last executing test programs: 7.824755167s ago: executing program 4 (id=4028): unshare(0x6a040000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a8004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000001c0), 0x9) r3 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_ifreq(r3, 0x8992, &(0x7f0000000100)={'lo\x00', @ifru_names='ipvlan0\x00'}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) 7.34011261s ago: executing program 2 (id=4029): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x1b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7800, 0x10, 0x7, 0xffffffff}}) 7.168451038s ago: executing program 2 (id=4032): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) r4 = socket$inet6(0xa, 0x3, 0xfa) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) sendto$inet6(r4, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r3, &(0x7f0000000080)=""/47, 0x2f) sendmmsg$unix(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x18}}, 0x2004c000) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @private}}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 4.643058849s ago: executing program 1 (id=4044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB="00840000a3b48c600bc98579ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x91d2a000) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x34c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x31c, 0x2, [@TCA_FLOW_ACT={0x308, 0x9, 0x0, 0x1, [@m_tunnel_key={0x128, 0x5, 0x0, 0x0, {{0xf}, {0x4}, {0xf8, 0x6, "70ec77cfd67ef4df4649adb3b8f05fa29a099b721dbe0a66da0146afcfa4ea0fce8d8fe347e2a3c1fae26ca04124b2ac8ee1b838c9168de04a52ae2adb95b5e2da10093129e9f9c7dbd6fbc54fd2baa1860c468f551f2e9b62e4d25d9eec70699315225d01a36f697b2d282be6817e207a0fbbebb175f2b0de2e9d618ae6ca7f285faf8e890701ee37b250f0bb5e0f8635705eee4fcb3074c9f9a580b504f46e3b09aef1392d493bb223de1aefc0f5d319d8cb132058bee4c0999334212824aa9507faee0dcc41178a501a5b5a1efce48ab6e35e82f795fd8f2666873d3ea3239b330857f37961635c4b845bab8ba72e5f7514ec"}, {0xc}, {0xc}}}, @m_mpls={0x104, 0x1b, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x922e7}, @TCA_MPLS_TC={0x5, 0x6, 0x80}]}, {0xc0, 0x6, "39075e501fffb3802770055c04cabe51701e27bc77be464c9b6953e484fbd7e4913bb96935c91aaa08251334d7902934cd358e16d88701f3eb3dfdb28b04d844096c1cd2d060441920504b364a115433f6db2e8447e6ba1a1906bfdf31e7c340954a363aa679beacfdc9a9663eac9b38be65f07f1d0973b70d51e4abe5cf14397067e4b6c673a56391ae00390680e09fab851b2aa9372c5610bfb4c5e6e0ff58757a5dd4cbc3c48a5b595dfa1082368a3c28328d81d2309fe6648d0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0xd8, 0xa, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3ff, 0x1, 0x7, 0x6, 0x6}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8001}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0x80}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x3800000}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0xd, 0x6, "ae22ad37982980c642"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB="060005004e240000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0a"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000540)=ANY=[@ANYBLOB="bede8e86aaaaaaaaaaaaaa0008004c00000000000690780a010102ac76bc4b4c9e3e260cbfad990444140b01e00000846e070000000000000000000000efff001f35441c1354a592b100000000", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="5c00000090780000"], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/79, 0x4f}], 0x2}, 0x63) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000140000009500"/72], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.126212877s ago: executing program 1 (id=4047): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000340)={0xa, 0x0, 0x3, 0x8000000000, 0x1, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xba}, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000"], 0x6c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51b23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x800) (async) socket$alg(0x26, 0x5, 0x0) (async) unshare(0x22020400) (async) pselect6(0x40, &(0x7f0000000340)={0xa, 0x0, 0x3, 0x8000000000, 0x1, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xba}, 0x0, 0x0) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000"], 0x6c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51b23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) (async) 3.732222525s ago: executing program 1 (id=4051): r0 = socket$inet(0x2, 0x6, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) (rerun: 32) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x24) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)={0x5, 0x3, 0x4, 0xfffff929, 0xa, 0x0, [{0xb2, 0x7, 0x9a7a, '\x00', 0x2a00}, {0x7, 0x8, 0x8000, '\x00', 0x2200}, {0x5, 0xc3, 0x2, '\x00', 0x804}, {0xfffffffffffffe01, 0x9, 0x800000000, '\x00', 0x82}, {0xff, 0x3, 0x3, '\x00', 0x1001}, {0xea18, 0xc, 0xd56, '\x00', 0x1}, {0xb1, 0x3, 0x7, '\x00', 0x6}, {0x8001, 0x3, 0x9, '\x00', 0x800}, {0x3, 0xfff, 0x6, '\x00', 0x1}, {0x8, 0x0, 0xb, '\x00', 0x1000}]}) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000680)={r5, 0x8, 0x20}, 0xc) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000890) (async) r9 = openat$cgroup_int(r3, &(0x7f0000000880)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000008c0)={0x0, r9, 0x1, 0x6, 0xe650, 0x6067}) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) (rerun: 64) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r10, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) (async, rerun: 32) vmsplice(r0, &(0x7f0000001ac0)=[{&(0x7f0000000a40)="97d1070393d5e236ce06ca658d97ea3f68af5bdebf1cfcd398759f4231d79f7c07c595807cf42482a9b329f5951ed879b24b5727d8a6b8c2a12e99734f51a3d6163989cf2a33d5c5bea069084f9952432d6f241ba6", 0x55}, {&(0x7f0000000ac0)="ab551128317ca5f9791d30c306ca59ba825f24e2f04ccbd39851803ae64a07ab92b3c4e44dd7f631ca7cde97640c05a1d42df9d0ab3bd87edc800a0d9a48d0a2fa782789278e232b0b830a9f3bdcf582f018299617f83fb3c862ea1d567807a499f67684a6094d3c1b657579ef30958323e6b3176ebe394f825edf39680ce24016be6833811fb8fd07d53668919fb530dd3f1cf46a8b1a0e8981200028e2f5633a2e39b4981f71b91e8a95053646ae4b900ca4cdbf812f92b43448f9d44beb34d37bda3a7031b11011d8f8b56f4c6e1d898d0d8024537a0d91d620553b65bc3108e64bbf2b483fb92c29793a7195229fb8c51bf8de3b8cde20892e514d1cf50d165d2acd2b70915d57a9f5b8abe519ad83f8f7238065a21237aa92399674f659cfcbed47766d94e1a85e7b14e0fd78b5f524886a4e2b7132dfe24d4bfe5974cab1faf35eb9a417980bc9ac06a1a11e969afb617dc953d646b9fbb344f87f625b9450bd2e5a0b3fefb92544173b6a5a7cdc319de9a77d8daf932e14916784f106b72f5082c6ca17e35b16d9e8278e7630d520de3b0718469c8d5ab6183f2a36cd2965543f8b19a20aa35d5f38fcc1cc1d5b4c61ac6d06882b8cb583c8b625e61f48a40398e7be7e8712e1e1c57d9b06176d5a33a5ae1fe0c06b6337a1f1eeb268b53ad40c7e5f76a2cadf2deddb5d96915899c475ae585d227056da08ec1655a2cd007b62da129024af278dc2263052c414e1c2b76416affa0cb288b5d5a8b8b122233a28fa1fe1a9d8cd2a0f2dbaf69f0cf8c082664fe6472cff8553bb99c01ae48f98d8bbf202886b69b2787fd31f336b1b0342f80ce8440730e4525a5cabcaecac2493fa6f4d4f64e9bfba0f513ae5bab932ae7a25ded8413a602a614216ec30a016eac19eae582c72c6789d6d26c534b0fffbbd9f48f36466247331f73070a9fdaa06ca2b44512097f9f2f535ac27e653fc6c37cacc6b6d8e7bb6b004666514d1d107b5bb42a491012e73f94ca90a05fcbc7156200d00e5f11a49d15fdb1dd5d58db5c4671de896a1cbc840a61f90a8d12f3e97996d0023ebdf56d0d0c1d1c0924e5c941f117bac065c114f9a62e6ae72ce3be409a54558f721610d1164253fee1c33e91626c0d30567f70243c5413f2fa35e7b742d7280f8226574e9ebfe8658b8eccba5081270a539f6e8dd3878dfff88771348d022129aba009475e1369096e82fb28a6a3feefde9903874092ec3e3cfa4f89c8185faf723552e05ab09b0a801a91b0e078736bc4e4028daf80c11b90b641632d08e3b79bec4d21238d7c0270fb99fd53754bd106dc514508ecb6b0a7b735aa071fd4dd4dcf27257904177a381567876b98691b1a5b6200a804297b1bb7984436ad6d3a59395f8ea526039567e833c6e046917bfda41d74890b13eb31095cd0a04aa424db90bf3777448f6fc10ba573aa4115d8323dc179cee1c1e223ebb621d4a9d3030ce123735b9ab8ab20ab5fa6290b8273abc9efc1428d1807393cb53c9d791240aa759e6b4ab7a7c133b22bef216f852ade6fec30b7b44984ace664428c778694aae250d3e7f06795b616289a46c7f4a9f5de030e739f518534e4d45628477f176b2be38f0252b52fe0cc9c4da4659522406501025a4b702702a67f801553486bb1009d9e8f4dc9ba991c75619bb3cf7eef13d98f145a4f2c46907c588193e85a263c821c01b7b77909e75e2a7f0d5e60d8eeb43ac3c4bfaaa52fc7c564efac1f1dc06f836f7b1e3ae9c7c17339c9649991e31031eb0861138513c22856168d03b320c3908b839aee8badbc0115c24413b40af409f9e5b9bf269478424a6119fd939d4e07d0202eeef29f476a5c1db9f5ea3c75fe040bfa7472361d5076376aa41838efed831fea60d28573270b16d33f0d3e7000644534bac52d3bc2cf23ae33203b6ce85dc3cd6e6a7638556a4747ec55bfdc06f242e784797456c2feac5776b016bf1950d79e4348637636b23577c596eb401fd32655bf55d873ef24dc652758a7b3afb232b10ba5df60d0114c6dac0b2f9e71261d4db2420a50f273bcdd7b1ee86b37927d53adaf41c9130c7083b6e329b3c2befde5e47359612642debcd0962bdf1eeb6ecf3fb536d0b84dd84b70f3204e0f042096aef13b2afe8c2d710075ef0433bf571ad20f1f1115ada1f793d00475dc8d42444295c147c320faaf81d2eb206d0e116fe1d49e1be3eab37c3448f59df61c099b4a969ae38e17c948132f49bb1b140791525cb60cfd9717a3585835bd68e896fb2b7a2f662361af4baedfbc65f744f3b505b67a90e603d50bd070e1b53bda2fb5e14a10a80d0f3d4a54dd89233791aafe083fc91a8fde71100340afe7f1a678ded7700da003bfd476123b35569ad77af7997181b7955ea9f7439734e86b640bc75df21a21fd5797e1089e6bf376618da2f3d86aa497ca6866d34921f6dec6f3f2988283a7e15a7b97eee2c6a8c625741dc6b10fa7158bd800fd35a72e296a6b85d1e634c6f61b86440c7190bedd5cddeb2fcb669cb6a24bac50145f7e289dfe8351728b7792b985fc1dd05220778434cb4e29f3ebc6c08f5b78708725e421cdbc15119c6380d396c29a04b8890d713a447502680e2d477c52ea063f7ba613751b26761eee5304141b56791bd648fc838586c926308bf5a5b30fa9c3b66fecfea2ebaa3ecceb472dc29f6dbef9955bf90ea870818b042ac9233491537737339c1f704e4d2990b73915283c208d6b0190d9a15cf324ab2a83037350bb35bae01c25bcb6bd5486c8fced278ef42d363f216a21d42a6f8c349f8446c87a62e5c959122c783f3d933421df16e9f83b47a655374afc08ca6a26d2413eda22e67bec7b23739f24eecbe1f10f59a4e956e06c1b773ba14704d84279324f2c0001e4ea9a802d3a1c5910738fc6bb388f8700a5f19c22a33b9e74133d4cdf378424ef656a293ea79b1a2e958d5ff1a44fa61152f0fd714be244a1591f07c5ba52b79d3e07e935a03d568a4ab87cd8c91a632b0d3e572a3587348c04fbb7fb6aeee8538b30c61b4810e95176a53795eada20c4714ce08779b612a7aec3621b950bb5059ef743a533640f92cd72dc527e5c7e8b3ed4fe7c264b3ab0a85a916d6df99975f20cbc53d0c326964a7631d33fb6b28aae9521ec275793686bd4cd5e09442ff765e502a4427c377eb97ef461cffba1f490c75141e582bf0c1444251fc6c1f9e1b0752ca7489c0c7a3e9ce48c6420bdcde6e414a4f556ca4d75e934969e9d44caec33796945c3445c702381c0ab1f8673629d9e5897deb42378da531fdd2f5e4df4a88a2eb64b2cf8ffbb2c2fa5e05a4a537330da3e4eb09606a68a8598d279008cd8d2d3a612e85037ad2b79666920146b1927a49c4cf408d5e708912847330129809fc9a5bd29ee01f119884d9b666c88568ef01f23d7b9d0d21da82d00ce52822d620223ed46e64e715d66c41e19264fd37c560d4181571f205cd281f9f2920059fb649b14ae4ed4b3b10a89343296098783857a015f1c4c0d75eb96f6169f795170cc1ae432ea962e743b1d02d98bf0649d8335cd705237ecb385b54722e590b0379f8f1f236645297c6140542cfb729a2689aa7d4736fd32104547a9db9dda1c90cb5259dd933a5300c39acbd383ec46554d93b54f78fc046a4a3b0e054fcc74ba0687c571f84557f13d18187704a32bf3762770a543cb30fa06529c5c46c586e6c00f2d0a928716002f6effb2e51bf404842abafb2ad969fc4789785e1aaeeb4661c0e55d77989ca24110bf47e8f2b5b3330534214d2b5ed0411c727acbd6a185269b29527d3720c3c1f7c31211538faebde4688ea005463707c98bbb472e29191c8363dbdc0f8c0925ecf524ffc0677430fbcf90a34a8caf1bf97187cdc6dfa2db966362d5b173a360b5b7ba97ec69d8fa823d9be1adf84a0946d20878733419d0f745504dd5143f31d223d261ca8f2c6deab9cfcbc0d696ea5ae9ca2f083eee075cc11391bd2f054ffbfa247a330c08c812f5b2396807b11a07cac33978fefa97c9cb2408f7e0762a45ed02a6172db6af9946d1963c6a67b80f020a2789dfd34c1233eae3e0bfcd6e27105a432ada2bec26c96a808bcbac9ebcb3baaf18856d4a477f076b4e5b3aa7670ffbb0b84d43de407508d641ebac8f707f0d4c817ce4698e222d20f8477e862166bcce3f078bc3754bbf6913b1b66c9470c39eea266344c0ccc8c64d20cfad70e990166055cda569876ca1b3182d216d2ff64e70502119ee25ada2a45414fca75fde101455cfb20f7e1d33a7df2bc061741a4cb54e6bfcd7c923da52fb6f0e275ff8485bef8a1712889c6f7e21e6c12bc4c5d2bbb5f3b77288f8948f71e1102e9d7fc3a69bb46818abed5f9f231aac461299addba3c823bc55d04867dc42ce1cd146b39e068230653a2d5bf5ab762b7178d2a3565ecd35ceccad26cfb8cbb80c3bfd8cb1b0598db9697ad815f0f5050802be346fcb958e35f46ca4d39c8f476a8047a6f57dd2f0ff96e8037fa8a575b57c5fb8357253dba3c26d5e2e4328b4a7e773a07874e30bda3365f861e24dc1228dad725515d78ae08fee467f13e1255c5755ef92feaa9dffbbf7a23039785915cf044f01a6c78e9ac6ff053e65694de0b508e9043383265e1f62c8f17495216f122bb4c1a97c6adb51fb54647ba1138383856ddc63fc50655669392099f32899d2a72671650c1d8afe54abfb7757d3b640c4863a2fe6ff77032c33213e8dea81b66b46a349675acb7b81aed33293c063f0aa8607a4ae5a5148377e40a1e599902559c9f7b7d77985b587f26024ed485f43da9d3272bca7ff8e887dfd56a32691d65b05cbafb7b65edcfb28072b40f10f2c8ce1406883b873e83dc4ac84b687022db9b095e0059ccc23afeff3e5d2eb52b81266e5ec21ed128558a9c8960b37b6a21efd705bc1054fb51756a82f4074d18cd0c85c70f1fe545b007a122bb2add916f67e64f048f20d072735fd6ae0df59017fbc8c458507f3939d40e0eae4d9bcee019a55e89d11488b306b10600ac6882be05abc4d6ce1a69abb0f161ad8358457227f843fa8cd2d3e1cb659f037741229f9078c3f0a75a4f79017b428a8c4f3ac9f44d66b49d51524b5d087362b354a6fc67f9c630b66c8e8af297dff0305347e4d6fc473a1761385229a79afb00ce9987da5b981def9f21225062456e6091d15169653263a3f20f82307efee76c1c411aa01917017c0623c2c8a5b11d79703a8ca5895088c400e4430a5a0ef52d36858e157b718207ad6f98f959b6a114454256b68b5a321e0a9bfac1862844e1763b43ed0add9e98a6eba9d3d57ad3458778fb13083e1ff37f2b10fd40691632d3e20bdebec37f14898f51a96ee92d0965bb8c9a52ed01128ca60f1bb9419af8cc1308e7a1f48f47744be73925d6e312d5435ae357093c85d6184d12a230740348cea36b56e3edda87914d05cefd2495d331668fabe43bd953ca3fcde7d1d66897a0c959378698197e487fda7552c679a576624881918cdd6b8b44d13952f029688c9ec29c3c0d406dc7cbe43247cc849ef90beef1ab5af59e846be207d8c3aac59d1ab50b63a25b1425d2b54367dd908782f584d5af8dae33be3daffcceee23b87be2ed1fd3352ed9845c271479678f308b222e91f9e91a6305eebffca78b270883ec29deb724b216f323da97f05baeffdceb9fa806590385759e2a458a89e4374f460f19917aa73202085ac68cd28755af7d153dbf1c4cd6c38d51e7cc17e335e6e2fbf9140c", 0x1000}], 0x2, 0x1) (async, rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x94, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8d9f4edb951f723778b96fb7c157ada1"}, @NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1885e724926413e58e91671cc000f3ad5f82db29a61a313783eaee4b0565fa3d"}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0xc0) (async) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r11, 0x8) ioctl$AUTOFS_IOC_READY(r11, 0x9360, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000001c80)={0x4, 0x3, "8b9d6d", 0x8}) (async) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000001d00)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x451, &(0x7f0000001cc0)='veth0_to_team\x00', 0x5, 0x3, 0x9}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001d80)={r1, r3}) 3.647990416s ago: executing program 0 (id=4052): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="000000000000fda496c0983ef403ba47d96c0000b70800b5f3c2dd00ffffffff7b8af8ff00000000bfa200000000ffffffb703000008000000b704000000000000850000001d000000950000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="dbd1251b000000060021006100000000000000000000ca5907d9b434ebe630e0b2b5fdc983f8b14e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000180)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x2ae}], 0x1}}], 0x1, 0x20040140) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=@delqdisc={0xbc, 0x25, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x14, 0xc}, {0x5, 0xe}, {0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0xff, 0x3ff, 0xf7d2, 0x1, 0x2f35, 0x10001, 0x4}}, {0xc, 0x2, [0x1ff, 0x2, 0x7, 0x5]}}, {{0x1c, 0x1, {0xe, 0xff, 0x4, 0x1, 0x0, 0x4, 0x3ff, 0x5}}, {0xe, 0x2, [0x1, 0xc617, 0x2, 0x100, 0x1]}}, {{0x1c, 0x1, {0x7, 0xff, 0x2, 0xfffffff0, 0x1, 0x5, 0xf, 0x7}}, {0x12, 0x2, [0xfa1, 0xc, 0x5, 0x345a, 0x0, 0xffff, 0x800]}}]}, @TCA_RATE={0x6, 0x5, {0x81, 0x40}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004011}, 0x14) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r13, 0x0, 0x0}, 0x10) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a01010000000000000000000000000000000000020100030200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff0000000000000000000000000c000800"], 0x134}}, 0x4000) socket$inet(0x2, 0x4000000000000001, 0x0) 3.589840763s ago: executing program 1 (id=4053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) syz_emit_ethernet(0x42, &(0x7f0000000680)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x3, 0xe5}]}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x9, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41100, 0x50}, 0x94) 2.774391724s ago: executing program 1 (id=4056): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000400)=""/166, 0xffffffffffffff31, 0xca, 0x1, 0x7}, 0x28) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x40, 0x2c, 0xf31, 0x2, 0x2000, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r10, &(0x7f0000000000), 0x0}, 0x20) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 2.643281394s ago: executing program 0 (id=4058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f00000002c0)="1d08eadc04d4dcb016ca3e3c2ada68321794366bcddd121d264925f87f48914b50d6efd1d856f66efb818a9a261d745fcc0e8a2653709a768d4d6845778f63519bd0a8cdbb090fb645c80dfc3f47273a0939da7f66d2a0b75dda540d1e337055bb2cd94956d4ee73ccd629b80d9b6a0af77cc0ff5e6dfd4c913d7e8f249d735e944002c36db03500f7c0d8371707b7a97587efa563442563531ec1509aa29fcfc3d6d7db991be70cedb9f0010a0168079dedd21eab00d6ecc78992fa65f434948cc965456448adcd173f3db6ad1a15e9bebe9c304c435c702f05ee93ca1691e77240852a99d50083bfeff7178771d68a2b978a0650b497c88b", &(0x7f00000003c0)=""/240, 0x4}, 0x20) 2.464928245s ago: executing program 0 (id=4059): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000001740)=0x1000004, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.437919295s ago: executing program 1 (id=4060): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000001f540600050027007f00000008000a00", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x444b4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) 1.912387256s ago: executing program 4 (id=4061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x57, &(0x7f0000000280)=""/87, 0x41000, 0x58, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x9, 0x7, 0x600}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x2, 0x3, 0xe, 0x1}, {0x1, 0x2, 0x5, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0xdf, 0x7e, &(0x7f0000000580)="ed470f5569f0d42245bdcd76ec086b0aa449ce4f7576afce94d5798dae522a17af0b218fc1d3a987532072f1a69091e38012f3177ca7b9de59abf0111dd1af06b2127efae496a7cbdbb8b45a3d3965ed987d02c0fcacb9aa78a5f3088ccdc076dfa02e9543b53b2e80427a0566d09b43568c52bbd3192bd6e95c8986cb9e615b8949805ba0ad5bba4db5e389e1a9778e9d15bc379e72cdcce4defb820be2566dfbe76aea69a7abb29491194e2127b9520c2f368cff3ead4f538060027a1a0ed6ad5515e3cbd0812e4c8fc8cb8420f541a078b1df1aea88ceba94d266df6695", &(0x7f0000000680)=""/126, 0x6dc5, 0x0, 0x41, 0xa2, &(0x7f0000000700)="59a8547d81c2ddaf4694c13da9aa47b229b1f6b07fa111bca0aab470a8ffc6b678507101944587d75ce2917560c03b600f6cc998a017cfb2627d3e230aeceae6ca", &(0x7f0000000780)="6ce75774ca81493f6a0d9debb547bd104266ca59c704a2712e719834d5de7cc4ad35b0edf00423e4a811d8fc17d1650b950ee4a8a25ddfd8466e6253655bf8a1195f1d0ccbda1fedaf1a98ff41d2c448e1c9ff26603d18c7da9ab2e93994571b232a2865d798e47adb1df0421087d3d2a2fc0deae472971c753d11485800e76b3a4224e891b6cbf8fe9b2ea59e35509c49ceb45a2a5a144a5b28cbfd622425db97ca", 0x2, 0x0, 0x3ff}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0xdf, 0x7e, &(0x7f0000000580)="ed470f5569f0d42245bdcd76ec086b0aa449ce4f7576afce94d5798dae522a17af0b218fc1d3a987532072f1a69091e38012f3177ca7b9de59abf0111dd1af06b2127efae496a7cbdbb8b45a3d3965ed987d02c0fcacb9aa78a5f3088ccdc076dfa02e9543b53b2e80427a0566d09b43568c52bbd3192bd6e95c8986cb9e615b8949805ba0ad5bba4db5e389e1a9778e9d15bc379e72cdcce4defb820be2566dfbe76aea69a7abb29491194e2127b9520c2f368cff3ead4f538060027a1a0ed6ad5515e3cbd0812e4c8fc8cb8420f541a078b1df1aea88ceba94d266df6695", &(0x7f0000000680)=""/126, 0x6dc5, 0x0, 0x41, 0xa2, &(0x7f0000000700)="59a8547d81c2ddaf4694c13da9aa47b229b1f6b07fa111bca0aab470a8ffc6b678507101944587d75ce2917560c03b600f6cc998a017cfb2627d3e230aeceae6ca", &(0x7f0000000780)="6ce75774ca81493f6a0d9debb547bd104266ca59c704a2712e719834d5de7cc4ad35b0edf00423e4a811d8fc17d1650b950ee4a8a25ddfd8466e6253655bf8a1195f1d0ccbda1fedaf1a98ff41d2c448e1c9ff26603d18c7da9ab2e93994571b232a2865d798e47adb1df0421087d3d2a2fc0deae472971c753d11485800e76b3a4224e891b6cbf8fe9b2ea59e35509c49ceb45a2a5a144a5b28cbfd622425db97ca", 0x2, 0x0, 0x3ff}, 0x50) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000345ad2c2a84e8113e95ce526582ff768c2e703bb669eb495352a505ee53355831d8591b37504417c89042c3de4c5e4da2c824e1000e0b8fd4710d087129434e793513a3c0ffc5805fdb5dcfa1fad84f822a6fe7782f2f2bc521b026dea23645d8dfccd0062ec068e55751670581c86f68bbcdc36e508aea0b717ec2afa0fb72b2cc154d6414a5ce993d4c6a723b70dccbdfa2332f30c6e7b18cd5923a2d997001efd91e2e7a6b0262ecdc86e4ad88e372b3abeee", @ANYRES16=r1, @ANYBLOB="3303000000000400000015000000"], 0x14}}, 0x0) 1.795631521s ago: executing program 3 (id=4062): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x84, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x70, 0xe, 0x0, 0x1, [@nested={0x6c, 0x151, 0x0, 0x1, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x7, 0x11f, 0x0, 0x0, @str='^-\x00'}]}, @generic="70765d4999d685ed20e8a9e2396c113e298d49d35baa9a9e83623282b12608e5157134b95d788d25da098f2e03f2b5d4184c56e55bf93498f1a7a93ce00ace6b266db080de015a844a7e86ae5407fe7026747a1ce5f5e3b43431a49e"]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) (async) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x84, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x70, 0xe, 0x0, 0x1, [@nested={0x6c, 0x151, 0x0, 0x1, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x7, 0x11f, 0x0, 0x0, @str='^-\x00'}]}, @generic="70765d4999d685ed20e8a9e2396c113e298d49d35baa9a9e83623282b12608e5157134b95d788d25da098f2e03f2b5d4184c56e55bf93498f1a7a93ce00ace6b266db080de015a844a7e86ae5407fe7026747a1ce5f5e3b43431a49e"]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) (async) connect$qrtr(r5, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x1, 0x4000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0x4000ff2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) r10 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x514, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@generic="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", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x3f4, 0x2, 0x0, 0x1, [@nested={0x3ee, 0x15, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xaf}, @nested={0xbc, 0x1, 0x0, 0x1, [@nested={0xb7, 0x39, 0x0, 0x1, [@generic="ce02e2842f7d74628b274a0d60dc5a12d77d5b27d9dd94077a45a171d3f75cf51c695f647222bc05f16a77db090e13f1abfd5f6e75c33c5449d0f2e50e9250ee7cb8d70325682a99d9ce98a61506495d7a0d0a5159ab205e0a07f52fd87ea8dffe59ac77294478586b571209ef222d768bdc805ee9a2ff0a5d89a5472098a6a7bcec1913a4b48f7c00e62f976e0880fd48140f74c00922", @nested={0x4, 0x14f}, @nested={0x4, 0x7a}, @nested={0x4, 0x10a}, @typed={0x8, 0x78, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x34}, @nested={0x4, 0x12d}]}]}, @nested={0x114, 0x62, 0x0, 0x1, [@nested={0x10d, 0x13b, 0x0, 0x1, [@nested={0x4, 0x9}, @nested={0x4, 0xec}, @generic="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", @nested={0x4, 0x14f}]}]}, @generic="1dd1e142f272da5edf9409e0b3e00bf1b9ed0176ecd4b5b91939af9c44ee04c53fb94b19275f3e95a7b5f6bc670e02e87177fb1ea5a624d2e545147064a349e7185cc8d8e2c9d3379c3b73f2e9eaf39eb433ec20950daa4bb8214dfbb16579a83ae9152d992d09426f22131d44c9e42b57ddf2465dd5ff828d30ddd145e668ce24f434e6d4187fe6de062f172334f2bc9bc4b0e453a555e3220a105cb94b13250f0a5f7630380ed5001c1c6f4a6b", @generic, @nested={0x160, 0x10b, 0x0, 0x1, [@nested={0x15c, 0xd2, 0x0, 0x1, [@nested={0x4, 0x96}, @generic="965cd74f5dddae4359f00d69270e41f2a055ca2d65e3ac2ac0155bc250928604a48f35fa4f7cefec1f20da26c4ebc520430ee1d6a9b40613b828d9ae7da6dd82adcfeeae3d0bbca681b5eddae4", @typed={0x8, 0x14f, 0x0, 0x0, @fd=r10}, @generic="21103b12cdee5b0884102be93cf0e292a007f2b841d449d06f11a604c97c965a7926451e", @typed={0xc, 0xeb, 0x0, 0x0, @u64=0x9}, @generic="c344d93c04fc18a67e994a54ea87ecc9694d3615198932f5f3e2f264baa1c4263cb08ee07d3ce8a0c51f7651b15f63a1243ff9040e60b7856beaaaf32b29b2e1821338bb25e10c9c8382dd827d5b908ab75d7b3a18d6b8a1022d2d95cb73272222c460c44d92c8135844022f42733d5c3f9777e06431f73c936263f8eb8c139c3fbeca40bb62e064f3a683e446f4cb499e4c6bf966de203e06678fbf6a1c09abdde0ec2ea66b5207d17b1995c39279df08f463fa9c435a69c928642acd761ee1d1575d6ef6e508be739b21d7fa16af"]}]}]}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x48815}, 0x800c080) 1.775595789s ago: executing program 4 (id=4063): syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df006111700000000000850000004c00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) writev(r0, &(0x7f0000000380)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1) 1.543610539s ago: executing program 3 (id=4064): sendmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="92cce3d25242db87ed73ac406bee4e94b56597419f9099c50fcb1723e91c62ea026b9284bae81231280f644b98a1579f69ed7f40876786124c650baa5e462aa85b14741195f814505c369ed008ae68f183aad02cd4", 0x55}, {&(0x7f0000000100)="58c7d6ecfba0d0a65eb7fb6849bcfd90de7e1fe8f81218ba7c69fa48d846514b2929c48f65e1d5e9d4d08f598f34bc3ca287a69e12a4ec60a97c80f22e93714cdf056e34056c2231e2ec97886c54cd69f5f1ee99700c97b550c76d5d15b72ca3be34c4807b07f5e6fc8bc3c9950a44d0b9a93f336498dc0dc43cd336d48e6177bcf4d3ef34fab3406c3a9a5f76eb50f712ed5ed0027b0ba9d61e24ac615987c6cdacaccd6c561471274dd2ec4f0a8408cc217a86172787", 0xb7}, {&(0x7f00000001c0)="04784f36514542e62232328e6439f400798dc9fcfedc49", 0x17}, {&(0x7f0000000200)="39a7e1f3aed5ace69f7af3a8df43ab3b83678115d3552d701b78664802d1da6e0aa4b4a8aa3d18e840e8624397f541e35f38b19bc7d98521ee299d07f9c917541ff615b79e06891addd1ea1cae91bc5ef31f41ff3ec041c4abfbb5c91bd19832b56e37c71cd239928f17d5e623c9bb11e2605b9555e559fe268c7f5e10d71970145bc5ba67a02f6139f124ccc615e011224b4633893774979b51265dfa749bddc44098c50aab216186abe703d613e2bf8fea91514b3bf50bae645c725557da4df03d3ed180ab1dda0e52f18f6406373875fa4c7ee1814df85d140f6dac71", 0xde}], 0x4, &(0x7f0000000340)=[{0x18, 0x10e, 0x4, "f6bdcb"}, {0xe0, 0x103, 0x6, "4eef2c6b5cf44a988b2ae720abfffbc0372c2b31c6266c6a2c5c8d90c1a4721f2c74b94c48b2c08c9a3fea02012a519c1e66902f1270abf27470fa47758d0f6b2a1c704fb74435acd1aecd67005e1b24b187eeadd310ec017082e01822308b4402f002122c13dd55004bbfabecbe00c92c320e022f267bf779e01792dc91e4ce8ba467321cc299c4bf4b51df4025112d5d0a43d726e6c31511e40224726308781e3781034be5fdd8243b05c39d83804cdeec9d4f86bf0300bf992a6c969904b09643e88a8b7db1f5637c4a3a"}, {0xd8, 0x117, 0x3, "8bdfba126e21be1734892edcbce78153a0a8440cb09c464fde62af89b8cea170f1c5c1e42390d62152a74e0310bd9ffcff2169e60acb722306f15aaf66e95f2fe37e933e6b545b455e72ac88243d1f25f76fe5380564afe651d378b33a87f9f57f2de2aeb01250d316a1a6a26f5d518df6c219fc66705f7a065fa17b62b236d977683a36e8c1687aebe421b06438ae9bef25a851758feecf172bbff699e156d84e61bd82619201192f1b42937b10d30995859c2e89c1cff47924b7eee7ff275da6f9fc"}, {0x28, 0x6, 0x6, "3da13d3ae30b279ca02bfc7de64a085330"}], 0x1f8}}], 0x1, 0x20000010) 1.467078994s ago: executing program 3 (id=4065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000001037418a5152bfc0e640000000000000cc2150fb656990000000069"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x880040}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9a5}]}, 0x2c}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x190b]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x400, 0x8, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)) 1.423639038s ago: executing program 0 (id=4066): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000340)={{@align=0xffffffffffffffff, {0x8, 0xfba, 0x7, 0x8}}, {{[0xff, 0x3, 0x2, 0x92]}, 0x0, 0x2, 0x8, 0x0, &(0x7f0000000280)=[{{@align=0x2, {0xffff, 0x9, 0x6}}, 0x57f8, 0x0, '^$\\\xf7]\x00'}, {{@_ha_fsid={[0x200, 0xd]}, {0x9, 0x9, 0x1}}, 0x800, 0x0, '^\x00'}, {{@align=0xb, {0xf7e1, 0x1, 0x7}}, 0x10, 0x0, '\x00'}, {{@align=0x3, {0x9, 0x5, 0x9, 0xff}}, 0x800, 0x0, '-!\x00'}, {{@_ha_fsid={[0x3, 0xffff8000]}, {0x40, 0x8000, 0x800, 0x7}}, 0x5, 0x0, 'memory.events\x00'}]}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) 1.187674963s ago: executing program 0 (id=4067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x8}) (async) gettid() (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @void}, 0x10) 1.187241213s ago: executing program 3 (id=4068): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) r3 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x48) splice(r4, 0x0, r3, 0x0, 0x3000, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000100)=0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x6) r14 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0xbe28) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0) 1.082767556s ago: executing program 0 (id=4069): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x2, 0x6, 0x8, 0x8, {0x1, 0x1, 0x0, 0x101, 0x45}, {0xf, 0x2, 0x8, 0x5, 0xff81, 0xfffff3e5}, 0xfffffff7, 0xfffffffa, 0x92}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020300090272f8fa1396fda55b005a51d9f517aecce73df5db0137a8485ae5b68317668a6797b1a58c8b125f79ab2cd7de073d8db43df27de60f0d1f3cae89f06314d88b99e88e586eb805a3f30fb3a801607fd4de27990ab0fa73b2286c2160ce27aa3c51302450e235c65e144727d21c846265a662b60217a3c91019"], 0x10}, 0x1b}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071109d00000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 1.018133707s ago: executing program 3 (id=4070): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xf4, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a003263}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35074f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cd2b9b8}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6981e6b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ebe3e0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a85dce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25dc0388}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1263b53a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4000071}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b472184}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c9f6617}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xf4}}, 0x0) 824.258465ms ago: executing program 3 (id=4071): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e22, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000004c0)=0x4) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000007c0)={0x2, &(0x7f0000000200)=[{0x402, 0x6, 0x2, 0x21}, {0x99a, 0x9, 0x5, 0x8}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) epoll_create(0xfffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cc7b0e743c0816b5285c86084d67666e18489135907f10d30d11df4c31c415615ad6c249e000fe4b767a72b8198f0f6df88ceec63b4d549c0154241a325e082a9bad6000a082e565dcc621ac0dc9c3f7c77881fd069feda31cdf58397f01456f272b6fd6d22557d9ef13e4c81b401c5d63dfa813"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80800) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}}, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3}, 0x40001012) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) 814.538235ms ago: executing program 4 (id=4072): pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000180)={0x3ff, 0x1, 0x0, 0xfffffffffffffffa}, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') close(0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 735.26107ms ago: executing program 2 (id=4073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000008000000000000ffffffff850000002c0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e8b6030000e5ce000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 548.347875ms ago: executing program 2 (id=4074): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="feffffff41"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x102}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1012, &(0x7f00000008c0)=""/4114, 0x0, 0x68}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) pipe(0xfffffffffffffffe) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000092c0)={@map, 0xffffffffffffffff, 0x14, 0x2036}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5d88eb55c252"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0xfffffffffffffdd6) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000ff00100000000000000002000000010000800000000000000000ff0f00000000000073b4ffffffffffff00ffffffffffffff0000000000000000000000001000000000000000000000200200000000000000ffffffffffffffffffffffff"], 0xb8}}, 0x4004) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000001900)=ANY=[@ANYBLOB="5c5e02e0943fad65ab4de2", @ANYRES16=r10, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) 398.361657ms ago: executing program 2 (id=4075): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05002e08000000fbbaddabd0fd09ccf2c4"], 0x50) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='L\x00', 0x2}], 0x1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x28, 0xf, 0x5b}, 0x2c) (async) r9 = socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000200)=0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000014000500ff020000000000000000000000000001080004"], 0x38}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) 256.889156ms ago: executing program 2 (id=4076): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ecff0000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000007b05e8d485c0f3f3be7f346c459ef014c99507d8b2c2b22b61810f293c646f36d3f875a7fea481ee8115ae3c9ce54f638923e2a7c6de8a76d0120b6f85357186dfb2bdd7e21d57e94347966a3596022aa880b056d3c124f0b7c323cb579690b8a8a32aa0195bdb2c268d847a801d59d6c72eb5277806f767f83b"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYRES16=r6, @ANYBLOB="0108000000000000002567000000080001007400000008000300", @ANYRES32=r7, @ANYRES8=r1, @ANYRES32=0x0], 0x40}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000ffdbdf2531000000080001001200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900060000002a00000008005200", @ANYRES32=r8, @ANYBLOB="0c009900060000000f0000000800db00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08045200", @ANYRES32=r11, @ANYBLOB="0c00990006000000410000000800010051000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x4) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000429bd7000ffdbdf253b000000080003b4", @ANYRES32=0x0, @ANYBLOB="08009f000100000008002201d8000000080026006c0900000800a00009000000080026008509000008002700030000000500180127000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000008c0)={r16}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f00000004c0)={r16, 0xb}, 0x8) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0x2d92050b8d6f7024, 0x8}}}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000300", @ANYRES16=r13, @ANYBLOB="100025bd7000fedbdf25030000000c00018008000300010000000500050003000000180001801400020073797a6b616c6c65723100000000000005000500050000140c00018008000100d7ef7b33f356c6e94f53df1e43d6ebebfbaa0f94d26d75e7", @ANYRES32=r15, @ANYBLOB="3400018008000100", @ANYRESHEX=r17, @ANYRESOCT=r8], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048004) shutdown(r12, 0x1) 39.662272ms ago: executing program 4 (id=4077): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0004000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 0s ago: executing program 4 (id=4078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r3, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f51002b1f03003a000000000011000000000000fe8000000000000000000000000000aa84ffc2"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): allmulticast mode [ 423.887934][T16893] netlink: 'syz.4.2672': attribute type 1 has an invalid length. [ 423.911505][T16893] netlink: 'syz.4.2672': attribute type 2 has an invalid length. [ 423.923637][T16895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2673'. [ 423.959368][T16893] syzkaller1: entered promiscuous mode [ 423.965282][T16893] syzkaller1: entered allmulticast mode [ 425.144079][T16923] xt_hashlimit: size too large, truncated to 1048576 [ 425.309840][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 425.344092][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 425.884578][T16949] netlink: 'syz.2.2690': attribute type 1 has an invalid length. [ 425.899981][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2688'. [ 425.921341][T16951] nbd: illegal input index -1113835520 [ 425.931888][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2690'. [ 426.423134][T16973] netlink: 'syz.3.2695': attribute type 16 has an invalid length. [ 426.424683][T16979] netlink: 'syz.3.2695': attribute type 16 has an invalid length. [ 426.457066][T16973] netlink: 'syz.3.2695': attribute type 17 has an invalid length. [ 426.500507][T16979] netlink: 'syz.3.2695': attribute type 17 has an invalid length. [ 426.597885][T16973] ip6_vti0: left promiscuous mode [ 426.633307][T16973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.643204][T16973] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.656621][T16973] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 426.683718][ T8465] lo speed is unknown, defaulting to 1000 [ 426.690233][T16979] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 426.693162][T16989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2699'. [ 426.706327][ T8465] sqz0: Port: 1 Link ACTIVE [ 426.745849][ T46] lo speed is unknown, defaulting to 1000 [ 426.777735][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2697'. [ 426.782158][ T5995] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 427.122908][T17002] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2704'. [ 427.132489][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 427.132523][ C1] lec:lec_tx_timeout: lec0 [ 427.140687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 427.185577][ T5995] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 427.482868][T15232] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 427.611232][T16995] syzkaller0: mtu less than device minimum [ 427.875668][T17035] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 427.917888][T17035] netlink: 'syz.0.2712': attribute type 3 has an invalid length. [ 428.098363][T17041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.100610][T17044] netlink: 'syz.1.2716': attribute type 4 has an invalid length. [ 428.139608][T17044] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2716'. [ 428.155346][T17044] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 428.180961][T17048] IPVS: set_ctl: invalid protocol: 33 172.20.20.56:20002 [ 428.290432][T17052] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2718'. [ 428.346468][T17052] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2718'. [ 428.362403][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 428.371588][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2718'. [ 428.431089][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2722'. [ 428.466314][T17061] 8021q: adding VLAN 0 to HW filter on device bond12 [ 428.574879][T17062] xt_hashlimit: overflow, rate too high: 0 [ 428.616107][T15238] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.660408][T15238] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.684150][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.959445][T17092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2726'. [ 429.207052][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2729'. [ 429.301537][T17099] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 429.335366][T17109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2728'. [ 429.346662][T17099] sctp: [Deprecated]: syz.1.2728 (pid 17099) Use of int in maxseg socket option. [ 429.346662][T17099] Use struct sctp_assoc_value instead [ 429.371426][T17110] tipc: Enabled bearer , priority 10 [ 429.380022][T17107] lo speed is unknown, defaulting to 1000 [ 429.400812][T17107] lo speed is unknown, defaulting to 1000 [ 429.412252][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.483465][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2731'. [ 429.505032][T17113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.131551][T17136] ipt_REJECT: TCP_RESET invalid for non-tcp [ 430.357142][T17143] : entered promiscuous mode [ 430.568183][T17155] ip6gre2: entered promiscuous mode [ 430.575119][T17155] ip6gre2: entered allmulticast mode [ 430.594045][T17107] wg1 speed is unknown, defaulting to 1000 [ 430.610591][T17152] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 430.635594][T17152] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 430.682076][T17159] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 430.891284][T17162] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 430.903651][T17162] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 431.029402][T17167] bond7: (slave gretap1): making interface the new active one [ 431.056406][T17167] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 431.101628][T17162] macvlan5: entered promiscuous mode [ 431.107419][T17162] macvlan5: entered allmulticast mode [ 431.114418][T17162] bond7: entered promiscuous mode [ 431.119683][T17162] gretap1: entered promiscuous mode [ 431.126784][T17162] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 431.134390][T17181] netlink: 'syz.4.2753': attribute type 13 has an invalid length. [ 431.144916][T17181] netlink: 'syz.4.2753': attribute type 17 has an invalid length. [ 431.153928][T17162] bond7: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 431.166285][T17162] bond7: left promiscuous mode [ 431.171102][T17162] gretap1: left promiscuous mode [ 431.535922][T17193] netlink: 'syz.0.2757': attribute type 1 has an invalid length. [ 431.649184][T17193] 8021q: adding VLAN 0 to HW filter on device bond8 [ 431.993167][T17203] x_tables: duplicate underflow at hook 4 [ 432.151735][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 432.159887][ C1] lec:lec_tx_timeout: lec0 [ 432.165441][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.199099][T17207] ip6t_rpfilter: unknown options [ 432.229442][T17207] netlink: 'syz.2.2762': attribute type 39 has an invalid length. [ 432.522400][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 433.027346][T17241] netlink: 'syz.2.2770': attribute type 1 has an invalid length. [ 433.076919][ T5997] lo speed is unknown, defaulting to 1000 [ 433.089924][ T5997] syz2: Port: 1 Link ACTIVE [ 433.230860][T17241] bond13: entered promiscuous mode [ 433.268389][T17241] bond13: entered allmulticast mode [ 433.292989][T17241] 8021q: adding VLAN 0 to HW filter on device bond13 [ 433.332470][T17254] __nla_validate_parse: 13 callbacks suppressed [ 433.332492][T17254] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2772'. [ 433.358848][T17254] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2772'. [ 433.455777][T17270] xt_hashlimit: size too large, truncated to 1048576 [ 433.498567][T17249] lo speed is unknown, defaulting to 1000 [ 433.517955][T17249] lo speed is unknown, defaulting to 1000 [ 433.576242][T17266] xt_hashlimit: size too large, truncated to 1048576 [ 433.610163][T17266] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 433.742036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.395672][T17305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2780'. [ 434.447217][T17293] syzkaller0: entered promiscuous mode [ 434.461549][T17293] syzkaller0: entered allmulticast mode [ 434.477074][T17297] syzkaller1: entered promiscuous mode [ 434.489898][T17297] syzkaller1: entered allmulticast mode [ 434.761830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.811827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.178025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 437.186115][ C1] lec:lec_tx_timeout: lec0 [ 437.190686][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 437.223433][T17315] netlink: 'syz.3.2781': attribute type 1 has an invalid length. [ 437.231198][T17315] netlink: 'syz.3.2781': attribute type 2 has an invalid length. [ 437.241251][T17249] wg1 speed is unknown, defaulting to 1000 [ 437.378931][T17328] lo speed is unknown, defaulting to 1000 [ 437.403738][T17328] lo speed is unknown, defaulting to 1000 [ 437.427946][T17341] netlink: 'syz.3.2788': attribute type 4 has an invalid length. [ 437.454686][T12043] lo speed is unknown, defaulting to 1000 [ 437.462109][T17341] netlink: 'syz.3.2788': attribute type 4 has an invalid length. [ 437.484979][ T5997] lo speed is unknown, defaulting to 1000 [ 437.499605][ T8465] lo speed is unknown, defaulting to 1000 [ 437.522815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.717232][T17353] lo speed is unknown, defaulting to 1000 [ 437.921292][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2792'. [ 437.950806][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2792'. [ 438.051152][T17367] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 438.140659][T17353] lo speed is unknown, defaulting to 1000 [ 438.585178][T17328] wg1 speed is unknown, defaulting to 1000 [ 438.601893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.040256][T17381] netlink: 'syz.2.2797': attribute type 10 has an invalid length. [ 439.205894][T17384] dvmrp0: left allmulticast mode [ 439.416459][T17386] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 439.426655][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'. [ 439.641862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.647211][T17353] wg1 speed is unknown, defaulting to 1000 [ 440.066561][T17396] tap0: tun_chr_ioctl cmd 1074812118 [ 440.077721][T17398] tap0: tun_chr_ioctl cmd 35123 [ 440.218434][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.233215][ T1317] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.842359][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.204486][T17425] netlink: 'syz.3.2811': attribute type 12 has an invalid length. [ 441.354896][T17436] netlink: 'syz.2.2813': attribute type 21 has an invalid length. [ 441.635424][T17443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2815'. [ 441.663049][T17443] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2815'. [ 441.676322][T17443] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2815'. [ 441.686797][T17443] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2815'. [ 441.737905][T17445] siw: device registration error -23 [ 441.744275][T17443] tipc: Enabled bearer , priority 0 [ 441.773005][T17445] siw: device registration error -23 [ 441.778700][T17445] siw: device registration error -23 [ 441.837622][T17442] tipc: Disabling bearer [ 442.201772][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 442.209883][ C1] lec:lec_tx_timeout: lec0 [ 442.214726][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 442.224075][T17456] 8021q: VLANs not supported on nlmon0 [ 442.268917][T17457] netlink: 'syz.3.2819': attribute type 1 has an invalid length. [ 442.282024][T17457] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2819'. [ 442.701562][T17470] bond0: entered promiscuous mode [ 442.726388][T17470] batadv0: entered promiscuous mode [ 442.745126][T17470] debugfs: 'hsr1' already exists in 'hsr' [ 442.771841][T17470] Cannot create hsr debugfs directory [ 442.807940][T17470] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 442.850182][T17470] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 442.886517][T17470] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 442.900855][T17470] bond0: left promiscuous mode [ 442.920237][T17470] batadv0: left promiscuous mode [ 442.928203][T17477] netlink: 'syz.1.2825': attribute type 10 has an invalid length. [ 443.139925][T17481] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2827'. [ 443.186003][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 443.214759][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'. [ 443.414649][T17496] veth0_to_bridge: entered allmulticast mode [ 443.466690][T17502] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2831'. [ 443.478155][T17501] netlink: 'syz.3.2833': attribute type 1 has an invalid length. [ 443.480641][T17494] lo speed is unknown, defaulting to 1000 [ 443.534918][T17501] bond12: entered promiscuous mode [ 443.542284][T17501] 8021q: adding VLAN 0 to HW filter on device bond12 [ 443.568466][T17494] lo speed is unknown, defaulting to 1000 [ 443.622458][T17501] 8021q: adding VLAN 0 to HW filter on device bond12 [ 443.629895][T17501] bond12: (slave wireguard1): The slave device specified does not support setting the MAC address [ 443.641560][T17501] bond12: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 443.669608][T17501] bond12: (slave wireguard1): making interface the new active one [ 443.677969][T17501] wireguard1: entered promiscuous mode [ 443.686292][T17501] bond12: (slave wireguard1): Enslaving as an active interface with an up link [ 443.799922][T17507] netlink: 'syz.0.2834': attribute type 13 has an invalid length. [ 443.821279][T17507] gretap0: refused to change device tx_queue_len [ 443.833791][T17511] netlink: 'syz.3.2835': attribute type 1 has an invalid length. [ 443.840573][T17507] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 443.842603][T17511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.355717][T17494] wg1 speed is unknown, defaulting to 1000 [ 444.827025][T17544] Cannot find add_set index 1 as target [ 444.953947][T17546] lo speed is unknown, defaulting to 1000 [ 444.978206][T17546] lo speed is unknown, defaulting to 1000 [ 445.498816][T17566] __nla_validate_parse: 1 callbacks suppressed [ 445.498838][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 445.780102][T17575] netlink: 'syz.3.2851': attribute type 11 has an invalid length. [ 445.809400][T17574] netlink: 'syz.3.2851': attribute type 11 has an invalid length. [ 445.961815][T17585] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 445.961943][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.968813][T17584] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 446.016557][T17584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.097367][T17589] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2853'. [ 446.493993][T17606] netlink: 'syz.0.2859': attribute type 1 has an invalid length. [ 446.628442][T17606] 8021q: adding VLAN 0 to HW filter on device bond9 [ 446.647816][T17611] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 446.685872][T17613] bond9: entered promiscuous mode [ 446.709435][T17613] bond9: entered allmulticast mode [ 446.770564][T17612] lo speed is unknown, defaulting to 1000 [ 446.796536][T17612] lo speed is unknown, defaulting to 1000 [ 447.133285][T17546] wg1 speed is unknown, defaulting to 1000 [ 447.222001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 447.230134][ C1] lec:lec_tx_timeout: lec0 [ 447.236632][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.312201][T17629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2864'. [ 447.763536][T17637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2866'. [ 447.773523][T17637] nbd: must specify at least one socket [ 447.782591][T17637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2866'. [ 447.793331][T17637] nbd: must specify at least one socket [ 448.035057][T17645] netlink: 'syz.3.2869': attribute type 12 has an invalid length. [ 448.328135][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.342457][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.354016][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.364678][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.373227][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.398856][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.407042][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.417998][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.433197][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.444714][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.588023][T17612] wg1 speed is unknown, defaulting to 1000 [ 448.735835][T17647] lo speed is unknown, defaulting to 1000 [ 448.847485][T17661] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2873'. [ 448.902282][T17647] lo speed is unknown, defaulting to 1000 [ 449.067173][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 449.277879][T17678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2877'. [ 449.299302][T17678] gtp1: entered allmulticast mode [ 449.508548][T17682] netlink: 'syz.0.2879': attribute type 4 has an invalid length. [ 449.522295][T17682] netlink: 'syz.0.2879': attribute type 4 has an invalid length. [ 449.637142][T17687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2880'. [ 449.653983][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 449.675564][T17687] dvmrp1: left allmulticast mode [ 450.051248][T17694] netlink: 'syz.3.2882': attribute type 1 has an invalid length. [ 450.072140][T17694] netlink: 'syz.3.2882': attribute type 2 has an invalid length. [ 450.417799][T17647] wg1 speed is unknown, defaulting to 1000 [ 450.522227][ T5845] Bluetooth: hci5: command tx timeout [ 450.619946][T17704] bond13: Removing last ns target with arp_interval on [ 450.793386][T17717] netlink: 'syz.0.2887': attribute type 39 has an invalid length. [ 451.657035][T17647] chnl_net:caif_netlink_parms(): no params data found [ 452.043091][T17749] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 452.064510][T17749] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 452.080750][T17752] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 452.094192][T17749] tipc: Resetting bearer [ 452.168601][T17752] __nla_validate_parse: 2 callbacks suppressed [ 452.168624][T17752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2897'. [ 452.186997][T17752] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2897'. [ 452.189914][T15232] tipc: Resetting bearer [ 452.311369][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 452.345284][T17765] syzkaller0: entered promiscuous mode [ 452.350890][T17765] syzkaller0: entered allmulticast mode [ 452.389734][T17767] netlink: 'syz.4.2900': attribute type 7 has an invalid length. [ 452.390311][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.408157][T17647] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.415780][T17647] bridge_slave_0: entered allmulticast mode [ 452.426553][T17647] bridge_slave_0: entered promiscuous mode [ 452.456627][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.464334][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.471570][T17647] bridge_slave_1: entered allmulticast mode [ 452.479148][T17647] bridge_slave_1: entered promiscuous mode [ 452.486812][T17771] netlink: 'syz.3.2901': attribute type 12 has an invalid length. [ 452.495428][T17771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2901'. [ 452.603301][ T5845] Bluetooth: hci5: command tx timeout [ 452.639604][T17778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2903'. [ 452.667500][T17778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2903'. [ 452.680955][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.695107][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.773158][T17647] team0: Port device team_slave_0 added [ 452.803461][T17647] team0: Port device team_slave_1 added [ 452.806428][T17784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2904'. [ 452.864672][T17784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2904'. [ 452.880479][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.918693][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.989862][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.001797][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 453.009891][ C1] lec:lec_tx_timeout: lec0 [ 453.014841][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 453.018761][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.042034][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.080216][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.146189][T17805] x_tables: duplicate underflow at hook 2 [ 453.175617][T17805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2910'. [ 453.188887][T17647] hsr_slave_0: entered promiscuous mode [ 453.197247][T17647] hsr_slave_1: entered promiscuous mode [ 453.204814][T17647] debugfs: 'hsr0' already exists in 'hsr' [ 453.221484][T17647] Cannot create hsr debugfs directory [ 453.293415][T17809] netlink: zone id is out of range [ 453.312335][T17809] netlink: zone id is out of range [ 453.348524][T17809] netlink: zone id is out of range [ 453.354272][T17809] netlink: zone id is out of range [ 453.361456][T17807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'. [ 453.367208][T17809] netlink: zone id is out of range [ 453.391920][T17809] netlink: zone id is out of range [ 453.403927][T17809] netlink: zone id is out of range [ 453.409373][T17809] netlink: zone id is out of range [ 453.427276][T17809] netlink: zone id is out of range [ 453.435123][T17809] netlink: zone id is out of range [ 453.630988][T17815] lo speed is unknown, defaulting to 1000 [ 453.734718][T17815] lo speed is unknown, defaulting to 1000 [ 453.863623][T17828] lo speed is unknown, defaulting to 1000 [ 454.018033][T17647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.021478][T17834] netlink: 'syz.3.2917': attribute type 1 has an invalid length. [ 454.207219][ T29] audit: type=1800 audit(1777143875.229:12): pid=17837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2918" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=3006 res=0 errno=0 [ 454.332240][ T29] audit: type=1800 audit(1777143875.229:13): pid=17837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2918" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=3006 res=0 errno=0 [ 454.415721][T17647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.562395][T17647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.686984][ T5845] Bluetooth: hci5: command tx timeout [ 454.972921][T17828] lo speed is unknown, defaulting to 1000 [ 455.330967][T17647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.836742][T17815] wg1 speed is unknown, defaulting to 1000 [ 455.926596][T17647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 455.963353][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.991489][T17647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 455.996674][T17877] netlink: 'syz.0.2927': attribute type 1 has an invalid length. [ 456.040158][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.059993][T17647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 456.100831][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.130421][T17647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 456.173817][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.458856][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.494078][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.513598][T15239] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.520823][T15239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.572434][T15238] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.579703][T15238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.604105][T17828] wg1 speed is unknown, defaulting to 1000 [ 456.763124][ T5845] Bluetooth: hci5: command tx timeout [ 456.841940][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 457.128484][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.676636][T17647] veth0_vlan: entered promiscuous mode [ 457.718452][T17647] veth1_vlan: entered promiscuous mode [ 457.755769][T17916] __nla_validate_parse: 7 callbacks suppressed [ 457.755787][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 457.891253][T17647] veth0_macvtap: entered promiscuous mode [ 457.941226][T17647] veth1_macvtap: entered promiscuous mode [ 458.019237][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.042101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 458.050185][ C1] lec:lec_tx_timeout: lec0 [ 458.055367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 458.087001][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.165788][T15236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.186835][T15236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.223689][T15236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.257835][T15236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.667496][T15232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.696791][T15232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.006808][T15236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.033110][T15236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.981535][T17941] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 460.108202][T17946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2938'. [ 460.164860][T17943] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 460.179414][T17943] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 460.434650][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 460.675086][T17960] macsec3: entered promiscuous mode [ 460.680544][T17960] virt_wifi0: entered promiscuous mode [ 461.041217][T17974] netlink: 'syz.2.2946': attribute type 1 has an invalid length. [ 461.090558][T17974] erspan1: entered allmulticast mode [ 461.128175][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 461.445232][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.464155][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.473964][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.488863][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.498587][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.649323][T17978] lo speed is unknown, defaulting to 1000 [ 461.677699][T17978] lo speed is unknown, defaulting to 1000 [ 461.784652][T17985] xt_TCPMSS: Only works on TCP SYN packets [ 462.023722][T17991] xt_hashlimit: size too large, truncated to 1048576 [ 462.186862][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058372000: rx timeout, send abort [ 462.631408][T17978] wg1 speed is unknown, defaulting to 1000 [ 462.695192][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058372000: abort rx timeout. Force session deactivation [ 462.917071][T18002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2955'. [ 462.959513][T18002] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2955'. [ 462.986223][T18004] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2956'. [ 462.991856][T18002] netlink: 'syz.1.2955': attribute type 5 has an invalid length. [ 463.052340][T18002] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2955'. [ 463.071731][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 463.079864][ C1] lec:lec_tx_timeout: lec0 [ 463.084920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.561925][ T5845] Bluetooth: hci1: command tx timeout [ 463.811396][T17978] chnl_net:caif_netlink_parms(): no params data found [ 463.873658][T18033] tipc: Enabling of bearer rejected, already enabled [ 464.112411][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 464.210811][T18047] gretap0: entered promiscuous mode [ 464.330467][T18054] netlink: 'syz.1.2967': attribute type 1 has an invalid length. [ 464.448037][T18054] bond9: entered promiscuous mode [ 464.465921][T18054] 8021q: adding VLAN 0 to HW filter on device bond9 [ 464.480950][T17978] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.500163][T17978] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.516281][T17978] bridge_slave_0: entered allmulticast mode [ 464.544748][T17978] bridge_slave_0: entered promiscuous mode [ 464.558243][T17978] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.565633][T17978] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.573662][T17978] bridge_slave_1: entered allmulticast mode [ 464.595997][T17978] bridge_slave_1: entered promiscuous mode [ 464.641447][T18063] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 464.649499][T18063] nbd: couldn't find device at index -427251215 [ 464.739300][T17978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.748726][T18066] netlink: 'syz.0.2969': attribute type 28 has an invalid length. [ 464.771558][T17978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.859347][T18066] 5n: entered promiscuous mode [ 464.870654][T17978] team0: Port device team_slave_0 added [ 464.890091][T17978] team0: Port device team_slave_1 added [ 465.013816][T17978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.031626][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 465.044511][T17978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.089131][T18082] net_ratelimit: 392 callbacks suppressed [ 465.089153][T18082] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.104245][T17978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.126024][T17978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.153256][T18084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2975'. [ 465.164926][T17978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.193861][T18082] IPVS: stopping backup sync thread 9180 ... [ 465.204716][T17978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.238696][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 465.308608][T18084] netlink: 'syz.3.2975': attribute type 1 has an invalid length. [ 465.336181][T18084] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2975'. [ 465.394858][T17978] hsr_slave_0: entered promiscuous mode [ 465.414619][T17978] hsr_slave_1: entered promiscuous mode [ 465.432945][T17978] debugfs: 'hsr0' already exists in 'hsr' [ 465.441527][T17978] Cannot create hsr debugfs directory [ 465.478545][T18084] geneve3: entered promiscuous mode [ 465.492111][T18084] geneve3: entered allmulticast mode [ 465.502955][ T3556] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 465.538223][ T3556] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 465.566785][ T3556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 465.606839][ T3556] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 465.643052][ T5845] Bluetooth: hci1: command tx timeout [ 465.743402][T18108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2981'. [ 466.119662][T18113] ipvlan1: entered promiscuous mode [ 466.151562][T18113] ipvlan1: left promiscuous mode [ 466.376187][T18109] netlink: 'syz.2.2981': attribute type 3 has an invalid length. [ 466.551584][T18134] lo speed is unknown, defaulting to 1000 [ 466.609079][T18134] lo speed is unknown, defaulting to 1000 [ 466.835825][T18139] IPv6: Can't replace route, no match found [ 467.133968][T17978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.160567][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.196113][T17978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.232240][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.263437][T17978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.297746][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.320871][T17978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.383065][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.722459][ T5845] Bluetooth: hci1: command tx timeout [ 467.750836][T17978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.789370][T17978] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.806626][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.813878][T15232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.891044][T15232] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.898334][T15232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.091722][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 468.099849][ C1] lec:lec_tx_timeout: lec0 [ 468.105016][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.190318][T18183] netlink: 'syz.2.3002': attribute type 4 has an invalid length. [ 468.256731][T18187] lo speed is unknown, defaulting to 1000 [ 468.299868][T18187] lo speed is unknown, defaulting to 1000 [ 468.405174][T18134] wg1 speed is unknown, defaulting to 1000 [ 468.514494][T17978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.913906][T18208] __nla_validate_parse: 6 callbacks suppressed [ 468.913929][T18208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3005'. [ 469.126414][T18207] lo speed is unknown, defaulting to 1000 [ 469.199838][T18207] lo speed is unknown, defaulting to 1000 [ 469.347289][T17978] veth0_vlan: entered promiscuous mode [ 469.469685][T17978] veth1_vlan: entered promiscuous mode [ 469.589518][T17978] veth0_macvtap: entered promiscuous mode [ 469.647819][T17978] veth1_macvtap: entered promiscuous mode [ 469.678515][T17978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.709970][T17978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.750857][ T3556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.765734][ T3556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.778246][ T3556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.793209][ T3556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.802588][ T5845] Bluetooth: hci1: command tx timeout [ 469.817551][T18222] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 469.835263][T18187] wg1 speed is unknown, defaulting to 1000 [ 470.010203][T15232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.021459][T15232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.082776][T15232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.094218][T15232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.192229][T18228] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.3009'. [ 470.764966][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 470.785101][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 470.801976][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 470.811518][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 470.819904][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.113652][T18207] wg1 speed is unknown, defaulting to 1000 [ 471.618870][T18233] lo speed is unknown, defaulting to 1000 [ 471.777858][T18254] lo speed is unknown, defaulting to 1000 [ 471.820953][T18233] lo speed is unknown, defaulting to 1000 [ 472.081894][T18255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3016'. [ 472.923329][ T5845] Bluetooth: hci4: command tx timeout [ 473.111791][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 473.119857][ C1] lec:lec_tx_timeout: lec0 [ 473.124552][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.164688][T18254] lo speed is unknown, defaulting to 1000 [ 473.744063][T18263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3018'. [ 473.939701][T18270] netlink: 'syz.0.3021': attribute type 9 has an invalid length. [ 474.077418][T18233] wg1 speed is unknown, defaulting to 1000 [ 474.268703][T18283] hsr0: left promiscuous mode [ 474.298293][T18283] macsec2: left promiscuous mode [ 474.326621][T18283] ip6gre2: left promiscuous mode [ 474.354650][T18283] geneve4: left promiscuous mode [ 474.379745][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'. [ 474.406280][T18283] bond9: left promiscuous mode [ 474.416691][T18287] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 474.510388][T18290] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 474.597400][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 474.730803][T18254] wg1 speed is unknown, defaulting to 1000 [ 475.002764][ T5845] Bluetooth: hci4: command tx timeout [ 475.011605][T18297] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 475.236008][T18309] xt_policy: too many policy elements [ 475.515744][T18233] chnl_net:caif_netlink_parms(): no params data found [ 475.569318][T18320] netlink: 'syz.2.3034': attribute type 58 has an invalid length. [ 475.594495][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 475.727339][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 476.140625][T18233] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.156001][T18233] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.174691][T18233] bridge_slave_0: entered allmulticast mode [ 476.204417][T18233] bridge_slave_0: entered promiscuous mode [ 476.229461][T18233] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.258906][T18233] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.281255][T18233] bridge_slave_1: entered allmulticast mode [ 476.326944][T18233] bridge_slave_1: entered promiscuous mode [ 476.795411][T18233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.832722][T18363] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3038'. [ 476.839530][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 476.881539][T18362] netlink: 'syz.1.3040': attribute type 13 has an invalid length. [ 476.929865][T18233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.942244][T18362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3040'. [ 477.083733][ T5845] Bluetooth: hci4: command tx timeout [ 477.124035][T18233] team0: Port device team_slave_0 added [ 477.206215][T18233] team0: Port device team_slave_1 added [ 477.474114][T18380] netlink: 'syz.2.3044': attribute type 39 has an invalid length. [ 477.596656][T18233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.614707][T18233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.661875][T18233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.705490][T18383] IPv6: sit1: Disabled Multicast RS [ 477.736244][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'. [ 477.768489][T18233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.790564][T18233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.847376][T18233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.860381][T18389] team0: Caught tx_queue_len zero misconfig [ 478.033314][T18233] hsr_slave_0: entered promiscuous mode [ 478.056581][T18233] hsr_slave_1: entered promiscuous mode [ 478.075610][T18233] debugfs: 'hsr0' already exists in 'hsr' [ 478.085482][T18233] Cannot create hsr debugfs directory [ 478.132223][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 478.140348][ C1] lec:lec_tx_timeout: lec0 [ 478.145648][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 478.465231][ T5926] IPVS: starting estimator thread 0... [ 478.552412][T18413] IPVS: using max 24 ests per chain, 57600 per kthread [ 478.707277][T18410] lo speed is unknown, defaulting to 1000 [ 478.727389][T18417] syzkaller0: entered promiscuous mode [ 478.733870][T18417] syzkaller0: entered allmulticast mode [ 478.765560][T18410] lo speed is unknown, defaulting to 1000 [ 479.162565][ T5845] Bluetooth: hci4: command tx timeout [ 479.458559][T18233] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 479.688567][T18233] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 479.859813][T18233] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 479.882857][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 479.948080][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 479.999653][T18233] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 480.266165][T18410] wg1 speed is unknown, defaulting to 1000 [ 480.478029][T18233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.508611][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.530385][T18233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.558343][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.580006][T18233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.621154][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.641294][T18233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.665618][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.977971][T18473] syzkaller0: entered promiscuous mode [ 480.983831][T18473] syzkaller0: entered allmulticast mode [ 481.141326][T18233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.217409][T18233] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.263914][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.271149][T15232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.331364][T15232] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.338631][T15232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.659253][T18479] tipc: Started in network mode [ 481.676329][T18479] tipc: Node identity 9e4d7703fbdc, cluster identity 4711 [ 481.693092][T18479] tipc: Enabled bearer , priority 0 [ 481.825379][T18479] tipc: Disabling bearer [ 482.014388][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3066'. [ 482.257399][T18491] bond1: entered promiscuous mode [ 482.281644][T18491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.413270][T18494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.428288][T18494] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 482.440304][T18494] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 483.161805][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 483.169927][ C1] lec:lec_tx_timeout: lec0 [ 483.175092][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.014681][T18233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.108159][T18504] netlink: 'syz.0.3069': attribute type 1 has an invalid length. [ 485.295403][T18504] 8021q: adding VLAN 0 to HW filter on device bond10 [ 485.312990][T18515] syzkaller0: entered promiscuous mode [ 485.325048][T18515] syzkaller0: entered allmulticast mode [ 485.338000][T18506] netlink: 'syz.1.3071': attribute type 1 has an invalid length. [ 485.346175][T18506] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3071'. [ 485.375683][T18507] veth13: entered promiscuous mode [ 485.385062][T18507] bond10: (slave veth13): Enslaving as an active interface with an up link [ 485.413689][T18517] macsec1: entered allmulticast mode [ 485.429432][T18517] dummy0: entered allmulticast mode [ 485.439401][T18517] dummy0: entered promiscuous mode [ 485.480340][T18517] dummy0: left allmulticast mode [ 485.565329][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 485.638297][ T5844] dummy0: left promiscuous mode [ 485.701602][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'. [ 485.754151][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 485.825428][T18530] macvtap1: entered promiscuous mode [ 485.841122][T18530] bridge0: entered promiscuous mode [ 485.850610][T18530] macvtap1: entered allmulticast mode [ 485.858776][T18530] bridge0: entered allmulticast mode [ 485.916432][T18233] veth0_vlan: entered promiscuous mode [ 485.946500][T18540] bridge0: left allmulticast mode [ 485.954576][T18540] bridge0: left promiscuous mode [ 486.024358][T18544] xt_cgroup: path and classid specified [ 486.075025][T18233] veth1_vlan: entered promiscuous mode [ 486.179814][T18547] nftables ruleset with unbound chain [ 486.230636][T18233] veth0_macvtap: entered promiscuous mode [ 486.277775][T18233] veth1_macvtap: entered promiscuous mode [ 486.324108][T18233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.358756][T18233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.393921][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'. [ 486.414699][ T6487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.423746][T18554] netlink: 3068 bytes leftover after parsing attributes in process `syz.0.3081'. [ 486.430446][ T6487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.449937][ T6487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.458923][T18554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3081'. [ 486.479383][ T6487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.534575][T18560] netlink: 840 bytes leftover after parsing attributes in process `syz.2.3084'. [ 486.715831][T18562] xt_hashlimit: size too large, truncated to 1048576 [ 486.786221][T15236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.800601][T18570] netlink: 'syz.2.3088': attribute type 1 has an invalid length. [ 486.815249][T15236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.922491][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.932853][T18570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.044402][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 487.075969][T18576] bond2: (slave gretap1): making interface the new active one [ 487.095959][T18576] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 487.250451][T18579] syzkaller0: entered promiscuous mode [ 487.257207][T18579] syzkaller0: entered allmulticast mode [ 487.663771][T18589] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.671259][T18589] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.192626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 488.200744][ C1] lec:lec_tx_timeout: lec0 [ 488.206877][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 488.217743][T18589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.279868][T18589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.898389][ T6492] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.915982][ T6492] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.948436][T15239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.964602][T15239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.022827][ T6492] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.044978][ T6492] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.145971][T18616] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 489.145971][T18616] Please contact the netfilter-devel mailing list or update your nftables rules. [ 489.390666][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 489.394361][T18626] vlan2: entered promiscuous mode [ 489.420240][T18626] bridge0: entered promiscuous mode [ 489.511031][ T6487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.521110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.524183][T18624] gtp0: entered promiscuous mode [ 489.554211][T18624] gtp0: entered allmulticast mode [ 489.567114][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.575798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.599161][T18632] nr0: tun_chr_ioctl cmd 1074025677 [ 489.614192][T18632] nr0: linktype set to 774 [ 489.626064][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.634687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.678659][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.687142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.706459][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.719690][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.729715][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.738227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.747164][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.753351][T18635] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 489.763447][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.781016][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.825445][T18636] tipc: Resetting bearer [ 489.950277][T18636] lo speed is unknown, defaulting to 1000 [ 489.990316][T18636] lo speed is unknown, defaulting to 1000 [ 490.383126][T18651] netlink: 'syz.3.3106': attribute type 3 has an invalid length. [ 490.456646][T18651] nbd: nbd0 already in use [ 490.509749][T18651] block nbd3: NBD_DISCONNECT [ 490.528195][T18651] block nbd3: Send disconnect failed -32 [ 490.556031][T18651] block nbd3: shutting down sockets [ 490.604898][T18674] __nla_validate_parse: 5 callbacks suppressed [ 490.604920][T18674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3109'. [ 490.797944][T18680] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 490.870298][T18686] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3114'. [ 490.870751][ T149] veth1: left allmulticast mode [ 490.946320][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 490.956349][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 490.996021][ T149] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 491.013663][ T149] ip6gretap2 (unregistering): left allmulticast mode [ 491.041232][ T149] bond9 (unregistering): (slave ip6gretap3): Releasing active interface [ 491.044667][T18694] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3113'. [ 491.184170][ T149] bond2 (unregistering): (slave erspan1): Releasing active interface [ 491.192708][ T149] erspan1 (unregistering): left promiscuous mode [ 491.602842][ T149] bond9 (unregistering): (slave bridge7): Releasing active interface [ 491.707388][ T149] .` (unregistering): Released all slaves [ 491.718131][ T149] bond1 (unregistering): Released all slaves [ 491.734898][ T149] bond2 (unregistering): Released all slaves [ 491.749587][ T149] bond3 (unregistering): Released all slaves [ 491.766556][ T149] bond4 (unregistering): Released all slaves [ 491.786401][ T149] bond5 (unregistering): Released all slaves [ 491.806899][ T149] bond7 (unregistering): Released all slaves [ 491.829160][ T149] bond6 (unregistering): Released all slaves [ 491.845357][ T149] bond8 (unregistering): Released all slaves [ 491.859661][ T149] bond0 (unregistering): Released all slaves [ 491.881423][ T149] bond9 (unregistering): Released all slaves [ 491.891992][ T50] Bluetooth: hci2: command tx timeout [ 491.899076][ T149] bond10 (unregistering): Released all slaves [ 491.913846][ T149] bond11 (unregistering): Released all slaves [ 491.935863][ T149] bond12 (unregistering): Released all slaves [ 491.956243][ T149] bond13 (unregistering): Released all slaves [ 491.973779][T18683] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 492.190604][ T149] tipc: Left network mode [ 492.198368][T18699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3115'. [ 492.317003][T18702] syzkaller0: entered promiscuous mode [ 492.343928][T18702] syzkaller0: entered allmulticast mode [ 492.688060][T18698] tipc: Started in network mode [ 492.699951][T18698] tipc: Node identity daff51fb05af, cluster identity 4711 [ 492.711575][T18698] tipc: Enabled bearer , priority 0 [ 492.730263][T18636] wg1 speed is unknown, defaulting to 1000 [ 492.740696][T18697] tipc: Resetting bearer [ 492.793458][T18697] tipc: Disabling bearer [ 492.957922][T18719] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004 [ 493.221728][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 493.229857][ C1] lec:lec_tx_timeout: lec0 [ 493.235645][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 493.329250][T18729] tc_dump_action: action bad kind [ 493.972500][ T50] Bluetooth: hci2: command tx timeout [ 494.016921][T18756] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3130'. [ 494.019129][T18753] tap0: tun_chr_ioctl cmd 1074812118 [ 494.075608][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 494.168095][T18741] lo speed is unknown, defaulting to 1000 [ 494.251548][T18741] lo speed is unknown, defaulting to 1000 [ 494.494373][T18636] chnl_net:caif_netlink_parms(): no params data found [ 494.891099][T18636] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.918189][T18636] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.954140][T18636] bridge_slave_0: entered allmulticast mode [ 494.989078][T18636] bridge_slave_0: entered promiscuous mode [ 495.021571][T18636] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.047150][T18636] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.073257][T18636] bridge_slave_1: entered allmulticast mode [ 495.104043][T18636] bridge_slave_1: entered promiscuous mode [ 495.360226][T18636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.440023][T18636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.937290][T18636] team0: Port device team_slave_0 added [ 495.966555][T18636] team0: Port device team_slave_1 added [ 495.988669][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'. [ 495.999733][T18817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3140'. [ 496.013061][T18817] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3140'. [ 496.042840][ T50] Bluetooth: hci2: command tx timeout [ 496.057471][T18817] netlink: 'syz.3.3140': attribute type 5 has an invalid length. [ 496.074164][T18817] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3140'. [ 496.088722][T18820] syz_tun: entered allmulticast mode [ 496.196935][T18823] netlink: 'syz.2.3142': attribute type 10 has an invalid length. [ 496.198669][T18814] bond0: entered promiscuous mode [ 496.242679][T18814] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 496.266901][T18814] gretap0: entered promiscuous mode [ 496.279080][T18814] debugfs: 'hsr1' already exists in 'hsr' [ 496.290135][T18814] Cannot create hsr debugfs directory [ 496.296760][T18814] hsr1: entered promiscuous mode [ 496.346750][T18820] pimreg: left allmulticast mode [ 496.367821][T18823] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.378053][T18823] bond0: (slave team0): Enslaving as an active interface with an up link [ 496.393313][T18636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.408242][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.467897][T18636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.508170][T18813] syz_tun: left allmulticast mode [ 496.530810][T18636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.555468][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.631835][T18636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.805018][T18741] wg1 speed is unknown, defaulting to 1000 [ 497.083724][T18636] hsr_slave_0: entered promiscuous mode [ 497.103208][T18636] hsr_slave_1: entered promiscuous mode [ 497.119977][T18636] debugfs: 'hsr0' already exists in 'hsr' [ 497.133752][T18636] Cannot create hsr debugfs directory [ 497.189107][T18836] lo speed is unknown, defaulting to 1000 [ 497.295000][T18836] lo speed is unknown, defaulting to 1000 [ 498.122214][ T50] Bluetooth: hci2: command tx timeout [ 498.150351][T18859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3149'. [ 498.344871][ T149] hsr_slave_0: left promiscuous mode [ 498.363958][ T149] hsr_slave_1: left promiscuous mode [ 499.081714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 499.089888][ C1] lec:lec_tx_timeout: lec0 [ 499.096237][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 499.243514][T18636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 499.296518][T18883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3154'. [ 499.520520][T18636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 499.568209][T18891] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3155'. [ 499.782430][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 499.796462][T18636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 499.888790][T18894] netlink: 'syz.2.3155': attribute type 1 has an invalid length. [ 499.893190][T18836] wg1 speed is unknown, defaulting to 1000 [ 499.980272][T18636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 500.041497][T18900] xt_hashlimit: size too large, truncated to 1048576 [ 500.085238][ T149] IPVS: stop unused estimator thread 0... [ 500.405475][T18907] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3158'. [ 500.434837][T18909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3158'. [ 500.875665][T18914] syzkaller0: entered promiscuous mode [ 500.899196][T18914] syzkaller0: entered allmulticast mode [ 501.662042][ T1317] net_ratelimit: 6 callbacks suppressed [ 501.662063][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.701987][ T1317] clip:clip_start_xmit: skb_dst(skb) == NULL [ 503.543066][T18924] syzkaller0: entered promiscuous mode [ 503.548676][T18924] syzkaller0: entered allmulticast mode [ 503.591623][T18928] tipc: Enabled bearer , priority 0 [ 503.607611][T18922] tipc: Resetting bearer [ 503.637155][T18922] tipc: Disabling bearer [ 503.727999][T18636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.745944][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.755198][T18636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.767755][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.781230][T18937] sctp: [Deprecated]: syz.3.3163 (pid 18937) Use of int in maxseg socket option. [ 503.781230][T18937] Use struct sctp_assoc_value instead [ 503.860187][T18636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 503.890199][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.913810][T18636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.929814][T18941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3165'. [ 503.931107][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.112125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 504.120276][ C1] lec:lec_tx_timeout: lec0 [ 504.125954][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 504.156409][T18949] netlink: 'syz.2.3166': attribute type 10 has an invalid length. [ 504.217464][T18950] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.3166'. [ 504.264656][T18636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.328128][T18636] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.388139][T15239] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.395419][T15239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.430500][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.437755][ T6492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.509555][T18955] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3168'. [ 504.536526][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 504.581287][T18958] netlink: 'syz.4.3168': attribute type 9 has an invalid length. [ 504.610692][T18958] netlink: 186364 bytes leftover after parsing attributes in process `syz.4.3168'. [ 504.635997][T18955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3168'. [ 504.671395][T18955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3168'. [ 504.839650][T18967] netlink: 'syz.2.3171': attribute type 1 has an invalid length. [ 505.114603][T18973] syzkaller0: entered promiscuous mode [ 505.129166][T18973] syzkaller0: entered allmulticast mode [ 505.200146][T18973] tipc: Enabled bearer , priority 0 [ 505.220546][T18636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.232677][T18970] tipc: Resetting bearer [ 505.254100][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3174'. [ 505.284545][T18970] tipc: Disabling bearer [ 505.395756][T18979] bridge_slave_0: left allmulticast mode [ 505.410122][T18979] bridge_slave_0: left promiscuous mode [ 505.429546][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.456395][T18979] bridge_slave_1: left allmulticast mode [ 505.462573][T18979] bridge_slave_1: left promiscuous mode [ 505.468378][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.480735][T18979] bond0: (slave bond_slave_0): Releasing backup interface [ 505.495360][T18979] bond0: (slave bond_slave_1): Releasing backup interface [ 505.515088][T18979] team0: Port device team_slave_0 removed [ 505.527290][T18979] team0: Port device team_slave_1 removed [ 505.534186][T18979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.541614][T18979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.551510][T18979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.559397][T18979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.575923][T18979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 505.667473][T18636] veth0_vlan: entered promiscuous mode [ 505.720487][T18636] veth1_vlan: entered promiscuous mode [ 505.789485][T18986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.873907][T18636] veth0_macvtap: entered promiscuous mode [ 505.905152][T18636] veth1_macvtap: entered promiscuous mode [ 506.014177][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'. [ 506.017770][T18993] lo speed is unknown, defaulting to 1000 [ 506.051194][T18636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.051942][T19008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3181'. [ 506.145498][T18636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.195948][T18993] lo speed is unknown, defaulting to 1000 [ 506.217973][T15232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.247441][T15232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.287188][T15232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.312407][T15232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.650815][T19018] lo speed is unknown, defaulting to 1000 [ 506.676563][T15232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.695883][T15232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.819734][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.835474][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.063376][T19018] lo speed is unknown, defaulting to 1000 [ 507.368103][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 507.386164][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 507.397417][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 507.410445][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 507.425182][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 507.586292][T19041] lo speed is unknown, defaulting to 1000 [ 507.895307][ T5843] team0: Port device syz_tun removed [ 507.961360][T18993] wg1 speed is unknown, defaulting to 1000 [ 507.968257][T19049] lo speed is unknown, defaulting to 1000 [ 508.003170][T19041] lo speed is unknown, defaulting to 1000 [ 508.641085][T19049] lo speed is unknown, defaulting to 1000 [ 508.667352][T19018] wg1 speed is unknown, defaulting to 1000 [ 509.080904][T19064] openvswitch: netlink: IP tunnel dst address not specified [ 509.151710][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 509.159854][ C1] lec:lec_tx_timeout: lec0 [ 509.166448][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 509.382088][T19041] wg1 speed is unknown, defaulting to 1000 [ 509.482424][ T50] Bluetooth: hci3: command tx timeout [ 509.525988][T19078] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 509.710722][T19083] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 510.060888][T19082] lo speed is unknown, defaulting to 1000 [ 510.230374][T19049] wg1 speed is unknown, defaulting to 1000 [ 510.579471][T19041] chnl_net:caif_netlink_parms(): no params data found [ 510.790919][T19082] lo speed is unknown, defaulting to 1000 [ 510.988382][T19041] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.999651][T19041] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.009221][T19041] bridge_slave_0: entered allmulticast mode [ 511.018421][T19041] bridge_slave_0: entered promiscuous mode [ 511.064388][T19041] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.083164][T19041] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.090522][T19041] bridge_slave_1: entered allmulticast mode [ 511.099931][T19041] bridge_slave_1: entered promiscuous mode [ 511.231728][T19041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.270137][T19041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.433293][T19041] team0: Port device team_slave_0 added [ 511.443041][T19041] team0: Port device team_slave_1 added [ 511.444985][T19095] __nla_validate_parse: 2 callbacks suppressed [ 511.445002][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3198'. [ 511.565564][ T50] Bluetooth: hci3: command tx timeout [ 511.587548][T19041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.596570][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.623286][T19041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.641023][T19041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.650046][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.681312][T19041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.768043][T19082] wg1 speed is unknown, defaulting to 1000 [ 511.988084][T19041] hsr_slave_0: entered promiscuous mode [ 511.995489][T19041] hsr_slave_1: entered promiscuous mode [ 512.013801][T19041] debugfs: 'hsr0' already exists in 'hsr' [ 512.032308][T19041] Cannot create hsr debugfs directory [ 513.342666][T19121] ip6_vti0: entered promiscuous mode [ 513.370799][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 513.642483][ T50] Bluetooth: hci3: command tx timeout [ 513.669336][T19041] bond0: (slave netdevsim0): Releasing backup interface [ 513.700712][T19041] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 513.746211][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3204'. [ 513.774901][T19126] netlink: 'syz.4.3204': attribute type 5 has an invalid length. [ 513.798028][T19126] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3204'. [ 513.838161][T19133] sctp: [Deprecated]: syz.3.3206 (pid 19133) Use of int in maxseg socket option. [ 513.838161][T19133] Use struct sctp_assoc_value instead [ 513.866413][T19133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.973285][T19126] geneve2: entered promiscuous mode [ 513.985579][T19126] geneve2: entered allmulticast mode [ 513.997806][ T149] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48525 - 0 [ 514.018684][ T149] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48525 - 0 [ 514.051624][ T149] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48525 - 0 [ 514.087764][ T149] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48525 - 0 [ 514.182269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 514.190390][ C1] lec:lec_tx_timeout: lec0 [ 514.195708][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 514.686848][T19145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.699944][T19147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3208'. [ 514.730255][T19146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3208'. [ 514.796030][T19041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.814415][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 514.834141][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 514.870552][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.938368][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 514.940255][T19041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.960679][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 514.973132][T19157] netlink: 'syz.4.3211': attribute type 11 has an invalid length. [ 514.981483][T19158] netlink: 'syz.4.3211': attribute type 11 has an invalid length. [ 514.995955][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.003892][T15236] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.047951][T19041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 515.068229][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.077316][T19041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.115495][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.126537][T15236] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.154047][T15236] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.178985][T15236] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.363714][T19165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.372293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.388028][T19177] lo speed is unknown, defaulting to 1000 [ 515.397854][T19165] IPVS: sh: FWM 3 0x00000003 - no destination available [ 515.420627][T19179] gre1: entered promiscuous mode [ 515.467797][T19177] lo speed is unknown, defaulting to 1000 [ 515.500354][T19179] netlink: 'syz.4.3214': attribute type 39 has an invalid length. [ 515.547171][T19184] netlink: 'syz.3.3216': attribute type 13 has an invalid length. [ 515.588766][T19184] netlink: 'syz.3.3216': attribute type 17 has an invalid length. [ 515.596502][T19041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.616027][T19188] lo: entered promiscuous mode [ 515.628905][T19188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.778123][ T50] Bluetooth: hci3: command tx timeout [ 515.853991][T19184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.921182][T19041] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.974354][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.981618][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.058352][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.065646][T15236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.517529][T19204] __nla_validate_parse: 4 callbacks suppressed [ 516.517550][T19204] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3219'. [ 516.884002][T19177] wg1 speed is unknown, defaulting to 1000 [ 516.915152][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 516.936736][T19041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.960841][T19208] mac80211_hwsim hwsim40 ;: renamed from wlan0 (while UP) [ 517.342386][T19041] veth0_vlan: entered promiscuous mode [ 517.388101][T19041] veth1_vlan: entered promiscuous mode [ 517.532733][T19041] veth0_macvtap: entered promiscuous mode [ 517.582941][T19041] veth1_macvtap: entered promiscuous mode [ 517.679217][T19041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.721541][T19041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.871047][T15232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.901275][T15232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.945701][T15232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.982906][T15232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.024178][T19227] netlink: 'syz.0.3227': attribute type 5 has an invalid length. [ 518.034629][T19229] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3228'. [ 518.456006][T19236] netlink: 'syz.4.3230': attribute type 2 has an invalid length. [ 518.624335][T15239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.649460][T15239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.807557][T15239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.826885][T15239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.212333][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 519.220475][ C1] lec:lec_tx_timeout: lec0 [ 519.225599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 519.971503][T19250] delete_channel: no stack [ 520.220336][ T5928] IPVS: starting estimator thread 0... [ 520.276835][T19259] netlink: 'syz.0.3235': attribute type 15 has an invalid length. [ 520.285552][T19259] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3235'. [ 520.350656][T19264] IPVS: using max 29 ests per chain, 69600 per kthread [ 520.650935][T19274] netlink: ct family unspecified [ 520.682013][T19274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.756409][T19277] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3241'. [ 520.899574][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 520.908750][T19280] tipc: Enabled bearer , priority 0 [ 520.914408][T19280] syzkaller0: entered promiscuous mode [ 520.942704][T19280] syzkaller0: entered allmulticast mode [ 521.048628][T19280] tipc: Resetting bearer [ 521.085331][T19279] tipc: Resetting bearer [ 521.144422][T19279] tipc: Disabling bearer [ 521.413631][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3248'. [ 521.493866][T19185] Set syz1 is full, maxelem 65536 reached [ 521.913802][T19323] netlink: 'syz.3.3258': attribute type 64 has an invalid length. [ 521.922644][T19323] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.930559][T19323] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.466424][T19340] sctp: [Deprecated]: syz.2.3266 (pid 19340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.466424][T19340] Use struct sctp_sack_info instead [ 524.398115][T19408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3296'. [ 524.793055][T19428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3306'. [ 525.001698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 525.009822][ C1] lec:lec_tx_timeout: lec0 [ 525.015684][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 525.092407][T19445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3314'. [ 525.105840][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 525.317927][T19454] tipc: Enabling of bearer rejected, failed to enable media [ 525.642356][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 525.837025][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 525.863264][T19488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3334'. [ 525.873116][T19488] netlink: 'syz.4.3334': attribute type 2 has an invalid length. [ 525.882668][T19488] netlink: 'syz.4.3334': attribute type 2 has an invalid length. [ 526.309712][T19505] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3342'. [ 526.875160][T19534] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 526.892048][T19534] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 527.279772][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3364'. [ 527.307674][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3364'. [ 528.140252][T19596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.181846][T19596] batadv_slave_0: entered promiscuous mode [ 528.878195][T19614] sctp: [Deprecated]: syz.1.3394 (pid 19614) Use of int in maxseg socket option. [ 528.878195][T19614] Use struct sctp_assoc_value instead [ 529.290654][T19635] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.298556][T19635] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.396680][T19637] bridge_slave_1: left allmulticast mode [ 529.433214][T19637] bridge_slave_1: left promiscuous mode [ 529.454312][T19637] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.505200][T19637] bridge_slave_0: left allmulticast mode [ 529.533492][T19637] bridge_slave_0: left promiscuous mode [ 529.554871][T19637] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.041805][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 530.049234][T19665] __nla_validate_parse: 3 callbacks suppressed [ 530.049253][T19665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3417'. [ 530.049922][ C1] lec:lec_tx_timeout: lec0 [ 530.070132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 530.304275][T19678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3423'. [ 531.859178][T19722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.486609][T19769] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 533.110428][T19794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3478'. [ 533.174780][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3479'. [ 533.309404][T19809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3484'. [ 533.344176][T19797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.457417][T19804] bond1: (slave veth3): Enslaving as an active interface with an up link [ 533.523589][T19808] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 534.787367][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 535.081925][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 535.090048][ C1] lec:lec_tx_timeout: lec0 [ 536.347639][T19892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.440287][T19892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.969498][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3532'. [ 536.998106][T19909] bridge_slave_1: entered promiscuous mode [ 537.096219][T19920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.116742][T15238] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.130083][T15238] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.139791][T15238] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.149298][T15238] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.182212][T15238] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.210769][T15238] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.242354][T15238] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.272085][T15238] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.579804][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3550'. [ 537.646738][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3550'. [ 538.739992][T19989] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3569'. [ 538.766618][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3569'. [ 538.836242][T19993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3570'. [ 539.026329][T19993] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 539.100424][T20002] netlink: 'syz.4.3573': attribute type 15 has an invalid length. [ 539.124495][T20002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3573'. [ 539.436973][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 539.644306][T20012] syzkaller0: entered promiscuous mode [ 539.663805][T20012] syzkaller0: entered allmulticast mode [ 540.294761][T20039] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 540.321007][T20039] syzkaller1: linktype set to 825 [ 540.516719][T20053] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3589'. [ 542.035619][T20041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3583'. [ 542.064489][T15239] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.073658][T15239] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 48525 - 0 [ 542.083398][T15239] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.096035][T15239] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 48525 - 0 [ 542.167473][T15239] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.177907][T15239] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 48525 - 0 [ 542.190200][T15239] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.210330][T15239] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 48525 - 0 [ 542.272992][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3594'. [ 542.637334][T20100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3597'. [ 542.669659][T20100] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 542.725006][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3597'. [ 542.756489][T20100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.856677][T20110] netlink: 'syz.2.3599': attribute type 1 has an invalid length. [ 543.169030][T20127] veth1_to_bond: entered promiscuous mode [ 543.203506][T20127] veth1_to_bond: left promiscuous mode [ 543.346980][T20134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3607'. [ 543.526076][T20147] syzkaller1: entered promiscuous mode [ 543.535182][T20147] syzkaller1: entered allmulticast mode [ 543.753595][T20155] syzkaller1: entered promiscuous mode [ 543.759492][T20155] syzkaller1: entered allmulticast mode [ 543.959271][T20165] netlink: 'syz.1.3616': attribute type 1 has an invalid length. [ 543.977834][T20165] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3616'. [ 543.988281][T20165] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3616'. [ 543.998176][T20165] netlink: 'syz.1.3616': attribute type 1 has an invalid length. [ 544.006704][T20165] netlink: 634 bytes leftover after parsing attributes in process `syz.1.3616'. [ 544.052437][T20166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3615'. [ 544.308246][T20166] lo speed is unknown, defaulting to 1000 [ 544.349172][T20166] lo speed is unknown, defaulting to 1000 [ 544.508942][T20183] lo speed is unknown, defaulting to 1000 [ 544.555715][T20184] lo speed is unknown, defaulting to 1000 [ 544.578155][T20186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'. [ 544.849542][T20183] lo speed is unknown, defaulting to 1000 [ 545.401444][T20205] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:21 [ 545.424458][T20201] lo speed is unknown, defaulting to 1000 [ 545.441557][T20166] wg1 speed is unknown, defaulting to 1000 [ 545.532176][T20184] lo speed is unknown, defaulting to 1000 [ 546.078926][T20216] netlink: 'syz.1.3626': attribute type 11 has an invalid length. [ 546.089346][T20216] netlink: 'syz.1.3626': attribute type 23 has an invalid length. [ 546.177756][T20215] netlink: 'syz.1.3626': attribute type 11 has an invalid length. [ 546.188346][T20215] netlink: 'syz.1.3626': attribute type 23 has an invalid length. [ 546.470941][T20201] lo speed is unknown, defaulting to 1000 [ 546.769658][T20183] wg1 speed is unknown, defaulting to 1000 [ 547.408070][T20239] __nla_validate_parse: 3 callbacks suppressed [ 547.408092][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.448972][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.459992][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.471015][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.486866][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.510577][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.562984][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.585192][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.609617][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.626625][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3633'. [ 547.697077][T20201] wg1 speed is unknown, defaulting to 1000 [ 547.722043][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 548.205295][T20184] wg1 speed is unknown, defaulting to 1000 [ 548.592217][T20277] Can't find ip_set type has:net,iface [ 549.307199][T20285] netlink: 'syz.1.3646': attribute type 2 has an invalid length. [ 549.336294][T20285] netlink: 'syz.1.3646': attribute type 8 has an invalid length. [ 549.391616][T20287] netlink: 'syz.1.3646': attribute type 2 has an invalid length. [ 549.410311][T20287] netlink: 'syz.1.3646': attribute type 8 has an invalid length. [ 549.601448][T20286] syzkaller0: entered promiscuous mode [ 549.607481][T20286] syzkaller0: entered allmulticast mode [ 552.851922][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 553.007128][T20299] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 553.015688][T20299] netlink: 'syz.4.3649': attribute type 2 has an invalid length. [ 553.307059][T20314] vlan2: entered promiscuous mode [ 553.313529][T20314] bridge0: entered promiscuous mode [ 553.614022][T20328] __nla_validate_parse: 150 callbacks suppressed [ 553.614047][T20328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3657'. [ 553.977636][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 555.174579][T20367] erspan0: entered promiscuous mode [ 555.180250][T20367] macsec1: entered promiscuous mode [ 555.191416][T20367] erspan0: left promiscuous mode [ 555.407104][T20364] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 555.441522][T20364] bond1 (unregistering): Released all slaves [ 555.950407][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3671'. [ 557.864220][T20354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.338918][T20410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3675'. [ 558.374304][T20409] : entered promiscuous mode [ 558.529783][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3677'. [ 558.718891][T20430] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 559.084313][T20444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3684'. [ 559.125953][T20447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3685'. [ 559.142891][T20444] netlink: 'syz.2.3684': attribute type 8 has an invalid length. [ 559.186728][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3685'. [ 559.348596][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3688'. [ 559.372768][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3688'. [ 559.520144][T20466] netlink: 'syz.1.3689': attribute type 1 has an invalid length. [ 559.537756][T20461] lo speed is unknown, defaulting to 1000 [ 559.567209][T20461] lo speed is unknown, defaulting to 1000 [ 559.630906][T20468] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3690'. [ 559.676183][T20468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3690'. [ 559.679119][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3691'. [ 559.696603][T20468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3690'. [ 559.727399][T20468] syzkaller1: entered promiscuous mode [ 559.736454][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3691'. [ 559.764282][T20468] syzkaller1: entered allmulticast mode [ 560.077945][T20484] ip6erspan0: entered allmulticast mode [ 560.161086][T20485] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 560.219129][T20485] bond1 (unregistering): Released all slaves [ 561.157994][T20461] wg1 speed is unknown, defaulting to 1000 [ 561.176995][T20521] netlink: 'syz.2.3705': attribute type 10 has an invalid length. [ 561.251974][T20521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 561.431158][T20537] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 562.155656][T20555] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 562.428450][T20576] netlink: 'syz.2.3715': attribute type 2 has an invalid length. [ 562.473730][T20576] tipc: Cannot configure node identity twice [ 562.515180][T20566] netlink: 'syz.3.3714': attribute type 5 has an invalid length. [ 562.666371][T20578] bridge0: port 3(syz_tun) entered blocking state [ 562.690446][T20578] bridge0: port 3(syz_tun) entered disabled state [ 562.708356][T20578] syz_tun: entered allmulticast mode [ 562.746575][T20578] syz_tun: entered promiscuous mode [ 563.021267][T20595] : renamed from veth0_to_bond (while UP) [ 563.089857][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.107114][ T1317] lec:lec_start_xmit: lec0:No lecd attached [ 563.116667][ T1317] clip:clip_start_xmit: skb_dst(skb) == NULL [ 564.299792][T20628] syzkaller0: entered promiscuous mode [ 564.349647][T20628] xt_hashlimit: size too large, truncated to 1048576 [ 565.092146][T20653] block nbd1: server does not support multiple connections per device. [ 565.122228][T20653] block nbd1: shutting down sockets [ 565.323705][T20659] __nla_validate_parse: 5 callbacks suppressed [ 565.323729][T20659] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3731'. [ 565.371762][T20659] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 565.497744][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3731'. [ 565.507893][T20671] dummy0: entered allmulticast mode [ 565.526228][T20670] openvswitch: netlink: Flow key attr not present in new flow. [ 565.581257][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3734'. [ 565.643273][T20671] can: request_module (can-proto-4) failed. [ 565.747817][T20665] dummy0: left allmulticast mode [ 565.808157][T20681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3736'. [ 565.822172][T20681] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3736'. [ 565.849876][T20681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3736'. [ 566.012828][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'. [ 566.107778][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3741'. [ 566.360681][T20705] geneve2: entered promiscuous mode [ 566.564001][T20720] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 566.568895][T20696] syzkaller1: entered promiscuous mode [ 566.580513][ T29] audit: type=1800 audit(1777143987.599:14): pid=20721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3746" name="memory.events" dev="tmpfs" ino=624 res=0 errno=0 [ 566.609127][T20696] syzkaller1: entered allmulticast mode [ 566.631622][T20720] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 566.635285][ T29] audit: type=1804 audit(1777143987.629:15): pid=20721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3746" name="/newroot/119/memory.events" dev="tmpfs" ino=624 res=1 errno=0 [ 566.749720][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 566.793825][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 566.813833][T20721] veth0: entered promiscuous mode [ 567.035255][T20719] veth0: left promiscuous mode [ 567.294961][T20738] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 567.312239][T20738] bond1 (unregistering): Released all slaves [ 567.717145][T20746] syzkaller0: entered promiscuous mode [ 567.723195][T20746] syzkaller0: entered allmulticast mode [ 567.743730][T20763] openvswitch: netlink: EtherType 0 is less than min 600 [ 568.141816][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 568.149963][ C1] lec:lec_tx_timeout: lec0 [ 568.156050][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.384164][T20778] netlink: 'syz.3.3760': attribute type 11 has an invalid length. [ 571.413794][T20801] 0X: renamed from caif0 [ 571.435585][T20801] 0X: entered allmulticast mode [ 571.440878][T20801] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 571.621249][T20810] netlink: 'syz.3.3766': attribute type 11 has an invalid length. [ 571.655774][T20813] netlink: 'syz.1.3768': attribute type 3 has an invalid length. [ 571.686711][T20813] __nla_validate_parse: 4 callbacks suppressed [ 571.686731][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'. [ 571.970769][T20829] netlink: 'syz.2.3771': attribute type 1 has an invalid length. [ 571.978080][T20830] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3772'. [ 572.015923][T20829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.039169][T20837] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3772'. [ 572.041075][T20829] syzkaller0: entered promiscuous mode [ 572.056115][T20829] syzkaller0: entered allmulticast mode [ 572.226548][T20843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3775'. [ 572.657804][T20859] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 572.669760][T20859] bond4 (unregistering): Released all slaves [ 572.700392][T20861] ipvlan2: entered promiscuous mode [ 572.739221][T20862] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 572.753290][T20862] bond4 (unregistering): Released all slaves [ 572.928288][T20870] netlink: 'syz.2.3783': attribute type 1 has an invalid length. [ 572.965207][T20874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3784'. [ 573.000776][T20870] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.010201][T20879] bond5: up delay (1940981424) is not a multiple of miimon (100), value rounded to 1940981400 ms [ 573.084289][T20879] bond5: entered allmulticast mode [ 573.181694][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 573.189815][ C1] lec:lec_tx_timeout: lec0 [ 573.238761][T20886] netlink: 'syz.0.3789': attribute type 1 has an invalid length. [ 573.278431][T20891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3791'. [ 573.309533][T20891] netlink: 'syz.3.3791': attribute type 7 has an invalid length. [ 573.323435][T20886] bond1: (slave geneve2): making interface the new active one [ 573.351046][T20891] netlink: 'syz.3.3791': attribute type 8 has an invalid length. [ 573.361729][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'. [ 573.368577][T20896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3789'. [ 573.406719][T20886] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 573.417263][T15239] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.448804][T15239] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.501995][T20896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.512419][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3793'. [ 573.800350][T15239] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.829732][T20910] tc_dump_action: action bad kind [ 573.848867][T15239] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.013951][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 574.085808][T20925] openvswitch: netlink: Invalid VLAN frame [ 574.285141][T20927] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.293003][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.743400][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.784647][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.358945][T15232] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.377737][T15232] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.387837][T15232] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.403479][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 575.428027][T15232] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.770957][T20913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.998391][T20960] __nla_validate_parse: 5 callbacks suppressed [ 576.998412][T20960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3809'. [ 577.293448][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 577.313981][T20971] bond0: entered promiscuous mode [ 577.320868][T20971] batadv_slave_0: entered promiscuous mode [ 577.337584][T20958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3807'. [ 577.347360][T20971] debugfs: 'hsr1' already exists in 'hsr' [ 577.354334][T20971] Cannot create hsr debugfs directory [ 577.465709][T20974] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3812'. [ 579.939817][T20953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.300782][T21008] openvswitch: netlink: Actions may not be safe on all matching packets [ 580.318008][T21008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.417637][T21007] tipc: Resetting bearer [ 580.486564][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 580.556277][T21025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3821'. [ 580.965241][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3824'. [ 581.075696][T21047] IPVS: set_ctl: invalid protocol: 128 0.32.0.0:20480 [ 581.090266][T21048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3825'. [ 581.190876][T21050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.194689][T21042] vlan3: entered allmulticast mode [ 581.225837][T21042] team0: entered allmulticast mode [ 581.245814][T21042] team_slave_0: entered allmulticast mode [ 581.262168][T21042] team_slave_1: entered allmulticast mode [ 581.377819][T21055] lo speed is unknown, defaulting to 1000 [ 581.424943][T21055] lo speed is unknown, defaulting to 1000 [ 581.497643][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3829'. [ 581.563921][T21061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3829'. [ 581.935241][T21077] syzkaller0: entered promiscuous mode [ 581.942617][T21077] syzkaller0: entered allmulticast mode [ 582.199116][T21080] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 582.219450][T21081] tipc: Enabled bearer , priority 0 [ 582.265173][T21075] tipc: Resetting bearer [ 582.407368][T21090] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 582.435423][T21091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3834'. [ 582.457179][T21075] tipc: Disabling bearer [ 582.690716][T21091] bond4: (slave bridge1): making interface the new active one [ 582.737038][T21091] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 582.963708][T21115] geneve3: entered promiscuous mode [ 583.600934][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3841'. [ 583.643250][T21143] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 583.713664][ T10] IPVS: starting estimator thread 0... [ 583.782698][T21055] wg1 speed is unknown, defaulting to 1000 [ 583.830463][T21147] IPVS: using max 26 ests per chain, 62400 per kthread [ 583.974297][T21154] SET target dimension over the limit! [ 583.984984][T21155] syzkaller1: entered promiscuous mode [ 584.001880][T21155] syzkaller1: entered allmulticast mode [ 584.078404][T21158] sctp: [Deprecated]: syz.4.3847 (pid 21158) Use of int in maxseg socket option. [ 584.078404][T21158] Use struct sctp_assoc_value instead [ 584.377911][T21167] syzkaller0: entered promiscuous mode [ 584.405704][T21167] syzkaller0: entered allmulticast mode [ 584.424950][T21163] tipc: Started in network mode [ 584.432980][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3850'. [ 584.448801][T21163] tipc: Node identity 361007a55a8b, cluster identity 4711 [ 584.463828][T21163] tipc: Enabled bearer , priority 0 [ 584.470598][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3850'. [ 584.480777][T21167] netlink: 'syz.3.3850': attribute type 18 has an invalid length. [ 584.497164][T21165] syzkaller0: entered promiscuous mode [ 584.519401][T21165] syzkaller0: entered allmulticast mode [ 584.631296][T21163] tipc: Resetting bearer [ 584.683665][T21162] tipc: Resetting bearer [ 584.718589][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 584.730654][T21182] netlink: 'syz.2.3853': attribute type 3 has an invalid length. [ 584.743980][T21162] tipc: Disabling bearer [ 584.802029][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3853'. [ 584.991252][T21198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3856'. [ 585.309397][T21211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.399772][T21209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3857'. [ 586.518167][T21237] ip6gre1: entered promiscuous mode [ 586.534698][T21237] ip6gre1: entered allmulticast mode [ 586.608139][T21237] netlink: 'syz.2.3867': attribute type 11 has an invalid length. [ 586.633541][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3867'. [ 587.039638][T21259] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3873'. [ 587.093244][T21261] hm3): entered promiscuous mode [ 587.228872][T21272] xt_hashlimit: size too large, truncated to 1048576 [ 587.247293][T21272] xt_hashlimit: max too large, truncated to 1048576 [ 587.610758][T21292] __nla_validate_parse: 1 callbacks suppressed [ 587.610780][T21292] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3880'. [ 587.693112][T21290] lo speed is unknown, defaulting to 1000 [ 587.709263][T21290] lo speed is unknown, defaulting to 1000 [ 587.733772][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3882'. [ 588.167192][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 588.196643][T21320] netlink: 'syz.3.3887': attribute type 1 has an invalid length. [ 588.261311][T21322] gre1: entered promiscuous mode [ 588.322964][T21323] kthread_run failed with err -4 [ 588.422640][T21333] syzkaller1: entered promiscuous mode [ 588.433380][T21333] syzkaller1: entered allmulticast mode [ 588.670094][T21339] lo speed is unknown, defaulting to 1000 [ 588.700880][T21339] lo speed is unknown, defaulting to 1000 [ 588.839757][T21310] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 588.857551][T21310] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 588.937390][T21310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 588.963421][T21310] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 588.977920][T21290] wg1 speed is unknown, defaulting to 1000 [ 588.999750][T21310] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 589.006215][T21310] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 589.032276][T21310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 589.039471][T21310] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 589.077309][T21310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.092358][T21310] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 589.581079][T21362] netlink: 'syz.3.3900': attribute type 7 has an invalid length. [ 589.758160][T21339] wg1 speed is unknown, defaulting to 1000 [ 590.001440][ T5580] IPVS: starting estimator thread 0... [ 590.092295][T21379] IPVS: using max 24 ests per chain, 57600 per kthread [ 590.139942][T21369] lo speed is unknown, defaulting to 1000 [ 590.147623][T21384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'. [ 590.348773][T21384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 590.389130][T21386] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 590.400884][T21369] lo speed is unknown, defaulting to 1000 [ 590.691586][T21390] syzkaller1: entered promiscuous mode [ 590.697585][T21390] syzkaller1: entered allmulticast mode [ 590.716854][T21393] syzkaller1: left promiscuous mode [ 590.724622][T21393] syzkaller1: left allmulticast mode [ 591.349968][T21412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3912'. [ 591.551915][T21422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3914'. [ 591.692813][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3915'. [ 591.854368][T21369] wg1 speed is unknown, defaulting to 1000 [ 592.557558][T21442] syzkaller0: entered promiscuous mode [ 592.565372][T21442] syzkaller0: entered allmulticast mode [ 593.799359][T21476] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 594.488887][T21497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3928'. [ 594.499231][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 594.561514][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'. [ 594.655886][T21504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3929'. [ 595.599749][T21517] lo speed is unknown, defaulting to 1000 [ 595.658917][T21517] lo speed is unknown, defaulting to 1000 [ 595.982246][T21528] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.3937'. [ 596.003775][T21528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3937'. [ 596.039358][T21528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3937'. [ 596.113581][T21531] macsec0: entered promiscuous mode [ 596.126417][T21531] erspan0: entered promiscuous mode [ 596.147716][T21531] erspan0: left promiscuous mode [ 596.567145][T21555] netlink: 'syz.2.3944': attribute type 3 has an invalid length. [ 596.590736][T21555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.770365][T21560] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3946'. [ 596.782375][T21560] netlink: 'syz.4.3946': attribute type 1 has an invalid length. [ 596.835714][T21517] wg1 speed is unknown, defaulting to 1000 [ 596.957996][T21563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3947'. [ 596.970844][T21565] syzkaller0: entered promiscuous mode [ 596.984410][T21565] syzkaller0: entered allmulticast mode [ 597.083745][T21567] bond1 (unregistering): Released all slaves [ 597.138704][T21571] tipc: Enabled bearer , priority 10 [ 597.199214][T21564] tipc: Resetting bearer [ 597.246231][T21564] tipc: Disabling bearer [ 597.374441][T21574] lo speed is unknown, defaulting to 1000 [ 597.416801][T21574] lo speed is unknown, defaulting to 1000 [ 598.117096][T21604] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3955'. [ 598.427591][T21616] netlink: 'syz.1.3959': attribute type 1 has an invalid length. [ 598.490249][T21616] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 598.490805][T21574] wg1 speed is unknown, defaulting to 1000 [ 598.888530][T21628] syzkaller1: entered promiscuous mode [ 598.894958][T21628] syzkaller1: entered allmulticast mode [ 599.150856][T21632] syzkaller0: entered promiscuous mode [ 599.166184][T21632] syzkaller0: entered allmulticast mode [ 599.219726][T21632] tipc: Enabled bearer , priority 10 [ 599.252781][T21631] tipc: Resetting bearer [ 599.314402][T21631] tipc: Disabling bearer [ 599.861534][T21660] tipc: Enabled bearer , priority 0 [ 599.991397][T21667] syzkaller0: entered promiscuous mode [ 600.002205][T21667] syzkaller0: entered allmulticast mode [ 600.109170][T21667] tipc: Resetting bearer [ 600.187152][T21667] tipc: Disabling bearer [ 600.262137][T21689] __nla_validate_parse: 2 callbacks suppressed [ 600.262156][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3975'. [ 600.283557][T21687] syzkaller0: entered promiscuous mode [ 600.305331][T21687] syzkaller0: entered allmulticast mode [ 600.445944][T21687] tipc: Started in network mode [ 600.471361][T21687] tipc: Node identity 0aa3400bc039, cluster identity 4711 [ 600.491247][T21687] tipc: Enabled bearer , priority 2 [ 600.635228][T21711] netlink: 'syz.3.3981': attribute type 61 has an invalid length. [ 600.663101][T21686] tipc: Resetting bearer [ 600.676488][T21714] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 600.685399][T21715] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 600.744366][T21686] tipc: Disabling bearer [ 600.811570][T21712] syzkaller0: entered promiscuous mode [ 600.817830][T21712] syzkaller0: entered allmulticast mode [ 601.137248][T21725] netlink: 'syz.1.3985': attribute type 1 has an invalid length. [ 601.141169][T21721] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 601.199868][T21721] bond2 (unregistering): Released all slaves [ 601.444771][T21725] bond5: entered promiscuous mode [ 601.466290][T21725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 601.728281][T21744] syzkaller0: entered promiscuous mode [ 601.758227][T21744] syzkaller0: entered allmulticast mode [ 601.808685][T21743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 601.829961][T21738] tipc: Enabled bearer , priority 0 [ 601.882671][T21738] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3988'. [ 601.910752][T21746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.933800][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3991'. [ 601.952178][T21744] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3988'. [ 602.141591][T21744] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3988'. [ 602.214644][T21751] macsec1: entered promiscuous mode [ 602.229191][T21751] bridge5: entered promiscuous mode [ 602.230763][T21758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3986'. [ 602.235261][T21751] macsec1: entered allmulticast mode [ 602.265459][T21751] bridge5: entered allmulticast mode [ 602.276389][T21751] bridge5: port 1(macsec1) entered blocking state [ 602.306235][T21751] bridge5: port 1(macsec1) entered disabled state [ 602.329464][T21751] bridge5: left allmulticast mode [ 602.379163][ T5997] bridge5: left promiscuous mode [ 602.402794][T21737] tipc: Resetting bearer [ 602.478239][T21737] tipc: Disabling bearer [ 602.594649][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3996'. [ 602.648142][T21764] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3996'. [ 603.026621][T21775] lo speed is unknown, defaulting to 1000 [ 603.058385][T21788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4002'. [ 603.064291][T21775] lo speed is unknown, defaulting to 1000 [ 603.373923][T21786] lo speed is unknown, defaulting to 1000 [ 603.572653][T21809] sctp: [Deprecated]: syz.1.4007 (pid 21809) Use of int in max_burst socket option. [ 603.572653][T21809] Use struct sctp_assoc_value instead [ 603.707384][T21786] lo speed is unknown, defaulting to 1000 [ 604.321577][T21833] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 604.350209][T21833] bond6 (unregistering): Released all slaves [ 604.470310][T21775] wg1 speed is unknown, defaulting to 1000 [ 605.204425][T21786] wg1 speed is unknown, defaulting to 1000 [ 605.530134][T21862] __nla_validate_parse: 2 callbacks suppressed [ 605.530155][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4019'. [ 605.562210][T21863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4019'. [ 605.652647][T21862] vlan3: entered allmulticast mode [ 605.659183][T21862] macvtap0: entered allmulticast mode [ 605.737493][ T29] audit: type=1800 audit(1777144026.759:16): pid=21874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4021" name="blkio.bfq.time_recursive" dev="tmpfs" ino=856 res=0 errno=0 [ 606.228422][T21891] xt_hashlimit: size too large, truncated to 1048576 [ 606.287286][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4026'. [ 606.313753][T21895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4026'. [ 606.619076][T21892] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 606.621998][T21895] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 606.956698][T21914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4030'. [ 606.988521][T21901] lo speed is unknown, defaulting to 1000 [ 607.098913][T21901] lo speed is unknown, defaulting to 1000 [ 607.149356][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'. [ 607.357965][T21931] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^&J?=\l[[i5` [ 607.667095][T21940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4036'. [ 608.133513][T21941] syzkaller0: entered promiscuous mode [ 608.188661][T21941] syzkaller0: entered allmulticast mode [ 608.743669][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4038'. [ 608.773805][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4038'. [ 608.842612][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4038'. [ 608.864202][T21956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.194057][T21963] netlink: 'syz.0.4043': attribute type 2 has an invalid length. [ 609.217168][T21963] netlink: 'syz.0.4043': attribute type 2 has an invalid length. [ 609.266713][T21901] wg1 speed is unknown, defaulting to 1000 [ 609.290024][T21965] syzkaller0: entered promiscuous mode [ 609.311937][T21965] syzkaller0: entered allmulticast mode [ 609.599412][T21977] ip6gre2: entered promiscuous mode [ 609.606664][T21977] ip6gre2: entered allmulticast mode [ 610.705667][T22012] __nla_validate_parse: 1 callbacks suppressed [ 610.705688][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'. [ 610.787471][T22018] xt_hashlimit: max too large, truncated to 1048576 [ 610.805630][T22018] xt_bpf: check failed: parse error [ 611.002567][T22019] netlink: 'syz.0.4052': attribute type 1 has an invalid length. [ 611.106052][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'. [ 611.342238][T22027] bond1 (unregistering): Released all slaves [ 611.888242][T22043] lo speed is unknown, defaulting to 1000 [ 611.944310][T22043] lo speed is unknown, defaulting to 1000 [ 612.435188][T22055] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 612.476259][T22056] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.4062'. [ 612.501790][T22056] openvswitch: netlink: Flow key attr not present in new flow. [ 612.818590][T22065] netlink: 'syz.0.4066': attribute type 25 has an invalid length. [ 612.863325][T22067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4065'. [ 613.149027][T22043] wg1 speed is unknown, defaulting to 1000 [ 613.161340][T22074] netlink: 'syz.0.4069': attribute type 9 has an invalid length. [ 613.477637][T22077] Cannot find del_set index 0 as target [ 613.513926][T22074] syzkaller0: entered promiscuous mode [ 613.536418][T22074] syzkaller0: entered allmulticast mode [ 614.294141][ C1] ------------[ cut here ]------------ [ 614.299938][ C1] ODEBUG: free active (active state 0) object: ffff8880395a9c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 614.314398][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.0.4069/22073 [ 614.325275][ C1] Modules linked in: [ 614.329451][ C1] CPU: 1 UID: 0 PID: 22073 Comm: syz.0.4069 Not tainted syzkaller #0 PREEMPT(full) [ 614.338886][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.349021][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 614.355468][ C1] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 614.375191][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 614.381334][ C1] RAX: ffffffff8a9f6db0 RBX: ffffffff9a742378 RCX: 0000000000000000 [ 614.389406][ C1] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 614.397462][ C1] RBP: ffffffff8bcf39a0 R08: ffff8880395a9c90 R09: ffffffff8bcf4d00 [ 614.405640][ C1] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff8880395a9e00 [ 614.413693][ C1] R13: ffffffff903e6a40 R14: ffff8880395a9000 R15: ffff8880395a9c90 [ 614.421738][ C1] FS: 0000555560bb0500(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 614.430718][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.437365][ C1] CR2: 00007f100a800d71 CR3: 0000000054ee6000 CR4: 00000000003526f0 [ 614.445435][ C1] Call Trace: [ 614.448750][ C1] [ 614.451679][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 614.457373][ C1] kfree+0x13e/0x640 [ 614.461305][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 614.466480][ C1] rose_timer_expiry+0x4cb/0x600 [ 614.471435][ C1] ? call_timer_fn+0x178/0x5e0 [ 614.476229][ C1] call_timer_fn+0x192/0x5e0 [ 614.480841][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 614.486322][ C1] ? call_timer_fn+0xd4/0x5e0 [ 614.491001][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 614.496140][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 614.501342][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 614.506831][ C1] __run_timer_base+0x652/0x8b0 [ 614.511742][ C1] ? ktime_get+0x45/0x220 [ 614.516111][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 614.521497][ C1] run_timer_softirq+0xb7/0x170 [ 614.526392][ C1] handle_softirqs+0x22a/0x840 [ 614.531188][ C1] ? __irq_exit_rcu+0xca/0x220 [ 614.536073][ C1] __irq_exit_rcu+0xca/0x220 [ 614.540709][ C1] irq_exit_rcu+0x9/0x30 [ 614.545010][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 614.550677][ C1] [ 614.553668][ C1] [ 614.556622][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 614.562665][ C1] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 614.568505][ C1] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 33 d9 d9 f5 e8 6e e3 13 f6 fb bf 01 00 00 00 13 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 34 e5 13 f6 bf 01 [ 614.588181][ C1] RSP: 0018:ffffc9000e757860 EFLAGS: 00000206 [ 614.594320][ C1] RAX: 000000000000304b RBX: 0000000000000000 RCX: 0000000000000001 [ 614.602367][ C1] RDX: 0000000000000006 RSI: ffffffff8dfd8f45 RDI: 0000000000000001 [ 614.610377][ C1] RBP: 0000000000000000 R08: ffffffff903386f7 R09: 1ffffffff20670de [ 614.618426][ C1] R10: dffffc0000000000 R11: fffffbfff20670df R12: 0000000000000000 [ 614.626455][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 614.634513][ C1] irqentry_exit+0x14f/0x730 [ 614.639138][ C1] ? rcu_is_watching+0x15/0xb0 [ 614.643971][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 614.649459][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 614.655662][ C1] Code: 11 0a 09 00 89 c6 48 c7 c7 30 28 49 96 e8 63 93 19 0a 90 e9 65 fe ff ff e8 e8 d4 16 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 614.675335][ C1] RSP: 0018:ffffc9000e757980 EFLAGS: 00000246 [ 614.681434][ C1] RAX: 0000000000000046 RBX: ffff888085174268 RCX: 0000000000000046 [ 614.689459][ C1] RDX: ffffffff9404a398 RSI: ffffffff8dff28c3 RDI: ffffffff8c289f60 [ 614.697502][ C1] RBP: ffff888098539e00 R08: ffffffff81af4528 R09: ffffffff8e95cce0 [ 614.705524][ C1] R10: dffffc0000000000 R11: fffffbfff20670df R12: 0000000000000000 [ 614.713563][ C1] R13: ffff888085174269 R14: 0000000000001000 R15: 0000000000000a07 [ 614.721551][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 614.727470][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 614.733084][ C1] __qdisc_destroy+0x1ab/0x470 [ 614.737894][ C1] dev_shutdown+0x93/0x440 [ 614.742386][ C1] unregister_netdevice_many_notify+0x11b2/0x22c0 [ 614.748864][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 614.754819][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 614.761674][ C1] ? __queue_work+0x1a1/0xfc0 [ 614.766387][ C1] unregister_netdevice_queue+0x31f/0x360 [ 614.772167][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 614.778436][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 614.783741][ C1] ? queue_delayed_work_on+0x171/0x1e0 [ 614.789272][ C1] __tun_detach+0x6d9/0x15d0 [ 614.793947][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 614.799094][ C1] tun_chr_close+0x10a/0x1c0 [ 614.803735][ C1] __fput+0x44f/0xa60 [ 614.807773][ C1] task_work_run+0x1d9/0x270 [ 614.812456][ C1] ? __pfx_task_work_run+0x10/0x10 [ 614.817601][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.823724][ C1] exit_to_user_mode_loop+0xed/0x480 [ 614.829046][ C1] ? rcu_is_watching+0x15/0xb0 [ 614.833859][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.839947][ C1] do_syscall_64+0x33e/0xf80 [ 614.844585][ C1] ? clear_bhb_loop+0x40/0x90 [ 614.849289][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.855235][ C1] RIP: 0033:0x7f543df9cdd9 [ 614.859677][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.879445][ C1] RSP: 002b:00007ffee4959df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 614.887934][ C1] RAX: 0000000000000000 RBX: 00007f543e217da0 RCX: 00007f543df9cdd9 [ 614.896022][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 614.904052][ C1] RBP: 00007f543e217da0 R08: 00007f543e216038 R09: 0000000000000000 [ 614.912090][ C1] R10: 00000000003ffbdc R11: 0000000000000246 R12: 0000000000095e14 [ 614.920088][ C1] R13: 00007f543e21618c R14: 0000000000095c8e R15: 00007f543e216180 [ 614.928172][ C1] [ 614.931215][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 614.938499][ C1] CPU: 1 UID: 0 PID: 22073 Comm: syz.0.4069 Not tainted syzkaller #0 PREEMPT(full) [ 614.947875][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.957943][ C1] Call Trace: [ 614.961231][ C1] [ 614.964079][ C1] vpanic+0x56c/0xa60 [ 614.968070][ C1] ? __pfx__printk+0x10/0x10 [ 614.972666][ C1] ? __pfx_vpanic+0x10/0x10 [ 614.977170][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 614.982465][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 614.987683][ C1] panic+0xc5/0xd0 [ 614.991409][ C1] ? __pfx_panic+0x10/0x10 [ 614.995844][ C1] __warn+0x315/0x4c0 [ 614.999832][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 615.005570][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 615.011292][ C1] __report_bug+0x29a/0x540 [ 615.015809][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.021637][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 615.027375][ C1] ? __pfx___report_bug+0x10/0x10 [ 615.032417][ C1] ? kfree+0x1c5/0x640 [ 615.036490][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 615.041607][ C1] ? call_timer_fn+0x192/0x5e0 [ 615.046386][ C1] ? __run_timer_base+0x652/0x8b0 [ 615.051419][ C1] ? run_timer_softirq+0xb7/0x170 [ 615.056461][ C1] ? handle_softirqs+0x22a/0x840 [ 615.061408][ C1] ? __irq_exit_rcu+0xca/0x220 [ 615.066186][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 615.072004][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 615.078173][ C1] ? preempt_schedule_irq+0x48/0xa0 [ 615.083383][ C1] ? irqentry_exit+0x14f/0x730 [ 615.088154][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 615.093802][ C1] report_bug_entry+0x19a/0x290 [ 615.098692][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 615.104414][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 615.110138][ C1] handle_bug+0xce/0x200 [ 615.114394][ C1] exc_invalid_op+0x1a/0x50 [ 615.118901][ C1] asm_exc_invalid_op+0x1a/0x20 [ 615.123762][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 615.130101][ C1] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 615.149895][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 615.155973][ C1] RAX: ffffffff8a9f6db0 RBX: ffffffff9a742378 RCX: 0000000000000000 [ 615.163952][ C1] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 615.171953][ C1] RBP: ffffffff8bcf39a0 R08: ffff8880395a9c90 R09: ffffffff8bcf4d00 [ 615.180018][ C1] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff8880395a9e00 [ 615.187993][ C1] R13: ffffffff903e6a40 R14: ffff8880395a9000 R15: ffff8880395a9c90 [ 615.195978][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 615.201358][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 615.207008][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 615.212661][ C1] kfree+0x13e/0x640 [ 615.216565][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 615.221691][ C1] rose_timer_expiry+0x4cb/0x600 [ 615.226684][ C1] ? call_timer_fn+0x178/0x5e0 [ 615.231458][ C1] call_timer_fn+0x192/0x5e0 [ 615.236057][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 615.241523][ C1] ? call_timer_fn+0xd4/0x5e0 [ 615.246207][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 615.251338][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.256543][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 615.262013][ C1] __run_timer_base+0x652/0x8b0 [ 615.266874][ C1] ? ktime_get+0x45/0x220 [ 615.271222][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 615.276616][ C1] run_timer_softirq+0xb7/0x170 [ 615.281478][ C1] handle_softirqs+0x22a/0x840 [ 615.286257][ C1] ? __irq_exit_rcu+0xca/0x220 [ 615.291039][ C1] __irq_exit_rcu+0xca/0x220 [ 615.295639][ C1] irq_exit_rcu+0x9/0x30 [ 615.299892][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 615.305533][ C1] [ 615.308469][ C1] [ 615.311405][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 615.317389][ C1] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 615.323203][ C1] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 33 d9 d9 f5 e8 6e e3 13 f6 fb bf 01 00 00 00 13 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 34 e5 13 f6 bf 01 [ 615.342814][ C1] RSP: 0018:ffffc9000e757860 EFLAGS: 00000206 [ 615.348891][ C1] RAX: 000000000000304b RBX: 0000000000000000 RCX: 0000000000000001 [ 615.356866][ C1] RDX: 0000000000000006 RSI: ffffffff8dfd8f45 RDI: 0000000000000001 [ 615.364839][ C1] RBP: 0000000000000000 R08: ffffffff903386f7 R09: 1ffffffff20670de [ 615.372817][ C1] R10: dffffc0000000000 R11: fffffbfff20670df R12: 0000000000000000 [ 615.380797][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 615.388793][ C1] irqentry_exit+0x14f/0x730 [ 615.393395][ C1] ? rcu_is_watching+0x15/0xb0 [ 615.398170][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 615.403633][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 615.409796][ C1] Code: 11 0a 09 00 89 c6 48 c7 c7 30 28 49 96 e8 63 93 19 0a 90 e9 65 fe ff ff e8 e8 d4 16 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 615.429415][ C1] RSP: 0018:ffffc9000e757980 EFLAGS: 00000246 [ 615.435490][ C1] RAX: 0000000000000046 RBX: ffff888085174268 RCX: 0000000000000046 [ 615.443473][ C1] RDX: ffffffff9404a398 RSI: ffffffff8dff28c3 RDI: ffffffff8c289f60 [ 615.451450][ C1] RBP: ffff888098539e00 R08: ffffffff81af4528 R09: ffffffff8e95cce0 [ 615.459434][ C1] R10: dffffc0000000000 R11: fffffbfff20670df R12: 0000000000000000 [ 615.467412][ C1] R13: ffff888085174269 R14: 0000000000001000 R15: 0000000000000a07 [ 615.475397][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 615.481251][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 615.486805][ C1] __qdisc_destroy+0x1ab/0x470 [ 615.491577][ C1] dev_shutdown+0x93/0x440 [ 615.496009][ C1] unregister_netdevice_many_notify+0x11b2/0x22c0 [ 615.502449][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 615.508267][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 615.515046][ C1] ? __queue_work+0x1a1/0xfc0 [ 615.519740][ C1] unregister_netdevice_queue+0x31f/0x360 [ 615.525477][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 615.531728][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.536963][ C1] ? queue_delayed_work_on+0x171/0x1e0 [ 615.542434][ C1] __tun_detach+0x6d9/0x15d0 [ 615.547046][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 615.552167][ C1] tun_chr_close+0x10a/0x1c0 [ 615.556769][ C1] __fput+0x44f/0xa60 [ 615.560775][ C1] task_work_run+0x1d9/0x270 [ 615.565380][ C1] ? __pfx_task_work_run+0x10/0x10 [ 615.570505][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.576576][ C1] exit_to_user_mode_loop+0xed/0x480 [ 615.581879][ C1] ? rcu_is_watching+0x15/0xb0 [ 615.586657][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.592817][ C1] do_syscall_64+0x33e/0xf80 [ 615.597420][ C1] ? clear_bhb_loop+0x40/0x90 [ 615.602113][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.608011][ C1] RIP: 0033:0x7f543df9cdd9 [ 615.612432][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.632043][ C1] RSP: 002b:00007ffee4959df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 615.640467][ C1] RAX: 0000000000000000 RBX: 00007f543e217da0 RCX: 00007f543df9cdd9 [ 615.648446][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 615.656421][ C1] RBP: 00007f543e217da0 R08: 00007f543e216038 R09: 0000000000000000 [ 615.664399][ C1] R10: 00000000003ffbdc R11: 0000000000000246 R12: 0000000000095e14 [ 615.672374][ C1] R13: 00007f543e21618c R14: 0000000000095c8e R15: 00007f543e216180 [ 615.680366][ C1] [ 615.683550][ C1] Kernel Offset: disabled [ 615.687878][ C1] Rebooting in 86400 seconds..