last executing test programs: 8m35.412242081s ago: executing program 1 (id=80): socketpair(0x29, 0x5, 0x10001, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000004000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 8m35.175310141s ago: executing program 1 (id=86): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)="d7ef51ef4e932d117becbf2f3d9f180c840fbf1c96429028a47e5af504ef4da621220a1819393b097f08cb8f4e4f7dc853eca8aedab9ef722c37579271594998427d28e75c75dfe98063f38653dd16f332257b2c878278908cdd89fd9644978b4945629a0b9b1b57426373365097a713df77363761a503baba2aac8f1843c818747dfee9ad9607a3125f337ec87d741d5b6dcefa7a57098a70a1aa2bc6b2f7d71746b00ed5e83de9c3c1403c", 0xac}, {&(0x7f0000000180)="66492e9d2ce1fee74cfed50f8c287fc68d8a3df35fc12adace18b95cbf3b39eccef85d10a85b4fcae157a2281df5327eee4ee3c553b074e6ac6a028287cf2431d5cfe5ecddfe5e5e736ce4b8844f700059673f1275270191389cda5eb8c605a86d450f5ac556c1c6ae4265fd7458797681ba3eaf814827091f3a0fcb0b96e182157b6b113c939b67fe60911cf0a72a0b2e7f991d64f46d5a3900659903c380729a9c3cb61c4a5b1859e42964bf99dbc7819a3feb70bb9d041a6da8dcd7a83304d6ae31932ad8bf8c5b", 0xc9}, {&(0x7f0000000280)="2869497b3c83544c1edcca22a40052182d50a67b0d7409fa0863d7c5ef6dd808d59fc9119915895ebf58f7fa6ebc209dd7525dd6885adce0835a8b394110e1eb9e3a02290dabadb984e16cdab5847c5b216e93397f61c434087f6c64743a38b9cc64a68fb6c9e2658b2332c3860323eb553a19ea69518367f4d189da17c8dd02c6b2454d955bf42e885048456a0dda35f25986ed84cc334072e2328c784a94eb0d4a0e692ed3fe5d042c1f1dbb9865e205ebaba50bfde25c136e3e63e3f3428cb076089f5c3a6eabff9cd44a51a8776a448270a88b9f93", 0xd7}, {&(0x7f0000000380)="69b45d3b9f38d71e632c498aee2c05af776c9446a459a15eb2e74b915a5c82b24cc6a998c89de1c6f6da26f8b94aac6414c80c640e512677e711ce282b0226d8cb3d4edc57", 0x45}, {&(0x7f0000000400)="993fbd8b9df0567e43c04552615e5cb3b6bc43be90b6e642d088874c451d341ce9e81fcebc77eb1f75e27ba584173b36e1160885e2e51b2ae42694df310c736436acadfc5fade19f871077d36db68249d9c3eb2397dde0e22cbc3327ae4fb10732f001b002923ddc0e729ed9081a029d7bac97c3f9211086379444401d675e71201478c2bf93", 0x86}], 0x5, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4014}}], 0x60}, 0x24000044) 8m34.201202836s ago: executing program 1 (id=93): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}}, 0x42000) read(r0, &(0x7f0000000180)=""/221, 0xdd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000000000001c1400000000000000000000070001"], 0x24}}, 0x0) 8m33.820432772s ago: executing program 1 (id=95): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000100000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 8m33.647530442s ago: executing program 1 (id=96): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r4, &(0x7f0000001300)=[{0x0}, {&(0x7f00000010c0)="985485c5", 0xfdef}], 0x2) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002580), 0x0, 0x400807c) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x1, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x20000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 8m31.928306316s ago: executing program 1 (id=112): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) socket(0x10, 0x3, 0x4) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffff}, {0x3}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x4, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async, rerun: 32) sendmsg$sock(r0, &(0x7f0000001480)={&(0x7f0000000200)=@can={0x1d, r1}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)="068e671ea0643c6e6bcd2d22c191aa4a2bdd86714ba2f07c8e94056aea2516b688097a8524d1a38cb9935b0942170a9fb91bf9ace26ce3a80c5e8bb7c8c1025ca3814aa9c6581cac00c629910bcd4f32efc8fe6028edf82cc1b47f0ac158ddb39be868e445b58d8b725cf3f06a809626b3423a55d40a", 0x76}, {&(0x7f0000000300)="9c7f47194794dc4a814e4122996edd42e398032ec609746a2f10307da0cafef0af51c468801e20c7c91f0017102b48358640a8a22cee937999f49bc9aeedfe4387faccefb2a6", 0x46}, {&(0x7f0000000380)="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", 0x63e}], 0x3}, 0x811) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0x10, 0x80003, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7m24.221748652s ago: executing program 32 (id=112): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) socket(0x10, 0x3, 0x4) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffff}, {0x3}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x4, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async, rerun: 32) sendmsg$sock(r0, &(0x7f0000001480)={&(0x7f0000000200)=@can={0x1d, r1}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)="068e671ea0643c6e6bcd2d22c191aa4a2bdd86714ba2f07c8e94056aea2516b688097a8524d1a38cb9935b0942170a9fb91bf9ace26ce3a80c5e8bb7c8c1025ca3814aa9c6581cac00c629910bcd4f32efc8fe6028edf82cc1b47f0ac158ddb39be868e445b58d8b725cf3f06a809626b3423a55d40a", 0x76}, {&(0x7f0000000300)="9c7f47194794dc4a814e4122996edd42e398032ec609746a2f10307da0cafef0af51c468801e20c7c91f0017102b48358640a8a22cee937999f49bc9aeedfe4387faccefb2a6", 0x46}, {&(0x7f0000000380)="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", 0x63e}], 0x3}, 0x811) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0x10, 0x80003, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.878154784s ago: executing program 2 (id=4720): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000480)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, {0x74c9e7b8c49a9e21}, 0x2, {0x2, 0x4e26, @private=0xa010101}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0) 2.646116418s ago: executing program 2 (id=4724): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x884}, 0x50) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x5}, 0x8) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000506050000000000000000000200000505000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.952934937s ago: executing program 4 (id=4734): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x4) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080006001500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES8=r4, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x200420c5) 1.772075503s ago: executing program 4 (id=4737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="911098000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="911098000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async) 1.722217953s ago: executing program 2 (id=4738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) unshare(0x22020400) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.642139225s ago: executing program 4 (id=4739): r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x0, 0x300, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 1.63998825s ago: executing program 5 (id=4741): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000302000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 1.504387593s ago: executing program 5 (id=4742): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xcc, 0x65, 0x0, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x9c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xfff1}}, @TCA_ROUTE4_ACT={0x90, 0x6, [@m_csum={0x8c, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x5d, 0x6, "27e72f40bd9bfe9d27281898f9e76da8cb86870da7c0b15be4d08e59dbd72369ce050fee5321098c691ea7f8c5322990ecee24be6808b4c7010cfeb75832f3c4b464ac5a778387461e4908c859d7d8c99e287f09476166db06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xcc}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) (async) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000b80)={0x10000008}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f00000006c0)=r0}, 0x20) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'veth1\x00', @broadcast}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c00180005ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x82*'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x19}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)={0xc0, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xcd0f4a5289f0d67b}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4064000}, 0x844) (async) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.443714861s ago: executing program 5 (id=4745): sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x8, 0x70bd2d, 0x25dfdbfe, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x52, 0x2c}}}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x4, 0x1}, {0x80, 0x4}, {0xe4, 0x7}, {0x1, 0x4}, {0x54, 0x7}, {0x6, 0x1}, {0xd8, 0x6}, {0x5, 0x1}, {0x0, 0x7}, {0x4, 0x3}, {0x81}, {0xc, 0x6}, {0x90, 0x7}, {0x20, 0x1}, {0xfd, 0x2}, {0x6, 0x4}, {0x2, 0x7}], "801a4f217a16e26a"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0xa, 0x5}, {0x81, 0x1}, {0x1, 0x3}, {0xe}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x5}, {0x2, 0x5}, {0x2, 0x1}, {0xc, 0x2}], "523732285abf3afa"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x5, 0x7}, {0x6, 0x1}, {0x4, 0x1}, {0x8, 0x1}, {0xd, 0x3}, {0x3}, {0x8, 0x3}, {0x8b, 0x5}, {0x9, 0x4}, {0x2, 0x6}, {0xb, 0x6}, {0x40, 0x2}, {0x31, 0x4}, {0x6b, 0x3}, {0x6, 0x6}, {0xf7}, {0x9, 0x2}, {0xae}, {0xff, 0x5}, {0xfa, 0x6}], "d448bf7f0220af2f"}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48001}, 0x840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000040000000057734d410e703c823d3e05f27dff04cf347eb078e7a811a3d420f52ee607c1d488e04218f1f65374c4d075c103bcbf7d5fda01a410113b17cb231d539794b0791d9a08e2bba2ec06370aea9982de249bac99cd20b54676f3bd9fe1d8b2e08a831e4b1c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x4000000000002c1, 0x40f8c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e20, 0x4, 0x4e20, 0xfdfe, 0x2, 0x60}, {0x40, 0xae, 0xffffffff, 0x8, 0x9, 0x1, 0x9, 0x5}, {0x10000, 0x7, 0x8, 0x20000000000000}, 0xffffffff, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1, 0x2}, {{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8) pread64(r2, 0x0, 0x0, 0x869) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x1, 0x7, [0x0, 0x3, 0xd, 0x9, 0xc4, 0x6e, 0x7fff]}, &(0x7f00000002c0)=0x16) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x3, 0x6aa0b655867944a7, 0x10001, 0x6, 0x3, 0x58e4, 0x2, r8}, &(0x7f0000000340)=0x20) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r7, @ANYBLOB="f9ffffff080002000b0000001400010000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.380347257s ago: executing program 4 (id=4746): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000250009012cbd7000f9ffffff020000000800598004002280080003004700000008004000", @ANYRES32, @ANYBLOB="84be54a576dad68350b9b01d202ed6f622a829491926cea3fa25a8467452c818320e41681f0415d7f7ea36b3828c26f9648555aec0383e10adf70619124137a3be5336d7ec25d15c533d5259989f8c14e50cfefa5ecdf05735357410fbc46cf2ae"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000200004fddbdf2502001403080000020900000008000200ac1414aa0c000c4000000071000000000508000100ac1414aa4b5a0655588749987a4c827d319d732bb20000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r7, &(0x7f0000000880), 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000000040)={0x5a, "9fb0a519b68118b1e69f88033dfb689977bbbf8ca3d253338ca153ea9036045d397f8a4da4201af9fb32082038bf718c16306173b0771c243179963e81576651647036860656871a9b8f8be0615830b4e36db9f4e8b0c1103b9de18d026231a0db3d8b192f248b5d3040a3c2fd361413569ed860d3123ce5918926e1a4a5e880"}) socket$inet6(0xa, 0x80000, 0x2) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0xffffffff000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r6], &(0x7f0000000040)=""/217, 0x32, 0xd9, 0x0, 0x8000002}, 0x28) 1.365430902s ago: executing program 3 (id=4747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r9, 0x891a, &(0x7f0000000580)="d8990ef9b33a") write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "bcad05faa84c4ef8"}}}}}, 0x2e) 1.25180637s ago: executing program 2 (id=4749): socketpair(0x29, 0x5, 0x10001, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}, 0x1, 0x0, 0x3e7}, 0x0) 1.047093706s ago: executing program 2 (id=4750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000240001800600050046230000060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) 819.282216ms ago: executing program 0 (id=4752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x6c, 0x0, @loopback, @multicast1}, "00186371ae9b1c03"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$inet6(r1, &(0x7f0000002d40)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x15) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x6c, 0x0, @loopback, @multicast1}, "00186371ae9b1c03"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$inet6(r1, &(0x7f0000002d40)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x15) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) 755.869896ms ago: executing program 3 (id=4753): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000502000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 724.517226ms ago: executing program 5 (id=4754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x731500df, 0x3, 0x5, 0x2, 0x7, 0x3, 0x5, 0xc, 0x7c53, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x4, 0xc, 0x4, 0x1, 0x3, 0x7fffffff, 0xcbf, 0x3903, 0x3, 0xe5, 0x5, 0x0, 0x9, 0xfffffffb, 0x92a4, 0x7fffffff, 0x7, 0x3ff, 0xbb, 0x7, 0x9, 0x3, 0x7, 0x800, 0x6, 0x7, 0x8040, 0x8, 0x6, 0x0, 0xd07, 0x91, 0x6, 0x7, 0xb90a, 0x7f69, 0x4, 0x0, 0x7c06, 0x8, 0x3, 0x5, 0x8, 0x2, 0x7, 0x6, 0x101, 0x8, 0x7a, 0x7fff, 0x9, 0x3ff, 0x8, 0xad3, 0x3, 0x7, 0xfe, 0x0, 0x8, 0x7, 0x8, 0x0, 0x5, 0x0, 0x7ff, 0x4, 0x7f, 0x8, 0x5, 0x7, 0x400, 0xd, 0x81, 0x7, 0x19, 0x941, 0x3, 0x3dd, 0x10001, 0x2, 0x6e9b, 0xfffffff8, 0x0, 0x3a, 0x5, 0x0, 0x80000000, 0x1, 0x922, 0x1, 0x2, 0x5, 0x1, 0x9, 0x6, 0x80, 0x7, 0xe275, 0xfff, 0x80000, 0x401, 0xceb, 0x15, 0x0, 0x7, 0x0, 0x9, 0x1, 0x8, 0x4, 0xb537, 0x4, 0x6, 0x7, 0x4, 0x1, 0xb4, 0xfffffff9, 0x8001, 0x7, 0xfffff001, 0x4007, 0x0, 0x0, 0x2, 0x4, 0x5, 0xe8, 0x7, 0x1, 0x3, 0xa44, 0x6c7586fb, 0x0, 0x6, 0x306d564a, 0x6, 0x1, 0xfffff800, 0xe0, 0x0, 0x35, 0x2, 0x5, 0x80, 0x3, 0x528c74, 0x4, 0x4, 0x5, 0xf7, 0x9, 0x2, 0x2, 0x1, 0x8, 0x3ff, 0x8, 0x7f, 0x80, 0x4, 0x7bc7, 0x0, 0x3, 0x8, 0xe6, 0x4, 0x101, 0x200, 0xa1, 0x9, 0xe363, 0x800, 0xd7b, 0x78f, 0x8, 0x9, 0x7e, 0xf, 0x7fff, 0x5, 0x5, 0x0, 0x3, 0x4, 0x3fd, 0xf29, 0xfffffff9, 0x1, 0x1, 0xf10d, 0x2, 0x7, 0x14, 0x1, 0x2, 0x8, 0x4, 0x2, 0xfffff0b2, 0x9, 0x1, 0x1ff, 0x101, 0x800, 0x8, 0x3a965a17, 0x7, 0x2, 0x3ff, 0xb8, 0xe70, 0x1, 0x9, 0x7, 0x9a0a, 0x4, 0x8, 0x1, 0x1, 0xf951, 0x3ff, 0x3, 0x7, 0x3, 0x96f9, 0x2, 0x1, 0x3, 0x2, 0x0, 0x80, 0x3ffc, 0x401, 0xfffffff7, 0x40, 0x9, 0x6, 0x0, 0x4600, 0xf, 0xc]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fffffff, 0xfd, 0x8, 0xbf1, 0xfffffff8, 0x8, 0x6c, 0x8000, 0x0, 0x3, 0x50ad33d4, 0xffff, 0x9199, 0x6, 0x7, 0x0, 0xe, 0x7, 0x4, 0x8, 0x0, 0xbd, 0x9, 0x80, 0x22da, 0x4, 0x5, 0x8, 0xe935, 0x8, 0x7fff, 0x40, 0x8, 0x0, 0x9, 0x8000, 0x9, 0x10, 0x67, 0x6, 0x2, 0xb, 0x0, 0x40, 0xc1, 0x7, 0x0, 0x10, 0xffffff00, 0x7, 0x0, 0x6, 0x9, 0x8, 0x8000000, 0x4, 0x4d, 0x200, 0xa179, 0x0, 0x6, 0x5, 0xe754, 0x5, 0x80000000, 0x400000, 0x9, 0x2, 0xeca, 0x8, 0xf15, 0x7, 0x9, 0x3, 0xa000000, 0xfff, 0x8, 0x0, 0x7f, 0x4, 0x4, 0x3, 0xf6000000, 0x2, 0x3, 0x8, 0xeb6f, 0x4, 0x7ff, 0xe9, 0xe, 0x1, 0x6, 0x1, 0x4, 0xfffffff7, 0x5f, 0x80, 0x5a12, 0x3ff, 0xd3f, 0x4, 0xe, 0xd, 0x9, 0xb, 0x8b58ddff, 0x10001, 0x425ce4c6, 0x5a, 0x7, 0x1, 0x3ff, 0x3, 0x8, 0x80, 0x2, 0x7fff, 0x8001, 0x4, 0xfffffffb, 0x25b, 0x277, 0xfff, 0x8001, 0x8, 0x7, 0x0, 0x1, 0x1000000, 0x2, 0x7, 0xd90, 0x1, 0x7, 0x7284, 0x6, 0x0, 0x6, 0x9, 0xab, 0x1, 0x7, 0xfc, 0xf, 0x7, 0x9, 0x9, 0x7fff, 0x0, 0x7fffffff, 0x50, 0x7, 0x8, 0x1, 0x8, 0x9, 0xff, 0x1000, 0x0, 0x7, 0x9d, 0x1, 0xb3, 0xfffffff9, 0x3, 0x2, 0x1, 0xfffffffc, 0x1, 0xfffffffd, 0x1, 0x1, 0x8, 0xc, 0x21, 0x80000, 0xffff3c08, 0x7, 0x4, 0x37d8bacd, 0x3, 0x0, 0x0, 0x81, 0x6, 0x1, 0x1, 0x80, 0x2, 0x1, 0x2c, 0xa, 0x4, 0xe, 0x2, 0x5, 0x59, 0x0, 0x8, 0x7d2f, 0x5, 0x9, 0x1, 0x5, 0x1, 0xb, 0x0, 0x81, 0x1, 0x9, 0x6, 0xd2, 0x2, 0x8001, 0x200000, 0x10, 0x7, 0x80000000, 0x4, 0x3, 0x28e45532, 0x1000, 0x101, 0x1, 0x8, 0x2, 0x3, 0x9, 0x4, 0x2, 0x1, 0x3, 0x2, 0xac, 0xca0, 0x83b0, 0x7, 0x4, 0x1, 0x8, 0x7fff, 0xa, 0x30, 0x7, 0x3, 0x3, 0xffffffff, 0x2, 0x8, 0x7, 0x3, 0x1a8, 0x0, 0x9, 0xfffffffc]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r14}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r15}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r16}, 0x38) sendto$packet(r13, &(0x7f0000000440)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r12, 0x1, 0xd8, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 628.47908ms ago: executing program 0 (id=4755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x340a) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002180)={{}, 0x0, 0x4, @inherit={0x50, 0x0}, @subvolid=0xfffffffffffffff7}) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRES64=r2], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x4e21, 0x3, 'lc\x00', 0x2, 0x8, 0x38}, 0x2c) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="89e73d5521fe62a3b47380c988caa3c24e814fed28c96df455a1f6a0cabc4b0a2d99ca56a582b236c2d3047ab3eb0e92cee4ef964009415d6c7e13fcecba9a4ce4b2ea3eee0f", 0x46}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x340a) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002180)={{}, 0x0, 0x4, @inherit={0x50, 0x0}, @subvolid=0xfffffffffffffff7}) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRES64=r2], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x4e21, 0x3, 'lc\x00', 0x2, 0x8, 0x38}, 0x2c) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="89e73d5521fe62a3b47380c988caa3c24e814fed28c96df455a1f6a0cabc4b0a2d99ca56a582b236c2d3047ab3eb0e92cee4ef964009415d6c7e13fcecba9a4ce4b2ea3eee0f", 0x46}], 0x1) (async) 626.932387ms ago: executing program 3 (id=4756): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x28}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18, 0x20040801}}], 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x80800) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 465.087616ms ago: executing program 0 (id=4757): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010028bd70080000c20c00168000d421ffdff8f1fda67542a12e15332deb0000e6001700ffffffff00"/59], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0xa, 0x5, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r3) (async) listen(r2, 0x100) socket(0x2, 0xa, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (async) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @mcast1, 0x8eb}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)='3', 0x1}], 0x1, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x8204, 0x4, 0x542f080e}}, @dstaddrv6={0xfffffffffffffe7e, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x33}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x3, 0x206, 0x6, 0x4, 0x400, 0x1ff, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @authinfo={0x18, 0x84, 0x6, {0x6}}], 0xa0}, 0x20044051) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) (async) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff3}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) socket$kcm(0x11, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 439.69952ms ago: executing program 3 (id=4758): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delqdisc={0x9c, 0x25, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xf, 0x1}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x7, 0x0, 0x3, 0x2, 0x1, 0x7}}, {0x12, 0x2, [0xcab, 0x7, 0x2, 0x101, 0xb, 0x9, 0x4]}}, {{0x1c, 0x1, {0xe8, 0xe, 0xff08, 0x2, 0x0, 0x7, 0x7, 0x9}}, {0x16, 0x2, [0x9, 0x722, 0x1, 0xfffe, 0xc, 0x7, 0x7, 0x1, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000140)) 410.992124ms ago: executing program 4 (id=4759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3d, 0xb, 0x0, 0x3}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000100850000007200000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x5, 0x5, 0x9, 0x3, 0x9, 0x3, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x1, @loopback, 0x4}}, 0x7, 0x2, 0xac7, 0x80000001, 0x472}}, &(0x7f0000000180)=0xb0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3d, 0xb, 0x0, 0x3}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000100850000007200000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x5, 0x5, 0x9, 0x3, 0x9, 0x3, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x1, @loopback, 0x4}}, 0x7, 0x2, 0xac7, 0x80000001, 0x472}}, &(0x7f0000000180)=0xb0) (async) 295.893797ms ago: executing program 3 (id=4760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002500010325bd7000fcffffff110000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x200040c4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000001c0)={0x0, 0x6, 0x9, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000005c0)={r4, "3e64869a45fb3b465a12252930872e12"}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x18, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x1, 0x101}}}}]}, 0x44}}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x4, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 291.754899ms ago: executing program 0 (id=4761): socketpair(0x29, 0x5, 0x10001, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}, 0x1, 0x0, 0x500}, 0x0) 288.343811ms ago: executing program 5 (id=4762): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x32, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac4000000060a0b0400000000000000000200fffe980004802800018008000100666962001c000280080003400000000608000240000000020800014000000009200001800700010063740000140002800800024000000011080004400000000c400001800d00010073796e70726f7879000000002c000280050002000700000005000200090000000600014090100400050002000200000006000140000800000c00018008000100647570000900010073797a30000000000900020073797a32"], 0x100}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC, @ANYRES32], 0x60}, 0x1, 0x400000000000000}, 0x4044400) 174.095066ms ago: executing program 0 (id=4763): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @local}}}], 0x20}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000740)={0x0, @initdev, @dev}, &(0x7f0000000780)=0xc) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8096) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da", @ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) 112.705659ms ago: executing program 3 (id=4764): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)={0x3b0, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7ff, 0xb7, 0x2, 0x6, 0x3, 0x4, 0x72a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2000, 0x3, 0xfa5a, 0x3, 0x6, 0xfffd, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf1, 0x6, 0x3, 0x7, 0xfffe, 0x6, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xd5, 0x0, 0x6, 0x286, 0x1, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x60, 0x6, 0x9, 0x16, 0x1, 0x1, 0x1b, 0x36, 0x6c, 0x6, 0x5, 0x19, 0x18, 0x5, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x101, 0xfff9, 0x3, 0x401, 0x542, 0x603c, 0x8]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xb, 0x41d4, 0x3, 0x9, 0x2d2, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x8, 0x8, 0x1180, 0x9, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x4, 0x4, 0x24, 0x60, 0x0, 0x6, 0x0, 0x0, 0x1, 0x12, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x400, 0x9, 0x4, 0xc8a, 0x3, 0xa, 0xf801]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xabc, 0x4943, 0x5, 0x9, 0x812, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x6, 0x36, 0x78, 0x6, 0x9, 0x18, 0x6c, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x76f2, 0xfff7, 0x1, 0x6, 0x8000, 0xc3e6, 0x7e3, 0xf460]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x3, 0x3, 0x1b, 0x6, 0x16, 0x3, 0x30, 0x6, 0x6, 0xb, 0x12, 0x30, 0x36, 0x18, 0x36, 0x1, 0x4, 0x9, 0x6, 0x60, 0x30, 0x24, 0xb, 0x2, 0x24, 0x6c, 0x60, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0xf9c, 0x2, 0x3, 0x200, 0x8001, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x1, 0x9, 0xad0, 0x2, 0xfff7, 0x77f, 0x893]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x6, 0x4, 0x7, 0x6, 0x8001, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0xa}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x5, 0x6, 0x12, 0x3c, 0xc, 0x12, 0x10, 0x4, 0x6, 0x24, 0x16, 0x4, 0x18, 0x1b, 0x2, 0x48, 0x36, 0xa, 0x6, 0x2, 0xb, 0x18, 0x24, 0x2, 0x3, 0x4, 0x9, 0xb, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x100, 0x8, 0x6, 0x2, 0x7, 0x3af9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x7, 0x5, 0x1, 0x6, 0x2, 0x2, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x2}, {0x5, 0x3}, {0x5, 0xa}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x7}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {}, {0x4, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x6}, {0x0, 0xa}, {0x7, 0x5}, {0x3, 0x8}, {0x2, 0x6}, {0x3, 0x9}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x8}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x5, 0x8, 0x0, 0x4, 0xfffe, 0x9, 0x90a]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0xc, 0x61, 0x18, 0x1, 0x2, 0xc, 0x24, 0x30, 0x6c, 0x1, 0x6c, 0x3, 0x5, 0xc, 0xb, 0xc, 0x9, 0x1b, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x1, 0x36, 0x36, 0xb, 0x0, 0x30, 0x36, 0x4, 0xc, 0x1, 0x2, 0x9ed94920e0b41859, 0xb, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x40, 0x8, 0x3, 0x6, 0x8e, 0x800, 0xa59]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x1}, {0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x4, 0x9}, {0x2}, {0x5, 0x5}, {0x6}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x5, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x5}, {0x6}, {0x4}, {0x4, 0x3}, {0x6, 0x2}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x8}, {0x7, 0xa}, {0x2, 0x6}, {0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x7}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x9}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xb, 0x1, 0x3, 0x1, 0x200, 0xc325]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000011) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0x0, 0x5}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r8, &(0x7f0000001540)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)="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", 0x1a5}, {&(0x7f0000000540)="ba1519b7ae0145070a9522721a395841720fd5481bc2cbd8f13aaa9066a24214af82ba1466de0a1b52bceecaaa882b66f916a85af471ca422935c42f77b319e7d595558b74", 0x45}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000c044) sendto$inet(r8, &(0x7f0000001740)="e83901d3ce", 0x5, 0x32000800, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0xca8, 0x10001, 0x514, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) close(0x3) 109.026293ms ago: executing program 0 (id=4765): syz_init_net_socket$ax25(0x3, 0x2, 0xca) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x24}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44840) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x0, 0x4, 0x88}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 77.470323ms ago: executing program 5 (id=4766): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00fc0000000000000000000c00090008000080", @ANYRES32, @ANYBLOB="140005"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x20000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x9, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet(0xa, 0x801, 0x0) sendmsg$sock(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRES16=r2], 0x68}}, 0x20000090) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100000000e0a01010001000000000000010000020900021073797a32000000000900010073797a3012e44fd6a6e5080ad749000000140000001100010000000000000000000084000a00000000000000000000000000001700f6aea8da18fef2526365fa40cef8d9a47de0ad0e1d693a47c7d1380f9bbc"], 0x54}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc, &(0x7f0000000500)=""/12, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r7], &(0x7f00000004c0)=[{0x5, 0x5, 0xa, 0x4}, {0x0, 0x3, 0xc}, {0x3, 0x1, 0xb, 0xa}], 0x10, 0x2}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x400013b, 0x20046054) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) 451.498µs ago: executing program 2 (id=4767): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x27, "2627d0060000000000d0fb1228000075bc0387824900009ae57e72c657f87bf59951fa90a2ac5c"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e1c, @rand_addr=0x64010101}, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @multicast2}, 0x34d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x6a040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x884) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x8801, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xfffffffffffffff7}) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=4768): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400200100000000000000000000000000020c000480040001"], 0x70}}, 0x0) unshare(0x20000400) (async) unshare(0x20000400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8849}, 0x448d4) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000006867000000000000000000000000000000000000000000007810407e41ad62d268f0dcb1c129ead52d74b983cee50415de8cd8026c1330dadcb0d8ba821d59186e7d4c12d5aff7e85ab0f99f302aa2ab55632b7d47dfcfff9b5858e9f936a6045badc806a13d35d7b0ce18ec2fb2fa4e34f1d2a5a6866d537ae0d590a461f828834754f92a58e0d40da334d87f6f1c150c9941586f36965bcb9e5a5ba4893968e1fb06807031434583cadbf0ca196628e9d73d8821ac5f396b84ce9379e210f428aa15482943a9212f"], 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000006867000000000000000000000000000000000000000000007810407e41ad62d268f0dcb1c129ead52d74b983cee50415de8cd8026c1330dadcb0d8ba821d59186e7d4c12d5aff7e85ab0f99f302aa2ab55632b7d47dfcfff9b5858e9f936a6045badc806a13d35d7b0ce18ec2fb2fa4e34f1d2a5a6866d537ae0d590a461f828834754f92a58e0d40da334d87f6f1c150c9941586f36965bcb9e5a5ba4893968e1fb06807031434583cadbf0ca196628e9d73d8821ac5f396b84ce9379e210f428aa15482943a9212f"], 0x48) kernel console output (not intermixed with test programs): m0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.571141][ T4534] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.586722][ T4534] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.597496][ T4534] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.818521][T16787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.841349][T16787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.850204][ T5842] Bluetooth: hci3: command tx timeout [ 419.867744][T16787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.893147][T16787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.191047][T16948] 9_z speed is unknown, defaulting to 1000 [ 420.207680][T16787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.238494][T16948] wg1 speed is unknown, defaulting to 1000 [ 420.245429][T16787] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.321137][T16978] netlink: 'syz.2.2920': attribute type 10 has an invalid length. [ 420.358744][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.365884][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.435218][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.442435][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.690530][T17003] netlink: set zone limit has 8 unknown bytes [ 420.703794][T17005] netlink: 'syz.5.2926': attribute type 10 has an invalid length. [ 420.837648][T17001] bridge_slave_0: left allmulticast mode [ 420.847780][T17001] bridge_slave_0: left promiscuous mode [ 420.862934][T17001] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.876928][T17001] bond0: (slave bridge_slave_1): Releasing backup interface [ 420.913515][T17011] netlink: 'syz.0.2931': attribute type 33 has an invalid length. [ 420.922581][T17001] bond0: (slave bond_slave_0): Releasing backup interface [ 420.942458][T17001] bond0: (slave bond_slave_1): Releasing backup interface [ 420.952484][T17001] team0: Port device team_slave_0 removed [ 420.961885][T17001] team0: Port device team_slave_1 removed [ 420.968531][T17001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.978595][T17001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.264722][T16998] 9_z speed is unknown, defaulting to 1000 [ 421.275435][T16998] wg1 speed is unknown, defaulting to 1000 [ 421.355620][T17026] netlink: 'syz.5.2932': attribute type 12 has an invalid length. [ 421.382571][T17026] smc: net device geneve0 applied user defined pnetid SYZ0 [ 421.571308][T17018] 9_z speed is unknown, defaulting to 1000 [ 421.573785][T17032] netlink: 'syz.3.2934': attribute type 4 has an invalid length. [ 421.594233][T17018] wg1 speed is unknown, defaulting to 1000 [ 421.661772][T17033] netlink: 'syz.3.2934': attribute type 4 has an invalid length. [ 421.782252][T16787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.931412][ T5842] Bluetooth: hci3: command tx timeout [ 422.253797][T17053] syzkaller1: entered promiscuous mode [ 422.278318][T17053] syzkaller1: entered allmulticast mode [ 422.514438][T16787] veth0_vlan: entered promiscuous mode [ 422.555996][T16787] veth1_vlan: entered promiscuous mode [ 422.648223][T16787] veth0_macvtap: entered promiscuous mode [ 422.682620][T16787] veth1_macvtap: entered promiscuous mode [ 422.753555][T16787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.840847][T16787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.886134][T17078] netlink: 'syz.0.2946': attribute type 30 has an invalid length. [ 422.930390][ T8828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.951866][ T8828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.016188][ T8828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.055210][T17083] bond5: entered promiscuous mode [ 423.061207][T17083] bond5: entered allmulticast mode [ 423.067048][T17083] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.108002][ T4534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.267975][T17098] __nla_validate_parse: 5 callbacks suppressed [ 423.267999][T17098] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2951'. [ 423.287724][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.304945][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.368179][ T8828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.396556][ T8828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.458011][T17105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2954'. [ 423.641616][T17111] syzkaller0: entered promiscuous mode [ 423.648352][T17111] syzkaller0: entered allmulticast mode [ 423.950894][T17122] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2959'. [ 423.969744][T17122] netlink: 'syz.4.2959': attribute type 1 has an invalid length. [ 424.021917][ T5842] Bluetooth: hci3: command tx timeout [ 425.540518][T17129] macvlan2: entered promiscuous mode [ 425.551071][T17129] batman_adv: batadv0: Adding interface: macvlan2 [ 425.564629][T17129] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.601414][T17129] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 425.641235][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 425.653484][T17140] netlink: 'syz.4.2963': attribute type 5 has an invalid length. [ 425.669792][T17140] netlink: 'syz.4.2963': attribute type 8 has an invalid length. [ 425.677826][T17130] macvlan3: entered promiscuous mode [ 425.680331][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 425.696438][T17130] batman_adv: batadv0: Adding interface: macvlan3 [ 425.703876][T17130] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.731348][T17130] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 425.771928][T17140] geneve2: entered promiscuous mode [ 425.777303][T17140] geneve2: entered allmulticast mode [ 425.787428][ T8828] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 425.797987][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 425.810564][ T8828] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 425.852375][ T8828] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 425.890994][ T8828] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 425.907665][T17149] netlink: 480 bytes leftover after parsing attributes in process `syz.5.2966'. [ 425.928355][T17149] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2966'. [ 425.962729][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 426.034255][T17153] syzkaller0: entered promiscuous mode [ 426.040368][T17153] syzkaller0: entered allmulticast mode [ 426.114398][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 427.927881][T17187] [: entered promiscuous mode [ 428.105627][T17198] bond0: (slave rose0): Error: Device can not be enslaved while up [ 428.137336][T17203] netlink: 'syz.5.2980': attribute type 2 has an invalid length. [ 428.149977][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.175020][T17203] : entered promiscuous mode [ 428.255314][T17210] netlink: 'syz.5.2980': attribute type 6 has an invalid length. [ 428.395155][T17214] Unsupported ieee802154 address type: 0 [ 428.717914][T17220] __nla_validate_parse: 5 callbacks suppressed [ 428.717933][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2987'. [ 428.990233][T17220] syzkaller0: entered promiscuous mode [ 429.003178][T17220] syzkaller0: entered allmulticast mode [ 429.135726][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.180284][T17249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2992'. [ 429.205272][T17240] syzkaller0: entered promiscuous mode [ 429.212076][T17240] syzkaller0: entered allmulticast mode [ 429.238240][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2993'. [ 429.475135][T17260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2994'. [ 430.986377][T17251] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 431.090634][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 432.876476][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3002'. [ 432.972946][T17283] vlan2: entered promiscuous mode [ 432.996874][T17283] macvtap0: entered promiscuous mode [ 433.095738][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.106940][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.118767][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.126808][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.135801][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.407846][T17308] vlan0: entered promiscuous mode [ 433.416547][T17308] dummy0: entered promiscuous mode [ 433.422908][T17308] vlan0: left allmulticast mode [ 433.428226][T17308] dummy0: left allmulticast mode [ 433.550628][T17315] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3010'. [ 433.787606][T17320] syzkaller0: entered promiscuous mode [ 433.796207][T17320] syzkaller0: entered allmulticast mode [ 433.803512][T17295] 9_z speed is unknown, defaulting to 1000 [ 434.393458][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 434.414228][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 434.619737][T17346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3020'. [ 434.807118][T17349] netlink: 'syz.0.3020': attribute type 6 has an invalid length. [ 434.815804][T17349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3020'. [ 434.873000][T17350] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3020'. [ 435.213896][ T5838] Bluetooth: hci0: command tx timeout [ 435.805089][T17295] wg1 speed is unknown, defaulting to 1000 [ 435.825805][T17347] pim6reg: entered allmulticast mode [ 435.841947][T17348] pim6reg: left allmulticast mode [ 435.955939][T17358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3022'. [ 436.083243][T17364] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3024'. [ 436.294690][T17295] chnl_net:caif_netlink_parms(): no params data found [ 436.380931][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 436.402744][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 436.552482][T17295] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.565546][T17397] netlink: 'syz.2.3034': attribute type 11 has an invalid length. [ 436.571311][T17295] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.581685][T17393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3031'. [ 436.592363][T17295] bridge_slave_0: entered allmulticast mode [ 436.601701][T17295] bridge_slave_0: entered promiscuous mode [ 436.612047][T17393] IPVS: Error connecting to the multicast addr [ 436.628651][T17295] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.637626][T17295] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.646268][T17295] bridge_slave_1: entered allmulticast mode [ 436.656270][T17295] bridge_slave_1: entered promiscuous mode [ 436.715057][T17295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.815791][T17295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.974204][T17295] team0: Port device team_slave_0 added [ 437.016522][T17295] team0: Port device team_slave_1 added [ 437.270679][T17429] syzkaller0: entered promiscuous mode [ 437.276708][T17429] syzkaller0: entered allmulticast mode [ 437.289902][ T5838] Bluetooth: hci0: command tx timeout [ 437.337980][T17295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.346244][T17295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.376142][T17295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.396244][T17295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.407771][T17295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.441879][T17295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.527918][T17446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.623569][T17295] hsr_slave_0: entered promiscuous mode [ 437.633301][T17295] hsr_slave_1: entered promiscuous mode [ 437.663844][T17295] debugfs: 'hsr0' already exists in 'hsr' [ 437.672180][T17295] Cannot create hsr debugfs directory [ 437.727724][T17453] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 438.019674][T17295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.031543][T17295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.195439][T17295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.226268][T17295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.876821][T17486] veth3: entered promiscuous mode [ 438.961922][T17295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.979396][T17295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.997588][T17488] tunl0: Caught tx_queue_len zero misconfig [ 439.121016][T17295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.148560][T17295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.369460][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.377633][ T5838] Bluetooth: hci0: command tx timeout [ 439.427154][T17295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 439.467960][T17295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 439.532690][T17295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 439.555140][T17295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.603358][T17530] xt_TPROXY: Can be used only with -p tcp or -p udp [ 439.735629][T17540] __nla_validate_parse: 17 callbacks suppressed [ 439.735648][T17540] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3072'. [ 439.807987][T17295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.816467][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 439.828964][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 439.855196][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3075'. [ 439.857231][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 439.878769][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 439.906308][T17550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3075'. [ 439.911798][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 439.925174][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 439.926832][T17554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3074'. [ 439.957117][T17295] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.007597][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.014815][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.059651][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.066873][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.315551][T17568] netlink: 'syz.0.3081': attribute type 12 has an invalid length. [ 440.873435][T17295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.890322][T17581] 9_z speed is unknown, defaulting to 1000 [ 440.900772][T17581] wg1 speed is unknown, defaulting to 1000 [ 441.072981][T17295] veth0_vlan: entered promiscuous mode [ 441.126443][T17295] veth1_vlan: entered promiscuous mode [ 441.208243][T17295] veth0_macvtap: entered promiscuous mode [ 441.332236][T17295] veth1_macvtap: entered promiscuous mode [ 441.459515][ T5838] Bluetooth: hci0: command tx timeout [ 441.473225][T17611] syzkaller0: entered promiscuous mode [ 441.490042][T17611] syzkaller0: entered allmulticast mode [ 442.291763][T17625] netlink: 'syz.4.3096': attribute type 4 has an invalid length. [ 443.548330][T17295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.588921][T17295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.683057][ T8825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.707909][ T8818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.731464][ T8818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.744624][ T8818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.046300][T17654] netlink: 'syz.4.3099': attribute type 30 has an invalid length. [ 444.071168][ T8818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.088056][ T8818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.243570][T17650] veth7: entered promiscuous mode [ 444.681538][ T8825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.707811][ T8825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.940893][T17635] 9_z speed is unknown, defaulting to 1000 [ 444.953174][T17635] wg1 speed is unknown, defaulting to 1000 [ 444.971211][T17671] __nla_validate_parse: 13 callbacks suppressed [ 444.971230][T17671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3107'. [ 445.677199][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.694768][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.716462][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.725714][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.735047][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.789949][T17681] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3109'. [ 445.947524][T17686] syzkaller0: entered promiscuous mode [ 445.958927][T17686] syzkaller0: entered allmulticast mode [ 446.176066][T17697] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 446.193697][T17697] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3114'. [ 447.769066][ T5838] Bluetooth: hci1: command tx timeout [ 448.176226][T17715] xt_hashlimit: size too large, truncated to 1048576 [ 448.248320][T17719] netlink: 'syz.4.3118': attribute type 3 has an invalid length. [ 448.520496][T17678] 9_z speed is unknown, defaulting to 1000 [ 448.547506][T17678] wg1 speed is unknown, defaulting to 1000 [ 448.612799][T17732] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3121'. [ 448.624470][T17730] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3120'. [ 448.882776][T17678] chnl_net:caif_netlink_parms(): no params data found [ 448.941732][T17698] 9_z speed is unknown, defaulting to 1000 [ 448.991754][T17698] wg1 speed is unknown, defaulting to 1000 [ 449.065622][T17678] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.073310][T17678] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.081310][T17678] bridge_slave_0: entered allmulticast mode [ 449.093680][T17678] bridge_slave_0: entered promiscuous mode [ 449.119421][T17678] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.126883][T17678] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.134774][T17678] bridge_slave_1: entered allmulticast mode [ 449.143799][T17678] bridge_slave_1: entered promiscuous mode [ 449.264745][T17678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.274159][T17712] 9_z speed is unknown, defaulting to 1000 [ 449.277766][T17678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.297369][T17712] wg1 speed is unknown, defaulting to 1000 [ 449.305310][T17739] siw: device registration error -23 [ 449.374245][T17678] team0: Port device team_slave_0 added [ 449.413876][T17678] team0: Port device team_slave_1 added [ 449.471507][T17678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.478467][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.510000][T17678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.525429][T17678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.534223][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.562425][T17678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.601838][T17749] 9_z speed is unknown, defaulting to 1000 [ 449.618103][T17749] wg1 speed is unknown, defaulting to 1000 [ 449.654457][T17678] hsr_slave_0: entered promiscuous mode [ 449.677175][T17678] hsr_slave_1: entered promiscuous mode [ 449.685903][T17678] debugfs: 'hsr0' already exists in 'hsr' [ 449.693169][T17678] Cannot create hsr debugfs directory [ 449.738568][T17755] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 449.850023][ T5838] Bluetooth: hci1: command tx timeout [ 450.136700][T17761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3129'. [ 450.874439][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 451.303961][T17794] Bluetooth: MGMT ver 1.23 [ 451.359994][T17678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.392963][T17678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.405491][T17678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.423986][T17678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.788080][T17678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.859155][T17678] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.875901][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.883172][ T8829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.932737][ T5838] Bluetooth: hci1: command tx timeout [ 451.944649][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.951879][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.089384][T17821] openvswitch: netlink: Key 26 has unexpected len 232 expected 16 [ 452.204085][T17826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3143'. [ 452.328057][T17830] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3146'. [ 452.448246][T17678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.593893][T17678] veth0_vlan: entered promiscuous mode [ 452.617408][T17678] veth1_vlan: entered promiscuous mode [ 452.694040][T17678] veth0_macvtap: entered promiscuous mode [ 452.719380][T17678] veth1_macvtap: entered promiscuous mode [ 452.722819][T17846] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3150'. [ 452.770034][T17678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.801360][T17678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.846983][ T6456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.900268][ T6456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.939197][ T6456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.965959][ T6456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.015667][T17850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3152'. [ 453.095230][T17854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'. [ 453.220629][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.228489][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.328355][ T6456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.337732][ T6456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.369395][ T5838] Bluetooth: hci0: command tx timeout [ 453.470080][T17860] pimreg: entered allmulticast mode [ 453.498066][T17835] 9_z speed is unknown, defaulting to 1000 [ 453.551402][T17835] wg1 speed is unknown, defaulting to 1000 [ 453.584169][T17863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3154'. [ 453.627078][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 453.848106][T17874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3158'. [ 454.009385][ T5838] Bluetooth: hci1: command tx timeout [ 455.480153][T17908] 9_z speed is unknown, defaulting to 1000 [ 455.486637][T17940] __nla_validate_parse: 4 callbacks suppressed [ 455.486662][T17940] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3170'. [ 455.490224][T17908] wg1 speed is unknown, defaulting to 1000 [ 455.661678][T17947] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3171'. [ 455.784429][T17951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3172'. [ 455.982894][T17953] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3167'. [ 456.020212][T17964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3175'. [ 456.040490][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3175'. [ 456.054242][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'. [ 456.229480][T17931] 9_z speed is unknown, defaulting to 1000 [ 456.258015][T17931] wg1 speed is unknown, defaulting to 1000 [ 456.586256][T17990] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3183'. [ 456.967033][T17998] netlink: 'syz.4.3186': attribute type 21 has an invalid length. [ 456.994879][T17998] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3186'. [ 457.016676][T17998] netlink: 'syz.4.3186': attribute type 4 has an invalid length. [ 457.033742][T17998] netlink: 'syz.4.3186': attribute type 3 has an invalid length. [ 457.056161][T17998] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3186'. [ 457.250675][ T5882] IPVS: starting estimator thread 0... [ 457.340108][T18007] IPVS: using max 31 ests per chain, 74400 per kthread [ 457.341194][T18006] netlink: 'syz.3.3187': attribute type 4 has an invalid length. [ 457.436948][T17984] 9_z speed is unknown, defaulting to 1000 [ 457.446524][T17969] 9_z speed is unknown, defaulting to 1000 [ 457.447293][T17984] wg1 speed is unknown, defaulting to 1000 [ 457.478139][T17969] wg1 speed is unknown, defaulting to 1000 [ 457.778001][T17998] 9_z speed is unknown, defaulting to 1000 [ 457.814890][T17998] wg1 speed is unknown, defaulting to 1000 [ 458.060584][T18006] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.900151][T18033] syzkaller0: entered promiscuous mode [ 458.905979][T18033] syzkaller0: entered allmulticast mode [ 459.186713][T18053] xt_bpf: check failed: parse error [ 459.374641][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.857511][T18035] 9_z speed is unknown, defaulting to 1000 [ 460.866801][T18062] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 460.911365][T18035] wg1 speed is unknown, defaulting to 1000 [ 460.992751][T18071] __nla_validate_parse: 3 callbacks suppressed [ 460.992770][T18071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3204'. [ 461.077200][T18078] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 461.106071][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3204'. [ 461.140653][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3204'. [ 461.334850][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 461.431959][T18079] 9_z speed is unknown, defaulting to 1000 [ 461.462937][T18079] wg1 speed is unknown, defaulting to 1000 [ 461.488375][T18084] block nbd0: server does not support multiple connections per device. [ 461.512564][T18084] block nbd0: shutting down sockets [ 461.809984][T18099] syzkaller0: entered promiscuous mode [ 461.815807][T18099] syzkaller0: entered allmulticast mode [ 462.324161][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3219'. [ 464.107187][T18133] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3224'. [ 464.322296][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3226'. [ 464.394904][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 464.564660][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3232'. [ 464.601443][T18170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3232'. [ 464.613012][T18167] syzkaller0: entered promiscuous mode [ 464.618512][T18167] syzkaller0: entered allmulticast mode [ 464.786889][T18188] netlink: 'syz.5.3237': attribute type 27 has an invalid length. [ 465.302631][T18196] team0 (unregistering): Port device team_slave_0 removed [ 465.317081][T18196] team0 (unregistering): Port device team_slave_1 removed [ 465.352894][T18213] netlink: 'syz.3.3243': attribute type 29 has an invalid length. [ 465.486156][T18226] netlink: 'syz.4.3246': attribute type 11 has an invalid length. [ 466.097509][ T30] audit: type=1800 audit(1768878064.021:5): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3254" name="memory.events" dev="tmpfs" ino=136 res=0 errno=0 [ 466.204706][T18264] __nla_validate_parse: 1 callbacks suppressed [ 466.204724][T18264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3253'. [ 466.281802][T18264] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3253'. [ 466.372509][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3259'. [ 466.385066][T18274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3259'. [ 466.434495][T18277] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 466.640348][T18294] x_tables: duplicate underflow at hook 2 [ 466.862168][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'. [ 466.879763][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'. [ 466.900329][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'. [ 467.103839][T18321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3269'. [ 467.191652][T18327] netlink: 'syz.2.3270': attribute type 1 has an invalid length. [ 467.377180][T18331] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3271'. [ 467.656799][T18337] xt_CT: No such helper "pptp" [ 468.011768][T18352] netlink: 'syz.5.3279': attribute type 32 has an invalid length. [ 468.029341][T18352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3279'. [ 468.436029][T18384] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 469.107221][T18421] SET target dimension over the limit! [ 469.463774][T18444] m1Ie5n: entered promiscuous mode [ 469.562875][T18447] No such timeout policy "syz0" [ 469.680200][T18456] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20003 [ 470.044686][T18475] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 470.234405][T18487] netlink: 'syz.2.3318': attribute type 10 has an invalid length. [ 470.257448][T18487] team0: Port device dummy0 added [ 470.903881][T18516] netlink: 'syz.5.3325': attribute type 1 has an invalid length. [ 470.927629][T18515] netlink: 'syz.5.3325': attribute type 1 has an invalid length. [ 471.640045][T18537] tun0: tun_chr_ioctl cmd 1074025675 [ 471.663098][T18537] tun0: persist enabled [ 471.674344][T18537] tun0: tun_chr_ioctl cmd 1074025675 [ 471.689784][T18537] tun0: persist enabled [ 471.773788][T18536] pim6reg1: entered promiscuous mode [ 471.798876][T18536] pim6reg1: entered allmulticast mode [ 472.100749][T18557] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 472.276512][T18563] __nla_validate_parse: 11 callbacks suppressed [ 472.276531][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 472.299065][T18563] hsr_slave_0: left promiscuous mode [ 472.330422][T18563] hsr_slave_1: left promiscuous mode [ 472.649618][T18583] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3345'. [ 472.694728][T18591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3346'. [ 472.787502][ T843] IPVS: starting estimator thread 0... [ 472.880812][T18602] IPVS: using max 33 ests per chain, 79200 per kthread [ 473.475293][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3355'. [ 473.520978][T18634] netlink: 'syz.5.3355': attribute type 12 has an invalid length. [ 473.571407][T18636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3356'. [ 473.589328][T18636] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3356'. [ 473.623535][T18640] netlink: 'syz.5.3357': attribute type 10 has an invalid length. [ 473.645680][T18640] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.663307][T18640] bond0: (slave team0): Enslaving as an active interface with an up link [ 473.750068][ T8817] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.777259][ T8817] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.797308][ T8817] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.863339][ T8817] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.023571][T18658] netlink: 'syz.2.3362': attribute type 39 has an invalid length. [ 474.065365][T18661] netlink: 'syz.4.3364': attribute type 21 has an invalid length. [ 474.080596][T18661] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3364'. [ 474.129877][T18661] netlink: 'syz.4.3364': attribute type 4 has an invalid length. [ 474.139773][T18661] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3364'. [ 474.334789][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 474.389773][T18659] 9_z speed is unknown, defaulting to 1000 [ 474.397652][T18659] wg1 speed is unknown, defaulting to 1000 [ 474.434488][T18678] xt_hashlimit: max too large, truncated to 1048576 [ 474.644562][T18692] netlink: 'syz.3.3368': attribute type 11 has an invalid length. [ 474.754425][T18687] sit0: entered promiscuous mode [ 474.779022][T18687] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 474.820849][T18687] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3370'. [ 474.955784][T18711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3373'. [ 475.225609][T18716] batadv_slave_0: entered promiscuous mode [ 475.654612][T18753] syzkaller0: entered promiscuous mode [ 475.662670][T18753] syzkaller0: entered allmulticast mode [ 475.691849][T18753] 0: reclassify loop, rule prio 0, protocol 800 [ 475.745869][T18757] netlink: 'syz.4.3385': attribute type 5 has an invalid length. [ 475.764634][T18757] ip6erspan0: entered promiscuous mode [ 475.905894][T18714] batadv_slave_0: left promiscuous mode [ 476.890780][T18799] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 476.918510][T18797] netlink: 'syz.3.3398': attribute type 7 has an invalid length. [ 476.939627][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.952304][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.960842][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.978071][T18803] gretap1: entered promiscuous mode [ 476.979171][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.994702][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.173556][T18799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.317956][T18813] bridge_slave_0: left allmulticast mode [ 477.334844][T18813] bridge_slave_0: left promiscuous mode [ 477.360397][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.385671][T18816] netlink: 'syz.3.3401': attribute type 10 has an invalid length. [ 477.395466][T18813] bridge_slave_1: left allmulticast mode [ 477.401266][T18813] bridge_slave_1: left promiscuous mode [ 477.407012][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.436863][T18813] bond0: (slave bond_slave_0): Releasing backup interface [ 477.452321][T18813] bond0: (slave bond_slave_1): Releasing backup interface [ 477.470722][T18813] team0: Port device team_slave_0 removed [ 477.483500][T18813] team0: Port device team_slave_1 removed [ 477.490794][T18813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.498220][T18813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.509555][T18813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.517220][T18813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.616223][T18816] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 477.746927][T18819] syzkaller0: entered promiscuous mode [ 477.820224][T18819] syzkaller0: entered allmulticast mode [ 479.053794][ T5842] Bluetooth: hci4: command tx timeout [ 480.213005][T18801] 9_z speed is unknown, defaulting to 1000 [ 480.246832][T18801] wg1 speed is unknown, defaulting to 1000 [ 480.514552][T18877] __nla_validate_parse: 7 callbacks suppressed [ 480.514569][T18877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3415'. [ 480.537260][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3412'. [ 480.715918][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3416'. [ 480.747904][T18884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3416'. [ 480.903600][T18867] 9_z speed is unknown, defaulting to 1000 [ 480.918136][T18867] wg1 speed is unknown, defaulting to 1000 [ 480.996156][T18801] chnl_net:caif_netlink_parms(): no params data found [ 481.138802][ T5842] Bluetooth: hci4: command tx timeout [ 481.649426][T18801] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.682749][T18801] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.703628][T18801] bridge_slave_0: entered allmulticast mode [ 481.787049][T18801] bridge_slave_0: entered promiscuous mode [ 481.817338][T18801] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.847390][T18801] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.863096][T18921] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3425'. [ 481.879990][T18801] bridge_slave_1: entered allmulticast mode [ 481.897917][T18801] bridge_slave_1: entered promiscuous mode [ 481.984242][T18801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.001447][T18801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.107434][T18801] team0: Port device team_slave_0 added [ 482.124639][T18801] team0: Port device team_slave_1 added [ 482.254010][T18801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.262117][T18801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.289634][T18801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.303189][T18801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.310705][T18801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.337731][T18801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.444019][T18801] hsr_slave_0: entered promiscuous mode [ 482.451232][T18801] hsr_slave_1: entered promiscuous mode [ 482.457795][T18801] debugfs: 'hsr0' already exists in 'hsr' [ 482.464134][T18801] Cannot create hsr debugfs directory [ 482.727585][T18801] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.768376][T18948] 9_z speed is unknown, defaulting to 1000 [ 482.788265][T18948] wg1 speed is unknown, defaulting to 1000 [ 482.842060][T18801] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.936313][T18801] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.108122][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 483.119870][T18801] bond0: (slave netdevsim0): Releasing backup interface [ 483.122295][T18963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3437'. [ 483.141800][T18801] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.210687][ T5842] Bluetooth: hci4: command tx timeout [ 483.218551][T18961] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 483.416106][T18967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3438'. [ 483.485873][T18968] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 483.565890][T18968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.632176][T18969] bond1: (slave geneve2): making interface the new active one [ 483.643213][T18969] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 483.657362][T18972] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3440'. [ 483.844728][T18954] 9_z speed is unknown, defaulting to 1000 [ 483.923441][T18954] wg1 speed is unknown, defaulting to 1000 [ 483.964612][T18801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 483.980796][T18801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.033555][T18801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.084486][T18801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.176653][T18999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3448'. [ 484.385901][T19005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.557760][T19005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.669834][T19005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.795217][T19005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.898224][T18801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.953311][T18801] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.032969][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.040201][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.127417][ T8817] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.152991][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.160196][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.216943][ T8811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.291442][ T5842] Bluetooth: hci4: command tx timeout [ 485.357788][ T8811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.405203][ T8818] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.578649][T19053] __nla_validate_parse: 5 callbacks suppressed [ 485.578668][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 485.732399][T19055] syzkaller0: entered allmulticast mode [ 485.791044][T19063] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3460'. [ 485.845156][T18801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.917430][T19071] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 485.937364][T19074] netlink: 'syz.0.3462': attribute type 4 has an invalid length. [ 485.946496][T19074] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3462'. [ 486.194930][T18801] veth0_vlan: entered promiscuous mode [ 486.266013][T18801] veth1_vlan: entered promiscuous mode [ 486.410285][T18801] veth0_macvtap: entered promiscuous mode [ 486.421431][T18801] veth1_macvtap: entered promiscuous mode [ 486.481344][T18801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.554572][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 486.595819][T19109] ip6gretap1: entered promiscuous mode [ 486.606195][T19109] ip6gretap1: entered allmulticast mode [ 486.617126][T18801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.665494][ T3582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.690985][T19074] 9_z speed is unknown, defaulting to 1000 [ 486.705788][ T3582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.717362][T19113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.727719][ T3582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.753023][T19074] wg1 speed is unknown, defaulting to 1000 [ 486.753422][ T3582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.781389][T19111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3469'. [ 486.850217][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'. [ 487.095359][T19075] 9_z speed is unknown, defaulting to 1000 [ 487.111892][ T8817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.144743][ T8817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.179384][T19075] wg1 speed is unknown, defaulting to 1000 [ 487.236983][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 487.286176][ T8829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.300559][ T8829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.561352][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3394'. [ 487.651273][T19104] 9_z speed is unknown, defaulting to 1000 [ 487.960873][T19104] wg1 speed is unknown, defaulting to 1000 [ 488.111906][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 488.220337][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'. [ 488.466443][T19136] 9_z speed is unknown, defaulting to 1000 [ 488.574291][T19136] wg1 speed is unknown, defaulting to 1000 [ 489.598056][T19172] 9_z speed is unknown, defaulting to 1000 [ 489.640541][T19172] wg1 speed is unknown, defaulting to 1000 [ 490.219732][T19200] tipc: Resetting bearer [ 490.415883][T19177] 9_z speed is unknown, defaulting to 1000 [ 490.525210][T19177] wg1 speed is unknown, defaulting to 1000 [ 490.579067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.626244][T19226] macvlan2: entered promiscuous mode [ 490.632493][T19226] bond0: entered promiscuous mode [ 490.646525][T19226] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 490.664439][T19226] macvlan2: entered allmulticast mode [ 490.672912][T19226] bond0: entered allmulticast mode [ 490.681922][T19226] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 490.692146][T19226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 490.706257][T19226] bond0: left allmulticast mode [ 490.713773][T19226] mac80211_hwsim hwsim50 wlan1: left allmulticast mode [ 490.724276][T19226] bond0: left promiscuous mode [ 490.731113][T19226] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 491.308224][T19236] __nla_validate_parse: 2 callbacks suppressed [ 491.308241][T19236] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3502'. [ 491.372636][T19236] netlink: 'syz.4.3502': attribute type 9 has an invalid length. [ 491.400360][T19236] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3502'. [ 491.419482][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'. [ 491.662824][T19267] Bluetooth: MGMT ver 1.23 [ 491.705444][T19268] xt_hashlimit: max too large, truncated to 1048576 [ 491.727705][T19268] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 491.782411][T19268] netlink: 'syz.5.3512': attribute type 4 has an invalid length. [ 491.836509][T19272] netlink: 'syz.5.3512': attribute type 4 has an invalid length. [ 492.160767][T19243] 9_z speed is unknown, defaulting to 1000 [ 492.175834][T19243] wg1 speed is unknown, defaulting to 1000 [ 492.217695][T19288] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 492.258421][T19248] netlink: 'syz.3.3506': attribute type 2 has an invalid length. [ 492.537989][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3521'. [ 492.854397][T19301] netlink: 'syz.2.3519': attribute type 30 has an invalid length. [ 492.923467][T19309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3522'. [ 493.002821][T19309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3522'. [ 493.022786][T19313] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3524'. [ 493.056170][T19309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3522'. [ 493.380094][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3529'. [ 493.551561][T19344] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 493.586793][T19346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3533'. [ 493.612312][T19346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.619628][T19346] IPv6: NLM_F_CREATE should be set when creating new route [ 493.626879][T19346] IPv6: NLM_F_CREATE should be set when creating new route [ 493.956219][T19342] netlink: 'syz.4.3530': attribute type 7 has an invalid length. [ 493.976346][T19342] netlink: 'syz.4.3530': attribute type 8 has an invalid length. [ 494.227075][T19390] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 494.364965][T19396] netlink: 'syz.2.3546': attribute type 1 has an invalid length. [ 494.398144][T19396] erspan0: entered allmulticast mode [ 494.416497][T19396] 8021q: VLANs not supported on sit0 [ 494.733377][T19402] 9_z speed is unknown, defaulting to 1000 [ 494.744721][T19402] wg1 speed is unknown, defaulting to 1000 [ 495.241125][T19423] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 495.264028][T19419] : entered promiscuous mode [ 495.330362][T19430] siw: device registration error -23 [ 495.371371][T19423] bond2: entered promiscuous mode [ 495.377612][T19423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.608535][T19441] vlan2: entered promiscuous mode [ 495.614859][T19441] bond0: entered promiscuous mode [ 495.620759][T19441] bond_slave_0: entered promiscuous mode [ 495.626738][T19441] bond_slave_1: entered promiscuous mode [ 496.112641][T19451] 9_z speed is unknown, defaulting to 1000 [ 496.121661][T19451] wg1 speed is unknown, defaulting to 1000 [ 496.420903][T19477] __nla_validate_parse: 17 callbacks suppressed [ 496.420922][T19477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3574'. [ 496.455640][T19478] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3575'. [ 496.831996][T19490] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3579'. [ 496.888516][T19492] openvswitch: netlink: Key type 528 is out of range max 32 [ 496.961734][T19492] netlink: 'syz.2.3582': attribute type 13 has an invalid length. [ 497.331290][T19508] FAULT_INJECTION: forcing a failure. [ 497.331290][T19508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.403988][T19502] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3580'. [ 497.408852][T19508] CPU: 0 UID: 0 PID: 19508 Comm: syz.2.3584 Not tainted syzkaller #0 PREEMPT(full) [ 497.408877][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.408889][T19508] Call Trace: [ 497.408898][T19508] [ 497.408906][T19508] dump_stack_lvl+0xe8/0x150 [ 497.408942][T19508] should_fail_ex+0x414/0x560 [ 497.408973][T19508] _copy_from_user+0x2d/0xb0 [ 497.408995][T19508] __sys_bpf+0x1e3/0x860 [ 497.409019][T19508] ? __pfx___sys_bpf+0x10/0x10 [ 497.409055][T19508] ? ksys_write+0x22a/0x250 [ 497.409074][T19508] ? __pfx_ksys_write+0x10/0x10 [ 497.409098][T19508] __x64_sys_bpf+0x7c/0x90 [ 497.409118][T19508] do_syscall_64+0xec/0xf80 [ 497.409138][T19508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.409154][T19508] ? trace_irq_disable+0x37/0x100 [ 497.409174][T19508] ? clear_bhb_loop+0x60/0xb0 [ 497.409194][T19508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.409211][T19508] RIP: 0033:0x7fd5ccd8f749 [ 497.409227][T19508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.409241][T19508] RSP: 002b:00007fd5cdc2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.409261][T19508] RAX: ffffffffffffffda RBX: 00007fd5ccfe5fa0 RCX: 00007fd5ccd8f749 [ 497.409274][T19508] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000003 [ 497.409286][T19508] RBP: 00007fd5cdc2a090 R08: 0000000000000000 R09: 0000000000000000 [ 497.409297][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.409306][T19508] R13: 00007fd5ccfe6038 R14: 00007fd5ccfe5fa0 R15: 00007ffddfdf6de8 [ 497.409336][T19508] [ 497.521074][T19516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 497.621031][T19514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.644149][T19515] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3583'. [ 497.654687][T19514] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3586'. [ 497.716713][T19523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3587'. [ 497.767544][T19525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3588'. [ 497.854308][T19525] nbd: socks must be embedded in a SOCK_ITEM attr [ 497.908435][T19533] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3591'. [ 497.920126][T19533] syzkaller0: entered promiscuous mode [ 497.925862][T19533] syzkaller0: entered allmulticast mode [ 498.173543][T19538] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3593'. [ 498.265514][T19543] xt_hashlimit: max too large, truncated to 1048576 [ 498.287256][T19543] xt_bpf: check failed: parse error [ 498.794436][T19569] netlink: 'syz.5.3602': attribute type 1 has an invalid length. [ 498.824820][T19546] 9_z speed is unknown, defaulting to 1000 [ 498.836984][T19570] gretap1: entered allmulticast mode [ 498.850369][T19570] bond1: (slave gretap1): making interface the new active one [ 498.859508][T19570] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 498.880391][T19546] wg1 speed is unknown, defaulting to 1000 [ 499.062831][T19579] syzkaller0: entered promiscuous mode [ 499.077732][T19579] syzkaller0: entered allmulticast mode [ 499.155281][T19585] syz.4.3609 uses old SIOCAX25GETINFO [ 500.315150][T19597] 9_z speed is unknown, defaulting to 1000 [ 500.325291][T19597] wg1 speed is unknown, defaulting to 1000 [ 500.599384][T19623] syzkaller0: entered promiscuous mode [ 500.629642][T19623] syzkaller0: entered allmulticast mode [ 501.018398][T19633] bridge0: entered promiscuous mode [ 501.051022][T19633] bridge0: port 3(macvtap1) entered blocking state [ 501.057785][T19633] bridge0: port 3(macvtap1) entered disabled state [ 501.093745][T19633] macvtap1: entered allmulticast mode [ 501.121415][T19633] bridge0: entered allmulticast mode [ 501.135375][T19633] macvtap1: left allmulticast mode [ 501.145396][T19633] bridge0: left allmulticast mode [ 501.157112][T19633] bridge0: left promiscuous mode [ 501.790819][T19640] 9_z speed is unknown, defaulting to 1000 [ 501.811795][T19640] wg1 speed is unknown, defaulting to 1000 [ 501.990733][T19663] netlink: 'syz.5.3631': attribute type 13 has an invalid length. [ 502.291175][T19655] 9_z speed is unknown, defaulting to 1000 [ 502.327655][T19655] wg1 speed is unknown, defaulting to 1000 [ 502.963896][T19674] syzkaller0: entered promiscuous mode [ 502.971692][T19674] syzkaller0: entered allmulticast mode [ 503.202876][T19680] tipc: Started in network mode [ 503.207786][T19680] tipc: Node identity 0eb896817465, cluster identity 4711 [ 503.234126][T19680] tipc: Enabled bearer , priority 0 [ 503.250133][T19680] syzkaller0: entered promiscuous mode [ 503.255806][T19680] syzkaller0: entered allmulticast mode [ 503.304449][T19690] __nla_validate_parse: 8 callbacks suppressed [ 503.304466][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3642'. [ 503.376013][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3642'. [ 503.386676][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3642'. [ 503.494486][T19698] tipc: Resetting bearer [ 503.567330][T19703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3643'. [ 503.675911][T19698] tipc: Disabling bearer [ 503.720391][T19707] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3645'. [ 503.785781][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3646'. [ 503.991219][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3649'. [ 504.011587][T19717] netlink: 'syz.2.3649': attribute type 30 has an invalid length. [ 504.032062][T19715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3647'. [ 504.049936][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3649'. [ 504.064932][T19715] ipvlan2: entered promiscuous mode [ 504.071426][T19717] netlink: 'syz.2.3649': attribute type 30 has an invalid length. [ 504.083755][T19720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3647'. [ 504.097722][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.169818][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.181785][ T30] audit: type=1800 audit(1768878102.101:6): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3648" name="blkio.bfq.time_recursive" dev="tmpfs" ino=236 res=0 errno=0 [ 504.221230][T19720] ipvlan3: entered promiscuous mode [ 504.229380][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.246793][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.746148][T19753] veth5: entered allmulticast mode [ 504.985046][T19743] 9_z speed is unknown, defaulting to 1000 [ 504.994125][T19743] wg1 speed is unknown, defaulting to 1000 [ 506.082716][T19800] syzkaller1: entered promiscuous mode [ 506.117971][T19800] syzkaller1: entered allmulticast mode [ 506.189204][T19810] pimreg3: entered allmulticast mode [ 506.341407][T19793] 9_z speed is unknown, defaulting to 1000 [ 506.366020][T19793] wg1 speed is unknown, defaulting to 1000 [ 506.667735][T19820] netlink: 'syz.2.3675': attribute type 21 has an invalid length. [ 506.919804][T19835] bond2: entered promiscuous mode [ 506.943693][T19837] macvlan2: entered promiscuous mode [ 506.959385][T19837] macvlan2: entered allmulticast mode [ 507.074153][T19830] 9_z speed is unknown, defaulting to 1000 [ 507.095264][T19830] wg1 speed is unknown, defaulting to 1000 [ 507.474173][T19852] bridge2: entered promiscuous mode [ 507.490322][T19852] bridge2: entered allmulticast mode [ 507.507180][T19852] team0: Port device bridge2 added [ 507.576542][T19855] bridge0: port 3(team0) entered blocking state [ 507.599399][T19855] bridge0: port 3(team0) entered disabled state [ 507.617262][T19855] team0: entered allmulticast mode [ 507.636738][T19855] team_slave_0: entered allmulticast mode [ 507.655525][T19855] team_slave_1: entered allmulticast mode [ 507.694442][T19855] team0: entered promiscuous mode [ 507.702037][T19855] team_slave_0: entered promiscuous mode [ 507.716148][T19855] team_slave_1: entered promiscuous mode [ 507.736884][T19855] bridge0: port 3(team0) entered blocking state [ 507.743942][T19855] bridge0: port 3(team0) entered forwarding state [ 508.039526][T19875] x_tables: unsorted underflow at hook 2 [ 508.539111][T19904] __nla_validate_parse: 22 callbacks suppressed [ 508.539131][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3701'. [ 508.588483][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3701'. [ 508.615395][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3699'. [ 508.644389][T19907] sit0: entered promiscuous mode [ 508.659755][T19907] sit0: entered allmulticast mode [ 508.693373][T19877] 9_z speed is unknown, defaulting to 1000 [ 508.765259][T19877] wg1 speed is unknown, defaulting to 1000 [ 509.042272][T19932] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3709'. [ 509.452627][T19954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3714'. [ 509.732629][T19967] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3717'. [ 509.966763][T19983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3721'. [ 509.970860][T19976] netlink: 'syz.3.3720': attribute type 2 has an invalid length. [ 510.022285][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3721'. [ 510.023378][T19976] : entered promiscuous mode [ 510.033416][T19988] netlink: 'syz.3.3720': attribute type 2 has an invalid length. [ 510.108452][T19988] : left promiscuous mode [ 510.353588][T19999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3728'. [ 510.364347][T20000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3728'. [ 510.402120][T19999] bond0: (slave rose0): Error: Device can not be enslaved while up [ 510.416766][T20000] bond0: (slave rose0): Error: Device can not be enslaved while up [ 510.436933][T19977] 9_z speed is unknown, defaulting to 1000 [ 510.445247][T19977] wg1 speed is unknown, defaulting to 1000 [ 510.480056][T20000] netlink: 'syz.3.3728': attribute type 2 has an invalid length. [ 510.495497][T20002] netlink: 'syz.3.3728': attribute type 2 has an invalid length. [ 510.512151][T20000] !9: entered promiscuous mode [ 510.643383][T20005] netlink: 'syz.3.3729': attribute type 10 has an invalid length. [ 510.897900][T19989] 9_z speed is unknown, defaulting to 1000 [ 510.915755][T19989] wg1 speed is unknown, defaulting to 1000 [ 510.923444][T19979] 9_z speed is unknown, defaulting to 1000 [ 510.988516][T19979] wg1 speed is unknown, defaulting to 1000 [ 511.453796][T20020] xt_hashlimit: max too large, truncated to 1048576 [ 511.697511][T20035] netlink: 'syz.5.3738': attribute type 10 has an invalid length. [ 511.705694][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.968326][T20035] veth0_vlan: left promiscuous mode [ 511.986435][T20035] veth0_vlan: entered promiscuous mode [ 512.010751][T20035] team0: Device veth0_vlan failed to register rx_handler [ 512.333055][T20056] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:19488 [ 512.792234][T20094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.880063][T20060] 9_z speed is unknown, defaulting to 1000 [ 512.908612][T20060] wg1 speed is unknown, defaulting to 1000 [ 513.463235][T20077] 9_z speed is unknown, defaulting to 1000 [ 513.910590][T20089] 9_z speed is unknown, defaulting to 1000 [ 513.930046][T20077] wg1 speed is unknown, defaulting to 1000 [ 513.978309][T20089] wg1 speed is unknown, defaulting to 1000 [ 514.169534][T20126] x9: renamed from bridge_slave_0 (while UP) [ 514.222560][T20129] __nla_validate_parse: 4 callbacks suppressed [ 514.222579][T20129] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3764'. [ 514.735412][T20133] netlink: 'syz.2.3765': attribute type 3 has an invalid length. [ 514.744670][T20133] netlink: 'syz.2.3765': attribute type 1 has an invalid length. [ 514.753862][T20133] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3765'. [ 514.893789][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'. [ 514.910844][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'. [ 515.015551][T20106] 9_z speed is unknown, defaulting to 1000 [ 515.127650][T20106] wg1 speed is unknown, defaulting to 1000 [ 515.232962][T20140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3767'. [ 515.325706][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3767'. [ 515.386028][T20140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3767'. [ 515.457316][T20140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3767'. [ 515.727990][T20150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3770'. [ 515.987645][T20157] pim6reg: entered allmulticast mode [ 516.144048][T20162] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 516.185162][T20162] bond3 (unregistering): Released all slaves [ 516.370457][T20186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3779'. [ 516.738530][T20207] netlink: 'syz.5.3788': attribute type 1 has an invalid length. [ 516.783015][T20207] netlink: 'syz.5.3788': attribute type 2 has an invalid length. [ 516.797853][T20183] 9_z speed is unknown, defaulting to 1000 [ 516.819312][T20183] wg1 speed is unknown, defaulting to 1000 [ 516.826226][T20212] xt_TCPMSS: Only works on TCP SYN packets [ 516.850746][T20207] netlink: 'syz.5.3788': attribute type 1 has an invalid length. [ 517.563598][T20229] tipc: Failed to obtain node identity [ 517.571868][T20229] tipc: Enabling of bearer rejected, failed to enable media [ 517.920595][T20248] : renamed from wg2 (while UP) [ 518.249377][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.314966][T20270] veth0_to_bridge: entered promiscuous mode [ 518.354200][T20269] veth0_to_bridge: left promiscuous mode [ 518.792003][T20301] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 518.890363][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 519.142675][T20324] team0: entered promiscuous mode [ 519.157928][T20324] team0: entered allmulticast mode [ 519.180892][T20324] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.221223][T20329] netlink: 'syz.3.3830': attribute type 6 has an invalid length. [ 519.252293][T20324] __nla_validate_parse: 15 callbacks suppressed [ 519.252310][T20324] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3828'. [ 519.264453][T20327] team1: entered promiscuous mode [ 519.289871][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.311529][T20327] team1: entered allmulticast mode [ 519.328307][T20327] 8021q: adding VLAN 0 to HW filter on device team1 [ 519.640360][T20341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3834'. [ 519.747531][T20344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3835'. [ 519.769606][T20341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3834'. [ 519.793549][T20341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3834'. [ 520.276553][T20337] bond2: left promiscuous mode [ 520.329974][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.347215][ T8812] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.376502][ T8812] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.399763][ T8812] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.430429][ T8812] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.478356][T20348] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3836'. [ 520.527740][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 520.653251][ T8827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.664316][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.675838][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.761329][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'. [ 520.840334][T20375] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 520.853662][T20367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3843'. [ 521.182721][T20367] 9_z speed is unknown, defaulting to 1000 [ 521.193495][T20367] wg1 speed is unknown, defaulting to 1000 [ 521.261631][T20384] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3849'. [ 521.290725][ T8812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.302200][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.313447][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.849913][T20418] syzkaller0: entered promiscuous mode [ 521.863720][T20418] syzkaller0: entered allmulticast mode [ 522.334633][T20433] bond1: option all_slaves_active: invalid value (13) [ 522.432327][T20433] bond1 (unregistering): Released all slaves [ 522.830864][T20465] syzkaller0: entered promiscuous mode [ 522.838730][T20465] syzkaller0: entered allmulticast mode [ 523.403720][ T8815] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.414599][ T8815] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.436773][ T8815] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.461293][ T10] net_ratelimit: 5 callbacks suppressed [ 523.461311][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.506901][T20496] pim6reg1: entered promiscuous mode [ 523.520560][T20496] pim6reg1: entered allmulticast mode [ 523.542631][ T8815] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.645318][T20509] tipc: Started in network mode [ 523.651489][T20509] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 523.669438][T20509] tipc: Enabling of bearer rejected, failed to enable media [ 523.771350][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.846546][ T30] audit: type=1804 audit(1768878121.771:7): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3885" name="/newroot/180/cgroup.controllers" dev="tmpfs" ino=937 res=1 errno=0 [ 523.899991][ T30] audit: type=1800 audit(1768878121.771:8): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3885" name="cgroup.controllers" dev="tmpfs" ino=937 res=0 errno=0 [ 524.103179][T20526] syzkaller0: entered promiscuous mode [ 524.132729][T20526] syzkaller0: entered allmulticast mode [ 524.375886][T20538] __nla_validate_parse: 10 callbacks suppressed [ 524.375905][T20538] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3891'. [ 524.489310][T19117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.496286][T20538] sctp: [Deprecated]: syz.0.3891 (pid 20538) Use of int in max_burst socket option deprecated. [ 524.496286][T20538] Use struct sctp_assoc_value instead [ 524.552971][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3893'. [ 524.690369][T20534] 9_z speed is unknown, defaulting to 1000 [ 524.692895][T20550] raw_sendmsg: syz.2.3895 forgot to set AF_INET. Fix it! [ 524.705188][T20534] wg1 speed is unknown, defaulting to 1000 [ 524.712034][T20543] smc: removing ib device !yz! [ 525.555462][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.770784][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.780622][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.790681][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.956602][T20579] batman_adv: batadv0: Adding interface: geneve2 [ 525.999206][T20579] batman_adv: batadv0: The MTU of interface geneve2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.048128][T20579] batman_adv: batadv0: Interface activated: geneve2 [ 526.059706][T20585] geneve0: entered promiscuous mode [ 526.159173][T20592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3908'. [ 526.587683][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.951433][T20604] 9_z speed is unknown, defaulting to 1000 [ 527.050040][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.060634][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.144332][T20604] wg1 speed is unknown, defaulting to 1000 [ 527.807937][T20653] 9_z speed is unknown, defaulting to 1000 [ 527.899293][T20653] wg1 speed is unknown, defaulting to 1000 [ 528.066497][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 528.087634][T20656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3920'. [ 528.654760][ T10] net_ratelimit: 2 callbacks suppressed [ 528.654780][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.813126][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.834919][T20663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3922'. [ 528.889200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.955982][T20663] bond0: entered promiscuous mode [ 528.983404][T20663] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 529.321148][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3923'. [ 529.527551][T20671] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3925'. [ 529.700575][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.893749][T20683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3928'. [ 530.053451][T20693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3931'. [ 530.372912][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 530.445539][T20710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3937'. [ 530.532663][T20714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3939'. [ 530.606248][T20718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'. [ 530.663166][T20714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.729355][T19117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.758559][T20718] bond3: entered allmulticast mode [ 530.820096][T20725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3942'. [ 530.916951][T20727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3943'. [ 531.194498][T20752] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 531.544107][ T8811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.558039][T19117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.676611][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.772015][T20778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3956'. [ 531.777284][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.898636][T20784] 8021q: VLANs not supported on ip6tnl0 [ 532.237209][T20801] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 532.941544][T20838] netlink: 'syz.0.3975': attribute type 18 has an invalid length. [ 533.261858][T20859] SET target dimension over the limit! [ 533.281613][T20850] syzkaller0: entered promiscuous mode [ 533.287322][T20850] syzkaller0: entered allmulticast mode [ 533.296586][T20859] @0: renamed from dummy0 [ 533.856004][ T843] net_ratelimit: 7 callbacks suppressed [ 533.856022][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.730074][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.891962][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.563014][T20861] 9_z speed is unknown, defaulting to 1000 [ 535.573175][T20861] wg1 speed is unknown, defaulting to 1000 [ 535.677727][T20897] delete_channel: no stack [ 535.680682][T20899] __nla_validate_parse: 14 callbacks suppressed [ 535.680698][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3990'. [ 535.805143][T20910] netlink: 'syz.0.3991': attribute type 11 has an invalid length. [ 535.813442][T20910] netlink: 'syz.0.3991': attribute type 11 has an invalid length. [ 535.822000][T20910] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3991'. [ 535.873102][T20915] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 535.939481][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.961786][T20919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3992'. [ 535.983576][T20919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3992'. [ 535.994385][T20910] netlink: 'syz.0.3991': attribute type 3 has an invalid length. [ 536.070570][T20925] netlink: 'syz.4.3995': attribute type 10 has an invalid length. [ 536.111050][T20925] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3995'. [ 536.133943][T20927] nbd: must specify a size in bytes for the device [ 536.148347][T20930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3997'. [ 536.312298][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4001'. [ 536.389920][T20944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'. [ 536.400667][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4003'. [ 536.497700][T20951] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4007'. [ 536.561345][T20954] syzkaller0: entered allmulticast mode [ 536.603939][T20957] openvswitch: netlink: IP tunnel dst address not specified [ 536.631828][T20957] Cannot find add_set index 0 as target [ 536.652083][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.751469][T20963] 9_z speed is unknown, defaulting to 1000 [ 536.761696][T20963] wg1 speed is unknown, defaulting to 1000 [ 536.856802][T20969] syzkaller0: entered promiscuous mode [ 536.869192][T20969] syzkaller0: entered allmulticast mode [ 536.969492][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.084333][T20979] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 537.209255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.480380][T20993] tipc: Enabled bearer , priority 0 [ 537.488463][T20991] tipc: Resetting bearer [ 537.505072][T20989] syzkaller0: entered promiscuous mode [ 537.511469][T20989] syzkaller0: entered allmulticast mode [ 537.770470][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.833721][T21004] hsr0: entered promiscuous mode [ 537.981447][T21008] syzkaller0: entered promiscuous mode [ 538.008044][T21008] syzkaller0: entered allmulticast mode [ 538.141686][T21008] macsec2: entered promiscuous mode [ 538.172309][T21008] macsec2: entered allmulticast mode [ 538.617800][ T10] tipc: Node number set to 4269801494 [ 539.005302][T21061] 9_z speed is unknown, defaulting to 1000 [ 539.093388][T21072] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 539.107701][T21072] bond4 (unregistering): Released all slaves [ 539.130486][ T843] net_ratelimit: 2 callbacks suppressed [ 539.130504][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.144738][T21061] wg1 speed is unknown, defaulting to 1000 [ 539.269080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.381244][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 539.498004][T21099] 9_z speed is unknown, defaulting to 1000 [ 539.557448][T21106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.578437][T21106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.600104][T21106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.613137][T21106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.673398][T21099] wg1 speed is unknown, defaulting to 1000 [ 540.136608][T21132] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 540.174220][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.454013][T21153] ipip0: entered promiscuous mode [ 540.469328][T21153] ipip0: entered allmulticast mode [ 540.492079][T21157] netlink: 'syz.4.4064': attribute type 2 has an invalid length. [ 540.533849][T21157] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 540.699451][T21178] netlink: 'syz.4.4069': attribute type 4 has an invalid length. [ 540.877221][T21186] 9_z speed is unknown, defaulting to 1000 [ 540.890662][T21189] __nla_validate_parse: 32 callbacks suppressed [ 540.890746][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4073'. [ 540.931482][T21186] wg1 speed is unknown, defaulting to 1000 [ 541.025520][T21196] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 541.048121][T21202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4076'. [ 541.262046][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4078'. [ 541.293273][T21211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4078'. [ 541.840763][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 541.887700][T21254] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4091'. [ 541.970568][T21261] syz_tun: entered allmulticast mode [ 542.005024][T21264] sctp: [Deprecated]: syz.2.4094 (pid 21264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.005024][T21264] Use struct sctp_sack_info instead [ 542.035237][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4093'. [ 542.168170][ T30] audit: type=1800 audit(1768878140.091:9): pid=21272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4095" name="memory.events" dev="tmpfs" ino=1128 res=0 errno=0 [ 542.190811][T21261] syz_tun (unregistering): left allmulticast mode [ 542.215227][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4098'. [ 542.262329][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4099'. [ 542.307772][T21277] 9_z speed is unknown, defaulting to 1000 [ 542.338471][T21282] lo: entered promiscuous mode [ 542.356974][T21277] wg1 speed is unknown, defaulting to 1000 [ 542.444891][T21290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4102'. [ 542.561087][T21293] bridge0: entered promiscuous mode [ 542.583287][T21293] macvtap1: entered promiscuous mode [ 542.594897][T21293] macvtap1: entered allmulticast mode [ 542.604603][T21293] bridge0: entered allmulticast mode [ 542.613205][T21293] bridge0: port 4(macvtap1) entered blocking state [ 542.621698][T21293] bridge0: port 4(macvtap1) entered disabled state [ 542.633349][T21293] bridge0: left allmulticast mode [ 542.640406][T21293] bridge0: left promiscuous mode [ 542.726361][T21297] batadv1: entered promiscuous mode [ 542.754912][T21297] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 543.447204][T21337] syzkaller0: entered promiscuous mode [ 543.460767][T21337] syzkaller0: entered allmulticast mode [ 543.494405][T21345] tipc: Resetting bearer [ 543.547473][T21344] tipc: Resetting bearer [ 543.737122][T21353] netlink: 'syz.0.4121': attribute type 12 has an invalid length. [ 543.745471][T21353] netlink: 'syz.0.4121': attribute type 29 has an invalid length. [ 543.806398][T21327] 9_z speed is unknown, defaulting to 1000 [ 543.832966][T21327] wg1 speed is unknown, defaulting to 1000 [ 543.953105][ T996] tipc: Resetting bearer [ 544.043450][T21361] ip6_vti0: entered promiscuous mode [ 544.049159][T21361] ip6_vti0: entered allmulticast mode [ 544.435132][T21376] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 544.448231][T21376] team0: Device ipvlan4 is already an upper device of the team interface [ 544.462894][T21380] openvswitch: netlink: IP tunnel TTL not specified. [ 544.575886][T21382] IPVS: Scheduler module ip_vs_ not found [ 544.611670][T21378] netlink: 'syz.2.4129': attribute type 1 has an invalid length. [ 544.904473][T21392] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 544.924366][T21389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.868199][T21459] bridge_slave_1: left allmulticast mode [ 545.875635][T21459] bridge_slave_1: left promiscuous mode [ 545.884711][T21459] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.897799][T21459] bridge_slave_1: entered promiscuous mode [ 545.905076][T21459] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 546.002842][T21474] netlink: zone id is out of range [ 546.011514][T21474] netlink: zone id is out of range [ 546.017164][T21474] netlink: zone id is out of range [ 546.023658][T21474] netlink: zone id is out of range [ 546.030420][T21474] netlink: zone id is out of range [ 546.036097][T21474] netlink: zone id is out of range [ 546.042479][T21474] netlink: zone id is out of range [ 546.048394][T21474] netlink: zone id is out of range [ 546.054753][T21474] netlink: zone id is out of range [ 546.782965][T21510] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 546.783541][T21507] IPVS: stopping backup sync thread 21510 ... [ 546.866524][T21507] __nla_validate_parse: 22 callbacks suppressed [ 546.866542][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 546.904379][T21512] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4162'. [ 546.945665][T21514] siw: device registration error -23 [ 547.310254][T21553] mac80211_hwsim hwsim49 ;: renamed from wlan0 [ 547.323347][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4170'. [ 547.422195][T21553] 9_z speed is unknown, defaulting to 1000 [ 547.454986][T21553] wg1 speed is unknown, defaulting to 1000 [ 547.551030][T21566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4177'. [ 547.566647][T21561] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 547.605178][T21566] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4177'. [ 547.992939][T21595] netlink: 'syz.5.4183': attribute type 2 has an invalid length. [ 548.120644][T21608] netlink: 'syz.5.4183': attribute type 2 has an invalid length. [ 548.177868][T21611] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4186'. [ 548.206603][T21595] !9: entered promiscuous mode [ 548.219901][T21608] !9: left promiscuous mode [ 548.233230][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4186'. [ 548.245533][T21610] netlink: 'syz.3.4189': attribute type 10 has an invalid length. [ 548.264171][T21613] tipc: Resetting bearer [ 548.283785][T21610] team0: Failed to send options change via netlink (err -105) [ 548.296901][T21617] netlink: 'syz.3.4189': attribute type 10 has an invalid length. [ 548.297257][T21610] team0: Port device dummy0 added [ 548.325713][T21618] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4191'. [ 548.363082][T21617] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 548.388108][T21617] team0: Failed to send options change via netlink (err -105) [ 548.417204][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 548.427978][T21617] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 548.439928][T21617] team0: Port device dummy0 removed [ 548.449704][T21617] dummy0: entered promiscuous mode [ 548.455563][T21617] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 548.465714][T21616] veth0_to_bridge: entered allmulticast mode [ 548.546992][T21622] bond0: (slave rose0): Error: Device can not be enslaved while up [ 548.665893][T21625] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4194'. [ 548.693540][T21612] tipc: Resetting bearer [ 548.841034][ T8829] tipc: Resetting bearer [ 550.205145][T21718] xt_hashlimit: max too large, truncated to 1048576 [ 550.216487][T21718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 550.235801][T21717] netlink: 'syz.3.4217': attribute type 12 has an invalid length. [ 550.555077][T21726] syzkaller0: entered promiscuous mode [ 550.566215][T21726] syzkaller0: entered allmulticast mode [ 550.587003][T21730] netlink: 'syz.0.4226': attribute type 25 has an invalid length. [ 550.709215][T21734] netlink: 'syz.5.4227': attribute type 13 has an invalid length. [ 550.717223][ T30] audit: type=1800 audit(1768878148.641:10): pid=21736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4228" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1324 res=0 errno=0 [ 550.746903][ T30] audit: type=1804 audit(1768878148.641:11): pid=21736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4228" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1324 res=1 errno=0 [ 550.825833][T21743] netlink: 'syz.2.4231': attribute type 1 has an invalid length. [ 551.200707][T21774] net_ratelimit: 2 callbacks suppressed [ 551.200725][T21774] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 551.315964][T21768] 9_z speed is unknown, defaulting to 1000 [ 551.336406][T21768] wg1 speed is unknown, defaulting to 1000 [ 551.616391][T21797] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 551.750283][T21800] netlink: 'syz.2.4246': attribute type 4 has an invalid length. [ 551.765635][T21800] netlink: 'syz.2.4246': attribute type 4 has an invalid length. [ 551.843247][T21800] 9_z speed is unknown, defaulting to 1000 [ 551.881405][T21800] wg1 speed is unknown, defaulting to 1000 [ 552.016211][T21808] bond0: (slave rose0): Error: Device can not be enslaved while up [ 552.252515][T21812] tipc: Resetting bearer [ 552.302568][T21821] __nla_validate_parse: 43 callbacks suppressed [ 552.302586][T21821] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4251'. [ 552.395222][T21812] tipc: Resetting bearer [ 552.701861][T21842] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4257'. [ 552.756020][T21845] bridge_slave_1: mtu less than device minimum [ 552.764566][T21844] xt_CT: No such helper "pptp" [ 552.972554][ T8829] tipc: Resetting bearer [ 553.016678][T21865] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4262'. [ 553.202086][T21869] 9_z speed is unknown, defaulting to 1000 [ 553.213302][T21869] wg1 speed is unknown, defaulting to 1000 [ 553.247541][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4265'. [ 553.302425][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4265'. [ 553.345019][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4265'. [ 553.402644][T21849] 9_z speed is unknown, defaulting to 1000 [ 553.411696][T21849] wg1 speed is unknown, defaulting to 1000 [ 553.546877][T21884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4267'. [ 553.990579][T21895] 9_z speed is unknown, defaulting to 1000 [ 554.003089][T21895] wg1 speed is unknown, defaulting to 1000 [ 554.151540][T21909] tipc: Resetting bearer [ 554.305107][T21909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4273'. [ 554.357925][T21909] tipc: Resetting bearer [ 554.421376][T21917] syzkaller0: entered allmulticast mode [ 554.521032][T21924] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4276'. [ 555.083465][T21933] netlink: 'syz.0.4278': attribute type 49 has an invalid length. [ 555.178063][T21934] 9_z speed is unknown, defaulting to 1000 [ 555.201523][T21934] wg1 speed is unknown, defaulting to 1000 [ 555.305142][ T5842] Bluetooth: hci4: command tx timeout [ 555.331448][ T50] tipc: Resetting bearer [ 556.634014][T21963] xt_TCPMSS: Only works on TCP SYN packets [ 556.933641][T21975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4290'. [ 557.262197][T21981] netlink: 'syz.5.4294': attribute type 5 has an invalid length. [ 557.353077][T21985] __nla_validate_parse: 3 callbacks suppressed [ 557.353096][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4295'. [ 557.595535][T21996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4299'. [ 557.636718][T21996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4299'. [ 557.676591][T21999] 9_z speed is unknown, defaulting to 1000 [ 557.687008][T21999] wg1 speed is unknown, defaulting to 1000 [ 557.890761][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4302'. [ 558.644210][T22025] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4307'. [ 559.041919][T22035] netlink: 'syz.4.4310': attribute type 10 has an invalid length. [ 559.061318][T22035] bond0: (slave wlan1): Opening slave failed [ 559.068083][T22041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4312'. [ 559.119411][T22041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4312'. [ 559.277645][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 559.445133][T22058] tipc: Resetting bearer [ 559.487894][T22058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4316'. [ 559.574581][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4317'. [ 559.637175][T22063] netlink: 'syz.2.4318': attribute type 2 has an invalid length. [ 559.652685][T22057] tipc: Resetting bearer [ 559.860906][T22074] syz_tun: entered allmulticast mode [ 560.002748][T22074] dvmrp8: entered allmulticast mode [ 560.022362][T22073] syz_tun: left allmulticast mode [ 561.102292][T22114] x_tables: duplicate underflow at hook 3 [ 562.902154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.316664][ T36] tipc: Resetting bearer [ 564.563796][T22128] __nla_validate_parse: 6 callbacks suppressed [ 564.563814][T22128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4336'. [ 564.630784][T22128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4336'. [ 564.733718][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4341'. [ 564.765943][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4342'. [ 564.790651][ T75] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 564.791967][T22140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4342'. [ 564.872385][T22147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4343'. [ 565.002633][ T75] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 565.136915][ T75] bond9 (unregistering): (slave gretap0): Releasing active interface [ 565.145792][ T75] gretap0 (unregistering): left allmulticast mode [ 565.204948][ T75] dvmrp6 (unregistering): left allmulticast mode [ 565.654330][ T75] bond0 (unregistering): Released all slaves [ 565.667012][ T75] bond1 (unregistering): Released all slaves [ 565.792053][ T75] bond2 (unregistering): (slave bond3): Releasing backup interface [ 565.800595][ T75] bond3 (unregistering): left promiscuous mode [ 565.807086][ T75] bond2 (unregistering): Released all slaves [ 565.921158][ T75] bond3 (unregistering): Released all slaves [ 565.933674][ T75] bond4 (unregistering): Released all slaves [ 565.947385][ T75] bond5 (unregistering): Released all slaves [ 566.067359][ T75] bond6 (unregistering): Released all slaves [ 566.186706][ T75] bond7 (unregistering): Released all slaves [ 566.200826][ T75] bond8 (unregistering): Released all slaves [ 566.213359][ T75] bond9 (unregistering): Released all slaves [ 566.332473][ T75] bond10 (unregistering): Released all slaves [ 566.345110][ T75] bond11 (unregistering): Released all slaves [ 566.463732][ T75] bond12 (unregistering): Released all slaves [ 566.582586][ T75] bond13 (unregistering): Released all slaves [ 566.697376][ T75] bond14 (unregistering): Released all slaves [ 566.710338][ T75] bond15 (unregistering): Released all slaves [ 566.955418][T22161] syzkaller0: entered promiscuous mode [ 566.961440][T22161] syzkaller0: entered allmulticast mode [ 568.648286][ T75] tipc: Disabling bearer [ 568.660163][ T75] tipc: Left network mode [ 568.730590][T22171] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4348'. [ 568.872346][T22179] bond0: left promiscuous mode [ 568.872807][T22189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4352'. [ 568.877325][T22179] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 568.900145][T22179] dummy0: left promiscuous mode [ 568.913051][T22179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.927283][T22179] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.945329][T22179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.093052][T22193] netlink: 'syz.0.4353': attribute type 39 has an invalid length. [ 569.183890][T22194] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.195118][T22194] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.305232][T22194] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.366800][T22204] xt_policy: too many policy elements [ 569.373539][T22194] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.485553][T22194] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.546514][T22194] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.696225][T22194] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.728949][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4359'. [ 569.749609][T22194] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.881082][T22215] Bluetooth: MGMT ver 1.23 [ 569.928552][ T8818] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.951165][ T8818] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.150154][ T8818] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.158375][ T8818] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.207459][ T8829] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.216636][ T8829] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.267320][ T8829] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.276821][ T8829] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.306359][T22234] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 570.336204][T22229] 9_z speed is unknown, defaulting to 1000 [ 570.360196][T22229] wg1 speed is unknown, defaulting to 1000 [ 570.455981][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 570.620798][ T75] hsr_slave_0: left promiscuous mode [ 570.640154][ T75] hsr_slave_1: left promiscuous mode [ 571.962875][T22250] 9_z speed is unknown, defaulting to 1000 [ 571.971921][T22250] wg1 speed is unknown, defaulting to 1000 [ 572.022347][T22269] netlink: 'syz.4.4372': attribute type 4 has an invalid length. [ 572.069212][T22268] netlink: 8420 bytes leftover after parsing attributes in process `syz.3.4371'. [ 572.076951][T22270] netlink: 'syz.4.4372': attribute type 4 has an invalid length. [ 572.247051][T22275] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4374'. [ 572.352482][T22282] netlink: 'syz.0.4376': attribute type 1 has an invalid length. [ 572.373428][T22282] netlink: 'syz.0.4376': attribute type 2 has an invalid length. [ 572.382537][T22282] netlink: 'syz.0.4376': attribute type 1 has an invalid length. [ 572.392725][T22282] netlink: 'syz.0.4376': attribute type 3 has an invalid length. [ 572.400640][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4376'. [ 572.431757][T22270] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.439477][T22270] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.504051][T22291] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4375'. [ 572.565563][T22296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4375'. [ 572.803673][ T8828] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.828195][ T8828] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 572.846551][T22300] syzkaller1: entered promiscuous mode [ 572.852663][T22300] syzkaller1: entered allmulticast mode [ 572.895279][ T8828] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.905558][ T8828] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 572.940131][ T8828] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.956121][ T8828] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 572.979987][ T8828] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.000168][ T8828] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 573.025970][ T75] IPVS: stop unused estimator thread 0... [ 573.044969][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 573.068177][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 573.078638][T22302] 9_z speed is unknown, defaulting to 1000 [ 573.091018][T22302] wg1 speed is unknown, defaulting to 1000 [ 573.277015][T22320] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4383'. [ 573.957927][ T75] bond4 (unregistering): (slave gretap1): Releasing active interface [ 573.983807][ T75] bond5 (unregistering): (slave gretap2): Releasing active interface [ 574.047293][ T75] dvmrp0 (unregistering): left allmulticast mode [ 574.272732][ T75] team0: Port device bridge0 removed [ 574.422412][ T75] bond0 (unregistering): left promiscuous mode [ 574.428617][ T75] bond_slave_0: left promiscuous mode [ 574.434923][ T75] bond_slave_1: left promiscuous mode [ 574.440862][ T75] dummy0: left promiscuous mode [ 574.463056][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.474046][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.484654][ T75] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 574.496443][ T75] bond0 (unregistering): Released all slaves [ 574.510826][ T75] bond1 (unregistering): Released all slaves [ 574.523566][ T75] bond2 (unregistering): Released all slaves [ 574.535831][ T75] bond3 (unregistering): Released all slaves [ 574.656015][ T75] bond4 (unregistering): Released all slaves [ 574.671155][ T75] bond5 (unregistering): Released all slaves [ 574.786224][ T75] bond6 (unregistering): Released all slaves [ 574.944548][ T75] tipc: Disabling bearer [ 574.967552][ T75] tipc: Left network mode [ 575.000876][T22352] lo: entered promiscuous mode [ 575.006338][T22352] tunl0: entered promiscuous mode [ 575.013656][T22353] netlink: 'syz.3.4387': attribute type 1 has an invalid length. [ 575.023254][T22353] __nla_validate_parse: 1 callbacks suppressed [ 575.023272][T22353] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4387'. [ 575.040580][T22352] gre0: entered promiscuous mode [ 575.046103][T22352] gretap0: entered promiscuous mode [ 575.056080][T22352] erspan0: entered promiscuous mode [ 575.066718][T22352] ip_vti0: entered promiscuous mode [ 575.074910][T22352] ip6_vti0: entered promiscuous mode [ 575.082439][T22352] sit0: entered promiscuous mode [ 575.093525][T22352] ip6tnl0: entered promiscuous mode [ 575.100250][T22352] ip6gre0: entered promiscuous mode [ 575.107454][T22352] ip6gretap0: entered promiscuous mode [ 575.111294][T22358] Cannot find add_set index 3 as target [ 575.114357][T22352] bridge0: entered promiscuous mode [ 575.135004][T22352] bond0: entered promiscuous mode [ 575.140928][T22352] bond_slave_0: entered promiscuous mode [ 575.143341][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4389'. [ 575.146784][T22352] bond_slave_1: entered promiscuous mode [ 575.173975][T22352] dummy0: entered promiscuous mode [ 575.181592][T22352] nlmon0: entered promiscuous mode [ 575.188080][T22352] caif0: entered promiscuous mode [ 575.193469][T22352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.486933][T22374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.494474][T22374] IPv6: NLM_F_CREATE should be set when creating new route [ 575.501736][T22374] IPv6: NLM_F_CREATE should be set when creating new route [ 575.639366][T22382] netlink: 'syz.4.4396': attribute type 7 has an invalid length. [ 575.766892][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4398'. [ 575.795484][T22391] netlink: 7076 bytes leftover after parsing attributes in process `syz.4.4398'. [ 575.990069][T22402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4401'. [ 576.010513][T22404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4400'. [ 576.097477][T22402] veth9: entered promiscuous mode [ 576.477677][ T75] hsr_slave_0: left promiscuous mode [ 576.492335][ T75] hsr_slave_1: left promiscuous mode [ 576.516735][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.552776][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.034504][ T75] pim6reg (unregistering): left allmulticast mode [ 577.313701][T22430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4406'. [ 577.804500][T22415] tc_dump_action: action bad kind [ 577.996569][T22443] Cannot find del_set index 3 as target [ 578.051578][T22440] tipc: Started in network mode [ 578.056780][T22440] tipc: Node identity a29d9eeb179f, cluster identity 4711 [ 578.065982][T22440] tipc: Enabled bearer , priority 0 [ 578.177543][T22446] bond3: Unable to set down delay as MII monitoring is disabled [ 578.194386][T22446] bond3 (unregistering): Released all slaves [ 578.225487][T22451] netlink: 'syz.0.4410': attribute type 13 has an invalid length. [ 578.261035][T22443] syzkaller0: entered promiscuous mode [ 578.266832][T22443] syzkaller0: entered allmulticast mode [ 578.310256][T22440] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4408'. [ 578.320768][T22448] Cannot find del_set index 4 as target [ 578.377614][T22443] tipc: Resetting bearer [ 578.384200][ T75] IPVS: stop unused estimator thread 0... [ 578.481594][T22451] tipc: Resetting bearer [ 578.621798][T22439] tipc: Resetting bearer [ 578.672193][T22439] tipc: Disabling bearer [ 578.688085][T22460] v: renamed from dummy0 (while UP) [ 578.908121][T22469] wg1 speed is unknown, defaulting to 1000 [ 579.148198][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 579.161192][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 579.171003][T22480] netlink: 'syz.2.4419': attribute type 12 has an invalid length. [ 579.257388][T22484] netlink: 'syz.2.4420': attribute type 1 has an invalid length. [ 579.340153][T22486] IPVS: length: 35 != 1272 [ 579.593269][T22504] xt_policy: too many policy elements [ 580.265846][T22551] __nla_validate_parse: 7 callbacks suppressed [ 580.265862][T22551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4440'. [ 580.292795][T22552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4440'. [ 580.379694][T22537] wg1: entered promiscuous mode [ 580.387350][T22537] wg1: entered allmulticast mode [ 580.535407][T22562] netlink: 'syz.5.4441': attribute type 12 has an invalid length. [ 580.717367][T22575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4445'. [ 580.743519][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4444'. [ 580.760955][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4444'. [ 580.813033][T22575] hsr_slave_1 (unregistering): left promiscuous mode [ 580.923375][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4449'. [ 581.079917][T22609] siw: device registration error -23 [ 581.214775][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4454'. [ 581.342007][T22625] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4457'. [ 581.360989][T22622] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4454'. [ 581.380677][T22626] syzkaller0: entered promiscuous mode [ 581.397098][T22626] syzkaller0: entered allmulticast mode [ 581.417912][T22622] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4454'. [ 581.533558][T22632] bond_slave_1: mtu less than device minimum [ 581.826574][T22647] Cannot find add_set index 0 as target [ 582.732020][T22698] syzkaller0: left promiscuous mode [ 582.739845][T22698] syzkaller0: left allmulticast mode [ 582.989625][T22721] syzkaller0: entered promiscuous mode [ 582.995279][T22721] syzkaller0: entered allmulticast mode [ 583.038206][T22723] netlink: 'syz.2.4486': attribute type 8 has an invalid length. [ 583.700261][T22752] netlink: 'syz.4.4497': attribute type 1 has an invalid length. [ 584.011094][T22779] netlink: 'syz.5.4502': attribute type 1 has an invalid length. [ 584.019053][T22779] netlink: 'syz.5.4502': attribute type 2 has an invalid length. [ 584.058456][T22779] wg1 speed is unknown, defaulting to 1000 [ 584.334270][T22800] tap0: tun_chr_ioctl cmd 1074025673 [ 584.338475][T22804] netlink: 'syz.5.4512': attribute type 1 has an invalid length. [ 584.372466][T22806] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 584.441272][T22808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.499857][T22804] veth5: entered promiscuous mode [ 584.512890][T22804] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 584.570874][T22818] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 584.937170][T22833] wg1 speed is unknown, defaulting to 1000 [ 585.253398][T22870] netlink: 'syz.5.4534': attribute type 282 has an invalid length. [ 585.694659][T22900] __nla_validate_parse: 85 callbacks suppressed [ 585.694686][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4543'. [ 585.717419][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4543'. [ 585.726844][T22902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4541'. [ 585.857935][T22907] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002 [ 585.871166][T22909] netlink: 'syz.2.4544': attribute type 13 has an invalid length. [ 586.234475][T22914] netlink: 'syz.0.4547': attribute type 11 has an invalid length. [ 586.310624][T22916] netlink: 'syz.4.4548': attribute type 10 has an invalid length. [ 586.332947][T22916] bond0: (slave wlan1): Opening slave failed [ 586.444968][T22918] tipc: Enabling of bearer rejected, media not registered [ 586.474598][T22918] netlink: 'syz.0.4549': attribute type 13 has an invalid length. [ 587.015728][T22934] netlink: 'syz.0.4555': attribute type 13 has an invalid length. [ 587.171070][T22941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4556'. [ 587.327477][T22944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4558'. [ 587.611763][T22956] wg1 speed is unknown, defaulting to 1000 [ 587.801122][T22960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4562'. [ 588.202794][T22965] netlink: 'syz.3.4563': attribute type 1 has an invalid length. [ 588.280238][T22965] 8021q: adding VLAN 0 to HW filter on device bond4 [ 588.337197][T22967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 588.350081][T22967] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 588.381915][T22967] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 588.420519][T22968] bridge5: entered allmulticast mode [ 588.604048][T22972] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4565'. [ 588.734408][T22975] wg1 speed is unknown, defaulting to 1000 [ 588.834005][T22980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4567'. [ 588.890999][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4567'. [ 588.968633][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4568'. [ 588.981718][T22980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.079748][T22988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.086989][T22988] IPv6: NLM_F_CREATE should be set when creating new route [ 589.846693][T23024] netlink: 'syz.3.4580': attribute type 1 has an invalid length. [ 590.047650][T23024] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.634959][T23030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.642801][T23030] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 590.654633][T23030] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 590.726348][T23035] syzkaller1: entered promiscuous mode [ 590.740413][T23035] syzkaller1: entered allmulticast mode [ 590.897231][T23048] __nla_validate_parse: 3 callbacks suppressed [ 590.897249][T23048] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4586'. [ 590.981749][T23060] netlink: 'syz.3.4587': attribute type 39 has an invalid length. [ 591.170160][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4592'. [ 591.181940][T23077] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4592'. [ 591.357216][T23087] wg1 speed is unknown, defaulting to 1000 [ 591.366932][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4597'. [ 591.510811][T23096] vlan2: entered allmulticast mode [ 591.583307][T23097] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4600'. [ 591.639422][T23104] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4602'. [ 592.123136][T23132] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.4612'. [ 592.160710][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4612'. [ 592.181197][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4612'. [ 592.251358][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4612'. [ 592.410330][T23150] netlink: 'syz.4.4617': attribute type 4 has an invalid length. [ 592.458870][T23149] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 592.474406][T23153] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 592.838944][T23178] tipc: Enabled bearer , priority 0 [ 592.850690][T23178] syzkaller0: entered promiscuous mode [ 592.856182][T23178] syzkaller0: entered allmulticast mode [ 592.869911][T23177] tipc: Resetting bearer [ 592.906850][T23177] tipc: Disabling bearer [ 592.995410][T23183] wg1 speed is unknown, defaulting to 1000 [ 593.384701][T23210] wg1 speed is unknown, defaulting to 1000 [ 593.912771][T23243] wg1 speed is unknown, defaulting to 1000 [ 594.283832][T23262] wg1 speed is unknown, defaulting to 1000 [ 594.572174][T23280] tipc: Started in network mode [ 594.577086][T23280] tipc: Node identity 0aa08cb66148, cluster identity 4711 [ 594.589352][T23280] tipc: Enabled bearer , priority 0 [ 594.665003][T23281] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 595.835058][T23325] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 595.843984][T23317] hsr_slave_1 (unregistering): left promiscuous mode [ 595.872760][ T843] tipc: Node number set to 1810402486 [ 596.127262][T23330] __nla_validate_parse: 147 callbacks suppressed [ 596.127280][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4668'. [ 596.155713][T23329] wg1 speed is unknown, defaulting to 1000 [ 596.218214][T23333] openvswitch: netlink: IP tunnel dst address not specified [ 596.838272][T23349] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4672'. [ 597.026695][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4673'. [ 597.078124][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4675'. [ 598.080543][T23389] tipc: Enabling of bearer rejected, media not registered [ 598.373560][T23401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4687'. [ 598.464279][T23403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4689'. [ 598.478528][T23403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4689'. [ 598.566355][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4688'. [ 599.263605][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'. [ 599.283847][T23446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4700'. [ 599.346920][T23446] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 599.650311][T23470] netlink: 'syz.2.4706': attribute type 12 has an invalid length. [ 599.764770][T23473] syzkaller1: entered promiscuous mode [ 599.784787][T23473] syzkaller1: entered allmulticast mode [ 599.808502][T23439] lo: left promiscuous mode [ 599.822713][T23439] tunl0: left promiscuous mode [ 599.834923][T23439] gre0: left promiscuous mode [ 599.855267][T23439] gretap0: left promiscuous mode [ 599.864079][T23439] erspan0: left promiscuous mode [ 599.870785][T23439] ip_vti0: left promiscuous mode [ 599.877504][T23439] ip6_vti0: left promiscuous mode [ 599.885261][T23439] sit0: left promiscuous mode [ 599.894486][T23439] ip6tnl0: left promiscuous mode [ 599.901327][T23439] ip6gre0: left promiscuous mode [ 599.906865][T23439] ip6gretap0: left promiscuous mode [ 599.913352][T23439] bridge0: left promiscuous mode [ 599.920073][T23439] bond0: left promiscuous mode [ 599.924845][T23439] bond_slave_0: left promiscuous mode [ 599.931322][T23439] bond_slave_1: left promiscuous mode [ 599.938491][T23439] v: left promiscuous mode [ 599.946589][T23439] nlmon0: left promiscuous mode [ 599.953945][T23439] caif0: left promiscuous mode [ 599.960156][T23439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.117230][T23488] netlink: 'syz.4.4713': attribute type 7 has an invalid length. [ 600.441709][T23502] wg1 speed is unknown, defaulting to 1000 [ 600.506230][T23512] netlink: 'syz.5.4719': attribute type 1 has an invalid length. [ 600.525800][T23512] netlink: 'syz.5.4719': attribute type 1 has an invalid length. [ 600.544658][T23515] netlink: 'syz.5.4719': attribute type 1 has an invalid length. [ 600.563051][T23515] netlink: 'syz.5.4719': attribute type 1 has an invalid length. [ 600.819505][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 600.911195][T23533] tipc: Failed to remove unknown binding: 66,1,1/4269801494:2155857814/2155857816 [ 600.923532][T23533] tipc: Failed to remove unknown binding: 66,1,1/4269801494:2155857814/2155857816 [ 600.939517][T23533] tipc: Failed to remove unknown binding: 66,1,1/4269801494:2155857814/2155857816 [ 601.107516][T23535] tipc: Resetting bearer [ 601.116155][T23535] tipc: Resetting bearer [ 601.288164][T23549] openvswitch: netlink: Missing key (keys=40, expected=80) [ 601.305221][T23549] __nla_validate_parse: 3 callbacks suppressed [ 601.305238][T23549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4732'. [ 601.320862][T23549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4732'. [ 601.414239][T23554] netlink: 'syz.4.4734': attribute type 6 has an invalid length. [ 601.424261][T23554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4734'. [ 601.647163][T23567] syzkaller0: left promiscuous mode [ 601.658541][T23567] syzkaller0: left allmulticast mode [ 601.679750][T23567] tipc: Resetting bearer [ 601.787292][T23571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4738'. [ 601.965014][T23593] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4746'. [ 601.985100][T23593] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4746'. [ 601.995963][T23593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4746'. [ 602.015146][T23593] netlink: 'syz.4.4746': attribute type 89 has an invalid length. [ 602.037475][T23595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4745'. [ 602.052360][T23595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4745'. [ 602.066589][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4748'. [ 602.086781][T23597] netlink: 'syz.3.4747': attribute type 6 has an invalid length. [ 602.124363][T23597] netlink: 'syz.3.4747': attribute type 6 has an invalid length. [ 602.148648][T23600] macvtap0: entered promiscuous mode [ 602.154105][T23600] veth1_to_hsr: entered promiscuous mode [ 602.172738][T23600] macvtap0: entered allmulticast mode [ 602.189325][T23600] veth1_to_hsr: entered allmulticast mode [ 602.686546][T23623] syzkaller0: entered promiscuous mode [ 602.693023][T23623] syzkaller0: entered allmulticast mode [ 602.798760][T23630] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 603.071654][T23641] syzkaller0: entered promiscuous mode [ 603.077678][T23641] syzkaller0: entered allmulticast mode [ 603.092465][T23641] tipc: Resetting bearer [ 603.364232][T23657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.371643][T23657] IPv6: NLM_F_CREATE should be set when creating new route [ 603.378932][T23657] IPv6: NLM_F_CREATE should be set when creating new route [ 603.410599][T23657] ------------[ cut here ]------------ [ 603.416136][T23657] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#1: syz.5.4766/23657 [ 603.427859][T23657] Modules linked in: [ 603.432359][T23657] CPU: 1 UID: 0 PID: 23657 Comm: syz.5.4766 Not tainted syzkaller #0 PREEMPT(full) [ 603.442553][T23657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.453196][T23657] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 603.459601][T23657] Code: fa be 02 00 00 00 eb 0a e8 05 8f d7 fa be 01 00 00 00 4c 89 f7 e8 b8 91 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 e9 8e d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 603.467688][T23663] wg1 speed is unknown, defaulting to 1000 [ 603.480151][T23657] RSP: 0018:ffffc900044fef08 EFLAGS: 00010283 [ 603.492669][T23657] RAX: ffffffff86e969c7 RBX: 0000000000000002 RCX: 0000000000080000 [ 603.501528][T23657] RDX: ffffc9000fb44000 RSI: 00000000000073e2 RDI: 00000000000073e3 [ 603.510282][T23657] RBP: dffffc0000000000 R08: ffff888057642c2f R09: 1ffff1100aec8585 [ 603.518285][T23657] R10: dffffc0000000000 R11: ffffed100aec8586 R12: ffff88807d1d8000 [ 603.526843][T23657] R13: ffffc900044ff080 R14: 0000000000000001 R15: ffffc900044ff098 [ 603.535448][T23657] FS: 00007f6ac41a16c0(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 603.545251][T23657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 603.552444][T23657] CR2: 0000000000000000 CR3: 000000007630c000 CR4: 00000000003526f0 [ 603.561116][T23657] Call Trace: [ 603.564420][T23657] [ 603.567377][T23657] notifier_call_chain+0x19d/0x3a0 [ 603.573411][T23657] ? atomic_notifier_call_chain+0x26/0x180 [ 603.579796][T23657] atomic_notifier_call_chain+0xda/0x180 [ 603.585467][T23657] call_fib_notifiers+0x31/0x60 [ 603.590907][T23657] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 603.597361][T23657] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 603.603545][T23657] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 603.611154][T23657] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 603.616489][T23657] inet6_rtm_newroute+0x12f5/0x18c0 [ 603.622216][T23657] ? kasan_quarantine_put+0xbb/0x1f0 [ 603.627525][T23657] ? lockdep_hardirqs_on+0x7b/0x110 [ 603.633606][T23657] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 603.639623][T23657] ? kmem_cache_free+0x197/0x620 [ 603.644575][T23657] ? nlmon_xmit+0xb0/0x100 [ 603.649577][T23657] ? lockdep_hardirqs_on+0x7b/0x110 [ 603.654830][T23657] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 603.661250][T23657] rtnetlink_rcv_msg+0x7cf/0xb70 [ 603.666219][T23657] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 603.671952][T23657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 603.677431][T23657] ? ref_tracker_free+0x63a/0x7d0 [ 603.682709][T23657] ? __asan_memcpy+0x40/0x70 [ 603.687313][T23657] ? __pfx_ref_tracker_free+0x10/0x10 [ 603.693088][T23657] netlink_rcv_skb+0x208/0x470 [ 603.697893][T23657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 603.703453][T23657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.709453][T23657] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.714692][T23657] netlink_unicast+0x82f/0x9e0 [ 603.720351][T23657] ? __pfx_netlink_unicast+0x10/0x10 [ 603.725668][T23657] ? netlink_sendmsg+0x642/0xb30 [ 603.731214][T23657] ? skb_put+0x11b/0x210 [ 603.735489][T23657] netlink_sendmsg+0x805/0xb30 [ 603.740884][T23657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.746198][T23657] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.751989][T23657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.757299][T23657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.763469][T23657] __sock_sendmsg+0x21c/0x270 [ 603.768179][T23657] ____sys_sendmsg+0x52d/0x820 [ 603.773886][T23657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.780022][T23657] ? import_iovec+0x74/0xa0 [ 603.784549][T23657] ___sys_sendmsg+0x21f/0x2a0 [ 603.789588][T23657] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.794789][T23657] ? preempt_schedule_common+0x83/0xd0 [ 603.800609][T23657] ? preempt_schedule_thunk+0x16/0x30 [ 603.806006][T23657] ? __fget_files+0x2a/0x420 [ 603.811145][T23657] ? __fget_files+0x3a0/0x420 [ 603.815827][T23657] __sys_sendmmsg+0x227/0x430 [ 603.821054][T23657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 603.826274][T23657] ? do_futex+0x395/0x420 [ 603.831165][T23657] ? fd_install+0x95/0x3d0 [ 603.835607][T23657] ? lock_acquire+0x107/0x340 [ 603.841107][T23657] ? rcu_is_watching+0x15/0xb0 [ 603.845906][T23657] __x64_sys_sendmmsg+0xa0/0xc0 [ 603.853854][T23657] do_syscall_64+0xec/0xf80 [ 603.858388][T23657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.866090][T23657] ? trace_irq_disable+0x37/0x100 [ 603.871981][T23657] ? clear_bhb_loop+0x60/0xb0 [ 603.876687][T23657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.883162][T23657] RIP: 0033:0x7f6ac338f749 [ 603.887624][T23657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.908162][T23657] RSP: 002b:00007f6ac41a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 603.917428][T23657] RAX: ffffffffffffffda RBX: 00007f6ac35e5fa0 RCX: 00007f6ac338f749 [ 603.926636][T23657] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 603.935647][T23657] RBP: 00007f6ac3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 603.944220][T23657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.952791][T23657] R13: 00007f6ac35e6038 R14: 00007f6ac35e5fa0 R15: 00007fff4feaa818 [ 603.961676][T23657] [ 603.964719][T23657] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 603.972009][T23657] CPU: 1 UID: 0 PID: 23657 Comm: syz.5.4766 Not tainted syzkaller #0 PREEMPT(full) [ 603.981390][T23657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.991465][T23657] Call Trace: [ 603.994753][T23657] [ 603.997688][T23657] vpanic+0x1e0/0x670 [ 604.001705][T23657] panic+0xb9/0xc0 [ 604.005437][T23657] ? __pfx_panic+0x10/0x10 [ 604.009883][T23657] __warn+0x317/0x4b0 [ 604.013879][T23657] ? nsim_fib_event_nb+0xed8/0x1080 [ 604.019102][T23657] ? nsim_fib_event_nb+0xed8/0x1080 [ 604.024320][T23657] __report_bug+0x288/0x500 [ 604.028834][T23657] ? inet6_rtm_newroute+0x12f5/0x18c0 [ 604.034257][T23657] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 604.039388][T23657] ? netlink_rcv_skb+0x208/0x470 [ 604.044349][T23657] ? nsim_fib_event_nb+0xed8/0x1080 [ 604.049577][T23657] ? __pfx___report_bug+0x10/0x10 [ 604.054627][T23657] ? nsim_fib_event_nb+0xed8/0x1080 [ 604.060056][T23657] report_bug+0x16a/0x220 [ 604.064422][T23657] ? nsim_fib_event_nb+0xed8/0x1080 [ 604.069619][T23657] ? nsim_fib_event_nb+0xeda/0x1080 [ 604.074835][T23657] handle_bug+0x98/0x200 [ 604.079088][T23657] exc_invalid_op+0x1a/0x50 [ 604.083587][T23657] asm_exc_invalid_op+0x1a/0x20 [ 604.088454][T23657] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 604.094312][T23657] Code: fa be 02 00 00 00 eb 0a e8 05 8f d7 fa be 01 00 00 00 4c 89 f7 e8 b8 91 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 e9 8e d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 604.113997][T23657] RSP: 0018:ffffc900044fef08 EFLAGS: 00010283 [ 604.120067][T23657] RAX: ffffffff86e969c7 RBX: 0000000000000002 RCX: 0000000000080000 [ 604.128032][T23657] RDX: ffffc9000fb44000 RSI: 00000000000073e2 RDI: 00000000000073e3 [ 604.135994][T23657] RBP: dffffc0000000000 R08: ffff888057642c2f R09: 1ffff1100aec8585 [ 604.143958][T23657] R10: dffffc0000000000 R11: ffffed100aec8586 R12: ffff88807d1d8000 [ 604.152003][T23657] R13: ffffc900044ff080 R14: 0000000000000001 R15: ffffc900044ff098 [ 604.159974][T23657] ? nsim_fib_event_nb+0xed7/0x1080 [ 604.165183][T23657] ? nsim_fib_event_nb+0xed7/0x1080 [ 604.170399][T23657] notifier_call_chain+0x19d/0x3a0 [ 604.175688][T23657] ? atomic_notifier_call_chain+0x26/0x180 [ 604.181488][T23657] atomic_notifier_call_chain+0xda/0x180 [ 604.187110][T23657] call_fib_notifiers+0x31/0x60 [ 604.191956][T23657] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 604.198388][T23657] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 604.203671][T23657] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 604.210690][T23657] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 604.215979][T23657] inet6_rtm_newroute+0x12f5/0x18c0 [ 604.221179][T23657] ? kasan_quarantine_put+0xbb/0x1f0 [ 604.226472][T23657] ? lockdep_hardirqs_on+0x7b/0x110 [ 604.231682][T23657] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 604.237226][T23657] ? kmem_cache_free+0x197/0x620 [ 604.242193][T23657] ? nlmon_xmit+0xb0/0x100 [ 604.246631][T23657] ? lockdep_hardirqs_on+0x7b/0x110 [ 604.251843][T23657] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 604.257381][T23657] rtnetlink_rcv_msg+0x7cf/0xb70 [ 604.262325][T23657] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 604.267426][T23657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 604.272878][T23657] ? ref_tracker_free+0x63a/0x7d0 [ 604.277902][T23657] ? __asan_memcpy+0x40/0x70 [ 604.282483][T23657] ? __pfx_ref_tracker_free+0x10/0x10 [ 604.287856][T23657] netlink_rcv_skb+0x208/0x470 [ 604.292621][T23657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 604.298157][T23657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.303468][T23657] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.308664][T23657] netlink_unicast+0x82f/0x9e0 [ 604.313433][T23657] ? __pfx_netlink_unicast+0x10/0x10 [ 604.318716][T23657] ? netlink_sendmsg+0x642/0xb30 [ 604.323658][T23657] ? skb_put+0x11b/0x210 [ 604.327895][T23657] netlink_sendmsg+0x805/0xb30 [ 604.332662][T23657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.337952][T23657] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.342885][T23657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.348160][T23657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.353528][T23657] __sock_sendmsg+0x21c/0x270 [ 604.358204][T23657] ____sys_sendmsg+0x52d/0x820 [ 604.362961][T23657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.368243][T23657] ? import_iovec+0x74/0xa0 [ 604.372743][T23657] ___sys_sendmsg+0x21f/0x2a0 [ 604.377435][T23657] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.382697][T23657] ? preempt_schedule_common+0x83/0xd0 [ 604.388160][T23657] ? preempt_schedule_thunk+0x16/0x30 [ 604.393551][T23657] ? __fget_files+0x2a/0x420 [ 604.398476][T23657] ? __fget_files+0x3a0/0x420 [ 604.403148][T23657] __sys_sendmmsg+0x227/0x430 [ 604.407838][T23657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 604.413022][T23657] ? do_futex+0x395/0x420 [ 604.417344][T23657] ? fd_install+0x95/0x3d0 [ 604.421754][T23657] ? lock_acquire+0x107/0x340 [ 604.426437][T23657] ? rcu_is_watching+0x15/0xb0 [ 604.431205][T23657] __x64_sys_sendmmsg+0xa0/0xc0 [ 604.436047][T23657] do_syscall_64+0xec/0xf80 [ 604.440541][T23657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.446595][T23657] ? trace_irq_disable+0x37/0x100 [ 604.451698][T23657] ? clear_bhb_loop+0x60/0xb0 [ 604.456367][T23657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.462245][T23657] RIP: 0033:0x7f6ac338f749 [ 604.466665][T23657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.486278][T23657] RSP: 002b:00007f6ac41a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 604.494695][T23657] RAX: ffffffffffffffda RBX: 00007f6ac35e5fa0 RCX: 00007f6ac338f749 [ 604.502657][T23657] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 604.510618][T23657] RBP: 00007f6ac3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 604.518582][T23657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.526546][T23657] R13: 00007f6ac35e6038 R14: 00007f6ac35e5fa0 R15: 00007fff4feaa818 [ 604.534549][T23657] [ 604.537931][T23657] Kernel Offset: disabled [ 604.542238][T23657] Rebooting in 86400 seconds..