last executing test programs: 9.515405336s ago: executing program 4 (id=1802): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000380)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x2}, 0x20) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f052", 0xf1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000600)=0x9, 0x65) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0x200, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {0x0, 0x1}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 9.307021363s ago: executing program 2 (id=1803): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xe4, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xe4}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0xa8}}, 0x0) 6.238562372s ago: executing program 4 (id=1807): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1}, 0x10}, 0x94) 6.038138964s ago: executing program 2 (id=1809): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000540)={&(0x7f0000000040)=0x3, 0x851, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000500)}) (async) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000540)={&(0x7f0000000040)=0x3, 0x851, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000500)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) 5.658049726s ago: executing program 4 (id=1810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r5, 0x25, 0x2, @void}, 0x10) write$tun(r0, 0x0, 0x1339) write$tun(r0, &(0x7f0000001ac0)={@val={0x0, 0x88e7}, @void, @ipv6=@tcp={0x9, 0x6, "77ec2d", 0xac, 0x6, 0x1fe, @mcast1, @rand_addr=' \x01\x00', {[@fragment={0x29, 0x0, 0xe4, 0x0, 0x0, 0x1a, 0x64}, @srh={0x16, 0x0, 0x4, 0x0, 0x7, 0x10, 0x6}, @hopopts={0x3c, 0x3, '\x00', [@generic={0x7}, @generic={0x1, 0x6, "4943058bc085"}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @remote}]}], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x62, 0x7fff, 0x0, 0xe, {[@window={0x3, 0x3, 0x9}, @sack={0x5, 0xa, [0x400, 0x0]}]}}, {"c470e096df248a566743dc877c4642f217d5efea4f5dfd68378f10695646cf193ddefd7fbcdc89ffe0c17e6177fbcc622917f02aa609e6e5d764a69e3fe4094c8375190738847763d42a19a1aa6813f5"}}}}}, 0xd8) 5.603087417s ago: executing program 3 (id=1811): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x1d0, 0xa0, 0xb, 0x148, 0xa0, 0x148, 0x138, 0x230, 0x242, 0x138, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xa0, 0x0, {0xff0f000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x3}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1827089275000000000000000b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000cf09000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x288002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000700)={'\x00', 0x8411}) openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, 0x0) write(r2, &(0x7f00000000c0)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e14c202ccb29c00b320a10700000600000000000000000000001a125d4a997d", 0x60) 5.472154228s ago: executing program 2 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x383, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x9}, {0xffe0, 0xffe0}, {0x7, 0xb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8804) 5.274597424s ago: executing program 4 (id=1814): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES8=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000240)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) socket(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f00000001c0)=0x8) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000740)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 4.50660405s ago: executing program 3 (id=1817): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000800800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="07000000a008", @ANYRES8=r5], 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, r2, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 4.474661893s ago: executing program 1 (id=1818): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_NEWNSID={0x34, 0x58, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_NEWNSID={0x34, 0x58, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000800) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4a7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4a7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@dev, 0x0}, &(0x7f0000000300)=0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4cfa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x7, 0xa, 0x0, 0x10, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb6f2, r2, 0xa, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0x1, r7, r8, r9, 0x1, r10, r11], &(0x7f0000000640)=[{0x1, 0x5, 0xe, 0x6}, {0x3, 0x2, 0xb, 0x8}, {0x2, 0x5, 0x10, 0x4}, {0x0, 0x1, 0x7, 0xb}, {0x5, 0x5, 0xb}, {0x1, 0x2, 0xc, 0xc}, {0x2, 0x3, 0x5, 0xa}, {0x2, 0x5, 0xf, 0x5}, {0x5, 0x3, 0x8, 0x6}, {0x0, 0x1, 0x2, 0x9}], 0x10, 0xfffffff4}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x7, 0xa, 0x0, 0x10, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb6f2, r2, 0xa, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0x1, r7, r8, r9, 0x1, r10, r11], &(0x7f0000000640)=[{0x1, 0x5, 0xe, 0x6}, {0x3, 0x2, 0xb, 0x8}, {0x2, 0x5, 0x10, 0x4}, {0x0, 0x1, 0x7, 0xb}, {0x5, 0x5, 0xb}, {0x1, 0x2, 0xc, 0xc}, {0x2, 0x3, 0x5, 0xa}, {0x2, 0x5, 0xf, 0x5}, {0x5, 0x3, 0x8, 0x6}, {0x0, 0x1, 0x2, 0x9}], 0x10, 0xfffffff4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x22, 0x15, &(0x7f00000007c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x2, 0x3, 0x6, 0xffffffffffffffe0}, @ldst={0x3, 0x2, 0x3, 0x9, 0x6, 0xc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x3, 0x2, 0x10, 0xc}], &(0x7f0000000880)='syzkaller\x00', 0x10, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x8, '\x00', r4, @fallback=0x14, r5, 0x8, &(0x7f00000018c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0xe, 0x7, 0x1}, 0x10, 0x0, r8, 0x2, &(0x7f0000001940)=[r9, 0xffffffffffffffff, r3, r3, r3, r6, r3, r11], &(0x7f0000001980)=[{0x3, 0x5, 0xa, 0x1}, {0x2, 0x1, 0xd, 0xc}], 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x22, 0x15, &(0x7f00000007c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x2, 0x3, 0x6, 0xffffffffffffffe0}, @ldst={0x3, 0x2, 0x3, 0x9, 0x6, 0xc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x3, 0x2, 0x10, 0xc}], &(0x7f0000000880)='syzkaller\x00', 0x10, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x8, '\x00', r4, @fallback=0x14, r5, 0x8, &(0x7f00000018c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0xe, 0x7, 0x1}, 0x10, 0x0, r8, 0x2, &(0x7f0000001940)=[r9, 0xffffffffffffffff, r3, r3, r3, r6, r3, r11], &(0x7f0000001980)=[{0x3, 0x5, 0xa, 0x1}, {0x2, 0x1, 0xd, 0xc}], 0x10, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001a80)={'wlan0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in6=@local, 0x4e20, 0x0, 0x4e24, 0x7, 0x2, 0x20, 0xa0, 0x1d9, r4, 0xffffffffffffffff}, {0x9, 0x7f8, 0x7, 0x6, 0x9, 0x4, 0x8, 0x400}, {0x7, 0x6, 0xffffffff7fffffff, 0x800080000000000}, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x4d4, 0x32}, 0xa, @in=@remote, 0x3505, 0x3, 0x3, 0x9, 0xc0, 0xa, 0x2}}, 0xe8) getpeername$tipc(r8, &(0x7f0000001bc0)=@name, &(0x7f0000001c00)=0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c40)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x8, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_ext={0x1c, 0x20, &(0x7f0000001cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xef51, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xdf, 0x9, 0x0, 0xfff8, 0x4}, @generic={0x9, 0x8, 0x7, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x78}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x6, 0xf5, &(0x7f0000001e00)=""/245, 0x40f00, 0x41, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001f00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001f40)={0x2, 0xb, 0x1, 0x8000}, 0x10, 0x2d091, 0xffffffffffffffff, 0x4, &(0x7f0000001f80)=[r3, r10, r11], &(0x7f0000001fc0)=[{0x5, 0x5, 0x4, 0xb}, {0x3, 0x1, 0xa, 0x3}, {0x0, 0x4, 0x6, 0x3}, {0x1, 0x3, 0xb, 0x2}], 0x10, 0x6}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000021c0)={r8, 0x20, &(0x7f0000002180)={&(0x7f00000020c0)=""/101, 0x65, 0x0, &(0x7f0000002140)=""/36, 0x24}}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000002200), 0x4) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000002240)={0x2}, 0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000002580)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x26c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40}, 0x4015) recvmmsg$unix(r8, &(0x7f0000003200)=[{{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002640)=""/150, 0x96}, {&(0x7f0000002700)=""/34, 0x22}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/117, 0x75}], 0x4, &(0x7f0000002840)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002940)=""/209, 0xd1}, {&(0x7f0000002a40)=""/192, 0xc0}, {0xfffffffffffffffe}, {&(0x7f0000002b00)=""/155, 0x9b}, {&(0x7f0000002bc0)=""/213, 0xd5}], 0x5, &(0x7f0000002d40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002d80)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/150, 0x96}, {&(0x7f0000002ec0)=""/109, 0x6d}, {&(0x7f0000002f40)=""/227, 0xe3}], 0x3, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}], 0x3, 0x10000, &(0x7f00000032c0)) (async) recvmmsg$unix(r8, &(0x7f0000003200)=[{{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002640)=""/150, 0x96}, {&(0x7f0000002700)=""/34, 0x22}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/117, 0x75}], 0x4, &(0x7f0000002840)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002940)=""/209, 0xd1}, {&(0x7f0000002a40)=""/192, 0xc0}, {0xfffffffffffffffe}, {&(0x7f0000002b00)=""/155, 0x9b}, {&(0x7f0000002bc0)=""/213, 0xd5}], 0x5, &(0x7f0000002d40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002d80)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/150, 0x96}, {&(0x7f0000002ec0)=""/109, 0x6d}, {&(0x7f0000002f40)=""/227, 0xe3}], 0x3, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}], 0x3, 0x10000, &(0x7f00000032c0)) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x1e, 0x17, &(0x7f0000003300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x9, 0xb, 0x1, 0x10, 0x1}, @map_fd={0x18, 0xc, 0x1, 0x0, r9}]}, &(0x7f00000033c0)='GPL\x00', 0x0, 0xe3, &(0x7f0000003400)=""/227, 0x41100, 0x16, '\x00', r4, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000003500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000003540)={0x4, 0xd, 0x9, 0x81}, 0x10, r13, r20, 0x7, &(0x7f0000003580)=[r19, r15, r22, r21, r6, r14, r18], &(0x7f00000035c0)=[{0x3, 0x3, 0x4, 0xa}, {0x5, 0x2, 0xa, 0xc}, {0x5, 0x1, 0xb, 0x6}, {0x5, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x5, 0x8}, {0x2, 0x3, 0x5, 0x3}, {0x4, 0x5, 0x9, 0xa}], 0x10, 0xc50f}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x1e, 0x17, &(0x7f0000003300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x9, 0xb, 0x1, 0x10, 0x1}, @map_fd={0x18, 0xc, 0x1, 0x0, r9}]}, &(0x7f00000033c0)='GPL\x00', 0x0, 0xe3, &(0x7f0000003400)=""/227, 0x41100, 0x16, '\x00', r4, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000003500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000003540)={0x4, 0xd, 0x9, 0x81}, 0x10, r13, r20, 0x7, &(0x7f0000003580)=[r19, r15, r22, r21, r6, r14, r18], &(0x7f00000035c0)=[{0x3, 0x3, 0x4, 0xa}, {0x5, 0x2, 0xa, 0xc}, {0x5, 0x1, 0xb, 0x6}, {0x5, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x5, 0x8}, {0x2, 0x3, 0x5, 0x3}, {0x4, 0x5, 0x9, 0xa}], 0x10, 0xc50f}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DEL_MFC(r17, 0x29, 0xcd, &(0x7f0000003700)={{0xa, 0x4e21, 0x89, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, {0xa, 0x4e20, 0x6, @mcast1, 0x7f}, 0x0, {[0x6f, 0x7fffffff, 0x5, 0xfffffff9, 0x1, 0xd59, 0x9, 0xb5f00000]}}, 0x5c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003780), 0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000038c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x34, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4081) 4.386277456s ago: executing program 4 (id=1819): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000240)={0x18, 0x2, {0x3, @remote}}, 0x1e) connect$pptp(r5, &(0x7f0000000280)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x8000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 4.259111348s ago: executing program 0 (id=1820): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x64, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x64}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x2010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x851) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=0x0, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x3}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x25, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e20, @empty}}}, 0xff6b) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040884) 4.192241283s ago: executing program 2 (id=1821): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x13, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.92477663s ago: executing program 3 (id=1822): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000140), 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1001}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x8001) (async) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xff0a, 0x0) (async) r9 = socket(0x1e, 0x2, 0x0) r10 = accept4$llc(r9, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x5e, 0x80000) connect$llc(r10, &(0x7f0000000040)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @remote}, 0x10) (async) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="801100004100070127bd7000fefdffff047c0000080026800400080064110180601110805a110b80", @ANYRES32=r12], 0x1180}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="28000000000000fcdbdf251800f28014000400b4800000000000d46f000000000000010000000000"], 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.85143143s ago: executing program 1 (id=1823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x84) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={'veth1_to_hsr\x00', {0x2, 0x4e20, @multicast1}}) (async) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x810000}, 0xc) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0xffff}, 0x6) (async) r6 = accept$unix(r2, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000400)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000500)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) close(r2) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00.\x00', @ANYRES16=r7, @ANYBLOB="150b000000200000000001000000"], 0x14}}, 0x80) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 3.82537771s ago: executing program 4 (id=1824): syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000040086ddd3ab010000148600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000280), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000300)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) 3.750225378s ago: executing program 0 (id=1825): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) (async) listen(r1, 0xfff) accept(r1, 0xfffffffffffffffd, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000540)='X', 0x34000, 0x0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.699403136s ago: executing program 2 (id=1826): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000c0000000500000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)="2965c7ae98eefcb164b7", 0x3f, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x1, r1}, 0x38) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0xd8, 0x6, 0x7fff, 0x1c, @mcast1, @mcast2, 0x700, 0x20, 0x1, 0xd5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x6, 0x6, 0x0, @empty, @loopback, 0x7, 0x8000, 0x9ab, 0x80000000}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x4c}}, 0x10) 3.32276758s ago: executing program 1 (id=1827): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0xfffffffd}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000102010100000000cfc515ec0a00000006000740000000003c0001802c00018014000300fe88000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000"], 0x58}}, 0x0) 3.015860338s ago: executing program 2 (id=1828): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r6, r8, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000280012800b00010067656e65766500001800028014"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, 0x0, 0x40) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) 2.671048932s ago: executing program 1 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a0000004f0e2a51bdfced4514912fc98b96a4f2bd02f67349f8377afec7267d7a1b66409e99c0458e7085ccc0f68cae716324447ff8100e74fc5194c4dba628206eeb73b4c19efe94f0330f0b11427e4f4ba1d51afa009c7cf6663bf32b11d46ac0b25e875e563153b9636a0f06bfa916b2", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280080008008100000008000100aaaaaaaaaa000000"], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendto$llc(r4, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10) connect$llc(r4, &(0x7f0000000580)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000380)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f0000000480)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x77359400, 0x0}) ioctl$FIBMAP(r2, 0x1, &(0x7f00000002c0)=0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000018491aaf218926ffc90ebaa864cee1ceceed7379a2f5a0751e5e5d2665289874c4a923a2d7a9ecd561517006", @ANYRESHEX, @ANYRESOCT=r6], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4028041) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000007c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000800), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz1\x00', 0x1ff) r9 = socket(0x10, 0x2, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010000000800000000000a0000000a769e0c8c15c96cb6d3ca41018499001433d8818cee31b8b64d088dee02fd76712dab171064326bf9204addeff637d0973a354f70e01f6ab105361396050058f0148bdc29a37e3c76c585d9ce097342976acb61b4b2ae9fbcbdd5bb43c6363ea212d3ce6dbaa75fc740dd54c83b5666fa8aea66c976368db1c9a57404ad2fe0ba9d74f41a6f8b25877b5d2fcd4aeb122e9d5f55d9ce40e579342d8265af4031c7807fb9c6bae3ece6778db8af200f53f98d9a0c736846bd732ff2aac9f80ea987817e"], 0x14}}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f00000008c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000900), 0x12) r12 = openat$cgroup_procs(r11, &(0x7f0000000f00)='cgroup.procs\x00', 0x2, 0x0) pread64(r12, &(0x7f0000000f40)=""/4096, 0x1000, 0x1) 2.499034972s ago: executing program 0 (id=1830): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1, 0xffffffffffffffff}, 0x4) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000003c0)={0x20000000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000001405c2915201d8bd697144de15c06fae46033edadfb95f83789fbaca2c57b544e220fbf7d71c24d7b3e3252fee2f14aeaa1f2c148bae191c275559afa2965a199ad11a8f3d349ebc713af622fc210471286e4867c89054bac1ece76239c06005ac2f2fa708b572d8b81aa5f52d735264c680b3420c52221d01a2f43422100ca178422c13126775f3"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) ioctl$XFS_IOC_FSBULKSTAT(r6, 0xc0205865, &(0x7f0000000b00)={&(0x7f0000000000)=0xfffffffffffffffc, 0x9, &(0x7f0000000700)=[{}, {}, {}, {}, {}], &(0x7f0000000ac0)}) 2.224736553s ago: executing program 3 (id=1831): r0 = socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) close(r0) 1.602309172s ago: executing program 0 (id=1832): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc131480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 1.60132374s ago: executing program 3 (id=1833): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20044881) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c000000030901012abd7000fddbdf250300000a8cdac462f5e0515bd7432db17481a5e5d1943171bf8d5b68f4ff806b0b0e4f7dff8b49f22e4cce5138490d5064296b8b440c006300090000000000000008008700", @ANYRES32=0x0, @ANYBLOB="080039800400668008003500", @ANYRES32, @ANYBLOB='\b\x00\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) 1.546546429s ago: executing program 1 (id=1834): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, &(0x7f0000019600)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000019640)='GPL\x00', 0x2, 0xfd90, &(0x7f0000019680)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000197c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019840)={0x11, 0x8, &(0x7f0000019900)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000019940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000019980)={r3}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1, 0x30, 0x5, @void}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271f, &(0x7f0000000500)=""/102393, &(0x7f0000019500)=0x18ff9) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000000)={0x23, 0x14}, 0x10) listen(r5, 0x0) bind$phonet(r4, &(0x7f0000000400)={0x23, 0x4}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000019780)=0x3, 0x4) bind$phonet(r7, &(0x7f0000000440)={0x23, 0x4, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.13296922s ago: executing program 3 (id=1835): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000640)={0x4001}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x50}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'pimreg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000840), 0x4000000000001f2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES64=r10, @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf256b00000008000300", @ANYRESDEC=r7, @ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000080)={0x1100, 0x1, 0x80000008, 0xa00000000010003}) 976.266082ms ago: executing program 0 (id=1836): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4044000) sendmmsg(r2, &(0x7f0000000740), 0x40000000000009f, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x2, 0x2, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) shutdown(r0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x92258420943190a, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0xb8, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xb8}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r9, @in={{0x2, 0x4e20, @empty}}, 0x9, 0xfbe4, 0x7fff, 0x3, 0x30, 0x631, 0x9}, 0x9c) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000f939005200010000000000000000000203"], 0x14}}, 0x0) writev(r10, &(0x7f0000000200), 0x0) 651.037237ms ago: executing program 1 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x88, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, @random=0xc9e, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7, 0x48}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x88}}, 0x39db77225c63fa4c) 0s ago: executing program 0 (id=1838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000ac0)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0xfffffffb, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x4000009, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xa4f, 0x26, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x9, 0x4, 0xf56e, 0x6f49, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x4, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8, 0x43ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x8, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0x800ff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x2, 0x3fed, 0x2, 0x1, 0x2, 0x8, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e2, 0x2, 0x2, 0x5, 0x8, 0x1, 0x8, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0x5, 0x7f, 0xe, 0x1, 0x3, 0xfff, 0x5, 0x7, 0x400000, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x10001, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0x3678aa0b, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xfb, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x10000003, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x40000000, 0x3ff, 0x3, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x9, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x1, 0x7f, 0xb, 0x0, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x4, 0x5, 0x8, 0xffffff7d, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x4d2, 0x4000000, {0x8, 0x0, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x1e, 0x5, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000001440)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001480)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000014c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000001500)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000540)={{0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x543202, &(0x7f0000000080)={@align=0x7, {0x0, 0xfff7, 0x3, 0x7fffffffffffffff}}, 0x6, &(0x7f0000000100), &(0x7f0000000200)=0x4}, 0x3, &(0x7f00000004c0)=[{0x1, 0x41, &(0x7f0000000240)='-\x00', &(0x7f0000000300)="e5e9ec1514ff9da5d882746a0d4aa4e7e95d0a1f5caddd70eb65", 0x1a, 0x22}, {0x3, 0x1, &(0x7f0000000340)='-\x1f\x00', &(0x7f0000000380)="256f63a49e81478d67ded9a9102cd062bb70d156d40a7f08b3f931334facb823bd38e3117ab6a28b471b0443fbc48bd14589257ab208de51902fdd7698f9069ef5ed4f4c065881ec808cbb4af61d7b", 0x4f}, {0x1, 0x8, &(0x7f0000000400)='&\x00', &(0x7f0000000440)="ffcd938550c4a8146177dfa62e0edec25f33b8e4698b0d7689322275aaf411c80d5e903d9b78066a8d1fa5541cdef1f798ee12f15d8f331c6d140e6baeee041872bfd4fca28a666803eda0fd3d7dc311c5dbad549683ec5af1f797d4dc79e15dcf38cc7cac", 0x65, 0x22}]}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x7800, 0x47eb98e3a736ca0f, 0x21, 0x2, {{0x27, 0x4, 0x2, 0x9, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x7, [{@local, 0x5}]}, @timestamp_addr={0x44, 0x44, 0x83, 0x1, 0xc, [{@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x1}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x5}, {@loopback, 0x1}, {@loopback, 0x7}]}, @rr={0x7, 0x27, 0x6b, [@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @private=0xa010101, @private=0xa010101, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}]}, @noop, @ssrr={0x89, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @rr={0x7, 0x7, 0x35, [@rand_addr=0x64010100]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r9, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd8, r10, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8051}, 0x20000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r13, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="801100004100070127bd7000fefdffff047c0000080026800400080064110180601110805a110b80", @ANYRES32=r14], 0x1180}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): nd rxe0: added rxe_eth0 [ 69.201906][ T5614] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 69.201944][ T5614] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 69.201978][ T5614] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 69.255444][ T989] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.323735][ T5614] RDS/IB: rxe0: added [ 69.324032][ T5614] smc: adding ib device rxe0 with port count 1 [ 69.324127][ T5614] smc: ib device rxe0 port 1 has no pnetid [ 69.375297][ T989] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.399865][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.515507][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.563863][ T989] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.771427][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.878657][ T5615] Bluetooth: hci4: command tx timeout [ 69.878855][ T5615] Bluetooth: hci1: command tx timeout [ 69.878968][ T5615] Bluetooth: hci0: command tx timeout [ 69.968277][ T4933] Bluetooth: hci2: command tx timeout [ 69.968301][ T5615] Bluetooth: hci3: command tx timeout [ 70.133739][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.325755][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.327614][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.328137][ T5625] bridge_slave_0: entered allmulticast mode [ 70.338162][ T5625] bridge_slave_0: entered promiscuous mode [ 70.374008][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.374136][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.374216][ T5613] bridge_slave_0: entered allmulticast mode [ 70.375165][ T5613] bridge_slave_0: entered promiscuous mode [ 70.376976][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.377088][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.377197][ T5625] bridge_slave_1: entered allmulticast mode [ 70.381257][ T5625] bridge_slave_1: entered promiscuous mode [ 70.397078][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.398308][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.398403][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.398535][ T5611] bridge_slave_0: entered allmulticast mode [ 70.402436][ T5611] bridge_slave_0: entered promiscuous mode [ 70.410630][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.410728][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.410872][ T5611] bridge_slave_1: entered allmulticast mode [ 70.415789][ T5611] bridge_slave_1: entered promiscuous mode [ 70.465432][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.465530][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.465637][ T5613] bridge_slave_1: entered allmulticast mode [ 70.471106][ T5613] bridge_slave_1: entered promiscuous mode [ 70.583485][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.600299][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.600511][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.601397][ T5612] bridge_slave_0: entered allmulticast mode [ 70.603987][ T5612] bridge_slave_0: entered promiscuous mode [ 70.608341][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.608445][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.608562][ T5612] bridge_slave_1: entered allmulticast mode [ 70.610240][ T5612] bridge_slave_1: entered promiscuous mode [ 70.616247][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.623543][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.658391][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.680033][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.711287][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.746553][ T5625] team0: Port device team_slave_0 added [ 70.765918][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.794122][ T5625] team0: Port device team_slave_1 added [ 70.816953][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.819220][ T5613] team0: Port device team_slave_0 added [ 70.825341][ T5613] team0: Port device team_slave_1 added [ 70.849732][ T5611] team0: Port device team_slave_0 added [ 70.888240][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.888255][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.888276][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.891911][ T5611] team0: Port device team_slave_1 added [ 70.893453][ T5612] team0: Port device team_slave_0 added [ 70.899173][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.899185][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.899205][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.903928][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.903940][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.903961][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.932560][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.932574][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.932595][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.934404][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.993443][ T5612] team0: Port device team_slave_1 added [ 71.088691][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.088707][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.088728][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.112021][ T5625] hsr_slave_0: entered promiscuous mode [ 71.113176][ T5625] hsr_slave_1: entered promiscuous mode [ 71.165564][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.165581][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.165601][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.231741][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.231768][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.231789][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.300737][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.300752][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.300773][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.328778][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.328847][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.381649][ T5611] hsr_slave_0: entered promiscuous mode [ 71.382274][ T5611] hsr_slave_1: entered promiscuous mode [ 71.382692][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 71.382764][ T5611] Cannot create hsr debugfs directory [ 71.389768][ T5613] hsr_slave_0: entered promiscuous mode [ 71.391745][ T5613] hsr_slave_1: entered promiscuous mode [ 71.392381][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 71.392397][ T5613] Cannot create hsr debugfs directory [ 71.489870][ T5612] hsr_slave_0: entered promiscuous mode [ 71.490492][ T5612] hsr_slave_1: entered promiscuous mode [ 71.490910][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 71.490927][ T5612] Cannot create hsr debugfs directory [ 71.929440][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.939409][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.940649][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.953078][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.956684][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.968817][ T4933] Bluetooth: hci0: command tx timeout [ 71.968843][ T4933] Bluetooth: hci1: command tx timeout [ 71.968861][ T4933] Bluetooth: hci4: command tx timeout [ 71.975561][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.980354][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.992885][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.039914][ T5615] Bluetooth: hci2: command tx timeout [ 72.039949][ T5615] Bluetooth: hci3: command tx timeout [ 72.099137][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.102431][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.103145][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.106444][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.144606][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.148528][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.173909][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.176809][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.247521][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.255675][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.255790][ T5614] bridge_slave_0: entered allmulticast mode [ 72.257137][ T5614] bridge_slave_0: entered promiscuous mode [ 72.260797][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.260893][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.261354][ T5614] bridge_slave_1: entered allmulticast mode [ 72.263060][ T5614] bridge_slave_1: entered promiscuous mode [ 72.320489][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.330337][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.367495][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.377617][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.379101][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.391393][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.408397][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.411202][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.420009][ T5614] team0: Port device team_slave_0 added [ 72.424308][ T5614] team0: Port device team_slave_1 added [ 72.446242][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.452742][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.479209][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.479221][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.479233][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.494882][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.494897][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.494917][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.620545][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.622999][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.631924][ T5614] hsr_slave_0: entered promiscuous mode [ 72.632825][ T5614] hsr_slave_1: entered promiscuous mode [ 72.633451][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 72.633468][ T5614] Cannot create hsr debugfs directory [ 72.643856][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.644211][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.653256][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.667478][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.675810][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.677367][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.682329][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.807185][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.882568][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.882818][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.890266][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.913920][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.914008][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.997304][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.021408][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.057090][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.057155][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.084158][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.087471][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.090438][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.098499][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.127102][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.131824][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.142711][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.142879][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.147328][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.153807][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.155470][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.189449][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.189509][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.250410][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.250525][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.331347][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.365300][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.424247][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.424321][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.464408][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.464489][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.727176][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.825194][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.865745][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.865848][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.900217][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.900311][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.039628][ T4933] Bluetooth: hci4: command tx timeout [ 74.039659][ T4933] Bluetooth: hci1: command tx timeout [ 74.039678][ T4933] Bluetooth: hci0: command tx timeout [ 74.119560][ T5615] Bluetooth: hci3: command tx timeout [ 74.119577][ T4933] Bluetooth: hci2: command tx timeout [ 74.165734][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.340666][ T5625] veth0_vlan: entered promiscuous mode [ 74.377345][ T5625] veth1_vlan: entered promiscuous mode [ 74.453845][ T5625] veth0_macvtap: entered promiscuous mode [ 74.481555][ T5625] veth1_macvtap: entered promiscuous mode [ 74.529833][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.562134][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.612386][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.614793][ T1175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.714971][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.855399][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.868199][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.868222][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.874319][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.913723][ T1032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.987104][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.987126][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.008431][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.173557][ T5613] veth0_vlan: entered promiscuous mode [ 75.229062][ T5612] veth0_vlan: entered promiscuous mode [ 75.252475][ T5613] veth1_vlan: entered promiscuous mode [ 75.300169][ T5625] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.310684][ T5612] veth1_vlan: entered promiscuous mode [ 75.332387][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.425295][ T5613] veth0_macvtap: entered promiscuous mode [ 75.438355][ T5820] syzkaller1: entered promiscuous mode [ 75.438376][ T5820] syzkaller1: entered allmulticast mode [ 75.487186][ T5613] veth1_macvtap: entered promiscuous mode [ 75.544303][ T5612] veth0_macvtap: entered promiscuous mode [ 75.563180][ T5612] veth1_macvtap: entered promiscuous mode [ 75.592590][ T5614] veth0_vlan: entered promiscuous mode [ 75.609572][ T5611] veth0_vlan: entered promiscuous mode [ 75.612913][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.632785][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.659177][ T5611] veth1_vlan: entered promiscuous mode [ 75.675252][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.675882][ T5614] veth1_vlan: entered promiscuous mode [ 75.715928][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.778317][ T5830] bridge1: entered promiscuous mode [ 75.778368][ T5830] bridge1: entered allmulticast mode [ 75.798965][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.799221][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.799396][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.799915][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800226][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800487][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.820439][ T1032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822322][ T1032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.826914][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 75.901223][ T5611] veth0_macvtap: entered promiscuous mode [ 75.938728][ T5611] veth1_macvtap: entered promiscuous mode [ 75.980327][ T5614] veth0_macvtap: entered promiscuous mode [ 76.014286][ T5614] veth1_macvtap: entered promiscuous mode [ 76.042876][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.044799][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.044817][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.093446][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.114583][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.114604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.118324][ T5615] Bluetooth: hci1: command tx timeout [ 76.118358][ T5615] Bluetooth: hci4: command tx timeout [ 76.118408][ T4933] Bluetooth: hci0: command tx timeout [ 76.198488][ T5617] Bluetooth: hci2: command tx timeout [ 76.198562][ T4933] Bluetooth: hci3: command tx timeout [ 76.238693][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.240771][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.240789][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.252780][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.283503][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.283525][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.286279][ T1032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286346][ T1032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286398][ T1032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.382094][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.382429][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.383265][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447384][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447778][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.447794][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.561338][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.576492][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.576513][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.734982][ T5854] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 76.754234][ T5848] syzkaller0: entered promiscuous mode [ 76.754258][ T5848] syzkaller0: entered allmulticast mode [ 76.790869][ T5853] ip_tables: iptables: counters copy to user failed while replacing table [ 76.793548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.793566][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.996309][ T5864] Zero length message leads to an empty skb [ 77.014287][ T5865] ip6t_rt: address list match requested but addrnr is 0 [ 78.192940][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.192962][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.409716][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 78.505768][ T5878] batman_adv: batadv0: Adding interface: syzkaller0 [ 78.505785][ T5878] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.505812][ T5878] batman_adv: batadv0: Interface activated: syzkaller0 [ 78.541595][ T5877] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 78.584740][ T5877] batman_adv: batadv0: Removing interface: syzkaller0 [ 78.604519][ T5890] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 78.664114][ T5890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.704988][ T5898] Bluetooth: MGMT ver 1.23 [ 78.838914][ T190] hid-generic 0005:07C0:0003.0001: item fetching failed at offset 0/1 [ 78.841026][ T190] hid-generic 0005:07C0:0003.0001: probe with driver hid-generic failed with error -22 [ 78.841080][ T5893] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.841155][ T5893] gretap1: entered promiscuous mode [ 78.841170][ T5893] gretap1: entered allmulticast mode [ 78.901581][ T5907] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.23'. [ 79.110485][ T5916] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 79.117586][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26'. [ 79.163021][ T5918] syzkaller0: entered promiscuous mode [ 79.163042][ T5918] syzkaller0: entered allmulticast mode [ 79.225687][ T5920] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 79.226067][ T5920] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 79.645408][ T5949] ip_tables: iptables: counters copy to user failed while replacing table [ 79.646410][ T5949] C: renamed from lo (while UP) [ 79.666254][ T5949] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 79.766836][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.769394][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.801510][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.803318][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.806416][ T5960] tipc: Enabling of bearer rejected, failed to enable media [ 79.818782][ T1159] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.850387][ T188] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.851229][ T188] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.851502][ T188] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.539819][ T5998] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 80.743415][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.744076][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.744216][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.744341][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.744478][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.744608][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.744736][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.751938][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 80.752092][ T6015] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 81.320157][ T190] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.362321][ T6061] __nla_validate_parse: 2 callbacks suppressed [ 81.362341][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.62'. [ 81.521971][ T6029] ip_tables: iptables: counters copy to user failed while replacing table [ 81.642078][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 81.642101][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 81.642124][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 81.708478][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.708523][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.708555][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.708585][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.876576][ T6083] veth0_to_bridge: entered promiscuous mode [ 81.922909][ T6082] veth0_to_bridge: left promiscuous mode [ 82.050972][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 82.051014][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 82.086520][ T6088] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 82.116633][ T6088] geneve1: entered promiscuous mode [ 82.140126][ T6088] erspan0: entered promiscuous mode [ 82.269964][ T6098] Bluetooth: hci0: unsupported parameter 5134 [ 82.269986][ T6098] Bluetooth: hci0: unsupported parameter 8192 [ 82.270001][ T6098] Bluetooth: hci0: unsupported parameter 5134 [ 82.270012][ T6098] Bluetooth: hci0: unsupported parameter 8192 [ 82.326269][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 82.404634][ T6101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.437933][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.71'. [ 82.588456][ T6108] warning: `syz.3.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.662448][ T6112] netlink: 152 bytes leftover after parsing attributes in process `syz.3.74'. [ 83.352979][ T4933] Bluetooth: hci1: Malformed Event: 0x13 [ 83.615598][ T6163] syzkaller0: entered promiscuous mode [ 83.615621][ T6163] syzkaller0: entered allmulticast mode [ 83.632405][ T6162] tipc: Started in network mode [ 83.632433][ T6162] tipc: Node identity 7a86fd8581d7, cluster identity 4711 [ 83.635502][ T6162] tipc: Enabled bearer , priority 0 [ 83.652997][ T6162] tipc: Resetting bearer [ 83.653693][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.653728][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.655019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.655054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.683143][ T6166] validate_nla: 31 callbacks suppressed [ 83.683161][ T6166] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 83.696679][ T6161] tipc: Resetting bearer [ 83.725540][ T6161] tipc: Disabling bearer [ 83.797194][ T6166] 8021q: VLANs not supported on ipvlan0 [ 83.986888][ T6173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.89'. [ 84.197187][ T6180] Illegal XDP return value 4294967274 on prog (id 13) dev N/A, expect packet loss! [ 84.253090][ T6179] veth3: entered allmulticast mode [ 84.523017][ T6203] netlink: 'syz.2.99': attribute type 3 has an invalid length. [ 84.523047][ T6203] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 84.589884][ T6202] ip_tables: iptables: counters copy to user failed while replacing table [ 84.681595][ T6213] Bluetooth: ISO socket layer initialized [ 85.820521][ T6296] syzkaller0: entered promiscuous mode [ 85.820544][ T6296] syzkaller0: entered allmulticast mode [ 86.200128][ T6317] netlink: 'syz.4.125': attribute type 2 has an invalid length. [ 86.204937][ T6319] netlink: 'syz.4.125': attribute type 2 has an invalid length. [ 86.554274][ T6334] __nla_validate_parse: 7 callbacks suppressed [ 86.554293][ T6334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.129'. [ 86.701416][ T25] cfg80211: failed to load regulatory.db [ 86.987433][ T6360] openvswitch: netlink: Duplicate or invalid key (type 0). [ 87.241336][ T6369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.454236][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.142'. [ 87.454257][ T6387] netlink: 13 bytes leftover after parsing attributes in process `syz.3.142'. [ 87.477634][ T6389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.478348][ T6389] IPv6: NLM_F_CREATE should be set when creating new route [ 87.478572][ T6389] IPv6: NLM_F_CREATE should be set when creating new route [ 87.506748][ T6387] veth3: entered promiscuous mode [ 87.625146][ T6398] xt_bpf: check failed: parse error [ 87.683263][ T6398] netlink: 108 bytes leftover after parsing attributes in process `syz.3.145'. [ 88.324937][ T6431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.155'. [ 88.356519][ T6429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.154'. [ 88.584706][ T6451] sctp: [Deprecated]: syz.4.162 (pid 6451) Use of int in max_burst socket option. [ 88.584706][ T6451] Use struct sctp_assoc_value instead [ 88.859698][ T6466] pimreg: entered allmulticast mode [ 88.902716][ T6480] netlink: 104 bytes leftover after parsing attributes in process `syz.1.163'. [ 88.991189][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 93.024214][ T6548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.252699][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'. [ 93.391153][ T6612] netlink: 240 bytes leftover after parsing attributes in process `syz.2.202'. [ 93.993411][ T6646] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 94.033655][ T6646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.040531][ T6646] team0: Port device netdevsim1 added [ 94.051007][ T6646] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 94.133529][ T6636] syzkaller0: entered promiscuous mode [ 94.133549][ T6636] syzkaller0: entered allmulticast mode [ 94.306991][ T6661] xt_hashlimit: size too large, truncated to 1048576 [ 94.380295][ T6664] xt_hashlimit: size too large, truncated to 1048576 [ 94.933549][ T6676] ipt_REJECT: TCP_RESET invalid for non-tcp [ 95.164294][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'. [ 95.473401][ T6701] vlan0: entered promiscuous mode [ 95.617127][ T6707] netlink: 84 bytes leftover after parsing attributes in process `syz.1.229'. [ 95.891218][ T6729] ip_tables: iptables: counters copy to user failed while replacing table [ 95.987617][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.234'. [ 96.052613][ T6729] netlink: 104 bytes leftover after parsing attributes in process `syz.0.233'. [ 96.334997][ T6760] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.429805][ T6764] syzkaller0: entered promiscuous mode [ 96.429829][ T6764] syzkaller0: entered allmulticast mode [ 96.576905][ T6770] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 96.576925][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 96.679883][ T6774] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.680292][ T6774] gretap1: entered promiscuous mode [ 96.680306][ T6774] gretap1: entered allmulticast mode [ 96.694711][ T6778] netlink: Unknown conntrack attr (type=205, max=9) [ 96.987952][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 97.024684][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.253'. [ 97.281135][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.255'. [ 97.973618][ T6873] ip_tables: iptables: counters copy to user failed while replacing table [ 98.028575][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.028657][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.029827][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.031140][ T6873] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.031168][ T6873] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.031198][ T6873] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.036319][ T6873] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.088168][ T6873] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.187560][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.196728][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.208261][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.212055][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.214099][ T6873] wlan1 speed is unknown, defaulting to 1000 [ 98.294925][ T6886] __nla_validate_parse: 1 callbacks suppressed [ 98.294945][ T6886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.277'. [ 98.359185][ T6888] bridge0: port 3(wlan0) entered blocking state [ 98.361984][ T6888] bridge0: port 3(wlan0) entered disabled state [ 98.362168][ T6888] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 98.367528][ T6888] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 98.462594][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 98.651714][ T6907] Bluetooth: hci0: unsupported parameter 5134 [ 98.651745][ T6907] Bluetooth: hci0: unsupported parameter 8192 [ 98.651758][ T6907] Bluetooth: hci0: unsupported parameter 5134 [ 98.651770][ T6907] Bluetooth: hci0: unsupported parameter 8192 [ 98.746764][ T6869] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.894022][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.963677][ T6922] x_tables: duplicate underflow at hook 2 [ 98.966621][ T6925] syzkaller1: entered promiscuous mode [ 98.966639][ T6925] syzkaller1: entered allmulticast mode [ 98.971950][ T6925] 0: reclassify loop, rule prio 0, protocol 03 [ 99.012942][ T6938] 0: reclassify loop, rule prio 0, protocol 03 [ 99.103640][ T6943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.136137][ T6943] ip6t_rpfilter: unknown options [ 99.546995][ T6968] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 99.547010][ T6968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.299'. [ 99.547030][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 99.576344][ T6968] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 99.576362][ T6968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.299'. [ 99.576373][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 99.695678][ T6977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.302'. [ 99.695702][ T6977] netlink: 43 bytes leftover after parsing attributes in process `syz.1.302'. [ 99.695715][ T6977] netlink: 'syz.1.302': attribute type 6 has an invalid length. [ 99.695725][ T6977] netlink: 'syz.1.302': attribute type 5 has an invalid length. [ 99.695735][ T6977] netlink: 43 bytes leftover after parsing attributes in process `syz.1.302'. [ 99.699376][ T6981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.302'. [ 99.699399][ T6981] netlink: 'syz.1.302': attribute type 6 has an invalid length. [ 99.699410][ T6981] netlink: 'syz.1.302': attribute type 5 has an invalid length. [ 99.854152][ T6984] geneve2: entered promiscuous mode [ 99.854173][ T6984] geneve2: entered allmulticast mode [ 100.555680][ T7026] nbd: must specify at least one socket [ 100.631998][ T7030] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.890448][ T7046] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20004 [ 101.118349][ T7067] syz_tun: entered allmulticast mode [ 101.177519][ T7071] syz_tun: left allmulticast mode [ 101.220486][ T7065] xt_ecn: cannot match TCP bits for non-tcp packets [ 101.411335][ T7082] netlink: 'syz.3.338': attribute type 29 has an invalid length. [ 101.498079][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.498629][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.498659][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.498683][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.550456][ T7087] ip_tables: iptables: counters copy to user failed while replacing table [ 101.699274][ T7098] SET target dimension over the limit! [ 101.996677][ T7116] block nbd0: not configured, cannot reconfigure [ 102.071215][ T7121] block nbd0: not configured, cannot reconfigure [ 102.422799][ T7152] xt_l2tp: wrong L2TP version: 255 [ 103.158052][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 103.374636][ T7182] netlink: Conntrack attr has 8 unknown bytes [ 103.374669][ T7182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.491455][ T7190] netlink: 'syz.2.367': attribute type 32 has an invalid length. [ 103.495085][ T7181] __nla_validate_parse: 18 callbacks suppressed [ 103.495101][ T7181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'. [ 103.626493][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 103.765168][ T7206] netlink: 68 bytes leftover after parsing attributes in process `syz.4.371'. [ 103.814542][ T7210] x_tables: unsorted entry at hook 2 [ 103.932258][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'. [ 104.021895][ T7224] xt_REDIRECT: bad MAP_IPS. [ 104.046264][ T7226] ip_tables: iptables: counters copy to user failed while replacing table [ 104.380178][ T7232] Bluetooth: MGMT ver 1.23 [ 104.383147][ T7232] Bluetooth: MGMT ver 1.23 [ 104.522596][ T7238] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 104.550805][ T7242] xt_esp: unknown flags DD [ 104.555427][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.567294][ T7238] bond0: (slave team0): Enslaving as an active interface with an up link [ 104.860822][ T7260] netlink: 'syz.1.388': attribute type 11 has an invalid length. [ 104.860844][ T7260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.388'. [ 104.975036][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'. [ 104.975062][ T7264] netlink: 'syz.2.390': attribute type 3 has an invalid length. [ 104.975075][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'. [ 104.975300][ T7264] netlink: 'syz.2.390': attribute type 3 has an invalid length. [ 105.018590][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 105.452524][ T7298] netlink: 220 bytes leftover after parsing attributes in process `syz.1.400'. [ 105.452544][ T7298] tc_dump_action: action bad kind [ 105.567221][ T7313] netlink: 104 bytes leftover after parsing attributes in process `syz.0.402'. [ 105.581776][ T7307] SET target dimension over the limit! [ 105.682158][ T7322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.756281][ T7329] xt_esp: unknown flags DD [ 106.009469][ T7343] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 106.014689][ T7343] netlink: 'syz.1.414': attribute type 1 has an invalid length. [ 106.104798][ T7351] ip_tables: iptables: counters copy to user failed while replacing table [ 106.645010][ T7387] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.227281][ T7427] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 107.227301][ T7427] nbd: error processing sock list [ 107.264394][ T7429] netlink: 'syz.3.443': attribute type 5 has an invalid length. [ 107.306432][ T7429] geneve2: entered promiscuous mode [ 107.306456][ T7429] geneve2: entered allmulticast mode [ 107.378234][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 107.378664][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 107.378702][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 107.378732][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 107.578468][ T7444] xt_hashlimit: size too large, truncated to 1048576 [ 107.654867][ T7447] openvswitch: netlink: Message has 8 unknown bytes. [ 108.017327][ T7467] netlink: set zone limit has 4 unknown bytes [ 108.045995][ T7468] block nbd0: not configured, cannot reconfigure [ 108.210684][ T12] IPVS: starting estimator thread 0... [ 108.226615][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226652][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226683][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226706][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226728][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226749][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226769][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226790][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226811][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.226833][ T25] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 108.284485][ T25] hid-generic 0005:10CF:0005.0002: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 108.305946][ T7479] IPVS: lc: FWM 3 0x00000003 - no destination available [ 108.306063][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 108.309446][ T7485] IPVS: lc: FWM 3 0x00000003 - no destination available [ 108.309534][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 108.321270][ T7483] IPVS: using max 30 ests per chain, 72000 per kthread [ 108.482901][ T7481] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 108.504914][ T7493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.743027][ T7504] syzkaller1: entered promiscuous mode [ 108.743049][ T7504] syzkaller1: entered allmulticast mode [ 108.745264][ T7508] __nla_validate_parse: 11 callbacks suppressed [ 108.745280][ T7508] netlink: 260 bytes leftover after parsing attributes in process `syz.2.470'. [ 108.757997][ T7509] xt_hashlimit: size too large, truncated to 1048576 [ 109.021798][ T7522] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 109.021818][ T7522] netlink: 224 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.021830][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.055368][ T1032] IPVS: starting estimator thread 0... [ 109.147802][ T7525] IPVS: using max 34 ests per chain, 81600 per kthread [ 109.634641][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.636720][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.636906][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.637066][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.637219][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.637397][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.637560][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 109.933000][ T7541] ipt_ECN: cannot use operation on non-tcp rule [ 110.009349][ T7552] netlink: zone id is out of range [ 110.009364][ T7552] netlink: zone id is out of range [ 110.083629][ T7556] netlink: 'syz.3.487': attribute type 4 has an invalid length. [ 110.280214][ T7567] netlink: 'syz.3.492': attribute type 11 has an invalid length. [ 111.130266][ T7628] netlink: 'syz.2.506': attribute type 11 has an invalid length. [ 111.131666][ T7628] raw_sendmsg: syz.2.506 forgot to set AF_INET. Fix it! [ 111.163978][ T7582] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 111.288111][ T7635] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 111.288111][ T7635] Please contact the netfilter-devel mailing list or update your nftables rules. [ 111.330816][ T7641] netlink: 'syz.1.511': attribute type 19 has an invalid length. [ 111.349514][ T7641] netlink: 'syz.1.511': attribute type 19 has an invalid length. [ 111.362849][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.362891][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.362920][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.362949][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.653294][ T7657] veth0: entered promiscuous mode [ 111.689155][ T7654] veth0: left promiscuous mode [ 112.125456][ T7684] net_ratelimit: 506 callbacks suppressed [ 112.125477][ T7684] ip_tables: iptables: counters copy to user failed while replacing table [ 112.198912][ T7688] hsr0: entered allmulticast mode [ 112.198935][ T7688] hsr_slave_0: entered allmulticast mode [ 112.198949][ T7688] hsr_slave_1: entered allmulticast mode [ 112.625915][ T7715] Bluetooth: hci0: unsupported parameter 5135 [ 112.625937][ T7715] Bluetooth: hci0: unsupported parameter 8192 [ 112.626017][ T7715] Bluetooth: hci0: unsupported parameter 5135 [ 112.626029][ T7715] Bluetooth: hci0: unsupported parameter 8192 [ 112.788715][ T7723] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 112.797570][ T5727] infiniband syz2: ib_query_port failed (-19) [ 112.867628][ T13] smbdirect: ib_dev[syz2] removed [ 113.015231][ T7732] openvswitch: netlink: Message has 512 unknown bytes. [ 113.167484][ T7745] netlink: 'syz.4.540': attribute type 10 has an invalid length. [ 113.168717][ T7745] veth1_macvtap: left promiscuous mode [ 113.179754][ T7745] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 113.249594][ T7750] syzkaller0: entered promiscuous mode [ 113.249616][ T7750] syzkaller0: entered allmulticast mode [ 113.270266][ T7750] tipc: Started in network mode [ 113.270294][ T7750] tipc: Node identity 368cb1bc15b4, cluster identity 4711 [ 113.272536][ T7750] tipc: Enabled bearer , priority 0 [ 113.293609][ T7744] tipc: Resetting bearer [ 113.343981][ T7744] tipc: Disabling bearer [ 113.531590][ T7762] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 113.751650][ T7773] __nla_validate_parse: 52 callbacks suppressed [ 113.751672][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 113.845219][ T7781] syzkaller0: entered promiscuous mode [ 113.845239][ T7781] syzkaller0: entered allmulticast mode [ 113.975962][ T7795] netlink: 76 bytes leftover after parsing attributes in process `syz.3.551'. [ 114.095401][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.558'. [ 114.145362][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 114.161573][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 114.465375][ T7816] batman_adv: batadv0: Adding interface: veth0 [ 114.465392][ T7816] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.465418][ T7816] batman_adv: batadv0: Interface activated: veth0 [ 114.504035][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 114.533435][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 114.538753][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.538775][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.563399][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.563421][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.565015][ T7816] batman_adv: batadv0: Interface deactivated: veth0 [ 114.565034][ T7816] batman_adv: batadv0: Removing interface: veth0 [ 114.601043][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 114.711567][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 114.763496][ T7833] team0: Port device team_slave_0 removed [ 114.765358][ T7838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'. [ 115.039820][ T7853] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 115.073179][ T7853] bond1: entered promiscuous mode [ 115.073638][ T7853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.113467][ T7853] wireguard0: entered promiscuous mode [ 115.131056][ T7853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.132905][ T7853] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 115.132927][ T7853] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 115.189718][ T7853] bond1: (slave wireguard0): making interface the new active one [ 115.191662][ T7853] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 115.244945][ T7859] gretap0: entered promiscuous mode [ 115.259203][ T7859] gretap0: left promiscuous mode [ 115.473655][ T7877] veth0_to_hsr: entered promiscuous mode [ 115.675001][ T7891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.686340][ T7891] macvlan2: entered promiscuous mode [ 115.686360][ T7891] macvlan2: entered allmulticast mode [ 115.687410][ T7891] bond2: entered promiscuous mode [ 115.690914][ T7891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.716610][ T7891] bond2: left promiscuous mode [ 115.877075][ T7904] netlink: 'syz.0.590': attribute type 4 has an invalid length. [ 115.984749][ T7911] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 116.102384][ T7921] gretap0: entered promiscuous mode [ 116.385556][ T7941] ip_tables: iptables: counters copy to user failed while replacing table [ 116.412196][ T7939] syzkaller1: entered promiscuous mode [ 116.412217][ T7939] syzkaller1: entered allmulticast mode [ 116.432510][ T7939] 0: reclassify loop, rule prio 0, protocol 03 [ 116.643404][ T7951] veth1_macvtap: left promiscuous mode [ 117.596726][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.646883][ T7995] syzkaller1: entered promiscuous mode [ 117.646905][ T7995] syzkaller1: entered allmulticast mode [ 118.079735][ T8024] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 118.111081][ T8030] netlink: 'syz.3.623': attribute type 4 has an invalid length. [ 118.125655][ T8024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.192716][ T8024] bond3: (slave geneve2): making interface the new active one [ 118.196072][ T8024] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 118.509608][ T8060] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 118.538327][ T8060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.549745][ T8060] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 118.589245][ T8065] netlink: 'syz.3.630': attribute type 10 has an invalid length. [ 118.614194][ T8065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.630645][ T8065] team0: Port device netdevsim1 added [ 118.632153][ T8065] netlink: 'syz.3.630': attribute type 10 has an invalid length. [ 118.753455][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.101267][ T8098] netlink: 'syz.0.639': attribute type 1 has an invalid length. [ 119.101456][ T8100] netlink: 'syz.0.639': attribute type 1 has an invalid length. [ 119.197091][ T8098] bond2: entered promiscuous mode [ 119.197537][ T8098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.222046][ T8101] ip_vti0: entered promiscuous mode [ 119.231929][ T8101] __nla_validate_parse: 21 callbacks suppressed [ 119.231949][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 119.289749][ T8098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.296921][ T8098] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 119.296946][ T8098] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 119.347946][ T8098] bond2: (slave xfrm1): making interface the new active one [ 119.347968][ T8098] xfrm1: entered promiscuous mode [ 119.350463][ T8098] xfrm1: left promiscuous mode [ 119.452480][ T8114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.641'. [ 119.537013][ T8116] Cannot find del_set index 65532 as target [ 119.548333][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 119.549189][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 119.551071][ T8119] nbd: must specify a size in bytes for the device [ 119.715448][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 119.758004][ T8123] batadv0: vlans aren't supported yet for dev_uc|mc_add() [ 119.826020][ T8126] ip_tables: iptables: counters copy to user failed while replacing table [ 119.829961][ T8126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.921692][ T8139] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 120.123096][ T8149] ip_tables: iptables: counters copy to user failed while replacing table [ 120.126460][ T8149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.220473][ T8155] bridge_slave_0 (unregistering): left allmulticast mode [ 120.220502][ T8155] bridge_slave_0 (unregistering): left promiscuous mode [ 120.220579][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.291248][ T8162] veth0: entered promiscuous mode [ 120.341139][ T8159] veth0: left promiscuous mode [ 120.373510][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 120.504320][ T8174] Bluetooth: hci0: unsupported parameter 5161 [ 120.504341][ T8174] Bluetooth: hci0: unsupported parameter 8192 [ 120.504353][ T8174] Bluetooth: hci0: unsupported parameter 5161 [ 120.504363][ T8174] Bluetooth: hci0: unsupported parameter 8192 [ 120.919439][ T8195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.666'. [ 120.945197][ T4933] Bluetooth: hci3: unexpected cc 0x2060 length: 144 > 7 [ 121.248707][ T4945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.799196][ T8229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.862884][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 121.925743][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 121.926972][ T7967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.927229][ T7967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.934839][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 121.960539][ T4945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.032876][ T8232] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 122.148493][ T4945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.280516][ T4945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.373277][ T8250] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 122.392315][ T8250] netlink: 'syz.0.679': attribute type 9 has an invalid length. [ 122.422629][ T8250] netlink: 'syz.0.679': attribute type 9 has an invalid length. [ 122.438693][ T7968] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.438887][ T7968] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.439522][ T7968] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.439554][ T7968] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.448219][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.663338][ T8265] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 122.724777][ T8265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.761079][ T7967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.761256][ T7967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.788435][ T5751] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.797294][ T8265] bond1: (slave geneve3): making interface the new active one [ 122.822754][ T8265] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 122.823928][ T8274] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 122.840818][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.894100][ T8265] syz.4.682 (8265) used greatest stack depth: 19040 bytes left [ 123.003279][ T8281] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 123.079387][ T5751] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 123.086724][ T8288] netlink: 'syz.4.688': attribute type 2 has an invalid length. [ 123.086754][ T8288] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 123.319650][ T4945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.320973][ T190] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 123.395453][ T8311] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 123.468662][ T8311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.492803][ T8316] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 123.510194][ T8319] netlink: 'syz.4.699': attribute type 25 has an invalid length. [ 123.999673][ T8348] x_tables: duplicate underflow at hook 2 [ 124.108353][ T8348] xt_CT: No such helper "syz1" [ 124.261133][ T8371] __nla_validate_parse: 46 callbacks suppressed [ 124.261153][ T8371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.716'. [ 124.262280][ T8374] netlink: 576 bytes leftover after parsing attributes in process `syz.1.717'. [ 124.321802][ T8382] netlink: 576 bytes leftover after parsing attributes in process `syz.1.717'. [ 124.322198][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 124.327637][ T8367] netlink: 576 bytes leftover after parsing attributes in process `syz.1.717'. [ 124.769651][ T8403] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 124.895022][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 124.895059][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 124.924120][ T8409] netlink: 128 bytes leftover after parsing attributes in process `syz.3.723'. [ 124.924264][ T8409] netlink: 3 bytes leftover after parsing attributes in process `syz.3.723'. [ 124.963590][ T8426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.027900][ T8430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.728'. [ 125.042059][ T8427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.063673][ T8427] net_ratelimit: 1 callbacks suppressed [ 125.063690][ T8427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.063925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.116884][ T8427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.166336][ T8427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.256438][ T8443] xt_bpf: check failed: parse error [ 125.267914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.279867][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.327792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.401860][ T4945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.792753][ T8425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.793726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.880190][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.453233][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.531114][ T8523] veth1_macvtap: left promiscuous mode [ 126.531142][ T8523] macsec0: entered promiscuous mode [ 126.545611][ T8523] netlink: 'syz.0.754': attribute type 11 has an invalid length. [ 127.077156][ T8546] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.096497][ T8546] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.912264][ T8610] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 127.914077][ T8610] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 127.915590][ T8610] bridge0: port 3(wlan0) entered disabled state [ 127.927854][ T8610] bridge_slave_1: left allmulticast mode [ 127.927886][ T8610] bridge_slave_1: left promiscuous mode [ 127.929854][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.943856][ T8610] bridge_slave_0: left allmulticast mode [ 127.943883][ T8610] bridge_slave_0: left promiscuous mode [ 127.944089][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.979729][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.341600][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.643688][ T8646] tipc: Enabling of bearer rejected, failed to enable media [ 128.646796][ T8646] validate_nla: 6 callbacks suppressed [ 128.646812][ T8646] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 128.695480][ T8646] team0: Device wg2 is of different type [ 128.811149][ T8650] syzkaller0: entered promiscuous mode [ 128.811172][ T8650] syzkaller0: entered allmulticast mode [ 129.330512][ T8682] veth0: entered promiscuous mode [ 129.362258][ T4933] Bluetooth: hci4: link tx timeout [ 129.362277][ T4933] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.412590][ T8681] veth0: left promiscuous mode [ 129.428750][ T5617] block nbd0: Receive control failed (result -32) [ 129.627385][ T5617] Bluetooth: hci4: link tx timeout [ 129.627403][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.653649][ T5617] Bluetooth: hci4: link tx timeout [ 129.653667][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.812952][ T8714] __nla_validate_parse: 47 callbacks suppressed [ 129.812971][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 129.813003][ T8714] netlink: 14 bytes leftover after parsing attributes in process `syz.4.798'. [ 130.053314][ T5617] Bluetooth: hci4: link tx timeout [ 130.053335][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.087530][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.106188][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.108478][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.132105][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.134565][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.163793][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.173513][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.196648][ T8729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.231051][ T5617] Bluetooth: hci4: link tx timeout [ 130.231072][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.417234][ T8747] netlink: 'syz.2.805': attribute type 83 has an invalid length. [ 130.982844][ T5617] Bluetooth: hci4: link tx timeout [ 130.982862][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.992002][ T8779] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 130.994578][ T8779] bond4 (unregistering): Released all slaves [ 131.095730][ T8785] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 131.098183][ T8785] bond4 (unregistering): Released all slaves [ 131.150274][ T5617] Bluetooth: hci4: link tx timeout [ 131.150293][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.243069][ T5617] Bluetooth: hci4: link tx timeout [ 131.243087][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.391116][ T8807] net_ratelimit: 75 callbacks suppressed [ 131.391134][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.391439][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.392043][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.392343][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.394170][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.394463][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.394762][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.396221][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.396531][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.397755][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 131.471477][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.579146][ T8819] Bluetooth: hci0: unsupported parameter 5135 [ 131.579167][ T8819] Bluetooth: hci0: unsupported parameter 8192 [ 131.579179][ T8819] Bluetooth: hci0: unsupported parameter 5135 [ 131.579189][ T8819] Bluetooth: hci0: unsupported parameter 8192 [ 131.582539][ T8814] team0: Device gtp0 is up. Set it down before adding it as a team port [ 132.018988][ T8845] netlink: 'syz.4.827': attribute type 4 has an invalid length. [ 132.075711][ T8847] netlink: 'syz.4.827': attribute type 4 has an invalid length. [ 132.574327][ T8865] syzkaller0: entered promiscuous mode [ 132.574348][ T8865] syzkaller0: entered allmulticast mode [ 132.764919][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764975][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.111320][ T8887] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 133.190495][ T8893] syzkaller0: entered promiscuous mode [ 133.190516][ T8893] syzkaller0: entered allmulticast mode [ 133.364274][ T8904] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 133.397908][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 133.397927][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.445361][ T8905] netlink: 'syz.1.841': attribute type 11 has an invalid length. [ 133.646254][ T8924] tipc: Enabling of bearer rejected, media not registered [ 134.037820][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 134.227163][ T8974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.332451][ T8979] netlink: 'syz.3.860': attribute type 2 has an invalid length. [ 134.591039][ T8988] tipc: Failed to remove unknown binding: 66,0,0/0:3886758975/3886758976 [ 134.594527][ T8987] tipc: Failed to remove unknown binding: 66,0,0/0:3886758975/3886758976 [ 134.623333][ T8993] syzkaller1: entered promiscuous mode [ 134.623354][ T8993] syzkaller1: entered allmulticast mode [ 135.137286][ T9034] tipc: Started in network mode [ 135.137312][ T9034] tipc: Node identity e0000001, cluster identity 4711 [ 135.137362][ T9034] tipc: Enabling of bearer rejected, failed to enable media [ 135.422543][ T9053] __nla_validate_parse: 50 callbacks suppressed [ 135.422562][ T9053] netlink: 44 bytes leftover after parsing attributes in process `syz.1.877'. [ 135.452825][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 135.463796][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 135.568013][ T9066] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 135.606845][ T9066] bond1: entered promiscuous mode [ 135.607247][ T9066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.674088][ T9066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.676037][ T9066] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 135.676057][ T9066] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 135.727168][ T9066] bond1: (slave wireguard0): making interface the new active one [ 135.727192][ T9066] wireguard0: entered promiscuous mode [ 135.743686][ T9066] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 135.744745][ T9079] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.803589][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.885'. [ 135.826678][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.885'. [ 135.927917][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 135.927940][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 135.935080][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 136.027863][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 136.052563][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 136.194455][ T9100] netlink: 'syz.1.892': attribute type 3 has an invalid length. [ 136.546054][ T7966] IPVS: starting estimator thread 0... [ 136.637847][ T9133] IPVS: using max 28 ests per chain, 67200 per kthread [ 136.744269][ T9149] net_ratelimit: 28 callbacks suppressed [ 136.744288][ T9149] openvswitch: netlink: Duplicate or invalid key (type 0). [ 136.804794][ T9153] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 136.843282][ T9152] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 137.355177][ T9187] IPVS: persistence engine module ip_vs_pe_À not found [ 138.305003][ T9248] tipc: Enabled bearer , priority 0 [ 139.035890][ T9290] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 139.092129][ T9296] tipc: Can't bind to reserved service type 0 [ 139.284094][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.306268][ T9303] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 139.307217][ T9301] bridge_slave_0 (unregistering): left allmulticast mode [ 139.307240][ T9301] bridge_slave_0 (unregistering): left promiscuous mode [ 139.307314][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.515584][ T9303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.594847][ T5727] tipc: Node number set to 3758096385 [ 140.102176][ T9352] netlink: 'syz.0.962': attribute type 11 has an invalid length. [ 140.206639][ T9359] netlink: 'syz.1.967': attribute type 10 has an invalid length. [ 140.611069][ T9356] bond2 (unregistering): Released all slaves [ 140.670139][ T9384] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 140.670993][ T9384] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.671374][ T9384] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.675345][ T9384] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.777449][ T9356] bond2 (unregistering): Released all slaves [ 140.947907][ T9356] bond2 (unregistering): Released all slaves [ 141.012935][ T9395] netdevsim netdevsim1 : renamed from netdevsim0 [ 141.103233][ T9399] __nla_validate_parse: 24 callbacks suppressed [ 141.103253][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 141.134598][ T9399] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 141.200936][ T9410] xt_hashlimit: size too large, truncated to 1048576 [ 141.435908][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 141.467293][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 141.802203][ T9443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.988'. [ 141.802564][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.988'. [ 141.804011][ T9444] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 141.804480][ T9443] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 142.168392][ T9461] xt_hashlimit: size too large, truncated to 1048576 [ 142.168621][ T9461] xt_hashlimit: max too large, truncated to 1048576 [ 142.168754][ T9461] xt_hashlimit: overflow, rate too high: 0 [ 142.234865][ T9464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.236118][ T9464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.409441][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 142.909269][ T9519] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1004'. [ 142.950276][ T9525] ipt_REJECT: TCP_RESET invalid for non-tcp [ 142.950842][ T9525] wireguard: wg2: Could not create IPv4 socket [ 142.975303][ T9525] wireguard: wg2: Could not create IPv4 socket [ 142.975763][ T9530] ipt_REJECT: TCP_RESET invalid for non-tcp [ 143.440671][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 143.440706][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 143.455070][ T9556] syz_tun: entered promiscuous mode [ 143.475930][ T9556] syz_tun: left promiscuous mode [ 143.903027][ T9576] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.064833][ T9586] veth3: entered allmulticast mode [ 144.237012][ T9593] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.489691][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 144.649483][ T9624] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 144.671954][ T9634] netlink: 'syz.2.1031': attribute type 64 has an invalid length. [ 144.893776][ T9646] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 144.959740][ T9646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.183181][ T9658] dvmrp0: entered allmulticast mode [ 145.349359][ T9670] SET target dimension over the limit! [ 145.843738][ T9708] xt_SECMARK: invalid mode: 9 [ 145.887195][ T9711] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 145.912088][ T9716] syzkaller0: entered promiscuous mode [ 145.912110][ T9716] syzkaller0: entered allmulticast mode [ 146.063769][ T5278] veth1_vlan: left promiscuous mode [ 146.111587][ T9731] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 146.240439][ T9739] __nla_validate_parse: 10 callbacks suppressed [ 146.240462][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1055'. [ 146.335810][ T9719] syz.3.1051 (9719) used greatest stack depth: 18248 bytes left [ 146.431343][ T9725] syz.3.1051 (9725) used greatest stack depth: 18024 bytes left [ 146.444860][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 146.618512][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1059'. [ 146.751927][ T9768] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 146.929545][ T9777] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1064'. [ 146.982091][ T9777] macvtap1: entered promiscuous mode [ 146.982113][ T9777] hsr0: entered promiscuous mode [ 146.985715][ T9777] macvtap1: entered allmulticast mode [ 146.985736][ T9777] hsr0: entered allmulticast mode [ 146.985746][ T9777] hsr_slave_0: entered allmulticast mode [ 146.985760][ T9777] hsr_slave_1: entered allmulticast mode [ 146.990280][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 146.999895][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.183061][ T9776] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 147.200031][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.251332][ T9795] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 147.338133][ T5617] Bluetooth: hci4: SCO packet too small [ 147.346936][ T9776] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.382384][ T9776] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.500736][ T9799] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 147.581082][ T9799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.621597][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 147.646114][ T9812] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 148.758235][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 149.397983][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.183045][ T9862] ip_tables: iptables: counters copy to user failed while replacing table [ 176.240848][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 176.240872][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 176.240885][ T9868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1078'. [ 176.365926][ T9870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1076'. [ 176.602427][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1085'. [ 176.617211][ T9889] netlink: 'syz.3.1085': attribute type 178 has an invalid length. [ 176.632847][ T9889] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.654172][ T9889] block nbd0: Unsupported socket: should be TCP or UNIX. [ 176.724069][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 176.725443][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 176.778804][ T9895] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1086'. [ 176.973749][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1090'. [ 177.043481][ T9918] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1090'. [ 177.293270][ T9932] syzkaller1: entered promiscuous mode [ 177.293292][ T9932] syzkaller1: entered allmulticast mode [ 177.468480][ T9938] netlink: 'syz.0.1095': attribute type 10 has an invalid length. [ 177.503426][ T9938] bond3: (slave veth0_to_bond): Releasing backup interface [ 177.550401][ T9942] macvlan0: entered promiscuous mode [ 177.557978][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 177.881971][ T9951] openvswitch: netlink: Unknown key attributes 1 [ 178.081062][ T9959] netlink: 'syz.2.1104': attribute type 3 has an invalid length. [ 178.083884][ T9959] netlink: 'syz.2.1104': attribute type 1 has an invalid length. [ 178.171798][ T9965] netlink: 'syz.3.1107': attribute type 83 has an invalid length. [ 178.715340][ T9998] tipc: Enabling of bearer rejected, failed to enable media [ 178.806809][T10008] syzkaller0: entered promiscuous mode [ 178.806833][T10008] syzkaller0: entered allmulticast mode [ 178.972610][T10032] sctp: [Deprecated]: syz.2.1121 (pid 10032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.972610][T10032] Use struct sctp_sack_info instead [ 179.171320][T10041] vlan1: entered allmulticast mode [ 179.171342][T10041] veth0_vlan: entered allmulticast mode [ 179.319951][T10050] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20001 [ 179.688628][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.004052][T10090] netlink: 'syz.1.1136': attribute type 39 has an invalid length. [ 180.042785][T10085] udevd[10085]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.064822][T10085] udevd[10085]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.575607][T10112] erspan0: entered promiscuous mode [ 180.608614][ T7967] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.608662][ T7967] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.757884][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.656410][T10174] __nla_validate_parse: 10 callbacks suppressed [ 181.656433][T10174] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1155'. [ 181.657071][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 181.734866][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 181.754476][T10176] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1156'. [ 181.820637][T10180] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1158'. [ 181.942159][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 181.990874][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 182.264030][T10214] openvswitch: netlink: Flow key attr not present in new flow. [ 182.319904][T10215] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.471844][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1169'. [ 182.474787][T10226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1171'. [ 182.617505][T10234] sctp: [Deprecated]: syz.0.1174 (pid 10234) Use of int in maxseg socket option. [ 182.617505][T10234] Use struct sctp_assoc_value instead [ 182.623783][T10236] sctp: [Deprecated]: syz.0.1174 (pid 10236) Use of int in maxseg socket option. [ 182.623783][T10236] Use struct sctp_assoc_value instead [ 182.664863][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 182.902656][T10254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.358714][T10285] openvswitch: netlink: Key type 101 is out of range max 32 [ 183.415404][T10288] bridge1: entered promiscuous mode [ 183.415426][T10288] bridge1: entered allmulticast mode [ 183.432403][T10288] team0: Port device bridge1 added [ 183.626065][T10297] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.880288][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.897033][T10323] bridge_slave_0 (unregistering): left allmulticast mode [ 183.897058][T10323] bridge_slave_0 (unregistering): left promiscuous mode [ 183.897126][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.975159][T10332] netlink: 'syz.4.1201': attribute type 21 has an invalid length. [ 184.074921][T10335] bond5: option xmit_hash_policy: invalid value (64) [ 184.076472][T10335] bond5 (unregistering): Released all slaves [ 184.102268][T10339] batman_adv: batadv0: Adding interface: veth0 [ 184.102285][T10339] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.102309][T10339] batman_adv: batadv0: Interface activated: veth0 [ 184.278746][ T4933] Bluetooth: hci4: command 0x0405 tx timeout [ 184.295350][T10348] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 184.295403][T10348] block nbd296: Unsupported socket: should be TCP or UNIX. [ 184.546162][T10373] batman_adv: batadv0: Adding interface: veth0 [ 184.546179][T10373] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.546208][T10373] batman_adv: batadv0: Interface activated: veth0 [ 184.612984][T10373] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 184.640525][T10373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.640552][T10373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.644871][T10373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.645019][T10373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.652689][T10373] batman_adv: batadv0: Interface deactivated: veth0 [ 184.652710][T10373] batman_adv: batadv0: Removing interface: veth0 [ 184.704685][T10377] netlink: 'syz.4.1214': attribute type 27 has an invalid length. [ 184.782554][T10376] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 184.784335][T10376] bond3 (unregistering): Released all slaves [ 185.114006][T10404] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 185.342888][T10419] netlink: 'syz.2.1227': attribute type 1 has an invalid length. [ 185.464070][T10419] veth3: entered allmulticast mode [ 185.477575][T10419] bond5: (slave veth3): Enslaving as an active interface with a down link [ 185.514099][T10422] bond5: (slave veth0_to_bond): making interface the new active one [ 185.530431][T10422] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 185.633576][T10419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 185.723765][T10440] netlink: 'syz.1.1231': attribute type 2 has an invalid length. [ 185.723787][T10440] netlink: 'syz.1.1231': attribute type 11 has an invalid length. [ 186.046655][T10459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.226825][T10478] ip_tables: iptables: counters copy to user failed while replacing table [ 186.358746][ T4933] Bluetooth: hci4: command 0x0405 tx timeout [ 186.496473][T10497] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 186.581529][T10502] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 186.663402][T10502] bond4: entered promiscuous mode [ 186.665382][T10502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.666907][T10508] netlink: 'syz.1.1252': attribute type 9 has an invalid length. [ 186.797268][T10518] netlink: 'syz.3.1255': attribute type 83 has an invalid length. [ 187.081978][T10538] __nla_validate_parse: 15 callbacks suppressed [ 187.081997][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 187.105983][T10540] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1259'. [ 187.115967][T10542] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1259'. [ 187.183207][T10544] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 187.232910][T10544] ip_tables: iptables: counters copy to user failed while replacing table [ 187.238963][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1261'. [ 187.241937][T10544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.485370][T10564] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 187.855556][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 187.918717][T10584] xt_hl: Unknown TTL match mode: 255 [ 187.919152][T10584] pimreg: left allmulticast mode [ 187.941946][T10586] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1272'. [ 187.967853][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 187.973830][T10582] netlink: 'syz.2.1270': attribute type 11 has an invalid length. [ 187.973852][T10582] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1270'. [ 188.035770][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 188.060392][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 188.069745][T10591] netlink: 'syz.2.1270': attribute type 11 has an invalid length. [ 188.286116][T10605] syzkaller0: entered promiscuous mode [ 188.286141][T10605] syzkaller0: entered allmulticast mode [ 188.438194][ T4933] Bluetooth: hci4: command 0x0405 tx timeout [ 188.600967][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888029cad800: rx timeout, send abort [ 189.100306][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807a901800: rx timeout, send abort [ 189.101129][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888029cad800: abort rx timeout. Force session deactivation [ 189.130992][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807a901800: connection exists (fe ff). last cmd: 20 [ 189.382398][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058730000: rx timeout, send abort [ 189.889360][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058730000: abort rx timeout. Force session deactivation [ 190.131289][T10613] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 190.131337][T10613] gretap3: entered promiscuous mode [ 190.131345][T10613] gretap3: entered allmulticast mode [ 190.841267][T10667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.131030][T10683] xt_hl: Unknown TTL match mode: 255 [ 191.148291][ T4933] Bluetooth: hci4: link tx timeout [ 191.148308][ T4933] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 191.168014][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 191.168051][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 191.168074][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 191.444741][T10703] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 191.902904][T10722] netlink: Unknown conntrack attr (0) [ 192.398329][T10731] __nla_validate_parse: 13 callbacks suppressed [ 192.398348][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1309'. [ 192.404280][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1309'. [ 192.448422][T10737] ip_tables: iptables: counters copy to user failed while replacing table [ 192.476766][T10731] ip_tables: iptables: counters copy to user failed while replacing table [ 193.163777][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 193.924803][ T7968] IPVS: starting estimator thread 0... [ 194.017127][T10766] IPVS: using max 30 ests per chain, 72000 per kthread [ 194.161259][T10771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1315'. [ 194.211279][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.623563][T10775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1316'. [ 194.644683][T10789] xt_hashlimit: size too large, truncated to 1048576 [ 194.828017][T10788] xt_hashlimit: size too large, truncated to 1048576 [ 195.085201][T10785] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.835048][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'. [ 197.011549][T10839] validate_nla: 4 callbacks suppressed [ 197.011570][T10839] netlink: 'syz.4.1327': attribute type 2 has an invalid length. [ 197.011583][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1327'. [ 197.446001][T10839] : entered promiscuous mode [ 197.636993][T10863] IPVS: Unknown mcast interface: macvlan0 [ 198.125860][T10874] syzkaller1: entered promiscuous mode [ 198.126078][T10874] syzkaller1: entered allmulticast mode [ 199.799154][T10922] xt_limit: Overflow, try lower: 536871034/0 [ 200.275942][T10941] bond6: entered allmulticast mode [ 200.290098][T10941] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.342714][T10941] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1347'. [ 200.463709][T10946] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 200.477079][T10946] bond6: (slave macvlan0): unknown ethtool speed (30000) for port 1 (set it to 0) [ 200.477101][T10946] bond6: (slave macvlan0): speed changed to 0 on port 1 [ 200.512580][T10946] macvlan0: entered allmulticast mode [ 200.512604][T10946] bond0: entered allmulticast mode [ 200.512616][T10946] bond_slave_0: entered allmulticast mode [ 200.515457][T10946] bond_slave_1: entered allmulticast mode [ 200.515813][T10946] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 200.516573][T10946] team0: entered allmulticast mode [ 200.516588][T10946] team_slave_0: entered allmulticast mode [ 200.536182][T10946] team_slave_1: entered allmulticast mode [ 200.681086][T10946] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 200.826828][T10949] ip6gretap2: entered allmulticast mode [ 200.839252][T10949] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 200.863865][T10941] bond0 (unregistering): left allmulticast mode [ 200.863894][T10941] bond_slave_0: left allmulticast mode [ 200.864219][T10941] bond_slave_1: left allmulticast mode [ 200.864541][T10941] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 200.865496][T10941] team0: left allmulticast mode [ 200.865512][T10941] team_slave_0: left allmulticast mode [ 200.865830][T10941] team_slave_1: left allmulticast mode [ 201.053097][T10941] bond6: (slave macvlan0): Removing an active aggregator [ 201.053136][T10941] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.053907][T10941] bond6: (slave macvlan0): Releasing backup interface [ 201.053924][T10941] bond6: (slave macvlan0): the permanent HWaddr of slave - 0a:da:55:fe:f0:46 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 201.103391][T10941] macvlan0 (unregistering): left allmulticast mode [ 201.186510][T10963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'. [ 201.186548][T10963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'. [ 201.279445][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'. [ 201.279481][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'. [ 201.286315][T10941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.305212][T10964] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1349'. [ 201.426483][T10941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.657841][T10941] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 201.836446][T10941] bond0 (unregistering): (slave team0): Releasing backup interface [ 201.994703][T10941] bond0 (unregistering): Released all slaves [ 202.249847][T10977] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1353'. [ 202.620043][T10966] wireguard1: entered promiscuous mode [ 202.949912][T10986] 8021q: VLANs not supported on ipvlan0 [ 203.687807][ T31] audit: type=1800 audit(1792518683.156:2): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1361" name="memory.events" dev="tmpfs" ino=1260 res=0 errno=0 [ 204.108141][T11021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1363'. [ 205.339130][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 205.365206][T11041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'. [ 205.374021][T11044] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1367'. [ 205.443073][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 205.975094][T11067] openvswitch: netlink: Duplicate or invalid key (type 0). [ 206.266419][T11067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1370'. [ 206.682177][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 206.682203][T11077] netlink: 'syz.3.1372': attribute type 3 has an invalid length. [ 206.682215][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 206.682924][T11077] netlink: 'syz.3.1372': attribute type 3 has an invalid length. [ 208.942886][T11144] geneve0: entered allmulticast mode [ 209.495188][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1384'. [ 209.841172][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 209.841196][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 209.878947][T11161] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 209.878985][T11161] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 209.879002][T11161] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 209.972566][T11169] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1386'. [ 210.739847][T11187] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 211.550491][T11221] ip_tables: iptables: counters copy to user failed while replacing table [ 211.836415][T11223] macvtap2: entered promiscuous mode [ 211.836598][T11223] macvtap2: entered allmulticast mode [ 212.155240][T11224] macvtap2: entered promiscuous mode [ 212.155422][T11224] macvtap2: entered allmulticast mode [ 212.189888][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'. [ 212.286200][T11221] syzkaller1: entered promiscuous mode [ 212.286389][T11221] syzkaller1: entered allmulticast mode [ 212.310095][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1397'. [ 213.073242][T11261] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1399'. [ 213.904966][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 214.126546][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 214.920849][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 215.860724][T11324] ovs0: entered promiscuous mode [ 215.926767][T11331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1416'. [ 216.094387][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'. [ 216.117876][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1418'. [ 216.679764][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1420'. [ 217.149595][T11369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.935614][T11388] syzkaller0: left promiscuous mode [ 217.935815][T11388] syzkaller0: left allmulticast mode [ 218.358996][T11396] __nla_validate_parse: 2 callbacks suppressed [ 218.359019][T11396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1429'. [ 218.359068][T11396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1429'. [ 218.916276][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1432'. [ 219.541724][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 219.897108][T11442] netlink: 'syz.0.1437': attribute type 5 has an invalid length. [ 220.010767][T11441] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 220.025672][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'. [ 220.035086][T11445] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 220.038586][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'. [ 221.241203][T11468] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 221.387601][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 221.387623][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1443'. [ 221.426425][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 221.897736][T11480] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1448'. [ 222.264677][T11492] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 222.581118][ T7960] IPVS: starting estimator thread 0... [ 222.675534][T11500] IPVS: using max 29 ests per chain, 69600 per kthread [ 223.125435][T11515] netlink: 'syz.0.1457': attribute type 3 has an invalid length. [ 223.169612][T11510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.820547][T11514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.838567][T11514] bond3: (slave bond0): making interface the new active one [ 223.856153][T11514] bond3: (slave bond0): Enslaving as an active interface with an up link [ 224.195370][T11516] bond3 (unregistering): (slave bond0): Releasing active interface [ 224.304294][T11516] bond3 (unregistering): Released all slaves [ 224.346375][T11530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.516645][T11528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.800974][T11534] __nla_validate_parse: 6 callbacks suppressed [ 224.800995][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 224.850083][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1463'. [ 224.850245][T11534] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1463'. [ 224.889867][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 225.002723][T11540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1466'. [ 225.070955][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 225.236302][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 225.236569][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 225.237182][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 225.237239][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 225.735538][T11567] ip_tables: iptables: counters copy to user failed while replacing table [ 225.737066][T11568] ip_tables: iptables: counters copy to user failed while replacing table [ 227.816364][T11590] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 227.817559][T11592] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 228.074564][T11590] bond7: entered promiscuous mode [ 228.076636][T11590] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.361704][T11598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.366038][T11598] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 228.366057][T11598] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 228.418407][T11598] bond7: (slave xfrm1): making interface the new active one [ 228.418595][T11598] xfrm1: entered promiscuous mode [ 228.425426][T11598] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 228.461305][T11602] 8021q: VLANs not supported on wg1 [ 230.020933][ T7961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.020953][ T7961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.187430][T11642] Cannot find add_set index 4 as target [ 230.281853][T11637] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.282253][T11637] gretap1: entered promiscuous mode [ 230.282449][T11637] gretap1: entered allmulticast mode [ 230.570026][T11644] syzkaller0: entered promiscuous mode [ 230.570211][T11644] syzkaller0: entered allmulticast mode [ 230.626513][T11647] __nla_validate_parse: 173 callbacks suppressed [ 230.626534][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 230.626550][T11647] netlink: 'syz.4.1490': attribute type 1 has an invalid length. [ 230.959925][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 230.988849][T11665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1494'. [ 231.264284][T11669] bridge_slave_1: left allmulticast mode [ 231.264652][T11669] bridge_slave_1: left promiscuous mode [ 231.266583][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.699001][T11678] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 231.759696][T11669] team0: Port device team_slave_0 removed [ 231.873029][T11669] team0: Port device team_slave_1 removed [ 231.890100][T11669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.907696][T11673] tipc: Enabled bearer , priority 0 [ 231.920790][T11674] lo: entered promiscuous mode [ 231.921611][T11674] lo: left promiscuous mode [ 232.073185][T11680] netlink: NAT attribute has 4 unknown bytes [ 232.073222][T11680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.965280][T11700] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1505'. [ 233.321900][T11706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1507'. [ 234.734006][T11717] xt_CT: No such helper "snmp_trap" [ 235.157934][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 235.762063][T11745] tls_set_device_offload_rx: netdev not found [ 236.499382][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 236.500589][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 236.501541][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 236.502647][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 236.503271][T11759] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 236.515431][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 236.718549][T11759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.958521][T11759] team0: Port device netdevsim1 added [ 236.959668][T11759] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 237.179183][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 237.180276][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 237.181356][T11760] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 237.626156][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 237.626176][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'. [ 237.697521][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 237.697544][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'. [ 237.792363][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 237.917001][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 238.568343][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 240.395233][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 240.435421][T11854] ip6t_rt: address list match requested but addrnr is 0 [ 240.747497][T11858] netlink: Unknown nat attribute (0) [ 240.747533][T11858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.876830][T11860] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 240.885359][T11855] IPVS: Scheduler module ip_vs_sip not found [ 241.031246][T11862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1540'. [ 241.251351][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 241.841166][T11893] xt_hl: Unknown Hop Limit match mode: 206 [ 242.859446][T11925] __nla_validate_parse: 1 callbacks suppressed [ 242.859467][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 242.861003][T11925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1559'. [ 242.861029][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1559'. [ 243.258994][T11939] validate_nla: 33 callbacks suppressed [ 243.259017][T11939] netlink: 'syz.2.1561': attribute type 8 has an invalid length. [ 243.627727][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 243.627759][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1563'. [ 243.692073][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 243.692149][T11946] netlink: 'syz.4.1563': attribute type 11 has an invalid length. [ 244.419085][T11959] openvswitch: netlink: Message has 8 unknown bytes. [ 244.748499][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'. [ 244.836112][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1569'. [ 244.852992][T11978] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1570'. [ 244.992055][T11978] veth0: entered promiscuous mode [ 245.203804][T11976] veth0: left promiscuous mode [ 245.398128][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.783206][T12008] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 246.803591][T12008] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 246.803610][T12008] netlink: 'syz.3.1577': attribute type 4 has an invalid length. [ 246.803621][T12008] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1577'. [ 247.111806][T12021] tls_set_device_offload_rx: netdev not found [ 247.117511][T12021] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 247.352065][T12030] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 248.183783][T12044] ip_tables: iptables: counters copy to user failed while replacing table [ 248.743904][T12059] __nla_validate_parse: 1 callbacks suppressed [ 248.743926][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1591'. [ 249.136998][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 249.722822][T12074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.815471][T12074] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 249.924788][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 250.146336][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1598'. [ 250.413056][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1603'. [ 250.413183][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1603'. [ 250.543321][T12101] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 251.612060][T12129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1606'. [ 251.732644][T12134] openvswitch: netlink: IPv4 tun info is not correct [ 252.184545][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 252.280751][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 253.971245][T12178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 254.058982][T12175] x_tables: duplicate underflow at hook 2 [ 254.232399][T12181] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 254.320410][T12181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.438022][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 254.668260][T12181] bond8: (slave bridge3): making interface the new active one [ 254.675319][T12181] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 255.641830][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.561144][T12238] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 257.316671][T12254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1636'. [ 257.316700][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 257.537562][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'. [ 258.356725][T12278] netlink: 'syz.1.1641': attribute type 10 has an invalid length. [ 258.496929][T12278] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 258.567472][T12278] team0: Port device wlan0 added [ 259.744369][T12309] netlink: 'syz.1.1650': attribute type 2 has an invalid length. [ 259.757004][T12313] netlink: 'syz.2.1651': attribute type 4 has an invalid length. [ 260.435806][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1653'. [ 260.637479][T12338] wireguard0: entered promiscuous mode [ 261.242212][T12356] xt_hashlimit: size too large, truncated to 1048576 [ 261.264822][T12352] openvswitch: netlink: Flow actions attr not present in new flow. [ 262.134698][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 262.165639][T12376] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1667'. [ 262.617359][T12388] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 262.899826][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'. [ 263.536703][ T4933] Bluetooth: hci3: SCO packet too small [ 263.578883][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 263.684099][ T4933] Bluetooth: hci3: SCO packet too small [ 263.802546][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 264.239883][T12436] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1024892564/1024892565 [ 264.267148][T12436] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1024892564/1024892565 [ 264.629085][T12441] netlink: 'syz.4.1681': attribute type 23 has an invalid length. [ 264.702834][T12448] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1683'. [ 264.796053][T12443] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20002 [ 265.415333][T12466] veth1_macvtap: left promiscuous mode [ 265.692687][T12471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.960520][T12477] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1691'. [ 266.113315][T12480] IPv6: addrconf: prefix option has invalid lifetime [ 268.324988][T12521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'. [ 269.169539][T12539] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:19999 [ 269.393378][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 269.394238][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 269.397294][T12547] netlink: 'syz.1.1701': attribute type 21 has an invalid length. [ 269.587289][T12547] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 269.937289][T12562] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 269.960417][T12547] bond9 (unregistering): Released all slaves [ 269.967885][T12562] netlink: 'syz.0.1700': attribute type 2 has an invalid length. [ 270.018867][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 270.055819][T12563] netlink: 'syz.3.1703': attribute type 9 has an invalid length. [ 270.251083][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 270.496024][T12570] ip_tables: iptables: counters copy to user failed while replacing table [ 270.627299][ T5278] veth1_macvtap: entered promiscuous mode [ 271.436494][T12598] ip_tables: iptables: counters copy to user failed while replacing table [ 272.204954][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 272.360992][T12615] ip_tables: iptables: counters copy to user failed while replacing table [ 272.498798][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 272.498824][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 272.498838][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 273.422885][T12639] netlink: 'syz.1.1722': attribute type 83 has an invalid length. [ 273.946887][T12644] syzkaller0: entered promiscuous mode [ 273.948600][T12644] syzkaller0: entered allmulticast mode [ 274.045112][T12644] tipc: Started in network mode [ 274.045142][T12644] tipc: Node identity 761e04126c0b, cluster identity 4711 [ 274.045763][T12644] tipc: Enabled bearer , priority 0 [ 274.114387][T12655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 274.125912][T12636] tipc: Resetting bearer [ 274.435348][T12636] tipc: Disabling bearer [ 274.563293][T12665] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 274.919262][T12665] bond9: entered promiscuous mode [ 274.924576][T12665] 8021q: adding VLAN 0 to HW filter on device bond9 [ 274.941621][T12673] veth0: entered promiscuous mode [ 275.147865][T12668] veth0: left promiscuous mode [ 275.547928][ T4933] Bluetooth: hci4: unexpected cc 0x2060 length: 8 > 7 [ 275.547961][ T4933] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 275.808876][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 275.996186][T12699] netlink: 'syz.1.1732': attribute type 25 has an invalid length. [ 276.125782][T12700] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 276.629653][T12707] syzkaller1: entered promiscuous mode [ 276.629855][T12707] syzkaller1: entered allmulticast mode [ 276.656236][T12711] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 276.771338][T12714] Bluetooth: MGMT ver 1.23 [ 276.849343][T12714] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 277.210772][T12711] team0: Device wg2 is of different type [ 277.637430][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 278.167319][T12739] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 278.837877][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 278.839761][ T4933] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 279.173133][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1746'. [ 279.369175][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'. [ 279.431520][T12763] netlink: 'syz.0.1748': attribute type 13 has an invalid length. [ 279.431545][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 279.433089][T12763] netlink: 'syz.0.1748': attribute type 13 has an invalid length. [ 279.433105][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 282.479443][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 283.342964][T12876] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1772'. [ 283.399912][T12879] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 283.633260][T12878] bond5: option resend_igmp: invalid value (32767) [ 283.633283][T12878] bond5: option resend_igmp: allowed values 0 - 255 [ 283.718818][T12878] bond5 (unregistering): Released all slaves [ 284.215995][T12879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.229071][T12892] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 285.048188][T12926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1777'. [ 287.374616][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 287.450638][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 287.875180][T12992] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 287.889216][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1786'. [ 287.904305][T12992] netlink: 'syz.3.1786': attribute type 10 has an invalid length. [ 287.904329][T12992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1786'. [ 288.073365][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.944361][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1795'. [ 290.745512][T13059] netlink: 'syz.1.1801': attribute type 1 has an invalid length. [ 290.745536][T13059] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1801'. [ 292.358089][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1804'. [ 294.583115][T13099] syzkaller0: entered promiscuous mode [ 294.583306][T13099] syzkaller0: entered allmulticast mode [ 294.779146][T13110] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 294.798649][T13110] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1811'. [ 294.798674][T13110] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1811'. [ 294.798688][T13110] netlink: 'syz.3.1811': attribute type 5 has an invalid length. [ 294.798699][T13110] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1811'. [ 296.039448][ T4933] block nbd2: Receive control failed (result -32) [ 297.183592][T13184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.724055][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1829'. [ 298.297644][T13200] tipc: Failed to remove unknown binding: 66,0,0/0:3983099001/3983099003 [ 298.299516][T13200] tipc: Failed to remove unknown binding: 66,0,0/0:3983099001/3983099002 [ 298.331625][T13200] tipc: Failed to remove unknown binding: 66,0,0/0:3983099001/3983099003 [ 298.331807][T13200] tipc: Failed to remove unknown binding: 66,0,0/0:3983099001/3983099002 [ 299.079144][T13209] netlink: 'syz.1.1834': attribute type 2 has an invalid length. [ 299.079169][T13209] netlink: 'syz.1.1834': attribute type 11 has an invalid length. [ 299.079182][T13209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1834'. [ 300.890002][ C0] ------------[ cut here ]------------ [ 300.890019][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 300.890047][ C0] WARNING: net/mac80211/rate.c:412 at __rate_control_send_low+0x652/0x900, CPU#0: syz.4.1824/13159 [ 300.922486][ C0] Modules linked in: [ 300.926442][ C0] CPU: 0 UID: 0 PID: 13159 Comm: syz.4.1824 Not tainted syzkaller #0 PREEMPT(full) [ 300.936005][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.946150][ C0] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 300.952482][ C0] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 300.972148][ C0] RSP: 0018:ffffc900000076f8 EFLAGS: 00010246 [ 300.978283][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 300.986263][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918c79a0 [ 300.994309][ C0] RBP: ffff888056af32c0 R08: 0000000000000000 R09: 0000000000000000 [ 301.002337][ C0] R10: 0000000000000004 R11: 8000000000000100 R12: ffff888056af0fa0 [ 301.010376][ C0] R13: ffff8880790f97a8 R14: ffffffff918c79a0 R15: dffffc0000000000 [ 301.018410][ C0] FS: 00007f0c1e9b66c0(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 301.027379][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.034033][ C0] CR2: 00007f34a011ceb8 CR3: 000000007a152000 CR4: 00000000003526f0 [ 301.042066][ C0] Call Trace: [ 301.045368][ C0] [ 301.048263][ C0] rate_control_send_low+0x1a7/0x7b0 [ 301.053579][ C0] rate_control_get_rate+0x20b/0x5d0 [ 301.058947][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 301.064779][ C0] ? __ieee80211_beacon_add_tim+0xa4/0x1620 [ 301.070748][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 301.077113][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 301.082911][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 301.088630][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 301.094651][ C0] ? lock_acquire+0x115/0x350 [ 301.099402][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 301.104967][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 301.110570][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 301.116209][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 301.121744][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 301.127873][ C0] ? __lock_acquire+0x747/0x2de0 [ 301.132848][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 301.138474][ C0] __iterate_interfaces+0x2af/0x5a0 [ 301.143724][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.149866][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 301.157102][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.163241][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 301.170346][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.176189][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 301.181456][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.187301][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 301.192589][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 301.197751][ C0] handle_softirqs+0x226/0x860 [ 301.202547][ C0] ? do_softirq+0x77/0xd0 [ 301.206909][ C0] ? __alloc_skb+0x18d/0x7a0 [ 301.211562][ C0] ? __alloc_skb+0x18d/0x7a0 [ 301.216165][ C0] do_softirq+0x77/0xd0 [ 301.220376][ C0] [ 301.223316][ C0] [ 301.226257][ C0] __local_bh_enable_ip+0x100/0x140 [ 301.231538][ C0] __alloc_skb+0x1b1/0x7a0 [ 301.235985][ C0] alloc_skb_with_frags+0xc6/0x760 [ 301.241174][ C0] sock_alloc_send_pskb+0x878/0x990 [ 301.246430][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 301.252243][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.257330][ C0] __ip_append_data+0x29ea/0x3cf0 [ 301.262251][T13244] syzkaller0: entered promiscuous mode [ 301.262397][T13244] syzkaller0: entered allmulticast mode [ 301.273513][ C0] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 301.279170][ C0] ? ipv4_mtu+0x23/0x670 [ 301.283447][ C0] ? __pfx___ip_append_data+0x10/0x10 [ 301.288892][ C0] ? ipv4_mtu+0x561/0x670 [ 301.293262][ C0] ? ip_setup_cork+0x58a/0x920 [ 301.298106][ C0] ip_make_skb+0x22e/0x440 [ 301.302559][ C0] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 301.308181][ C0] ? __pfx_ip_make_skb+0x10/0x10 [ 301.313225][ C0] udp_sendmsg+0x1937/0x2140 [ 301.317954][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 301.322932][ C0] ? __css_rstat_updated+0x237/0x540 [ 301.328317][ C0] ? current_check_autobind_udp_socket+0x20a/0x4c0 [ 301.334859][ C0] ? aa_sock_msg_perm+0xfc/0x210 [ 301.339897][ C0] ? sock_rps_record_flow+0x19/0x350 [ 301.345228][ C0] ? inet_sendmsg+0x23e/0x320 [ 301.349988][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 301.355564][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 301.360675][ C0] sock_sendmsg_nosec+0x10e/0x180 [ 301.365731][ C0] ____sys_sendmsg+0x54e/0x850 [ 301.370576][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.375893][ C0] ? import_iovec+0x73/0xa0 [ 301.380485][ C0] ___sys_sendmsg+0x2a5/0x360 [ 301.385196][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.390480][ C0] ? __lock_acquire+0x747/0x2de0 [ 301.395505][ C0] __sys_sendmmsg+0x273/0x4d0 [ 301.400304][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.405538][ C0] ? do_futex+0x3e7/0x4e0 [ 301.409980][ C0] ? __sys_connect+0x3a1/0x450 [ 301.414802][ C0] ? rcu_is_watching+0x16/0xb0 [ 301.419659][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 301.424536][ C0] do_syscall_64+0x166/0x520 [ 301.429228][ C0] ? trace_irq_disable+0x3b/0x140 [ 301.434268][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.440422][ C0] ? clear_bhb_loop+0x70/0xc0 [ 301.445131][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.451120][ C0] RIP: 0033:0x7f0c1db9f559 [ 301.455570][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.475256][ C0] RSP: 002b:00007f0c1e9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.483743][ C0] RAX: ffffffffffffffda RBX: 00007f0c1de25fa0 RCX: 00007f0c1db9f559 [ 301.491783][ C0] RDX: 000000000800001d RSI: 0000200000000280 RDI: 0000000000000003 [ 301.499810][ C0] RBP: 00007f0c1dc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 301.507848][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.515838][ C0] R13: 00007f0c1de26038 R14: 00007f0c1de25fa0 R15: 00007fff9dafc8d8 [ 301.523896][ C0] [ 301.526944][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.534254][ C0] CPU: 0 UID: 0 PID: 13159 Comm: syz.4.1824 Not tainted syzkaller #0 PREEMPT(full) [ 301.543643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 301.553721][ C0] Call Trace: [ 301.557018][ C0] [ 301.559869][ C0] vpanic+0x56d/0xa60 [ 301.563885][ C0] ? __pfx__printk+0x10/0x10 [ 301.568508][ C0] ? __pfx_vpanic+0x10/0x10 [ 301.573013][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 301.578307][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 301.583533][ C0] panic+0xc5/0xd0 [ 301.587286][ C0] ? __pfx_panic+0x10/0x10 [ 301.591744][ C0] __warn+0x315/0x4c0 [ 301.595737][ C0] ? __rate_control_send_low+0x652/0x900 [ 301.601375][ C0] ? __rate_control_send_low+0x652/0x900 [ 301.607009][ C0] __report_bug+0x276/0x570 [ 301.611507][ C0] ? rcu_is_watching+0x16/0xb0 [ 301.616274][ C0] ? __rate_control_send_low+0x652/0x900 [ 301.621913][ C0] ? __pfx___report_bug+0x10/0x10 [ 301.626940][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 301.632236][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 301.637438][ C0] ? kernel_text_address+0xa5/0xe0 [ 301.642545][ C0] report_bug_entry+0x19b/0x290 [ 301.647410][ C0] ? __rate_control_send_low+0x67c/0x900 [ 301.653040][ C0] ? __rate_control_send_low+0x681/0x900 [ 301.658672][ C0] handle_bug+0xce/0x200 [ 301.662918][ C0] exc_invalid_op+0x1a/0x50 [ 301.667421][ C0] asm_exc_invalid_op+0x1a/0x20 [ 301.672261][ C0] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 301.678500][ C0] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 301.698097][ C0] RSP: 0018:ffffc900000076f8 EFLAGS: 00010246 [ 301.704155][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 301.712111][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918c79a0 [ 301.720074][ C0] RBP: ffff888056af32c0 R08: 0000000000000000 R09: 0000000000000000 [ 301.728054][ C0] R10: 0000000000000004 R11: 8000000000000100 R12: ffff888056af0fa0 [ 301.736034][ C0] R13: ffff8880790f97a8 R14: ffffffff918c79a0 R15: dffffc0000000000 [ 301.744030][ C0] ? __rate_control_send_low+0x646/0x900 [ 301.749693][ C0] rate_control_send_low+0x1a7/0x7b0 [ 301.754989][ C0] rate_control_get_rate+0x20b/0x5d0 [ 301.760277][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 301.766075][ C0] ? __ieee80211_beacon_add_tim+0xa4/0x1620 [ 301.771963][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 301.778293][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 301.784016][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 301.789656][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 301.795636][ C0] ? lock_acquire+0x115/0x350 [ 301.800308][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 301.805846][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 301.811379][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 301.816923][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 301.822374][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 301.828434][ C0] ? __lock_acquire+0x747/0x2de0 [ 301.833376][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 301.838959][ C0] __iterate_interfaces+0x2af/0x5a0 [ 301.844158][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.850212][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 301.857416][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.863507][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 301.870552][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.876363][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 301.881561][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.887372][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 301.892587][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 301.897695][ C0] handle_softirqs+0x226/0x860 [ 301.902460][ C0] ? do_softirq+0x77/0xd0 [ 301.906805][ C0] ? __alloc_skb+0x18d/0x7a0 [ 301.911405][ C0] ? __alloc_skb+0x18d/0x7a0 [ 301.915999][ C0] do_softirq+0x77/0xd0 [ 301.920157][ C0] [ 301.923081][ C0] [ 301.926005][ C0] __local_bh_enable_ip+0x100/0x140 [ 301.931206][ C0] __alloc_skb+0x1b1/0x7a0 [ 301.935625][ C0] alloc_skb_with_frags+0xc6/0x760 [ 301.940735][ C0] sock_alloc_send_pskb+0x878/0x990 [ 301.945947][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 301.951671][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.956734][ C0] __ip_append_data+0x29ea/0x3cf0 [ 301.961794][ C0] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 301.967364][ C0] ? ipv4_mtu+0x23/0x670 [ 301.971616][ C0] ? __pfx___ip_append_data+0x10/0x10 [ 301.976984][ C0] ? ipv4_mtu+0x561/0x670 [ 301.981312][ C0] ? ip_setup_cork+0x58a/0x920 [ 301.986104][ C0] ip_make_skb+0x22e/0x440 [ 301.990523][ C0] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 301.996066][ C0] ? __pfx_ip_make_skb+0x10/0x10 [ 302.001012][ C0] udp_sendmsg+0x1937/0x2140 [ 302.005615][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 302.010554][ C0] ? __css_rstat_updated+0x237/0x540 [ 302.015836][ C0] ? current_check_autobind_udp_socket+0x20a/0x4c0 [ 302.022340][ C0] ? aa_sock_msg_perm+0xfc/0x210 [ 302.027277][ C0] ? sock_rps_record_flow+0x19/0x350 [ 302.032563][ C0] ? inet_sendmsg+0x23e/0x320 [ 302.037328][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 302.042871][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 302.047902][ C0] sock_sendmsg_nosec+0x10e/0x180 [ 302.052925][ C0] ____sys_sendmsg+0x54e/0x850 [ 302.057686][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.062972][ C0] ? import_iovec+0x73/0xa0 [ 302.067473][ C0] ___sys_sendmsg+0x2a5/0x360 [ 302.072144][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.077334][ C0] ? __lock_acquire+0x747/0x2de0 [ 302.082306][ C0] __sys_sendmmsg+0x273/0x4d0 [ 302.086985][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.092171][ C0] ? do_futex+0x3e7/0x4e0 [ 302.096531][ C0] ? __sys_connect+0x3a1/0x450 [ 302.101305][ C0] ? rcu_is_watching+0x16/0xb0 [ 302.106070][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 302.110913][ C0] do_syscall_64+0x166/0x520 [ 302.115493][ C0] ? trace_irq_disable+0x3b/0x140 [ 302.120505][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.126564][ C0] ? clear_bhb_loop+0x70/0xc0 [ 302.131234][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.137122][ C0] RIP: 0033:0x7f0c1db9f559 [ 302.141535][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.161143][ C0] RSP: 002b:00007f0c1e9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.169556][ C0] RAX: ffffffffffffffda RBX: 00007f0c1de25fa0 RCX: 00007f0c1db9f559 [ 302.177516][ C0] RDX: 000000000800001d RSI: 0000200000000280 RDI: 0000000000000003 [ 302.185477][ C0] RBP: 00007f0c1dc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 302.193441][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.201400][ C0] R13: 00007f0c1de26038 R14: 00007f0c1de25fa0 R15: 00007fff9dafc8d8 [ 302.209387][ C0] [ 302.212681][ C0] Kernel Offset: disabled [ 302.217000][ C0] Rebooting in 86400 seconds..