221.853599][ C0] lec:lec_tx_timeout: lec0 [ 221.858438][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 222.130475][T10466] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 222.142322][T10466] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1238'. [ 223.303559][T10468] lo speed is unknown, defaulting to 1000 [ 223.356157][T10480] syzkaller0: entered promiscuous mode [ 223.361849][T10480] syzkaller0: entered allmulticast mode [ 223.370026][T10468] lo speed is unknown, defaulting to 1000 [ 223.525651][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 224.946142][T10505] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 224.965551][T10505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1245'. [ 225.674164][T10529] lo speed is unknown, defaulting to 1000 [ 225.701424][T10529] lo speed is unknown, defaulting to 1000 [ 226.105983][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 226.283457][T10535] lo speed is unknown, defaulting to 1000 [ 226.373239][T10535] lo speed is unknown, defaulting to 1000 [ 226.438814][T10537] lo speed is unknown, defaulting to 1000 [ 226.768402][T10537] lo speed is unknown, defaulting to 1000 [ 227.190819][T10557] netlink: 'syz.2.1256': attribute type 1 has an invalid length. [ 227.228881][T10557] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1256'. [ 227.655401][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 227.663465][ C0] lec:lec_tx_timeout: lec0 [ 227.669240][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 228.227469][T10577] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 228.239407][T10577] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1261'. [ 228.254083][T10576] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 228.265890][T10576] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1260'. [ 228.332706][T10574] syzkaller0: entered promiscuous mode [ 228.338334][T10574] syzkaller0: entered allmulticast mode [ 228.347219][T10574] 0: reclassify loop, rule prio 0, protocol 700 [ 228.564797][T10591] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 228.592945][T10591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1263'. [ 228.730246][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 229.856830][T10627] syzkaller0: entered promiscuous mode [ 229.869178][T10627] syzkaller0: entered allmulticast mode [ 231.290185][T10643] lo speed is unknown, defaulting to 1000 [ 231.308978][T10652] lo speed is unknown, defaulting to 1000 [ 231.317756][T10652] lo speed is unknown, defaulting to 1000 [ 231.449547][T10657] syzkaller0: entered promiscuous mode [ 231.455755][T10657] syzkaller0: entered allmulticast mode [ 231.488573][T10663] lo speed is unknown, defaulting to 1000 [ 232.444105][T10665] syzkaller0: entered promiscuous mode [ 232.449638][T10665] syzkaller0: entered allmulticast mode [ 232.456299][T10643] lo speed is unknown, defaulting to 1000 [ 232.585084][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 232.687993][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 232.696102][ C0] lec:lec_tx_timeout: lec0 [ 232.700723][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 233.510960][T10663] lo speed is unknown, defaulting to 1000 [ 233.969850][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 234.179827][T10683] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 234.187753][T10683] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1282'. [ 234.332735][T10687] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 234.358954][T10687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1283'. [ 234.512307][T10695] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 234.533820][T10695] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1285'. [ 234.576470][T10697] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 234.585436][T10697] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1286'. [ 235.033740][T10711] lo speed is unknown, defaulting to 1000 [ 235.073747][T10711] lo speed is unknown, defaulting to 1000 [ 235.635921][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 235.798217][T10723] lo speed is unknown, defaulting to 1000 [ 235.860990][T10723] lo speed is unknown, defaulting to 1000 [ 236.610915][T10743] lo speed is unknown, defaulting to 1000 [ 236.623217][T10743] lo speed is unknown, defaulting to 1000 [ 236.721066][T10753] tipc: Enabling of bearer rejected, failed to enable media [ 237.456320][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 237.530870][T10767] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 237.547052][T10767] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1298'. [ 237.712972][T10769] lo speed is unknown, defaulting to 1000 [ 237.720402][T10769] lo speed is unknown, defaulting to 1000 [ 237.725475][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 237.734160][ C0] lec:lec_tx_timeout: lec0 [ 237.739129][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.906982][T10797] lo speed is unknown, defaulting to 1000 [ 238.933700][T10797] lo speed is unknown, defaulting to 1000 [ 238.978287][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 239.425029][T10749] Set syz1 is full, maxelem 65536 reached [ 239.507578][T10808] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 239.522135][T10808] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1306'. [ 239.872130][T10820] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 239.880971][T10820] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'. [ 240.088704][T10828] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 240.145471][T10828] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1310'. [ 240.435511][T10835] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 240.453675][T10835] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1311'. [ 240.903736][T10845] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 240.915151][T10845] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1314'. [ 241.241846][T10858] lo speed is unknown, defaulting to 1000 [ 241.267130][T10858] lo speed is unknown, defaulting to 1000 [ 241.306718][T10859] lo speed is unknown, defaulting to 1000 [ 241.476204][T10859] lo speed is unknown, defaulting to 1000 [ 241.614995][T10865] lo speed is unknown, defaulting to 1000 [ 241.793888][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 241.873444][T10865] lo speed is unknown, defaulting to 1000 [ 242.150628][T10880] syzkaller0: entered promiscuous mode [ 242.156255][T10880] syzkaller0: entered allmulticast mode [ 242.755405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 242.763495][ C0] lec:lec_tx_timeout: lec0 [ 242.768198][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 243.824800][T10919] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 243.862049][T10919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1326'. [ 244.014007][T10931] tipc: Enabled bearer , priority 0 [ 244.043493][T10933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1327'. [ 244.079955][T10929] tipc: Resetting bearer [ 244.086110][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 244.095787][T10924] lo speed is unknown, defaulting to 1000 [ 244.127163][T10933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1327'. [ 244.140180][T10933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1327'. [ 244.183742][T10928] tipc: Disabling bearer [ 244.215716][T10924] lo speed is unknown, defaulting to 1000 [ 244.364018][T10942] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 244.395423][T10942] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1332'. [ 244.783691][T10937] lo speed is unknown, defaulting to 1000 [ 244.893081][T10937] lo speed is unknown, defaulting to 1000 [ 244.978210][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 245.410951][T10961] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 245.419225][T10961] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1337'. [ 246.421384][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 247.243303][T11004] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 247.261945][T11004] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1346'. [ 247.302085][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 247.522107][T11016] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 247.657506][T11022] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 247.775403][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 247.783465][ C0] lec:lec_tx_timeout: lec0 [ 247.788084][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 248.786044][T11050] syzkaller0: entered promiscuous mode [ 248.795141][T11050] syzkaller0: entered allmulticast mode [ 249.029523][T11059] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 249.081688][T11059] __nla_validate_parse: 2 callbacks suppressed [ 249.081704][T11059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1357'. [ 249.169745][T11061] lo speed is unknown, defaulting to 1000 [ 249.180151][T11064] syzkaller0: entered promiscuous mode [ 249.185743][T11064] syzkaller0: entered allmulticast mode [ 249.194505][T11064] 0: reclassify loop, rule prio 0, protocol 700 [ 249.221996][T11061] lo speed is unknown, defaulting to 1000 [ 249.236956][T11065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1358'. [ 249.359787][T11069] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1360'. [ 249.401871][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'. [ 249.442587][T11065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1358'. [ 249.503208][T11065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1358'. [ 249.527134][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 249.540054][T11073] openvswitch: netlink: Missing key (keys=40, expected=80) [ 249.797960][T11080] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 249.841428][T11080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1362'. [ 250.771994][T11093] syzkaller0: entered promiscuous mode [ 250.785525][T11093] syzkaller0: entered allmulticast mode [ 252.390107][T11121] lo speed is unknown, defaulting to 1000 [ 252.397775][T11121] lo speed is unknown, defaulting to 1000 [ 252.431809][T11099] lo speed is unknown, defaulting to 1000 [ 252.596966][T11126] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1373'. [ 252.637054][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 252.650922][T11099] lo speed is unknown, defaulting to 1000 [ 252.651458][T11126] openvswitch: netlink: Missing key (keys=40, expected=80) [ 252.795426][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 252.803486][ C0] lec:lec_tx_timeout: lec0 [ 252.808030][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.305632][T11144] lo speed is unknown, defaulting to 1000 [ 253.335412][T11144] lo speed is unknown, defaulting to 1000 [ 254.445462][T11191] netlink: 'syz.3.1387': attribute type 1 has an invalid length. [ 254.469244][T11191] __nla_validate_parse: 2 callbacks suppressed [ 254.469259][T11191] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1387'. [ 255.489839][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.497301][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.544939][T11230] lo speed is unknown, defaulting to 1000 [ 255.552332][T11230] lo speed is unknown, defaulting to 1000 [ 255.774153][T11236] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 255.782440][T11235] lo speed is unknown, defaulting to 1000 [ 255.790598][T11236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1396'. [ 255.858312][T11235] lo speed is unknown, defaulting to 1000 [ 256.512151][T11260] lo speed is unknown, defaulting to 1000 [ 256.549430][T11260] lo speed is unknown, defaulting to 1000 [ 257.539343][T11291] lo speed is unknown, defaulting to 1000 [ 257.588524][T11291] lo speed is unknown, defaulting to 1000 [ 257.815396][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 257.823447][ C0] lec:lec_tx_timeout: lec0 [ 257.828190][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 257.928551][T11298] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 257.943405][T11298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1411'. [ 258.165288][T11301] lo speed is unknown, defaulting to 1000 [ 258.204392][T11301] lo speed is unknown, defaulting to 1000 [ 258.390408][T11309] lo: Caught tx_queue_len zero misconfig [ 258.895277][T11319] lo speed is unknown, defaulting to 1000 [ 259.015082][T11319] lo speed is unknown, defaulting to 1000 [ 260.519371][T11344] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 260.536806][T11344] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1422'. [ 260.717128][T11347] netlink: 'syz.4.1423': attribute type 1 has an invalid length. [ 260.731909][T11347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1423'. [ 260.897183][T11354] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1424'. [ 260.933968][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 260.943309][T11354] openvswitch: netlink: Missing key (keys=40, expected=80) [ 261.027524][T11360] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1426'. [ 261.051987][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 261.236245][T11360] openvswitch: netlink: Missing key (keys=40, expected=80) [ 261.739926][T11375] lo speed is unknown, defaulting to 1000 [ 261.747487][T11375] lo speed is unknown, defaulting to 1000 [ 261.772844][T11377] syzkaller0: entered promiscuous mode [ 261.822799][T11377] syzkaller0: entered allmulticast mode [ 261.838496][T11381] 0: reclassify loop, rule prio 0, protocol 700 [ 262.120869][T11391] lo speed is unknown, defaulting to 1000 [ 262.134713][T11391] lo speed is unknown, defaulting to 1000 [ 262.176456][T11395] netlink: 'syz.4.1434': attribute type 1 has an invalid length. [ 262.184444][T11395] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1434'. [ 262.835426][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 262.843496][ C0] lec:lec_tx_timeout: lec0 [ 262.849489][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 262.898952][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 263.563526][T11432] lo speed is unknown, defaulting to 1000 [ 263.592611][T11432] lo speed is unknown, defaulting to 1000 [ 264.036850][T11446] lo speed is unknown, defaulting to 1000 [ 264.044262][T11446] lo speed is unknown, defaulting to 1000 [ 265.573839][T11505] lo speed is unknown, defaulting to 1000 [ 265.581827][T11505] lo speed is unknown, defaulting to 1000 [ 266.174732][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'. [ 266.190613][T11531] lo speed is unknown, defaulting to 1000 [ 266.199338][T11531] lo speed is unknown, defaulting to 1000 [ 266.890228][T11550] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1469'. [ 266.907685][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 266.916815][T11550] openvswitch: netlink: Missing key (keys=40, expected=80) [ 267.273041][T11564] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 267.295640][T11564] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1474'. [ 267.516455][T11568] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1475'. [ 267.583128][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 267.608385][T11572] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1476'. [ 267.616674][T11568] openvswitch: netlink: Missing key (keys=40, expected=80) [ 267.668078][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 267.698243][T11572] openvswitch: netlink: Missing key (keys=40, expected=80) [ 267.936341][T11579] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1478'. [ 267.971992][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 267.981421][T11579] openvswitch: netlink: Missing key (keys=40, expected=80) [ 268.344665][T11588] lo speed is unknown, defaulting to 1000 [ 268.362172][T11588] lo speed is unknown, defaulting to 1000 [ 268.685498][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 268.693645][ C0] lec:lec_tx_timeout: lec0 [ 268.699327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 268.774895][T11623] openvswitch: netlink: Missing key (keys=40, expected=80) [ 269.331174][T11646] lo speed is unknown, defaulting to 1000 [ 269.351548][T11646] lo speed is unknown, defaulting to 1000 [ 269.634260][T11655] lo speed is unknown, defaulting to 1000 [ 269.661837][T11655] lo speed is unknown, defaulting to 1000 [ 269.888058][T11666] openvswitch: netlink: Missing key (keys=40, expected=80) [ 269.971916][T11664] lo speed is unknown, defaulting to 1000 [ 270.017283][T11664] lo speed is unknown, defaulting to 1000 [ 270.211927][T11674] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 271.365693][T11708] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 271.383792][T11708] __nla_validate_parse: 9 callbacks suppressed [ 271.383806][T11708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1511'. [ 271.720690][T11718] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 271.740680][T11718] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1513'. [ 272.187544][T11730] syzkaller0: entered promiscuous mode [ 272.220010][T11730] syzkaller0: entered allmulticast mode [ 272.324813][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 272.627131][T11747] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1523'. [ 272.695338][T11744] lo speed is unknown, defaulting to 1000 [ 272.704168][T11744] lo speed is unknown, defaulting to 1000 [ 272.932774][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 272.994587][T11757] netlink: 'syz.4.1527': attribute type 1 has an invalid length. [ 273.002547][T11757] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1527'. [ 273.705389][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.713464][ C0] lec:lec_tx_timeout: lec0 [ 273.718605][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.474997][T11799] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1539'. [ 274.519813][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 274.529002][T11799] openvswitch: netlink: Missing key (keys=40, expected=80) [ 275.046199][T11817] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 275.054126][T11817] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1543'. [ 275.327679][T11821] netlink: 'syz.2.1544': attribute type 1 has an invalid length. [ 275.335695][T11821] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1544'. [ 275.859190][T11834] lo speed is unknown, defaulting to 1000 [ 275.879156][T11834] lo speed is unknown, defaulting to 1000 [ 276.087451][T11850] openvswitch: netlink: Missing key (keys=40, expected=80) [ 276.388747][T11860] __nla_validate_parse: 7 callbacks suppressed [ 276.388764][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 278.067897][T11894] lo speed is unknown, defaulting to 1000 [ 278.075632][T11894] lo speed is unknown, defaulting to 1000 [ 278.409261][T11906] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1567'. [ 278.447763][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 278.468125][T11906] openvswitch: netlink: Missing key (keys=40, expected=80) [ 278.725493][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 278.733571][ C0] lec:lec_tx_timeout: lec0 [ 278.738593][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 278.769249][T11918] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1571'. [ 278.800772][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 278.831652][T11918] openvswitch: netlink: Missing key (keys=40, expected=80) [ 279.571400][T11950] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 279.587305][T11950] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1578'. [ 279.686192][T11953] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1579'. [ 279.713912][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 279.722997][T11953] openvswitch: netlink: Missing key (keys=40, expected=80) [ 280.439160][T11980] tipc: Enabled bearer , priority 0 [ 280.453538][T11980] syzkaller0: entered promiscuous mode [ 280.464757][T11980] syzkaller0: entered allmulticast mode [ 280.490833][T11979] tipc: Resetting bearer [ 280.520247][T11979] tipc: Disabling bearer [ 281.036291][T12001] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 281.061280][T12001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1591'. [ 281.496276][T12022] syzkaller0: entered promiscuous mode [ 281.501927][T12022] syzkaller0: entered allmulticast mode [ 281.638584][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 283.027589][T12049] tipc: Enabling of bearer rejected, failed to enable media [ 283.057534][T12049] syzkaller0: entered promiscuous mode [ 283.078901][T12049] syzkaller0: entered allmulticast mode [ 283.091595][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 283.646714][T12079] lo speed is unknown, defaulting to 1000 [ 283.689965][T12079] lo speed is unknown, defaulting to 1000 [ 283.745381][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 283.753432][ C0] lec:lec_tx_timeout: lec0 [ 283.758151][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.219338][T12090] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 284.247276][T12090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1611'. [ 284.565911][T12099] tipc: Enabling of bearer rejected, failed to enable media [ 284.578922][T12097] syzkaller0: entered promiscuous mode [ 284.584422][T12097] syzkaller0: entered allmulticast mode [ 284.662303][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 284.836698][T12103] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1615'. [ 284.873640][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 284.894898][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 284.903988][T12103] openvswitch: netlink: Missing key (keys=40, expected=80) [ 284.990659][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 285.182130][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1620'. [ 285.212253][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1620'. [ 285.439749][T12122] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 286.143330][T12138] lo speed is unknown, defaulting to 1000 [ 286.156831][T12138] lo speed is unknown, defaulting to 1000 [ 286.483628][T12147] lo speed is unknown, defaulting to 1000 [ 286.499509][T12147] lo speed is unknown, defaulting to 1000 [ 286.705143][T12149] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 286.725476][T12149] __nla_validate_parse: 5 callbacks suppressed [ 286.725490][T12149] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1629'. [ 287.004506][T12156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 287.032017][T12156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'. [ 287.054826][T12153] lo speed is unknown, defaulting to 1000 [ 287.060717][T12156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 287.106208][T12153] lo speed is unknown, defaulting to 1000 [ 287.120029][T12156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 287.558786][T12158] lo speed is unknown, defaulting to 1000 [ 287.612034][T12166] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1633'. [ 287.647031][T12158] lo speed is unknown, defaulting to 1000 [ 287.969622][T12171] lo speed is unknown, defaulting to 1000 [ 287.977219][T12171] lo speed is unknown, defaulting to 1000 [ 288.765402][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 288.773508][ C0] lec:lec_tx_timeout: lec0 [ 288.778163][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 288.835071][T12189] lo speed is unknown, defaulting to 1000 [ 288.873825][T12189] lo speed is unknown, defaulting to 1000 [ 289.000747][T12191] lo speed is unknown, defaulting to 1000 [ 289.218300][T12203] tipc: Enabling of bearer rejected, failed to enable media [ 289.228417][T12203] syzkaller0: entered promiscuous mode [ 289.236175][T12203] syzkaller0: entered allmulticast mode [ 289.335034][T12191] lo speed is unknown, defaulting to 1000 [ 290.117812][T12227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1647'. [ 290.132038][T12227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1647'. [ 290.184275][T12227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1647'. [ 290.247384][T12222] lo speed is unknown, defaulting to 1000 [ 290.266268][T12227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1647'. [ 290.281216][T12222] lo speed is unknown, defaulting to 1000 [ 290.336832][T12230] lo speed is unknown, defaulting to 1000 [ 290.821361][T12230] lo speed is unknown, defaulting to 1000 [ 291.065181][T12233] lo speed is unknown, defaulting to 1000 [ 291.074923][T12233] lo speed is unknown, defaulting to 1000 [ 291.310777][T12244] syzkaller0: entered promiscuous mode [ 291.329694][T12244] syzkaller0: entered allmulticast mode [ 291.350426][T12245] 0: reclassify loop, rule prio 0, protocol 700 [ 291.812554][T12253] tipc: Enabled bearer , priority 0 [ 291.836561][T12255] syzkaller0: entered promiscuous mode [ 291.852229][T12255] syzkaller0: entered allmulticast mode [ 291.904360][T12247] tipc: Resetting bearer [ 291.919494][T12246] tipc: Resetting bearer [ 291.958408][T12246] tipc: Disabling bearer [ 292.004335][T12252] lo speed is unknown, defaulting to 1000 [ 292.125184][T12252] lo speed is unknown, defaulting to 1000 [ 292.432763][T12266] lo speed is unknown, defaulting to 1000 [ 292.568057][T12266] lo speed is unknown, defaulting to 1000 [ 292.623360][T12273] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 292.632388][T12273] __nla_validate_parse: 5 callbacks suppressed [ 292.632402][T12273] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1660'. [ 293.008309][T12281] lo speed is unknown, defaulting to 1000 [ 293.023050][T12281] lo speed is unknown, defaulting to 1000 [ 293.122633][T12284] lo speed is unknown, defaulting to 1000 [ 293.273873][T12284] lo speed is unknown, defaulting to 1000 [ 293.392345][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 293.421158][T12291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 293.476639][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 293.542634][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 293.785396][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 293.793461][ C0] lec:lec_tx_timeout: lec0 [ 293.798113][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 293.875182][T12309] lo speed is unknown, defaulting to 1000 [ 293.932583][T12309] lo speed is unknown, defaulting to 1000 [ 294.468767][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1668'. [ 294.478460][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1668'. [ 294.505664][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1668'. [ 294.522618][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1668'. [ 294.547416][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 294.587085][T12313] lo speed is unknown, defaulting to 1000 [ 294.594722][T12313] lo speed is unknown, defaulting to 1000 [ 296.112850][T12336] lo speed is unknown, defaulting to 1000 [ 296.163801][T12336] lo speed is unknown, defaulting to 1000 [ 296.396655][T12343] netlink: 'syz.0.1676': attribute type 1 has an invalid length. [ 297.581454][T12368] tipc: Enabled bearer , priority 0 [ 297.589261][T12368] syzkaller0: entered promiscuous mode [ 297.594885][T12368] syzkaller0: entered allmulticast mode [ 297.628196][T12368] tipc: Resetting bearer [ 297.644444][T12367] tipc: Resetting bearer [ 297.681300][T12367] tipc: Disabling bearer [ 297.748997][T12374] syzkaller0: entered promiscuous mode [ 297.754564][T12374] syzkaller0: entered allmulticast mode [ 297.976704][T12391] tipc: Enabled bearer , priority 0 [ 297.984396][T12391] syzkaller0: entered promiscuous mode [ 298.005513][T12391] syzkaller0: entered allmulticast mode [ 298.050873][T12391] tipc: Resetting bearer [ 298.099419][T12390] tipc: Resetting bearer [ 298.140238][T12397] __nla_validate_parse: 5 callbacks suppressed [ 298.140252][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 298.169353][T12390] tipc: Disabling bearer [ 298.251898][T12395] lo speed is unknown, defaulting to 1000 [ 298.276891][T12395] lo speed is unknown, defaulting to 1000 [ 298.805520][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 298.813640][ C0] lec:lec_tx_timeout: lec0 [ 298.818672][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 299.434252][T12434] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 299.458600][T12434] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1695'. [ 300.221581][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 301.131470][T12466] lo speed is unknown, defaulting to 1000 [ 301.140318][T12466] lo speed is unknown, defaulting to 1000 [ 301.180095][T12467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1702'. [ 301.204409][T12467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1702'. [ 301.226381][T12467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1702'. [ 301.248763][T12467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1702'. [ 301.657893][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 301.792105][T12480] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 301.840943][T12480] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1705'. [ 301.909925][T12482] lo speed is unknown, defaulting to 1000 [ 301.925197][T12482] lo speed is unknown, defaulting to 1000 [ 302.251012][T12496] lo speed is unknown, defaulting to 1000 [ 302.266660][T12496] lo speed is unknown, defaulting to 1000 [ 302.571648][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 303.173270][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 303.202405][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 303.449184][T12519] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1714'. [ 303.465047][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 303.475051][T12519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 303.825391][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 303.833514][ C0] lec:lec_tx_timeout: lec0 [ 303.838099][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 303.872097][T12536] lo speed is unknown, defaulting to 1000 [ 303.881025][T12536] lo speed is unknown, defaulting to 1000 [ 304.120951][T12547] lo speed is unknown, defaulting to 1000 [ 304.191551][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1721'. [ 304.221202][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1721'. [ 304.223779][T12553] lo speed is unknown, defaulting to 1000 [ 304.251797][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1721'. [ 304.268943][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1721'. [ 304.311020][T12547] lo speed is unknown, defaulting to 1000 [ 304.748472][T12553] lo speed is unknown, defaulting to 1000 [ 305.284468][T12577] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 305.301081][T12577] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1726'. [ 306.026185][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 306.100364][T12593] lo speed is unknown, defaulting to 1000 [ 306.160258][T12593] lo speed is unknown, defaulting to 1000 [ 306.210703][T12597] openvswitch: netlink: Missing key (keys=40, expected=80) [ 306.702688][T12609] netlink: 'syz.2.1734': attribute type 1 has an invalid length. [ 308.855422][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 308.863504][ C0] lec:lec_tx_timeout: lec0 [ 308.868075][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 308.966223][T12650] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 308.973985][T12650] __nla_validate_parse: 5 callbacks suppressed [ 308.973999][T12650] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1741'. [ 309.063552][T12654] lo speed is unknown, defaulting to 1000 [ 309.074470][T12654] lo speed is unknown, defaulting to 1000 [ 309.165691][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 309.400306][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'. [ 309.986938][T12681] syzkaller0: entered promiscuous mode [ 310.006676][T12681] syzkaller0: entered allmulticast mode [ 310.074022][T12684] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 310.087039][T12684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1748'. [ 311.767257][T12708] tipc: Enabling of bearer rejected, failed to enable media [ 311.917407][T12727] tipc: Enabled bearer , priority 0 [ 311.947293][T12727] syzkaller0: entered promiscuous mode [ 311.952811][T12727] syzkaller0: entered allmulticast mode [ 312.077547][T12727] tipc: Resetting bearer [ 312.108134][T12726] tipc: Resetting bearer [ 312.139975][T12726] tipc: Disabling bearer [ 312.212680][T12742] lo speed is unknown, defaulting to 1000 [ 312.226859][T12742] lo speed is unknown, defaulting to 1000 [ 312.426209][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 312.934408][T12760] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 312.966149][T12760] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1760'. [ 313.046919][T12762] lo speed is unknown, defaulting to 1000 [ 313.057298][T12762] lo speed is unknown, defaulting to 1000 [ 313.148901][T12766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1761'. [ 313.220434][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 313.275479][T12766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1761'. [ 313.325056][T12766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1761'. [ 314.022022][T12789] tipc: Enabled bearer , priority 0 [ 314.041377][T12787] syzkaller0: entered promiscuous mode [ 314.059525][T12787] syzkaller0: entered allmulticast mode [ 314.085973][T12785] lo speed is unknown, defaulting to 1000 [ 314.093205][T12785] lo speed is unknown, defaulting to 1000 [ 314.121325][T12787] tipc: Resetting bearer [ 314.150712][T12786] tipc: Resetting bearer [ 314.211427][T12786] tipc: Disabling bearer [ 314.459454][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 314.639685][T12797] lo speed is unknown, defaulting to 1000 [ 314.674329][T12797] lo speed is unknown, defaulting to 1000 [ 314.685371][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 314.693502][ C0] lec:lec_tx_timeout: lec0 [ 314.698164][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 314.898198][T12803] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 314.914317][T12803] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1770'. [ 315.466051][T12810] lo speed is unknown, defaulting to 1000 [ 315.490905][T12810] lo speed is unknown, defaulting to 1000 [ 315.977924][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 316.320526][T12825] lo speed is unknown, defaulting to 1000 [ 316.359348][T12825] lo speed is unknown, defaulting to 1000 [ 316.370104][T12829] lo speed is unknown, defaulting to 1000 [ 316.435742][T12836] tipc: Enabled bearer , priority 0 [ 316.451361][T12836] syzkaller0: entered promiscuous mode [ 316.457142][T12836] syzkaller0: entered allmulticast mode [ 316.477903][T12836] tipc: Resetting bearer [ 316.485791][T12834] tipc: Resetting bearer [ 316.526128][T12834] tipc: Disabling bearer [ 316.700212][T12829] lo speed is unknown, defaulting to 1000 [ 316.955840][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.962294][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.667768][T12868] lo speed is unknown, defaulting to 1000 [ 317.858499][T12878] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 317.890958][T12878] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1784'. [ 319.057321][T12868] lo speed is unknown, defaulting to 1000 [ 319.324537][T12887] lo speed is unknown, defaulting to 1000 [ 319.378626][T12894] tipc: Enabled bearer , priority 0 [ 319.396625][T12894] syzkaller0: entered promiscuous mode [ 319.402196][T12894] syzkaller0: entered allmulticast mode [ 319.418489][T12895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1786'. [ 319.437431][T12895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1786'. [ 319.447774][T12894] tipc: Resetting bearer [ 319.460111][T12893] tipc: Resetting bearer [ 319.476410][T12895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1786'. [ 319.496008][T12893] tipc: Disabling bearer [ 319.512149][T12895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1786'. [ 319.529648][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 319.547889][T12887] lo speed is unknown, defaulting to 1000 [ 319.668544][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 319.705362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.713430][ C0] lec:lec_tx_timeout: lec0 [ 319.718143][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.853442][T12901] lo speed is unknown, defaulting to 1000 [ 319.870718][T12901] lo speed is unknown, defaulting to 1000 [ 320.702604][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 321.196993][T12934] syzkaller0: entered promiscuous mode [ 321.202545][T12934] syzkaller0: entered allmulticast mode [ 321.535121][T12951] tipc: Enabled bearer , priority 0 [ 321.553826][T12951] syzkaller0: entered promiscuous mode [ 321.571816][T12951] syzkaller0: entered allmulticast mode [ 321.627378][T12947] lo speed is unknown, defaulting to 1000 [ 321.631996][T12951] tipc: Resetting bearer [ 321.652294][T12950] tipc: Resetting bearer [ 321.665524][T12956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1801'. [ 321.677706][T12956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1801'. [ 321.695405][T12956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1801'. [ 321.704395][T12956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1801'. [ 321.714736][T12950] tipc: Disabling bearer [ 321.764015][T12947] lo speed is unknown, defaulting to 1000 [ 321.950782][T12967] lo speed is unknown, defaulting to 1000 [ 322.099722][T12967] lo speed is unknown, defaulting to 1000 [ 322.411655][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 322.906437][T12994] lo speed is unknown, defaulting to 1000 [ 322.913626][T12994] lo speed is unknown, defaulting to 1000 [ 323.573883][T13025] syzkaller0: entered promiscuous mode [ 323.600650][T13025] syzkaller0: entered allmulticast mode [ 323.829162][T13033] lo speed is unknown, defaulting to 1000 [ 323.843529][T13033] lo speed is unknown, defaulting to 1000 [ 324.178112][T13046] tipc: Enabled bearer , priority 0 [ 324.197378][T13046] syzkaller0: entered promiscuous mode [ 324.207688][T13046] syzkaller0: entered allmulticast mode [ 324.251019][T13046] tipc: Resetting bearer [ 324.291620][T13045] tipc: Resetting bearer [ 324.309217][T13045] tipc: Disabling bearer [ 324.328037][T13039] lo speed is unknown, defaulting to 1000 [ 324.380504][T13039] lo speed is unknown, defaulting to 1000 [ 324.380525][T13047] lo speed is unknown, defaulting to 1000 [ 324.676168][T13066] __nla_validate_parse: 3 callbacks suppressed [ 324.676185][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 324.725380][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 324.733441][ C0] lec:lec_tx_timeout: lec0 [ 324.738257][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 324.787431][T13047] lo speed is unknown, defaulting to 1000 [ 325.615951][T13086] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1831'. [ 325.631316][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'. [ 325.646236][T13086] openvswitch: netlink: Missing key (keys=40, expected=80) [ 325.720986][T13084] syzkaller0: entered promiscuous mode [ 325.726950][T13084] syzkaller0: entered allmulticast mode [ 326.000068][T13097] lo speed is unknown, defaulting to 1000 [ 326.037048][T13097] lo speed is unknown, defaulting to 1000 [ 326.084284][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 326.320425][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 326.567551][T13115] lo speed is unknown, defaulting to 1000 [ 326.574977][T13115] lo speed is unknown, defaulting to 1000 [ 326.734360][T13121] lo speed is unknown, defaulting to 1000 [ 326.804380][T13121] lo speed is unknown, defaulting to 1000 [ 326.974299][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 327.225299][T13134] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1843'. [ 327.265692][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 327.274685][T13134] openvswitch: netlink: Missing key (keys=40, expected=80) [ 328.312158][T13158] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1848'. [ 328.360733][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 328.378945][T13158] openvswitch: netlink: Missing key (keys=40, expected=80) [ 328.978877][T13182] openvswitch: netlink: Missing key (keys=40, expected=80) [ 329.078174][T13174] lo speed is unknown, defaulting to 1000 [ 329.085851][T13174] lo speed is unknown, defaulting to 1000 [ 329.228987][T13185] syzkaller0: entered promiscuous mode [ 329.244788][T13185] syzkaller0: entered allmulticast mode [ 329.255373][ T5139] Bluetooth: hci4: command 0x0406 tx timeout [ 329.547793][T13189] lo speed is unknown, defaulting to 1000 [ 329.555178][T13189] lo speed is unknown, defaulting to 1000 [ 329.745579][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 329.753618][ C0] lec:lec_tx_timeout: lec0 [ 329.814622][T13197] lo speed is unknown, defaulting to 1000 [ 329.999919][T13200] lo speed is unknown, defaulting to 1000 [ 330.008914][T13203] __nla_validate_parse: 6 callbacks suppressed [ 330.008930][T13203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1859'. [ 330.056282][T13203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1859'. [ 330.076166][T13203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1859'. [ 330.106792][T13203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1859'. [ 330.168945][T13197] lo speed is unknown, defaulting to 1000 [ 330.362527][T13210] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1861'. [ 330.414709][T13200] lo speed is unknown, defaulting to 1000 [ 330.434301][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 330.463428][T13210] openvswitch: netlink: Missing key (keys=40, expected=80) [ 330.626494][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 331.484830][T13235] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1867'. [ 331.561868][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 331.585078][T13241] openvswitch: netlink: Missing key (keys=40, expected=80) [ 331.814224][T13245] lo speed is unknown, defaulting to 1000 [ 331.865432][T13245] lo speed is unknown, defaulting to 1000 [ 331.904674][T13252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1869'. [ 332.010262][T13254] lo speed is unknown, defaulting to 1000 [ 332.292989][T13272] syzkaller0: entered promiscuous mode [ 332.298736][T13272] syzkaller0: entered allmulticast mode [ 332.369710][T13254] lo speed is unknown, defaulting to 1000 [ 332.781468][T13269] lo speed is unknown, defaulting to 1000 [ 332.826243][T13269] lo speed is unknown, defaulting to 1000 [ 333.576350][T13299] tipc: Enabled bearer , priority 0 [ 333.604972][T13299] syzkaller0: entered promiscuous mode [ 333.610580][T13299] syzkaller0: entered allmulticast mode [ 333.685566][T13298] tipc: Resetting bearer [ 333.728505][T13298] tipc: Disabling bearer [ 334.230022][T13311] openvswitch: netlink: Missing key (keys=40, expected=80) [ 335.330147][T13345] syzkaller0: entered promiscuous mode [ 335.350199][T13345] syzkaller0: entered allmulticast mode [ 335.363635][T13345] 0: reclassify loop, rule prio 0, protocol 700 [ 335.478591][T13353] tipc: Enabled bearer , priority 0 [ 335.488216][T13353] syzkaller0: entered promiscuous mode [ 335.494578][T13353] syzkaller0: entered allmulticast mode [ 335.649515][T13357] tipc: Resetting bearer [ 335.702562][T13352] tipc: Resetting bearer [ 335.745759][T13352] tipc: Disabling bearer [ 335.812710][T13362] lo speed is unknown, defaulting to 1000 [ 335.827910][T13362] lo speed is unknown, defaulting to 1000 [ 335.946850][T13369] __nla_validate_parse: 11 callbacks suppressed [ 335.946867][T13369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1901'. [ 335.971165][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1901'. [ 335.988106][T13369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1901'. [ 336.017589][T13369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1901'. [ 336.630371][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 337.016722][T13405] lo speed is unknown, defaulting to 1000 [ 337.036859][T13405] lo speed is unknown, defaulting to 1000 [ 337.179280][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 337.956551][T13430] lo speed is unknown, defaulting to 1000 [ 337.987760][T13430] lo speed is unknown, defaulting to 1000 [ 338.134783][T13433] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 338.165459][T13433] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1914'. [ 339.507941][T13463] lo speed is unknown, defaulting to 1000 [ 339.547103][T13463] lo speed is unknown, defaulting to 1000 [ 339.802081][T13468] lo speed is unknown, defaulting to 1000 [ 339.993548][T13474] lo speed is unknown, defaulting to 1000 [ 340.127122][T13476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1925'. [ 340.137154][T13476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1925'. [ 340.148755][T13476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1925'. [ 340.442391][T13468] lo speed is unknown, defaulting to 1000 [ 340.985390][T13474] lo speed is unknown, defaulting to 1000 [ 341.325243][T13486] __nla_validate_parse: 1 callbacks suppressed [ 341.325260][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 341.836724][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 342.343591][T13494] lo speed is unknown, defaulting to 1000 [ 342.364711][T13494] lo speed is unknown, defaulting to 1000 [ 342.410807][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 342.425818][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1932'. [ 342.439797][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 342.456552][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 342.741238][T13515] lo speed is unknown, defaulting to 1000 [ 342.844658][T13515] lo speed is unknown, defaulting to 1000 [ 343.083340][ T6263] lec:lec_start_xmit: lec0:No lecd attached [ 343.374657][T13531] lo speed is unknown, defaulting to 1000 [ 343.382837][T13531] lo speed is unknown, defaulting to 1000 [ 343.478491][T13546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1937'. [ 343.510861][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'. [ 343.533542][T13546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1937'. [ 343.569697][T13546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1937'. [ 343.593377][T13533] lo speed is unknown, defaulting to 1000 [ 343.708652][T13550] lo speed is unknown, defaulting to 1000 [ 343.868928][T13560] lo speed is unknown, defaulting to 1000 [ 343.997949][T13533] lo speed is unknown, defaulting to 1000 [ 344.189736][T13550] lo speed is unknown, defaulting to 1000 [ 344.489845][T13560] lo speed is unknown, defaulting to 1000 [ 347.040644][T13665] syzkaller0: entered promiscuous mode [ 347.046276][T13665] syzkaller0: entered allmulticast mode [ 347.138392][T13672] syzkaller0: entered promiscuous mode [ 347.163926][T13672] syzkaller0: entered allmulticast mode [ 347.305667][T13676] __nla_validate_parse: 7 callbacks suppressed [ 347.305686][T13676] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1966'. [ 347.516394][T13684] syzkaller0: entered promiscuous mode [ 347.521931][T13684] syzkaller0: entered allmulticast mode [ 347.566084][T13687] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1970'. [ 348.212252][T13710] lo speed is unknown, defaulting to 1000 [ 348.221684][T13710] lo speed is unknown, defaulting to 1000 [ 348.260414][T13713] lo speed is unknown, defaulting to 1000 [ 348.447284][T13713] lo speed is unknown, defaulting to 1000 [ 348.634433][T13727] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1978'. [ 348.685405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 348.693438][ C0] lec:lec_tx_timeout: lec0 [ 348.704297][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1978'. [ 348.715140][T13727] openvswitch: netlink: Missing key (keys=40, expected=80) [ 348.744729][T13729] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1979'. [ 348.978491][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'. [ 349.020377][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1980'. [ 349.050814][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'. [ 349.075474][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'. [ 349.383141][T13757] lo speed is unknown, defaulting to 1000 [ 349.419142][T13757] lo speed is unknown, defaulting to 1000 [ 349.674545][T13761] lo speed is unknown, defaulting to 1000 [ 349.789842][T13761] lo speed is unknown, defaulting to 1000 [ 349.861716][T13770] lo speed is unknown, defaulting to 1000 [ 350.104723][T13782] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1991'. [ 350.260421][T13770] lo speed is unknown, defaulting to 1000 [ 350.525281][T13796] openvswitch: netlink: Missing key (keys=40, expected=80) [ 350.644759][T13784] lo speed is unknown, defaulting to 1000 [ 350.752061][T13784] lo speed is unknown, defaulting to 1000 [ 351.395506][T13808] lo speed is unknown, defaulting to 1000 [ 351.406950][T13808] lo speed is unknown, defaulting to 1000 [ 351.996297][T13823] lo speed is unknown, defaulting to 1000 [ 352.004052][T13823] lo speed is unknown, defaulting to 1000 [ 352.725951][T13839] lo speed is unknown, defaulting to 1000 [ 352.734433][T13841] lo speed is unknown, defaulting to 1000 [ 352.736225][T13839] lo speed is unknown, defaulting to 1000 [ 352.838318][T13849] __nla_validate_parse: 13 callbacks suppressed [ 352.838333][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2007'. [ 352.883973][T13848] lo speed is unknown, defaulting to 1000 [ 352.898723][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2007'. [ 352.926099][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2007'. [ 352.953130][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2007'. [ 352.977279][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 353.001541][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2009'. [ 353.012905][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 353.022992][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 353.098245][T13841] lo speed is unknown, defaulting to 1000 [ 353.257107][T13848] lo speed is unknown, defaulting to 1000 [ 353.501918][T13865] lo speed is unknown, defaulting to 1000 [ 353.517781][T13865] lo speed is unknown, defaulting to 1000 [ 353.847778][T13873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2014'. [ 353.857029][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2014'. [ 354.629296][T13894] openvswitch: netlink: Missing key (keys=40, expected=80) [ 355.469342][T13917] lo speed is unknown, defaulting to 1000 [ 355.476729][T13917] lo speed is unknown, defaulting to 1000 [ 356.425463][T13940] openvswitch: netlink: Missing key (keys=40, expected=80) [ 356.937852][T13960] lo speed is unknown, defaulting to 1000 [ 356.960842][T13960] lo speed is unknown, defaulting to 1000 [ 357.651126][T13981] lo speed is unknown, defaulting to 1000 [ 357.751639][T13981] lo speed is unknown, defaulting to 1000 [ 358.875023][T14001] lo speed is unknown, defaulting to 1000 [ 358.882317][T14001] lo speed is unknown, defaulting to 1000 [ 358.976878][T14003] __nla_validate_parse: 10 callbacks suppressed [ 358.976892][T14003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2040'. [ 359.002201][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2040'. [ 359.013847][T14003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2040'. [ 359.022985][T14003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2040'. [ 359.202485][T14005] lo speed is unknown, defaulting to 1000 [ 359.209915][T14005] lo speed is unknown, defaulting to 1000 [ 359.290445][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2042'. [ 359.299643][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2042'. [ 359.327979][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2042'. [ 359.358211][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2042'. [ 360.488600][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 362.108816][T14097] syzkaller0: entered promiscuous mode [ 362.114359][T14097] syzkaller0: entered allmulticast mode [ 362.226852][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 362.418348][T14103] lo speed is unknown, defaulting to 1000 [ 362.438731][T14103] lo speed is unknown, defaulting to 1000 [ 363.328123][T14143] lo speed is unknown, defaulting to 1000 [ 363.335555][T14143] lo speed is unknown, defaulting to 1000 [ 364.150515][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 364.178064][T14160] lo speed is unknown, defaulting to 1000 [ 364.196890][T14160] lo speed is unknown, defaulting to 1000 [ 364.479907][T14167] lo speed is unknown, defaulting to 1000 [ 364.857619][T14167] lo speed is unknown, defaulting to 1000 [ 365.261174][T14171] lo speed is unknown, defaulting to 1000 [ 365.300908][T14171] lo speed is unknown, defaulting to 1000 [ 367.117820][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'. [ 367.749625][T14223] lo speed is unknown, defaulting to 1000 [ 367.763538][T14223] lo speed is unknown, defaulting to 1000 [ 367.796432][T14227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2086'. [ 367.814037][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2086'. [ 367.834046][T14227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2086'. [ 367.854908][T14227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2086'. [ 368.204090][T14232] lo speed is unknown, defaulting to 1000 [ 368.258107][T14239] lo speed is unknown, defaulting to 1000 [ 368.345621][T14232] lo speed is unknown, defaulting to 1000 [ 368.579469][T14251] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2092'. [ 368.666553][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 368.687528][T14251] openvswitch: netlink: Missing key (keys=40, expected=80) [ 368.952238][T14239] lo speed is unknown, defaulting to 1000 [ 369.344447][T14262] lo speed is unknown, defaulting to 1000 [ 369.418932][T14262] lo speed is unknown, defaulting to 1000 [ 370.200499][T14287] lo speed is unknown, defaulting to 1000 [ 370.236969][T14287] lo speed is unknown, defaulting to 1000 [ 370.309054][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 370.780247][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 371.394681][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 371.804730][T14335] lo speed is unknown, defaulting to 1000 [ 371.821662][T14335] lo speed is unknown, defaulting to 1000 [ 372.109169][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'. [ 372.377919][T14349] lo speed is unknown, defaulting to 1000 [ 372.390407][T14349] lo speed is unknown, defaulting to 1000 [ 372.927988][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 373.197791][T14373] lo speed is unknown, defaulting to 1000 [ 373.205109][T14373] lo speed is unknown, defaulting to 1000 [ 373.337602][T14379] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 373.356296][T14379] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2122'. [ 373.967875][T14388] lo speed is unknown, defaulting to 1000 [ 374.021541][T14388] lo speed is unknown, defaulting to 1000 [ 374.268857][T14396] syzkaller0: entered promiscuous mode [ 374.279291][T14396] syzkaller0: entered allmulticast mode [ 374.462400][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 375.212107][T14422] lo speed is unknown, defaulting to 1000 [ 375.219632][T14422] lo speed is unknown, defaulting to 1000 [ 375.373444][T14436] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 375.392957][T14436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2133'. [ 375.740062][T14446] lo speed is unknown, defaulting to 1000 [ 375.765610][T14446] lo speed is unknown, defaulting to 1000 [ 376.004185][T14456] syzkaller0: entered promiscuous mode [ 376.010974][T14456] syzkaller0: entered allmulticast mode [ 376.281999][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 376.302784][T14458] openvswitch: netlink: Missing key (keys=40, expected=80) [ 376.705879][T14480] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2140'. [ 376.812517][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 376.853064][T14480] openvswitch: netlink: Missing key (keys=40, expected=80) [ 376.881690][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 377.281374][T14497] lo speed is unknown, defaulting to 1000 [ 377.295095][T14497] lo speed is unknown, defaulting to 1000 [ 377.380393][T14500] lo speed is unknown, defaulting to 1000 [ 377.426233][T14506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2146'. [ 377.435196][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2146'. [ 377.452075][T14506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2146'. [ 377.461173][T14506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2146'. [ 377.542606][T14500] lo speed is unknown, defaulting to 1000 [ 377.779733][T14515] lo speed is unknown, defaulting to 1000 [ 377.787327][T14515] lo speed is unknown, defaulting to 1000 [ 377.871583][T14520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2148'. [ 378.371470][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.377900][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.389279][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 378.435560][T14538] syzkaller0: entered promiscuous mode [ 378.441254][T14538] syzkaller0: entered allmulticast mode [ 379.588194][T14571] syzkaller0: entered promiscuous mode [ 379.593902][T14571] syzkaller0: entered allmulticast mode [ 379.811744][T14576] lo speed is unknown, defaulting to 1000 [ 379.819448][T14576] lo speed is unknown, defaulting to 1000 [ 380.809688][T14622] syzkaller0: entered promiscuous mode [ 380.818012][T14622] syzkaller0: entered allmulticast mode [ 380.898080][T14624] lo speed is unknown, defaulting to 1000 [ 380.912535][T14624] lo speed is unknown, defaulting to 1000 [ 380.981996][T14629] __nla_validate_parse: 6 callbacks suppressed [ 380.982015][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 381.011683][T14630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2172'. [ 381.023636][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2172'. [ 381.033165][T14630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2172'. [ 381.042500][T14630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2172'. [ 381.149732][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 381.325295][T14636] lo speed is unknown, defaulting to 1000 [ 381.337501][T14636] lo speed is unknown, defaulting to 1000 [ 381.408825][T14639] lo speed is unknown, defaulting to 1000 [ 381.540173][T14639] lo speed is unknown, defaulting to 1000 [ 381.704129][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 381.916705][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 381.948434][T14656] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2181'. [ 382.109426][T14662] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 382.123989][T14662] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2182'. [ 382.329460][T14668] lo speed is unknown, defaulting to 1000 [ 382.338024][T14668] lo speed is unknown, defaulting to 1000 [ 382.691238][T14672] lo speed is unknown, defaulting to 1000 [ 382.861753][T14680] netlink: 'syz.4.2187': attribute type 1 has an invalid length. [ 382.876582][T14672] lo speed is unknown, defaulting to 1000 [ 383.164576][T14689] lo speed is unknown, defaulting to 1000 [ 383.457234][T14689] lo speed is unknown, defaulting to 1000 [ 383.645376][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 383.653517][ C0] lec:lec_tx_timeout: lec0 [ 383.987182][T14710] lo speed is unknown, defaulting to 1000 [ 383.994571][T14710] lo speed is unknown, defaulting to 1000 [ 384.010742][T14713] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 384.488971][T14722] netlink: 'syz.0.2196': attribute type 1 has an invalid length. [ 384.519460][T14723] openvswitch: netlink: Missing key (keys=40, expected=80) [ 385.162465][T14737] lo speed is unknown, defaulting to 1000 [ 385.203591][T14737] lo speed is unknown, defaulting to 1000 [ 385.714805][T14747] lo speed is unknown, defaulting to 1000 [ 385.797378][T14747] lo speed is unknown, defaulting to 1000 [ 386.014869][T14755] lo speed is unknown, defaulting to 1000 [ 386.354020][T14755] lo speed is unknown, defaulting to 1000 [ 386.736478][T14766] __nla_validate_parse: 25 callbacks suppressed [ 386.736497][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 386.768111][T14766] openvswitch: netlink: Missing key (keys=40, expected=80) [ 387.273678][T14773] lo speed is unknown, defaulting to 1000 [ 387.335744][T14773] lo speed is unknown, defaulting to 1000 [ 387.616947][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 388.613641][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 388.637753][T14811] openvswitch: netlink: Missing key (keys=40, expected=80) [ 388.659852][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 388.824828][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2219'. [ 388.949779][T14826] lo speed is unknown, defaulting to 1000 [ 388.961580][T14826] lo speed is unknown, defaulting to 1000 [ 389.009859][T14828] lo speed is unknown, defaulting to 1000 [ 389.027529][T14819] lo speed is unknown, defaulting to 1000 [ 389.059173][T14835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2221'. [ 389.078232][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2221'. [ 389.097606][T14835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2221'. [ 389.123753][T14835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2221'. [ 389.265964][T14828] lo speed is unknown, defaulting to 1000 [ 389.430250][T14819] lo speed is unknown, defaulting to 1000 [ 390.571588][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 391.278256][T14901] lo speed is unknown, defaulting to 1000 [ 391.287943][T14901] lo speed is unknown, defaulting to 1000 [ 391.793033][T14909] lo speed is unknown, defaulting to 1000 [ 391.909887][T14909] lo speed is unknown, defaulting to 1000 [ 392.070840][T14919] lo speed is unknown, defaulting to 1000 [ 392.216184][T14926] __nla_validate_parse: 1 callbacks suppressed [ 392.216202][T14926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2240'. [ 392.248737][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2240'. [ 392.263660][T14926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2240'. [ 392.288134][T14926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2240'. [ 392.346890][T14919] lo speed is unknown, defaulting to 1000 [ 392.352825][T14923] lo speed is unknown, defaulting to 1000 [ 392.378903][T14921] lo speed is unknown, defaulting to 1000 [ 392.589807][T14923] lo speed is unknown, defaulting to 1000 [ 392.697696][T14937] lo speed is unknown, defaulting to 1000 [ 393.004635][T14921] lo speed is unknown, defaulting to 1000 [ 393.208038][T14937] lo speed is unknown, defaulting to 1000 [ 394.411334][T14956] syzkaller0: entered promiscuous mode [ 394.437456][T14956] syzkaller0: entered allmulticast mode [ 394.835856][T14979] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 394.843626][T14979] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2253'. [ 395.148681][T14987] lo speed is unknown, defaulting to 1000 [ 395.156932][T14987] lo speed is unknown, defaulting to 1000 [ 395.446715][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 395.477326][T14990] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2256'. [ 395.494680][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 395.503647][T14990] openvswitch: netlink: Missing key (keys=40, expected=80) [ 395.835290][T15002] lo speed is unknown, defaulting to 1000 [ 395.858734][T15002] lo speed is unknown, defaulting to 1000 [ 396.052539][T15006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2260'. [ 396.061964][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 396.181996][T15008] syzkaller0: entered promiscuous mode [ 396.195429][T15008] syzkaller0: entered allmulticast mode [ 396.335825][T15004] lo speed is unknown, defaulting to 1000 [ 396.396432][T15004] lo speed is unknown, defaulting to 1000 [ 399.299211][T15065] __nla_validate_parse: 2 callbacks suppressed [ 399.299231][T15065] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2272'. [ 399.565447][T15077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2274'. [ 399.598108][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2274'. [ 399.617558][T15071] lo speed is unknown, defaulting to 1000 [ 399.644939][T15077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2274'. [ 399.653475][T15071] lo speed is unknown, defaulting to 1000 [ 399.657863][T15077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2274'. [ 399.689046][T15081] syzkaller0: entered promiscuous mode [ 399.694642][T15081] syzkaller0: entered allmulticast mode [ 400.900297][T15105] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 400.908168][T15105] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2285'. [ 401.263805][T15110] syzkaller0: entered promiscuous mode [ 401.270638][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2288'. [ 401.284793][T15110] syzkaller0: entered allmulticast mode [ 401.611592][T15126] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2291'. [ 401.654794][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 401.664201][T15126] openvswitch: netlink: Missing key (keys=40, expected=80) [ 401.688527][T15128] lo speed is unknown, defaulting to 1000 [ 401.712137][T15128] lo speed is unknown, defaulting to 1000 [ 401.951878][T15134] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 401.980783][T15134] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2293'. [ 402.950429][T15165] syzkaller0: entered promiscuous mode [ 402.955995][T15165] syzkaller0: entered allmulticast mode [ 404.297301][T15200] lo speed is unknown, defaulting to 1000 [ 404.311131][T15200] lo speed is unknown, defaulting to 1000 [ 404.430905][T15203] __nla_validate_parse: 1 callbacks suppressed [ 404.430924][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 404.603569][T15205] lo speed is unknown, defaulting to 1000 [ 404.628497][T15209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2313'. [ 404.657666][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2313'. [ 404.679894][T15205] lo speed is unknown, defaulting to 1000 [ 404.692879][T15209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2313'. [ 404.710831][T15209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2313'. [ 405.472695][T15224] lo speed is unknown, defaulting to 1000 [ 405.497498][T15224] lo speed is unknown, defaulting to 1000 [ 405.554169][T15231] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 405.600730][T15231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2319'. [ 407.263390][T15264] netlink: 'syz.4.2325': attribute type 1 has an invalid length. [ 407.273123][T15264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2325'. [ 407.397297][T15260] lo speed is unknown, defaulting to 1000 [ 407.406422][T15260] lo speed is unknown, defaulting to 1000 [ 407.457905][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2323'. [ 407.575435][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2323'. [ 407.604973][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2323'. [ 408.050380][T15272] lo speed is unknown, defaulting to 1000 [ 408.057050][ T6263] lec:lec_start_xmit: lec0:No lecd attached [ 408.137216][T15272] lo speed is unknown, defaulting to 1000 [ 408.759366][T15283] lo speed is unknown, defaulting to 1000 [ 408.836264][T15283] lo speed is unknown, defaulting to 1000 [ 410.637485][T15319] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 410.645284][T15319] __nla_validate_parse: 9 callbacks suppressed [ 410.680485][T15319] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2335'. [ 411.694722][T15344] lo speed is unknown, defaulting to 1000 [ 411.703948][T15344] lo speed is unknown, defaulting to 1000 [ 411.756276][T15348] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2341'. [ 411.765466][T15348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2341'. [ 411.774437][T15348] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2341'. [ 411.784168][T15348] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2341'. [ 411.813452][T15346] lo speed is unknown, defaulting to 1000 [ 411.833466][T15353] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2340'. [ 411.846297][T15352] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2342'. [ 411.879724][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2340'. [ 411.931828][T15353] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2340'. [ 411.980103][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 412.001899][T15359] openvswitch: netlink: Missing key (keys=40, expected=80) [ 412.074722][T15346] lo speed is unknown, defaulting to 1000 [ 412.347902][T15361] lo speed is unknown, defaulting to 1000 [ 412.378942][T15361] lo speed is unknown, defaulting to 1000 [ 413.645739][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 413.653790][ C0] lec:lec_tx_timeout: lec0 [ 414.169114][T15374] lo speed is unknown, defaulting to 1000 [ 414.180092][T15374] lo speed is unknown, defaulting to 1000 [ 414.591658][T15388] lo speed is unknown, defaulting to 1000 [ 414.601953][T15388] lo speed is unknown, defaulting to 1000 [ 415.632641][T15421] netlink: 'syz.1.2356': attribute type 1 has an invalid length. [ 415.662146][T15421] __nla_validate_parse: 2 callbacks suppressed [ 415.662165][T15421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2356'. [ 416.159681][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 416.681372][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 416.819987][T15445] lo speed is unknown, defaulting to 1000 [ 416.836662][T15445] lo speed is unknown, defaulting to 1000 [ 417.040133][T15449] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 417.069418][T15449] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2362'. [ 417.176490][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 417.463141][T15461] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 417.478054][T15461] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2365'. [ 417.825558][T15468] lo speed is unknown, defaulting to 1000 [ 417.833115][T15468] lo speed is unknown, defaulting to 1000 [ 418.119656][T15475] netlink: 'syz.0.2368': attribute type 1 has an invalid length. [ 418.149258][T15475] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2368'. [ 418.169544][T15478] lo speed is unknown, defaulting to 1000 [ 418.256613][T15478] lo speed is unknown, defaulting to 1000 [ 418.627356][T15492] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 418.635160][T15492] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2371'. [ 418.720324][T15490] lo speed is unknown, defaulting to 1000 [ 418.752529][T15490] lo speed is unknown, defaulting to 1000 [ 419.517348][T15503] lo speed is unknown, defaulting to 1000 [ 419.574475][T15503] lo speed is unknown, defaulting to 1000 [ 419.576492][T15504] lo speed is unknown, defaulting to 1000 [ 419.621121][T15507] lo speed is unknown, defaulting to 1000 [ 419.896018][T15511] lo speed is unknown, defaulting to 1000 [ 419.960628][T15504] lo speed is unknown, defaulting to 1000 [ 420.204817][T15507] lo speed is unknown, defaulting to 1000 [ 420.430478][T15511] lo speed is unknown, defaulting to 1000 [ 421.492592][T15530] tipc: Enabling of bearer rejected, failed to enable media [ 421.818940][T15548] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2381'. [ 421.907868][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 421.919061][T15552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2380'. [ 421.963659][T15548] openvswitch: netlink: Missing key (keys=40, expected=80) [ 421.974836][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2380'. [ 421.987806][T15552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2380'. [ 422.024788][T15552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2380'. [ 422.057801][T15541] lo speed is unknown, defaulting to 1000 [ 422.065127][T15541] lo speed is unknown, defaulting to 1000 [ 422.141979][T15555] lo speed is unknown, defaulting to 1000 [ 422.219684][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2382'. [ 422.234338][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2382'. [ 422.243522][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2382'. [ 422.273186][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2382'. [ 422.297979][T15561] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 422.496418][T15555] lo speed is unknown, defaulting to 1000 [ 423.682470][T15599] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 423.813818][T15602] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 423.872073][T15607] lo speed is unknown, defaulting to 1000 [ 423.888090][T15607] lo speed is unknown, defaulting to 1000 [ 424.202588][T15615] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 424.351430][T15617] lo speed is unknown, defaulting to 1000 [ 424.424225][T15617] lo speed is unknown, defaulting to 1000 [ 425.184944][T15644] lo speed is unknown, defaulting to 1000 [ 425.203061][T15644] lo speed is unknown, defaulting to 1000 [ 425.478229][T15650] netlink: 'syz.2.2402': attribute type 1 has an invalid length. [ 426.204368][T15677] lo speed is unknown, defaulting to 1000 [ 426.253680][T15677] lo speed is unknown, defaulting to 1000 [ 427.040694][T15687] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 427.085654][T15687] __nla_validate_parse: 7 callbacks suppressed [ 427.085672][T15687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2408'. [ 427.620459][T15711] lo speed is unknown, defaulting to 1000 [ 427.644793][T15711] lo speed is unknown, defaulting to 1000 [ 427.991791][T15715] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 428.035428][T15715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2413'. [ 428.594304][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 429.202350][T15749] lo speed is unknown, defaulting to 1000 [ 429.209745][T15749] lo speed is unknown, defaulting to 1000 [ 429.401973][T15753] netlink: 'syz.3.2420': attribute type 1 has an invalid length. [ 429.435836][T15753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2420'. [ 429.514002][T15759] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 429.566593][T15759] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2423'. [ 430.026712][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 430.152888][T15772] lo speed is unknown, defaulting to 1000 [ 430.214355][T15772] lo speed is unknown, defaulting to 1000 [ 430.643354][T15780] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2427'. [ 430.686799][T15781] lo speed is unknown, defaulting to 1000 [ 430.701422][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 430.726917][T15780] openvswitch: netlink: Missing key (keys=40, expected=80) [ 430.795638][T15785] lo speed is unknown, defaulting to 1000 [ 430.869146][T15781] lo speed is unknown, defaulting to 1000 [ 431.178620][T15791] lo speed is unknown, defaulting to 1000 [ 431.246323][T15785] lo speed is unknown, defaulting to 1000 [ 431.690483][T15791] lo speed is unknown, defaulting to 1000 [ 431.696776][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 431.928686][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'. [ 433.325141][T15834] lo speed is unknown, defaulting to 1000 [ 433.352242][T15834] lo speed is unknown, defaulting to 1000 [ 433.980035][T15848] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 434.044913][T15848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2441'. [ 434.100976][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 434.129550][T15845] lo speed is unknown, defaulting to 1000 [ 434.187005][T15845] lo speed is unknown, defaulting to 1000 [ 434.276021][T15851] lo speed is unknown, defaulting to 1000 [ 434.679963][T15851] lo speed is unknown, defaulting to 1000 [ 435.019375][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 436.191789][T15895] lo speed is unknown, defaulting to 1000 [ 436.199849][T15895] lo speed is unknown, defaulting to 1000 [ 436.570295][T15909] lo speed is unknown, defaulting to 1000 [ 436.586801][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 436.614203][T15909] lo speed is unknown, defaulting to 1000 [ 436.624899][T15914] lo speed is unknown, defaulting to 1000 [ 436.902241][T15914] lo speed is unknown, defaulting to 1000 [ 437.002775][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2454'. [ 437.497901][T15938] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 437.505933][T15938] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2456'. [ 437.535050][T15939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2455'. [ 437.547566][T15939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'. [ 437.564064][T15939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2455'. [ 437.582467][T15939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2455'. [ 437.684058][T15936] lo speed is unknown, defaulting to 1000 [ 437.694577][T15936] lo speed is unknown, defaulting to 1000 [ 438.447860][T15953] lo speed is unknown, defaulting to 1000 [ 438.477265][T15953] lo speed is unknown, defaulting to 1000 [ 438.795119][T15964] lo speed is unknown, defaulting to 1000 [ 438.822069][T15964] lo speed is unknown, defaulting to 1000 [ 438.858577][T15966] lo speed is unknown, defaulting to 1000 [ 439.020218][T15973] netlink: 'syz.3.2464': attribute type 1 has an invalid length. [ 439.045676][T15973] __nla_validate_parse: 4 callbacks suppressed [ 439.045716][T15973] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2464'. [ 439.081842][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 439.248083][T15966] lo speed is unknown, defaulting to 1000 [ 439.399834][T15980] netlink: 'syz.1.2466': attribute type 1 has an invalid length. [ 439.419450][T15980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2466'. [ 439.817575][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.824012][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.836735][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 440.014286][T15997] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 440.035395][T15997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2468'. [ 440.194496][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 440.398156][T16006] lo speed is unknown, defaulting to 1000 [ 440.419523][T16006] lo speed is unknown, defaulting to 1000 [ 440.834305][T16014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2471'. [ 440.865696][T16014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2471'. [ 440.890318][T16014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2471'. [ 440.905461][T16014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2471'. [ 440.994443][T16013] lo speed is unknown, defaulting to 1000 [ 441.085117][T16013] lo speed is unknown, defaulting to 1000 [ 441.397650][T16019] lo speed is unknown, defaulting to 1000 [ 441.526313][T16027] lo speed is unknown, defaulting to 1000 [ 441.557379][T16023] lo speed is unknown, defaulting to 1000 [ 441.565139][T16019] lo speed is unknown, defaulting to 1000 [ 441.807874][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 441.918220][T16027] lo speed is unknown, defaulting to 1000 [ 442.121636][T16023] lo speed is unknown, defaulting to 1000 [ 442.286825][T16044] lo speed is unknown, defaulting to 1000 [ 442.305568][T16044] lo speed is unknown, defaulting to 1000 [ 443.113688][T16063] lo speed is unknown, defaulting to 1000 [ 443.126580][T16063] lo speed is unknown, defaulting to 1000 [ 444.231774][T16080] lo speed is unknown, defaulting to 1000 [ 444.333932][T16080] lo speed is unknown, defaulting to 1000 [ 444.449127][T16090] __nla_validate_parse: 5 callbacks suppressed [ 444.449146][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 444.504446][T16093] lo speed is unknown, defaulting to 1000 [ 444.845324][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.853381][ C0] lec:lec_tx_timeout: lec0 [ 444.970410][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 446.374017][T16093] lo speed is unknown, defaulting to 1000 [ 446.815190][T16112] lo speed is unknown, defaulting to 1000 [ 446.844909][T16112] lo speed is unknown, defaulting to 1000 [ 447.024672][T16130] netlink: 'syz.4.2493': attribute type 1 has an invalid length. [ 447.045890][T16130] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2493'. [ 448.139171][T16147] lo speed is unknown, defaulting to 1000 [ 448.149995][T16145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2495'. [ 448.164277][T16145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2495'. [ 448.177691][T16145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2495'. [ 448.188963][T16145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2495'. [ 448.219032][T16147] lo speed is unknown, defaulting to 1000 [ 448.455845][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 448.813959][T16161] lo speed is unknown, defaulting to 1000 [ 448.925016][T16161] lo speed is unknown, defaulting to 1000 [ 449.208466][T16183] netlink: 'syz.0.2502': attribute type 1 has an invalid length. [ 449.217439][T16183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2502'. [ 449.472557][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 449.831181][T16205] netlink: 'syz.1.2505': attribute type 1 has an invalid length. [ 449.839735][T16205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2505'. [ 450.046564][ C1] ================================================================== [ 450.054676][ C1] BUG: KASAN: slab-use-after-free in timer_is_static_object+0x35/0x80 [ 450.062862][ C1] Read of size 8 at addr ffff88802fbc1898 by task syz.1.2505/16213 [ 450.070766][ C1] [ 450.073123][ C1] CPU: 1 UID: 0 PID: 16213 Comm: syz.1.2505 Not tainted syzkaller #0 PREEMPT(full) [ 450.073143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 450.073161][ C1] Call Trace: [ 450.073169][ C1] [ 450.073176][ C1] dump_stack_lvl+0xe8/0x150 [ 450.073200][ C1] print_report+0xba/0x230 [ 450.073217][ C1] ? timer_is_static_object+0x35/0x80 [ 450.073241][ C1] kasan_report+0x117/0x150 [ 450.073262][ C1] ? timer_is_static_object+0x35/0x80 [ 450.073288][ C1] timer_is_static_object+0x35/0x80 [ 450.073312][ C1] debug_object_activate+0x141/0x580 [ 450.073335][ C1] __mod_timer+0xa4f/0xf30 [ 450.073356][ C1] ? __msecs_to_jiffies+0x1e/0x50 [ 450.073378][ C1] ? rose_t0timer_expiry+0x3ba/0x560 [ 450.073404][ C1] call_timer_fn+0x192/0x5a0 [ 450.073427][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 450.073448][ C1] ? call_timer_fn+0xd4/0x5a0 [ 450.073471][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 450.073499][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.073518][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 450.073540][ C1] __run_timer_base+0x652/0x8b0 [ 450.073561][ C1] ? ktime_get+0x45/0x200 [ 450.073585][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 450.073609][ C1] ? sched_clock_cpu+0x74/0x440 [ 450.073635][ C1] run_timer_softirq+0xb7/0x170 [ 450.073658][ C1] handle_softirqs+0x22a/0x7c0 [ 450.073674][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 450.073692][ C1] __irq_exit_rcu+0x5f/0x150 [ 450.073706][ C1] irq_exit_rcu+0x9/0x30 [ 450.073719][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 450.073741][ C1] [ 450.073746][ C1] [ 450.073752][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.073774][ C1] RIP: 0010:kernel_text_address+0x3d/0xe0 [ 450.073796][ C1] Code: 81 ff c8 f3 9b 8b 0f 92 c1 bd 01 00 00 00 84 c8 75 0c 48 89 fb e8 e3 f5 a4 ff 85 c0 74 0c 89 e8 5b 41 5e 5d e9 44 71 0c 0a cc <48> c7 c0 80 09 ef 8f 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f [ 450.073810][ C1] RSP: 0018:ffffc9000bdb7158 EFLAGS: 00000246 [ 450.073832][ C1] RAX: 0000000000000000 RBX: 00007f87d8d9aeb9 RCX: ffff88802529bd00 [ 450.073844][ C1] RDX: 0000000000000002 RSI: 00007f87d8d9a000 RDI: ffffffffff600000 [ 450.073856][ C1] RBP: 0000000000000001 R08: 0000000000000022 R09: ffffffff8e55a360 [ 450.073866][ C1] R10: ffffc9000bdb71f8 R11: ffffffff81af9170 R12: ffff88802529bd00 [ 450.073878][ C1] R13: 1ffff11004a5385a R14: dffffc0000000000 R15: 1ffff920017b6e3e [ 450.073893][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.073915][ C1] ? 0xffffffffff600000 [ 450.073934][ C1] ? kernel_text_address+0x2d/0xe0 [ 450.073954][ C1] __kernel_text_address+0xd/0x30 [ 450.073973][ C1] unwind_get_return_address+0x4d/0x90 [ 450.073997][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.074018][ C1] arch_stack_walk+0xfb/0x150 [ 450.074040][ C1] stack_trace_save+0xa9/0x100 [ 450.074060][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 450.074084][ C1] save_stack+0x122/0x230 [ 450.074109][ C1] ? __pfx_save_stack+0x10/0x10 [ 450.074131][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 450.074152][ C1] ? post_alloc_hook+0x228/0x280 [ 450.074166][ C1] ? get_page_from_freelist+0x24dc/0x2580 [ 450.074183][ C1] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 450.074200][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 450.074217][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 450.074234][ C1] ? shmem_alloc_and_add_folio+0x445/0xf80 [ 450.074260][ C1] ? shmem_get_folio_gfp+0x5a9/0x1670 [ 450.074281][ C1] ? shmem_write_begin+0x16c/0x330 [ 450.074302][ C1] ? generic_perform_write+0x2e2/0x8f0 [ 450.074321][ C1] ? shmem_file_write_iter+0xf8/0x120 [ 450.074344][ C1] ? vfs_write+0x61d/0xb90 [ 450.074365][ C1] ? ksys_write+0x150/0x270 [ 450.074386][ C1] ? do_syscall_64+0xe2/0xf80 [ 450.074407][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.074428][ C1] __set_page_owner+0x8d/0x4c0 [ 450.074453][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 450.074477][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 450.074499][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.074520][ C1] ? bad_range+0x8b/0x2c0 [ 450.074543][ C1] post_alloc_hook+0x228/0x280 [ 450.074560][ C1] get_page_from_freelist+0x24dc/0x2580 [ 450.074583][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 450.074608][ C1] ? prepare_alloc_pages+0x22a/0x650 [ 450.074628][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 450.074648][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 450.074668][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 450.074689][ C1] alloc_pages_mpol+0x232/0x4a0 [ 450.074709][ C1] folio_alloc_mpol_noprof+0x39/0x70 [ 450.074728][ C1] shmem_alloc_and_add_folio+0x445/0xf80 [ 450.074754][ C1] ? filemap_get_entry+0xca/0x320 [ 450.074769][ C1] ? filemap_get_entry+0xca/0x320 [ 450.074784][ C1] ? filemap_get_entry+0x2ac/0x320 [ 450.074799][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 450.074815][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 450.074841][ C1] ? shmem_allowable_huge_orders+0x309/0x690 [ 450.074866][ C1] shmem_get_folio_gfp+0x5a9/0x1670 [ 450.074896][ C1] shmem_write_begin+0x16c/0x330 [ 450.074922][ C1] generic_perform_write+0x2e2/0x8f0 [ 450.074947][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 450.074966][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 450.074984][ C1] ? mnt_put_write_access_file+0xc0/0x100 [ 450.075013][ C1] ? file_update_time_flags+0x439/0x4d0 [ 450.075036][ C1] shmem_file_write_iter+0xf8/0x120 [ 450.075061][ C1] vfs_write+0x61d/0xb90 [ 450.075088][ C1] ? __pfx_vfs_write+0x10/0x10 [ 450.075115][ C1] ? __fget_files+0x2a/0x420 [ 450.075136][ C1] ksys_write+0x150/0x270 [ 450.075159][ C1] ? __pfx_ksys_write+0x10/0x10 [ 450.075187][ C1] do_syscall_64+0xe2/0xf80 [ 450.075208][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.075224][ C1] ? trace_irq_disable+0x37/0x100 [ 450.075241][ C1] ? clear_bhb_loop+0x60/0xb0 [ 450.075260][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.075275][ C1] RIP: 0033:0x7f87d8d9aeb9 [ 450.075290][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.075308][ C1] RSP: 002b:00007f87d6ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.075324][ C1] RAX: ffffffffffffffda RBX: 00007f87d9016180 RCX: 00007f87d8d9aeb9 [ 450.075336][ C1] RDX: 0000000000806000 RSI: 0000200000000200 RDI: 0000000000000007 [ 450.075347][ C1] RBP: 00007f87d8e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 450.075357][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.075366][ C1] R13: 00007f87d9016218 R14: 00007f87d9016180 R15: 00007ffd925e0278 [ 450.075386][ C1] [ 450.075392][ C1] [ 450.728583][ C1] Allocated by task 11217: [ 450.733009][ C1] kasan_save_track+0x3e/0x80 [ 450.737704][ C1] __kasan_kmalloc+0x93/0xb0 [ 450.742312][ C1] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 450.747700][ C1] rose_add_node+0x23c/0xf00 [ 450.752310][ C1] rose_rt_ioctl+0xd35/0x12a0 [ 450.756995][ C1] rose_ioctl+0x3fb/0x8f0 [ 450.761339][ C1] sock_do_ioctl+0x101/0x320 [ 450.765940][ C1] sock_ioctl+0x5c6/0x7f0 [ 450.770284][ C1] __se_sys_ioctl+0xfc/0x170 [ 450.774895][ C1] do_syscall_64+0xe2/0xf80 [ 450.779410][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.785313][ C1] [ 450.787650][ C1] Freed by task 16217: [ 450.791721][ C1] kasan_save_track+0x3e/0x80 [ 450.796403][ C1] kasan_save_free_info+0x46/0x50 [ 450.801444][ C1] __kasan_slab_free+0x5c/0x80 [ 450.806299][ C1] kfree+0x1be/0x650 [ 450.810213][ C1] rose_timer_expiry+0x4cb/0x600 [ 450.815158][ C1] call_timer_fn+0x192/0x5a0 [ 450.820208][ C1] __run_timer_base+0x652/0x8b0 [ 450.825097][ C1] run_timer_softirq+0xb7/0x170 [ 450.829960][ C1] handle_softirqs+0x22a/0x7c0 [ 450.834729][ C1] __irq_exit_rcu+0x5f/0x150 [ 450.839340][ C1] irq_exit_rcu+0x9/0x30 [ 450.843599][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 450.849244][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.855241][ C1] [ 450.857569][ C1] The buggy address belongs to the object at ffff88802fbc1800 [ 450.857569][ C1] which belongs to the cache kmalloc-512 of size 512 [ 450.871635][ C1] The buggy address is located 152 bytes inside of [ 450.871635][ C1] freed 512-byte region [ffff88802fbc1800, ffff88802fbc1a00) [ 450.885456][ C1] [ 450.887794][ C1] The buggy address belongs to the physical page: [ 450.894227][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fbc2000 pfn:0x2fbc0 [ 450.904296][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 450.912896][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 450.921428][ C1] page_type: f5(slab) [ 450.925422][ C1] raw: 00fff00000000240 ffff88813fe26c80 ffffea00015ac910 ffffea0001aeee10 [ 450.934019][ C1] raw: ffff88802fbc2000 0000000000100001 00000000f5000000 0000000000000000 [ 450.942616][ C1] head: 00fff00000000240 ffff88813fe26c80 ffffea00015ac910 ffffea0001aeee10 [ 450.951296][ C1] head: ffff88802fbc2000 0000000000100001 00000000f5000000 0000000000000000 [ 450.959978][ C1] head: 00fff00000000002 ffffea0000bef001 00000000ffffffff 00000000ffffffff [ 450.968665][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 450.977339][ C1] page dumped because: kasan: bad access detected [ 450.983765][ C1] page_owner tracks the page as allocated [ 450.989485][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11187, tgid 11184 (syz.0.1386), ts 255154690535, free_ts 236631092185 [ 451.011035][ C1] post_alloc_hook+0x228/0x280 [ 451.015818][ C1] get_page_from_freelist+0x24dc/0x2580 [ 451.021379][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 451.027197][ C1] alloc_pages_mpol+0x232/0x4a0 [ 451.032062][ C1] allocate_slab+0x86/0x3a0 [ 451.036598][ C1] ___slab_alloc+0xd82/0x1760 [ 451.041285][ C1] __slab_alloc+0x65/0x100 [ 451.045713][ C1] __kmalloc_noprof+0x46c/0x7e0 [ 451.050574][ C1] copy_splice_read+0x16f/0xaa0 [ 451.055442][ C1] splice_direct_to_actor+0x4a0/0xc70 [ 451.060830][ C1] do_splice_direct+0x195/0x290 [ 451.065690][ C1] do_sendfile+0x535/0x7d0 [ 451.070117][ C1] __se_sys_sendfile64+0x144/0x1a0 [ 451.075263][ C1] do_syscall_64+0xe2/0xf80 [ 451.079783][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.085729][ C1] page last free pid 10742 tgid 10742 stack trace: [ 451.092241][ C1] __free_frozen_pages+0xbf8/0xd70 [ 451.097367][ C1] __put_partials+0x146/0x170 [ 451.102059][ C1] __slab_free+0x294/0x320 [ 451.106489][ C1] qlist_free_all+0x97/0x100 [ 451.111097][ C1] kasan_quarantine_reduce+0x148/0x160 [ 451.116580][ C1] __kasan_slab_alloc+0x22/0x80 [ 451.121437][ C1] kmem_cache_alloc_noprof+0x370/0x6e0 [ 451.126909][ C1] vm_area_dup+0x2b/0x680 [ 451.131244][ C1] __split_vma+0x1d5/0xa50 [ 451.135670][ C1] vma_modify+0x941/0x2010 [ 451.140089][ C1] vma_modify_flags+0x24b/0x330 [ 451.144953][ C1] mprotect_fixup+0x46a/0xa50 [ 451.149641][ C1] do_mprotect_pkey+0x8ab/0xcd0 [ 451.154514][ C1] __x64_sys_mprotect+0x80/0x90 [ 451.159374][ C1] do_syscall_64+0xe2/0xf80 [ 451.163894][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.169843][ C1] [ 451.172168][ C1] Memory state around the buggy address: [ 451.177802][ C1] ffff88802fbc1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.185896][ C1] ffff88802fbc1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.193983][ C1] >ffff88802fbc1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.202049][ C1] ^ [ 451.206899][ C1] ffff88802fbc1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.214974][ C1] ffff88802fbc1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.223032][ C1] ================================================================== [ 451.231109][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 451.238401][ C1] CPU: 1 UID: 0 PID: 16213 Comm: syz.1.2505 Not tainted syzkaller #0 PREEMPT(full) [ 451.247777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 451.257848][ C1] Call Trace: [ 451.261142][ C1] [ 451.263996][ C1] vpanic+0x1e0/0x670 [ 451.268002][ C1] panic+0xc5/0xd0 [ 451.271741][ C1] ? __pfx_panic+0x10/0x10 [ 451.276179][ C1] ? timer_is_static_object+0x35/0x80 [ 451.281568][ C1] ? rcu_is_watching+0x15/0xb0 [ 451.286345][ C1] ? timer_is_static_object+0x35/0x80 [ 451.291755][ C1] ? timer_is_static_object+0x35/0x80 [ 451.297150][ C1] check_panic_on_warn+0x89/0xb0 [ 451.302101][ C1] ? timer_is_static_object+0x35/0x80 [ 451.307505][ C1] end_report+0x6f/0x140 [ 451.311776][ C1] kasan_report+0x128/0x150 [ 451.316294][ C1] ? timer_is_static_object+0x35/0x80 [ 451.321688][ C1] timer_is_static_object+0x35/0x80 [ 451.326924][ C1] debug_object_activate+0x141/0x580 [ 451.332227][ C1] __mod_timer+0xa4f/0xf30 [ 451.336659][ C1] ? __msecs_to_jiffies+0x1e/0x50 [ 451.341700][ C1] ? rose_t0timer_expiry+0x3ba/0x560 [ 451.347001][ C1] call_timer_fn+0x192/0x5a0 [ 451.351609][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 451.357261][ C1] ? call_timer_fn+0xd4/0x5a0 [ 451.361984][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 451.367118][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.372337][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 451.377986][ C1] __run_timer_base+0x652/0x8b0 [ 451.382863][ C1] ? ktime_get+0x45/0x200 [ 451.387215][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 451.392612][ C1] ? sched_clock_cpu+0x74/0x440 [ 451.397499][ C1] run_timer_softirq+0xb7/0x170 [ 451.402370][ C1] handle_softirqs+0x22a/0x7c0 [ 451.407152][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 451.411941][ C1] __irq_exit_rcu+0x5f/0x150 [ 451.416545][ C1] irq_exit_rcu+0x9/0x30 [ 451.420799][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 451.426453][ C1] [ 451.429391][ C1] [ 451.432328][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.438313][ C1] RIP: 0010:kernel_text_address+0x3d/0xe0 [ 451.444049][ C1] Code: 81 ff c8 f3 9b 8b 0f 92 c1 bd 01 00 00 00 84 c8 75 0c 48 89 fb e8 e3 f5 a4 ff 85 c0 74 0c 89 e8 5b 41 5e 5d e9 44 71 0c 0a cc <48> c7 c0 80 09 ef 8f 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f [ 451.463668][ C1] RSP: 0018:ffffc9000bdb7158 EFLAGS: 00000246 [ 451.469744][ C1] RAX: 0000000000000000 RBX: 00007f87d8d9aeb9 RCX: ffff88802529bd00 [ 451.477719][ C1] RDX: 0000000000000002 RSI: 00007f87d8d9a000 RDI: ffffffffff600000 [ 451.485702][ C1] RBP: 0000000000000001 R08: 0000000000000022 R09: ffffffff8e55a360 [ 451.493696][ C1] R10: ffffc9000bdb71f8 R11: ffffffff81af9170 R12: ffff88802529bd00 [ 451.501677][ C1] R13: 1ffff11004a5385a R14: dffffc0000000000 R15: 1ffff920017b6e3e [ 451.509669][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.515847][ C1] ? 0xffffffffff600000 [ 451.520032][ C1] ? kernel_text_address+0x2d/0xe0 [ 451.525172][ C1] __kernel_text_address+0xd/0x30 [ 451.530222][ C1] unwind_get_return_address+0x4d/0x90 [ 451.535695][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.541869][ C1] arch_stack_walk+0xfb/0x150 [ 451.546568][ C1] stack_trace_save+0xa9/0x100 [ 451.551348][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 451.556742][ C1] save_stack+0x122/0x230 [ 451.561098][ C1] ? __pfx_save_stack+0x10/0x10 [ 451.565968][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 451.570932][ C1] ? post_alloc_hook+0x228/0x280 [ 451.575897][ C1] ? get_page_from_freelist+0x24dc/0x2580 [ 451.581625][ C1] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 451.587615][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 451.592657][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 451.598130][ C1] ? shmem_alloc_and_add_folio+0x445/0xf80 [ 451.603960][ C1] ? shmem_get_folio_gfp+0x5a9/0x1670 [ 451.609354][ C1] ? shmem_write_begin+0x16c/0x330 [ 451.614491][ C1] ? generic_perform_write+0x2e2/0x8f0 [ 451.619969][ C1] ? shmem_file_write_iter+0xf8/0x120 [ 451.625363][ C1] ? vfs_write+0x61d/0xb90 [ 451.629797][ C1] ? ksys_write+0x150/0x270 [ 451.634323][ C1] ? do_syscall_64+0xe2/0xf80 [ 451.639031][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.645135][ C1] __set_page_owner+0x8d/0x4c0 [ 451.649932][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 451.655334][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 451.661441][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 451.666665][ C1] ? bad_range+0x8b/0x2c0 [ 451.671021][ C1] post_alloc_hook+0x228/0x280 [ 451.675804][ C1] get_page_from_freelist+0x24dc/0x2580 [ 451.681370][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 451.686501][ C1] ? prepare_alloc_pages+0x22a/0x650 [ 451.691814][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 451.697639][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.703982][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 451.709288][ C1] alloc_pages_mpol+0x232/0x4a0 [ 451.714163][ C1] folio_alloc_mpol_noprof+0x39/0x70 [ 451.719463][ C1] shmem_alloc_and_add_folio+0x445/0xf80 [ 451.725127][ C1] ? filemap_get_entry+0xca/0x320 [ 451.730164][ C1] ? filemap_get_entry+0xca/0x320 [ 451.735201][ C1] ? filemap_get_entry+0x2ac/0x320 [ 451.740328][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 451.745800][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 451.751973][ C1] ? shmem_allowable_huge_orders+0x309/0x690 [ 451.757993][ C1] shmem_get_folio_gfp+0x5a9/0x1670 [ 451.763221][ C1] shmem_write_begin+0x16c/0x330 [ 451.768185][ C1] generic_perform_write+0x2e2/0x8f0 [ 451.773491][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 451.779338][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 451.784465][ C1] ? mnt_put_write_access_file+0xc0/0x100 [ 451.790215][ C1] ? file_update_time_flags+0x439/0x4d0 [ 451.795782][ C1] shmem_file_write_iter+0xf8/0x120 [ 451.800997][ C1] vfs_write+0x61d/0xb90 [ 451.805263][ C1] ? __pfx_vfs_write+0x10/0x10 [ 451.810061][ C1] ? __fget_files+0x2a/0x420 [ 451.814671][ C1] ksys_write+0x150/0x270 [ 451.819026][ C1] ? __pfx_ksys_write+0x10/0x10 [ 451.823899][ C1] do_syscall_64+0xe2/0xf80 [ 451.828417][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.834497][ C1] ? trace_irq_disable+0x37/0x100 [ 451.839542][ C1] ? clear_bhb_loop+0x60/0xb0 [ 451.844234][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.850150][ C1] RIP: 0033:0x7f87d8d9aeb9 [ 451.854578][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.874196][ C1] RSP: 002b:00007f87d6ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.882625][ C1] RAX: ffffffffffffffda RBX: 00007f87d9016180 RCX: 00007f87d8d9aeb9 [ 451.890609][ C1] RDX: 0000000000806000 RSI: 0000200000000200 RDI: 0000000000000007 [ 451.898594][ C1] RBP: 00007f87d8e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 451.906578][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.914560][ C1] R13: 00007f87d9016218 R14: 00007f87d9016180 R15: 00007ffd925e0278 [ 451.922550][ C1] [ 451.926189][ C1] Kernel Offset: disabled [ 451.930514][ C1] Rebooting in 86400 seconds..