last executing test programs: 4.951620463s ago: executing program 4 (id=6617): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 3.340516209s ago: executing program 4 (id=6629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r1 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000002c0)="66a930b0af6e5377305eebd46329c50d5fd62c1c66f23eb4c88391cd603031faf2ee92ed5a167d0c07f2f5da248420ae60142b991563028c3868ab58b31ca90b2d3253915ca57271e43435bda13d2744bf60db66c65edd0aba3fe769483450a394bc36150036ea994a15b920b99a5d2fd731619ea37e39380428499ebee2617e6760db69c738a20a08719be03d7bb2d544a7768644e6e5c6ed0f20d5f5a6040734c68c1aaa", 0xa5) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) 3.227968446s ago: executing program 4 (id=6632): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="f8ab7e6ad24df70de0639c4d01175bf11246ed63a7b19b12d49155beec1c029f6c97a4ff13b10474ae3e5d7c872afe7155d0cff9cbfdebfd3b7d7ca962fa"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000200001000000000000200000020020000300000400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r9, @ANYRES64=r10, @ANYBLOB="00000000010000000000000084"], 0x48}}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r11, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r12 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x170, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x140, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6cd4492c, 0x9}}, @TCA_NETEM_DELAY_DIST={0x46, 0x2, "f984f926e596275c40845264eaa5e19ef1f2f15f3dc2c0edd0eb4dfdcfe94eae2fe113255a6a0e717da5f848bea2c57022dd0ea621e58493769975fc317156a23adf"}, @TCA_NETEM_RATE64={0xc, 0x8, 0xd6dbff946b26fe09}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x401, 0xcb98eb3, 0x6, 0x4809, 0x10000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x1, 0xffff, 0x30}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x411, 0x4, 0x0, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4aebd780, 0x0, 0x9, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xb, 0x9, 0x6, 0x1, 0x80000000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x7fff, 0x7, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x6, 0x9b, 0x8, 0x8000}}]}]}}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r11, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x2, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) 3.184721944s ago: executing program 1 (id=6635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r8 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xe, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c8f3}, 0x4008000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.963501043s ago: executing program 0 (id=6636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17b}, {&(0x7f0000000300)="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", 0x149}, {&(0x7f00000012c0)="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", 0x16d}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001bc0)={'dvmrp0\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r11, 0xc400941d, &(0x7f00000001c0)={0x0, 0x9, 0x4}) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f00000005c0)={r12, "75292c7a047e17456daf1cfb413bf3a6"}) recvmsg$kcm(r8, &(0x7f0000001b80)={&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/58, 0x3a}, {&(0x7f0000001780)=""/90, 0x5a}, {&(0x7f0000001800)}, {&(0x7f0000001840)=""/231, 0xe7}, {&(0x7f0000001940)=""/159, 0x9f}], 0x8, &(0x7f0000001a80)=""/198, 0xc6}, 0x3) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000001800)) write$cgroup_subtree(r11, &(0x7f0000000700)=ANY=[], 0xfe33) 2.819802483s ago: executing program 4 (id=6637): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500"], 0x94}}, 0x0) 2.812068557s ago: executing program 2 (id=6638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x1c, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0xc2, 0xfffd, 0x0, 0x3, {[@window={0x3, 0x3, 0x40}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.609282956s ago: executing program 1 (id=6639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r0, 0x7}, 0x14) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001020520"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40048c0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.486448058s ago: executing program 2 (id=6640): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000", 0x10}], 0x2) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r9}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x8005) socket$nl_generic(0x10, 0x3, 0x10) 2.42424497s ago: executing program 0 (id=6641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x184, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@loopback, @in=@remote, 0x4e23, 0x0, 0x2000, 0x8000, 0x2, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in=@loopback, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x7}, 0xfffffffc, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'crc32c-intel\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000301010100000000000000000200000018000280140001800a000100ac141436080002004b4101010c0019800800020002"], 0x38}}, 0x0) 2.390472786s ago: executing program 1 (id=6642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25077c0000080001800400fd8008000380040009"], 0x24}}, 0xc010) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="380100001000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c000000ac141427000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000200000000000000feffffffffffffff02000000fcffffff400000002abd700003350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.303100275s ago: executing program 0 (id=6643): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000100000851000000600000018000000000000000000000000000000650000000000000018000000000000000000000000000000950000000000000074e9ffffff0000009500000000000001"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0x1}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xc1}}}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0xf]}}, {{0x1c, 0x1, {0xcb, 0x7c, 0x8003, 0xb, 0x2, 0x3, 0x4, 0xfffffffffffffd20}}, {0x10, 0x2, [0xf3, 0x400, 0x8000, 0x7f, 0x7, 0x7]}}, {{0x1c, 0x1, {0x4, 0x6, 0x8, 0xffff69e8, 0x0, 0x5, 0x7, 0x7}}, {0x12, 0x2, [0x80, 0x4, 0xd, 0xa468, 0x0, 0x8, 0xfff9]}}]}]}, 0xc0}}, 0x4008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x104, 0x4, 0x3c0, 0x1f0, 0xe8, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0xff000000, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x40}, @local, 0xffffff00, 0xffffff00, 0x6, 0x8, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x797b, 0x78, 0x96a4, 0x7, 'team0\x00', 'wlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5ff}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x1, 0x1, 0x2, 0x74c7}, {0x4, 0x4, 0x4, 0x7ff}, {0x6, 0x1, 0x6, 0x9}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000080)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f4, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 2.299915162s ago: executing program 3 (id=6644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800007b8af8ff00000000bfa200000000000007020000f8ffffffafad7fb8db86ba0487ccde03000000000000b70400000000000085000000c300000095a3083034386961aa143723d4ceaaa1a03252b7f53d190d20d5c505ee9238035d18ed5fa752afbdd5f7bcba38078e406a3cc47bcc7e671776d7c6ca7ccb57d800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b85, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffa6, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='f2fs_write_checkpoint\x00', r1, 0x0, 0x3}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) (async) r5 = socket$kcm(0x2d, 0xf, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r13 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000140)={'pim6reg0\x00'}) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xfff2, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x1790}}, 0x20046885) 2.112297791s ago: executing program 1 (id=6645): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@random="bd606a2a7f2c", @random="24475466a8f0", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "902d03", 0x38, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts={0x6c, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x4, [0x6, 0x3, 0x1, 0x1]}}, @jumbo={0xc2, 0x4, 0x8001}]}]}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c000780080008000000009a090002"], 0x54}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local, 0xff01}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2}}}}) 167.098662ms ago: executing program 3 (id=6646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r0}, &(0x7f0000000b80), &(0x7f0000000bc0)='%-5lx \x00'}, 0x20) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delnexthop={0x30, 0x69, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001044) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 165.962948ms ago: executing program 1 (id=6647): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003080)={&(0x7f0000000080)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x6, [{@broadcast, 0x706100}]}]}}}], 0x20}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000040)=0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x8}}, 0x880) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x3, 0x3, 0x1, 0x0, 0xa0000000, 0xfffffffa, 0x10}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r6, 0x0, 0x0) 165.461948ms ago: executing program 3 (id=6648): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149004006040800", 0x58}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 164.387038ms ago: executing program 3 (id=6649): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c005ddbf0286a9ce1875c5a00000107010300000000000000000500000808000540000000027510c1876633da3fb320530cebd6b6249039e2e51d7daf2b43b77a997d0f16500965e88593cf80ceab164c784efacff5031c5a75f854270c8d1b7f943f972c2d6fdd6415f37e791ecf1f5955e028de03bee4b12b3f297e756ad1004a7b2d657a8ce22637cd83813932d9b71c0f9123067df2f2592b71ff18f7ba9142a24b4b3efe8e71d02632c02e2612d6ef94295ac395bc7ebab61e67e76ff5c9a247ae482d8f5b48d8063e1cc928b8780726dfec826095986e47d3cd14f9fe283e3e004a6f2637ca298fea5350f4b3873589bed330968feb0e615446db7b86"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004) (async) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000a99984dbd1c945c54809e3f7ae4f39d700", @ANYRES16=r3, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4c094}, 0x48090) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/user\x00') (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/user\x00') bpf$PROG_LOAD(0x5, 0x0, 0x87) (async) bpf$PROG_LOAD(0x5, 0x0, 0x87) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200)=0x10001, 0x12) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095", @ANYRES16=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095", @ANYRES16=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRESDEC=r11, @ANYRES64=r11, @ANYRES64=r6, @ANYRES8=r9, @ANYRESOCT=r11, @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x20084045}, 0x0) sendfile(r9, r7, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r14, &(0x7f00000000c0), 0x9) sendfile(r14, r13, 0x0, 0x10000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 163.013905ms ago: executing program 2 (id=6650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x46, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x4040845) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000100), 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x8007f, @empty, 0xffffffff}, 0x1c) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000b80)={0xa0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @empty, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c3e03d0137f8fe83640f45622334ab589efefb3fdaf05873b0311d75c4a74ebd"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 161.494449ms ago: executing program 0 (id=6651): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote, 0x40, 0x700, 0x0, 0xfffffffe}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 159.44374ms ago: executing program 2 (id=6652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x12a) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b", 0x2c}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) 158.554701ms ago: executing program 0 (id=6653): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x10, 0x40, 0x2, 0x33, {{0x10, 0x4, 0x0, 0x20, 0x40, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0xec, 0x3, 0x6, [{@rand_addr=0x64010101, 0x52}, {@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0xa}, {@broadcast, 0x6}]}]}}}}}) socketpair(0x1e, 0x3, 0x8, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@delchain={0xd0, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x509d884560ba1ba6, 0x3}, {0xfff3}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xcd, 0xc5}}, @filter_kind_options=@f_flow={{0x9}, {0x88, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffffc}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_POLICE={0x54, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x1, 0x2, 0x0, 0x1ff, {0x1, 0x2, 0x1ff, 0x800, 0x6, 0x7}, {0x6, 0x0, 0x3, 0x4273, 0x8, 0x200}, 0x0, 0x9, 0x3}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x113f3}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xfe, 0x6}}]}, 0xd0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x8) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) connect$ax25(r5, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast]}, 0x48) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 131.819093ms ago: executing program 0 (id=6654): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket(0x8, 0x0, 0x8000) (async) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="00e9b72f", 0x4}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76a}, 0x1c) socket(0x26, 0x2, 0x2) (async) r8 = socket(0x26, 0x2, 0x2) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) recvmsg$unix(r8, 0x0, 0x20) 127.429337ms ago: executing program 1 (id=6655): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)={0x0}) r5 = socket$netlink(0x10, 0x3, 0x7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r7 = socket$unix(0x1, 0x1, 0x0) r8 = gettid() ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=r8) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x140, 0x31, 0x400, 0x70bd29, 0x25dfdbfc, {0x1e}, [@generic="a48eaf7d4bb876c2954f7e55e7eb2e591e19b3ce00741498ac1cffb9fafb92dc0a0331261b05000e16383790af0b4119aa515e621dbe8cfd032e5a2b7c6f77caf31ef67b22562cbc3b360cbae17cb48f7c39b872442bde0c94dc7ccd40d6d685306384c7693b6e39950d346fdb1079a0b2509766d161ecdae20adc66587bf25ce8794a3598b8840f47101a398706c23f41403d78068ea8fc5b92", @typed={0x8, 0x4a, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r1}, @nested={0x72, 0x70, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="bd196bc6e89d76e4aad77bcadad5d0ad83dcd762fa2695509d7017a67a27e626d2a2bb6cff89b851e932c65bcaca8a4b0d23c83769fbd45ca53ac22e0e34d0bad3989fcf584c23c3f375c410ad3318f1376e76ec1587da6c6c05095888a48848c8d2", @typed={0x8, 0xa8, 0x0, 0x0, @pid=r8}]}, @generic="dc8d6c2bee7d505f4c989dd5d64d"]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x884) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000d00)={0x0, r4, "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", "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"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r10, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0xa8e, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x14, 0x2a, [@cf={0x4, 0x6, {0x8, 0xa5, 0x7, 0x1}}, @mesh_id={0x72, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[], 0x20}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) (async) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) (async) socket$netlink(0x10, 0x3, 0x7) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) socket$unix(0x1, 0x1, 0x0) (async) gettid() (async) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=r8) (async) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x140, 0x31, 0x400, 0x70bd29, 0x25dfdbfc, {0x1e}, [@generic="a48eaf7d4bb876c2954f7e55e7eb2e591e19b3ce00741498ac1cffb9fafb92dc0a0331261b05000e16383790af0b4119aa515e621dbe8cfd032e5a2b7c6f77caf31ef67b22562cbc3b360cbae17cb48f7c39b872442bde0c94dc7ccd40d6d685306384c7693b6e39950d346fdb1079a0b2509766d161ecdae20adc66587bf25ce8794a3598b8840f47101a398706c23f41403d78068ea8fc5b92", @typed={0x8, 0x4a, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r1}, @nested={0x72, 0x70, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="bd196bc6e89d76e4aad77bcadad5d0ad83dcd762fa2695509d7017a67a27e626d2a2bb6cff89b851e932c65bcaca8a4b0d23c83769fbd45ca53ac22e0e34d0bad3989fcf584c23c3f375c410ad3318f1376e76ec1587da6c6c05095888a48848c8d2", @typed={0x8, 0xa8, 0x0, 0x0, @pid=r8}]}, @generic="dc8d6c2bee7d505f4c989dd5d64d"]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x884) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000d00)={0x0, r4, "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", "e08287f3fb058792474c863ec7d5de35c47e5d4dc27ca090d81dd33dc03e9d97f8fd3146b7b8211d531ce8f1672e42c865b6f93182310a868475a213bdd8ce4c2ac69decaeb3a86530014655bd380db8ff464323f82d5737043b5b9ea094f1ca436d41456a63745e148667044f415dd994055aead67d01578ed294c94186e218d59340daeda5bf51cc88ec28392719dae2170beefa78688878ed8632f8475dac24319ab7a698e8965a681cca079b7e6933991ab11b3181b4d8c93c67a5d545b1ba246a6a1388502ca759d3111229749c5aa05894f9341aa5b6e3faa78d2893ae1ed67804520545f0f638a58ba16706127c2b0c3ca32ceb047ff4e9e4775bbec08c4df7b49b8b2050e0be9c8bd3e1ef12422e9a98b7fe4b4ebc879940398accfdf672ae5c70f65c6c152910e91373954fb926ec01a067d325e9f28fd2e8ee5e34ac69c097e68017a096043524f8ac49b64a9c8dca6e46ec1fbab0241c9b0b900debe54bceee203d3df5234cc6cff84e0f6c9ecfcfec8b82a2e47403f031ebe950518f1e35ad6d22525b6d08157d575cd71cd91466ffc96596f51975341a35134d0b688cc094a9ffe4abe1b0a18465153461626265ecd1794be1b7b2756de4a9acc4ded22debbf630865ba83d151da4c4ddd39f55691a43d403363c9832d4a5fe57c5fff19163ab1ddb92cfc323576a46b82152fd35c16d0da4a6dc6a0b9efb957c03f4d912be0ca6cc0ec583da65b5eed651f511bda3002cdbca4ce35c02342edb043b8f14a7f3c24386bd9c2f39f3f15c4aba44612ffc47b39cd2f2327557104511a7f076eac792b2839643916c05328b10654655aebf3c4e421dcfba83c182a38d18f89d0f6d8346c41efebf27a41548c49320d4b8eb0155bc9610c056c90460c9ee487870da9d5becc656a1e73b34e064bc1a167b8f3a7c8fd81c5ed4ca3869db9c5c31aa82f96973b6e326c28ed12944f8b85edebe0041f07805036752f58a1a3a8cdc961308ed149bc02b6cabd3eb21fc8a9aaed17f2dbfa84c45734f222e01e14e2fb51f609c9208b03ab462542fc884df9927fc22aca3f5ff57a9223c89d1dcdd66b45ad2a436637ce3c3858edf0dbf168c3ac95a336fd53fe12eb0d1911d08965a42a5caa2790b5e05e34c09d8e08d8b2256525f308331267eb864d5eec3daff74b57f0bab3df58d08b2e67ee305d57223359b0f920121edb94d480e076a9bbeff07a3bd38380acb0dc974f5a59d36a47881b4595bc05812876bf7738c73aa5a304a7fac63e6bb374809bbc4a6df99f85ee5b3292c74e9f4e597da860b8c7e2a8227e588aacfd2279723703ed232b84340907c7e946bc58093efc35d9f8df1e79a52a28d6286cce4f4984859cf7707294594b031503d439eded9f1b0eced1547616cd3f7260e30f021bb30b0ffbf58514ac61e7ec223e54a638bf9431aa8848e1a291636e0b7ae1e35a8fc6842bff83baa7e5908ee2f6dca4b2e5e41dcbc308dd2727b5fa5eb9cea5d85f39ea5306261b09e16b900ef013e32bbe193cfc8d22efecd742df1f046648dd8ff2d0741c110c0e1b323a277a8012c04486282d7def8303fec671e57950c437f3c2e6ffc7c49520f348f77851b56cd31f85ff9e11c4b4c6c4407d0096c775c8b5d43ce36c80b8a3c82234936e8edacaf29f0d65ec000e3167875bcb2c87b50eaca55a660c2c3c9315433cab88f8cab68a613cbfb2b4542be23b332b35a84a847f51c1222bec69085640839f8979d3bcdacb923bdcf7faa20221c2e2693f5861a1ee225a9072bb2f0a740770e1a9fd4fbf3aa9c9c1b9a0bcdbf77f289070c0ce26d12880350e36cd839583758ccb175989e86827d3cd4c1bd87461d89ff8936f6f23973c946cb3ca3f1991f5e37e26d9cb821a0968e9226c00ea34b09af4bf2a500016c44a87b46eae010d1f7ef9e0da00588fee42f27c51bb4675a15e49bc4a193277041fe5b22f98a2fc6e387762b0450dd3b6892c68c07d9d70872d3213a193bc130876c4e91aecb848b113fdb2fb1614c1799363cc0f9382d613ec3e190832e0cf6bbc0f3468e260a76ee9081c8a8f8d1b0321fc1cb7cee9c6bd5739d56205e5bb0f29fa3c707077f838ad5e1e09fbb819fcc8cff110021d7eee52fef96e7924388cdb61e655d494e91081b799d50902a7e93c38943a87942005925b1b3552ad5ed44df6c2a783c53e3b809aaebd04ffca079fafb361f659bdef43dc159cdf26dfd9996726971eed7736128ce6328a7ef268910a83800ab1797404e59adae5da7d0f8e7c958353ec0d7204412c7ebe81aa9f0d2c2a46d11d0d8800625370a085838f71fc9a62e14a296b7d03fca12f37fd3a0cfc0ddae59301b53ddd50c2e93060dadda4364a2b0dab619b115dd1bad0b9a12a65b0c15dcbd74c175bda42ede788dd8a9f72e842cdaa5193ffff5e8e5b0e4d5b3f12332e544620beae40104c758ce2c8b71c1000c6611872c40cf4e80583ccd3dec101b1ee778e002226d4de379c857d8072b93337b1ed7d2dc8ec0e8789258ce9934ddc3060159836c5457b6369b41679cbaa7ec43fa9fe5d11a6978f6d1189a222a5e3b7f073e4cb1e2e0ec522f6f408b70aa17af947691798ef687261bbd1930928b9e0d0e0766bee8821acd882db4d3a8df412215b1e02345a158ea33fc82e38717bd2149de3c50f5250e602e0ad43f9aedc5592995418bcdd5909ac565cbd1772d64323c96410726bc5c67492a7bfc64cf37688e43463b71b440439c8c3ff1037345fbe45555b3baed2d1940329dfd35fc26aeb5645f835db9b7cd5cacf07f12d2fb76e089a4f491990055f2d320e6fabd62bc37e98205e851e202c150f317799ad714e8f4a8665a0b0fb0dfa91bdf8adbaf9a08b8bb31d3de89fb12fe94990053c094a9d2c9736fbccdef24634c15276ae849e4a1eb5c155d396678ab033319a94458197e2d3bf178b529e960bc512921ddbf09dd203d51ae627c1eac5e519ba2720694c4562861213a0fe3d1db7e9debda2f151970f41f78bc99615ba7087c1211417b4b63a3787077362f1368bd6bc37b90e9538928214521beda18f60a4f0079a45d67669b59b0338e345be825536604e7a35564b43fceab72f059d2a40d1fe6deb8dcace3d9cf6c213c7445983642341d2c38682daf9307d70a12f5425a57cd0f3ebb99969d6601e0b46c76969d2785923eb0b96f179508e406c293fe8543ed8e1005ce8e348b57efa0aba467ba3a759d2eaa0a85820716a9d3860417f56799146b8e666f60b24717d3bcf5b32d2d2e65ade9c2bf6c456db2b4e8646f580caf4a45cf85ec50dcb5f793042cd433261f65df45cefc7a71d0f1f7275ccc7c381946af1c0f8d7b45282ad3e6b379f4cf1d80de77a0e4f94999dc68b26b005c60e1eb889885d55bc5bf47dac8f851a058661bd1611c8e0ce167584eb935831b974282df36057c191d97411e2aa476a466a01e1aeee0e581d0d65f4b5d9c7ab0e16302ef0a144d465a9c33a0a52d7b734e320c80a90fe28522a9a02dcf67dcafe3737dfb68896d52bdf325d1de5290201fb0f6947047576c2df0d756804dedc40159b2288fc7d02b73fc520e72bf08cdbcbc6bd15631303284cee47be09ca7db002659f2845db572af1056ec61733a041c164e88bb01b419188f93c4c43c088628a41eff42ee64587cab5095e5cf5f2cbac8d733d7d57e3e42ef8758962ba67f0a3af86a87bc19078a32a09b0306e7981bd211ff5a4dd35c05403b29688fc3cdb563c76397fb0091c728ce4fa4c7927b34aac68d63e49b32852c37e2ddfc020af4a08f9a0e9d1df6b21b50b8fb1a6ea4e9564c5fff63671a7b99b5fd7c7c4019266d44e271174216cbe0ba2126cc2a669b10882c600e23b5f2e40d8f47ad998d949fbd47f44c78630c58d8b3868cc3a02b846cd17480baa2746cdd4ed7e89190a9c40e5e0b0ba107afbc35233ea5a143c8e90d178d43f7aed6f6fcabe126cc18a49b75487e3a1b0faea60b68c178d2ea1f1d52926aa1fd587a861a79d1a3cd91c11b450a1251af1a2b0944003b6ac9300bbad2dfb8b205f96160a22339d444a30a48d8ecf2560a0996229022fd0dd5d0f4a75992651d4e201e3406369f1afc4f21303d9065b9be95a32d13f81f1bbcf0fc2b01a1365757460f79eda6a4142faf1a8ef09613404577e88ccf3c1fb23f281a6a8fc568fb178fd7a4027815b796a6ce3ff5685f8ceeac32a66d9cb0f6610f36a74bbc8356009ba0a8496c9c37288b48769910a23559f9753abed677a95df1f3b0711e54724969ca549781e909986ae2ae5392d6e0a9c849c58af7f34e9d0840b7deed4ee09d71edff0782cfb95692b6dbd8072bca8a524b0a9791c95c9a0a5aa11c1e4860bf3da94ec3dac09e28c66d9d18bb1bc7f4ab5ba057f8cc71c3ed42b7bfb54169bdcd1af25fc45e292eda99cde3629798dd79f5b37f24d232a2016f761a2f1e32988ed87aae70cfa4d8d6075e99ddf02a8ffd40651077a9d91f18557fc8f8a219d2c71546e1d82427a1d5950b2a548f9aafd3f1601fc365f330ea67f1b2c86b918e88676fd55567b621396312c5178171f2a1c2783f058efd4fb278d03f5fa632e8f3ec6dcfc62c84b42662fe1ad3a783f7c7c46ee7fe342ea26d361f03fcf54d77ef25bd2d9cc289a452a2735a7fab7278fb752b1d82ac57be71c12f0e53064e0b1551ffc2f7743367b36585aa4ff48107596298202e5efa1fe1a33ef838155f808d364889ef4f62ea3eaa07f9105ac0c3bb9681f25a57844e544aca6e8d4bd67a791838ef3fd16e026da15115bac0e2716d7950259e69ff6cf7c396d570a69f37a470e25f504bae5b469cd4ce885939423734d3e36ff9929ef7f359e0f48ffd830a735aeef22b777ae0339a79eb4a41340dd059471d32fd57bd9077dad31685841134a38349a7baa64b2330deb51e759b14baf782d2533d9715e0ccb53a24cfa200d5d8bede108b3c70e2b670951964c88c10f055eed1d975b051749f413b0ed9f741a2158c0253cdbcec26a5274d4ac5506be4f93d5f01b1cebd2248b36ac30240af87a3234a32fe7ca1b6876ddff4fa3dcbcf9c83fde5329e6ab1422da6052ca7f1ac04bc55778568683c5faa7d7f4905b7f51f01889d64ddff1b165d82943a9e103e03eb53efff20f29e5d457de59ec44e9330d28e6e665325803e54ab5e645f5c70d2f547c08223c39bae013b20e182bf188428ace5a8a5f7b8e306f91876eb7608bea40e2258fc850c14fccc8498deaacb53ab63ff64cda7e35fcb45081e5ef0202d953661c7f17b83da626be40f89c4a3c8658c49cc05c13d5ffce7b6f4739f597842773c139e647aaaa554b4bce275f65058a73f9391e0bbbf12beec3bedc302d88a1683bf1abb7bd92edbead2db5751758"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r10, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0xa8e, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x14, 0x2a, [@cf={0x4, 0x6, {0x8, 0xa5, 0x7, 0x1}}, @mesh_id={0x72, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 122.307488ms ago: executing program 2 (id=6656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000500)=""/158}, 0x20) unshare(0x22020600) unshare(0x2a020400) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8914, 0x0) r2 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, '.\x00'}, 0x6e, 0x0}}], 0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x16, 0x1, 'cpuacct.usage_sys\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x400}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044804}, 0x0) 120.908211ms ago: executing program 3 (id=6657): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x4f90, 0x4) sendmmsg$inet(r0, &(0x7f0000003240), 0x0, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x12162, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x4f90, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000003240), 0x0, 0x4000800) (async) recvfrom(r0, 0x0, 0x0, 0x12162, 0x0, 0x0) (async) 120.432179ms ago: executing program 4 (id=6658): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'caif0\x00', {0x2, 0x4e22, @empty}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18) r5 = socket$kcm(0xa, 0x3, 0x87) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000)=0x200, 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x3) 28.357951ms ago: executing program 4 (id=6659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffd35, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4612bd791b6d2ed}, 0x40840) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 843.94µs ago: executing program 2 (id=6660): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x30, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}]}]}, {0x0, [0x30, 0x0, 0x0, 0x30]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) 0s ago: executing program 3 (id=6661): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440041, 0x0) write$tun(r1, &(0x7f0000001bc0)={@val={0x0, 0x8917}, @void, @ipv6=@generic={0x2, 0x6, "b661e9", 0x1259, 0x2, 0x0, @remote, @local, {[@routing={0x3c, 0x8, 0x0, 0x8, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}]}, @dstopts={0x3b, 0x21a, '\x00', [@generic={0x1, 0x1000, "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"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x2, 0x7f, [0x6, 0x2, 0x4]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x5, 0x5, [0xff, 0x8, 0x1, 0x6, 0x3ff, 0x955b, 0x3, 0x8, 0x8000000000000000]}}, @pad1, @generic={0x9, 0x50, "f6f3e93cacbdb766c14da3faffe568bf99ee1037e214714d8e84b3048cba181a47d12c858edd1387295a4302b5cff3e807df3616e419f5228ea57d0929d06c7a7c5a0f160f55c329ce99dc8642625102"}, @jumbo={0xc2, 0x4, 0x1}]}, @hopopts={0x32, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x20a, [0x80000001]}}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xb}, @pad1]}, @fragment={0x32, 0x0, 0x8, 0x0, 0x0, 0x1b, 0x67}, @dstopts={0x0, 0x0, '\x00', [@pad1]}, @srh={0x4, 0xa, 0x4, 0x5, 0xfb, 0x10, 0xdabb, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0, @empty, @private0]}, @routing={0x87, 0x4, 0x0, 0x2, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}]}], "4bff95596ccaa95c17562d18565cbe140bcf2f0e87c11b99add8a6d9a06f8609da147da92993082251e799556aee90345b53093fe5ad5cc488fa5fef41b5a9e01ac272031e7717b03923e1d91ff0868a652bb6f773e04fdb49f91c8f0ad105f4a7"}}}, 0x1285) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000000)='b', 0x1) setsockopt$inet6_int(r3, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000bc0)={{r7}, r8, 0x1a, @inherit={0x60, &(0x7f0000000600)={0x1, 0x3, 0xbd, 0x80000001, {0x4, 0x8000, 0xd8, 0x3, 0x2}, [0x6, 0x5, 0x3]}}, @devid}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x86, 0x4, 0x8000000000000000, 0x1, 0x4, 0xe4, 0xfff}, &(0x7f0000000300)={0x2, 0x22, 0x8000000000000001, 0x9, 0x1, 0x6, 0xfffffffffffffffc, 0x3}, &(0x7f00000003c0)={0xfffffffffffff001, 0x2, 0x3, 0x1, 0x3, 0x0, 0x80000001, 0x7}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x9b6f]}, 0x8}) kernel console output (not intermixed with test programs): an invalid length. [ 718.206687][T17921] bond0: (slave syz_tun): Releasing backup interface [ 747.239175][ T1305] net_ratelimit: 48 callbacks suppressed [ 747.239195][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 772.848587][T17466] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.895140][T17466] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.960996][T17466] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.002159][T17466] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.168163][T17466] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 773.299013][T17466] bond1 (unregistering): (slave gretap1): Releasing active interface [ 773.320307][T17466] bond6 (unregistering): (slave gretap2): Releasing active interface [ 773.340661][T17466] bond10 (unregistering): (slave gretap3): Releasing active interface [ 773.740007][T17466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.749092][T17466] bond_slave_0: left promiscuous mode [ 773.754599][T17466] bond_slave_0: left allmulticast mode [ 773.761939][T17466] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 773.770640][T17466] dummy0: left promiscuous mode [ 773.775606][T17466] dummy0: left allmulticast mode [ 773.781862][T17466] bond0 (unregistering): (slave team0): Releasing backup interface [ 773.792482][T17466] team0: left promiscuous mode [ 773.797386][T17466] team_slave_0: left promiscuous mode [ 773.802921][T17466] team_slave_1: left promiscuous mode [ 773.808765][T17466] team0: left allmulticast mode [ 773.813618][T17466] team_slave_0: left allmulticast mode [ 773.819841][T17466] team_slave_1: left allmulticast mode [ 773.826375][T17466] bond0 (unregistering): Released all slaves [ 773.840216][T17466] bond1 (unregistering): Released all slaves [ 773.943977][T17466] bond2 (unregistering): Released all slaves [ 774.043408][T17466] bond3 (unregistering): Released all slaves [ 774.143254][T17466] bond4 (unregistering): (slave bond5): Releasing backup interface [ 774.151940][T17466] bond5 (unregistering): left promiscuous mode [ 774.159212][T17466] bond4 (unregistering): Released all slaves [ 774.259098][T17466] bond5 (unregistering): Released all slaves [ 774.358795][T17466] bond6 (unregistering): Released all slaves [ 774.457082][T17466] bond7 (unregistering): (slave bond8): Releasing backup interface [ 774.465507][T17466] bond8 (unregistering): left promiscuous mode [ 774.472100][T17466] bond7 (unregistering): Released all slaves [ 774.570165][T17466] bond8 (unregistering): Released all slaves [ 774.584562][T17466] bond9 (unregistering): Released all slaves [ 774.687392][T17466] bond10 (unregistering): Released all slaves [ 774.783449][T17466] bond11 (unregistering): Released all slaves [ 774.928981][T17466] !©9: left promiscuous mode [ 774.985615][T17466] tipc: Disabling bearer [ 774.997359][T17466] tipc: Left network mode [ 775.207588][T17466] hsr_slave_0: left promiscuous mode [ 775.213502][T17466] hsr_slave_1: left promiscuous mode [ 775.219525][T17466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.227658][T17466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.529713][T17466] team0 (unregistering): Port device team_slave_1 removed [ 775.571755][T17466] team0 (unregistering): Port device team_slave_0 removed [ 776.149785][T17466] IPVS: stop unused estimator thread 0... [ 805.810101][T25731] xt_l2tp: v2 doesn't support IP mode [ 805.843446][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 805.853967][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 805.863848][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 805.872478][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 805.880825][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.940598][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.951858][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 805.966566][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 805.974396][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 805.983533][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 805.991294][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 806.002971][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 806.011812][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 806.024970][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 806.036885][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 806.591893][ T30] audit: type=1107 audit(1766061003.777:77): pid=25748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='³ûH¸¿ã' [ 806.597249][T25732] chnl_net:caif_netlink_parms(): no params data found [ 806.946828][T25732] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.956643][T25732] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.964612][T25732] bridge_slave_0: entered allmulticast mode [ 806.973215][T25732] bridge_slave_0: entered promiscuous mode [ 807.002783][T25732] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.010899][T25732] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.018181][T25732] bridge_slave_1: entered allmulticast mode [ 807.026580][T25732] bridge_slave_1: entered promiscuous mode [ 807.045504][T25766] syzkaller1: entered promiscuous mode [ 807.052559][T25766] syzkaller1: entered allmulticast mode [ 807.067855][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5122'. [ 807.112439][T25766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5122'. [ 807.180514][T25732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.204802][T25732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.296567][T25732] team0: Port device team_slave_0 added [ 807.329404][T25732] team0: Port device team_slave_1 added [ 807.439082][T25732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.447703][T25732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.474493][T25732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.531934][T25732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.539065][T25732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.567423][T25732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.613478][T25734] chnl_net:caif_netlink_parms(): no params data found [ 807.917857][T25732] hsr_slave_0: entered promiscuous mode [ 807.924911][T25732] hsr_slave_1: entered promiscuous mode [ 807.931939][T25732] debugfs: 'hsr0' already exists in 'hsr' [ 807.939374][T25732] Cannot create hsr debugfs directory [ 807.956533][ T5851] Bluetooth: hci0: command tx timeout [ 808.036268][ T5851] Bluetooth: hci1: command tx timeout [ 808.107216][T25735] chnl_net:caif_netlink_parms(): no params data found [ 808.116386][ T5851] Bluetooth: hci2: command tx timeout [ 808.146874][T25734] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.154143][T25734] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.162224][T25734] bridge_slave_0: entered allmulticast mode [ 808.171113][T25734] bridge_slave_0: entered promiscuous mode [ 808.199005][T25734] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.206524][T25734] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.213801][T25734] bridge_slave_1: entered allmulticast mode [ 808.222535][T25734] bridge_slave_1: entered promiscuous mode [ 808.345882][T25785] netlink: 'syz.4.5126': attribute type 33 has an invalid length. [ 808.353817][T25785] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5126'. [ 808.367142][T25734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.402753][T25734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.678829][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.794167][T25735] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.802499][T25735] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.809892][T25735] bridge_slave_0: entered allmulticast mode [ 808.818605][T25735] bridge_slave_0: entered promiscuous mode [ 808.829747][T25734] team0: Port device team_slave_0 added [ 808.853288][T25735] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.861107][T25735] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.868376][T25735] bridge_slave_1: entered allmulticast mode [ 808.876265][T25735] bridge_slave_1: entered promiscuous mode [ 808.885891][T25734] team0: Port device team_slave_1 added [ 808.981636][T25735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.000199][T25732] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.010883][T25732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.029407][T25734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.036726][T25734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.063355][T25734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.093114][T25735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.104192][T25734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.111614][T25734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.138714][T25734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.188077][T25732] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.198497][T25732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.302528][T25735] team0: Port device team_slave_0 added [ 809.314903][T25735] team0: Port device team_slave_1 added [ 809.352038][T25732] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.376894][T25732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.416709][T25796] netlink: 'syz.3.5127': attribute type 1 has an invalid length. [ 809.424473][T25796] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5127'. [ 809.442514][T25797] netlink: 'syz.3.5127': attribute type 1 has an invalid length. [ 809.451249][T25797] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5127'. [ 809.539821][T25734] hsr_slave_0: entered promiscuous mode [ 809.559915][T25734] hsr_slave_1: entered promiscuous mode [ 809.570342][T25734] debugfs: 'hsr0' already exists in 'hsr' [ 809.578358][T25734] Cannot create hsr debugfs directory [ 809.604036][T25797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5127'. [ 809.616334][T25796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5127'. [ 809.629836][T25732] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.657854][T25732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.684763][T25735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.696576][T25735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.724317][T25735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.738002][T25798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5127'. [ 809.764221][T25735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.772514][T25735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.799362][T25735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.930552][T25735] hsr_slave_0: entered promiscuous mode [ 809.937767][T25735] hsr_slave_1: entered promiscuous mode [ 809.944217][T25735] debugfs: 'hsr0' already exists in 'hsr' [ 809.950070][T25735] Cannot create hsr debugfs directory [ 810.036600][ T5851] Bluetooth: hci0: command tx timeout [ 810.117801][ T5851] Bluetooth: hci1: command tx timeout [ 810.159380][T25814] netlink: 'syz.3.5132': attribute type 1 has an invalid length. [ 810.196472][ T5851] Bluetooth: hci2: command tx timeout [ 810.219844][T25814] bond7: entered promiscuous mode [ 810.225338][T25814] 8021q: adding VLAN 0 to HW filter on device bond7 [ 810.271717][T25814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 810.279058][T25814] IPv6: NLM_F_CREATE should be set when creating new route [ 810.286352][T25814] IPv6: NLM_F_CREATE should be set when creating new route [ 810.295538][T25814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 810.310651][T25819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 810.321294][T25819] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 810.332915][T25819] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 810.349602][T25819] bond7: (slave wireguard0): making interface the new active one [ 810.358143][T25819] wireguard0: entered promiscuous mode [ 810.365112][T25819] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 810.413578][T25814] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 810.427569][T25814] bond7: (slave wireguard1): Enslaving as a backup interface with an up link [ 810.477711][T25732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 810.520827][T25732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 810.537706][T25732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 810.575484][T25732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 810.737421][T25841] batadv_slave_0: left promiscuous mode [ 810.744159][T25841] .70·: left promiscuous mode [ 810.756646][T25841] veth1_vlan: left allmulticast mode [ 810.783711][T25841] bond3: left promiscuous mode [ 810.813873][T25841] bond7: left promiscuous mode [ 810.820086][T25841] wireguard0: left promiscuous mode [ 810.837485][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5134'. [ 810.864039][T17466] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.890960][T17466] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.914771][T17466] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.924598][T17466] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.097791][T25732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.203370][T25732] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.218023][T17451] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.225162][T17451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.251442][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.258673][ T8263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.339221][T25851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5136'. [ 811.360835][T25851] ip6gretap1: entered allmulticast mode [ 811.627146][T25734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 811.648128][T25734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 811.677645][T25734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 811.756410][T25734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 811.985622][T25735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 812.004191][T25735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 812.032888][T25735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 812.058937][T25732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.073394][T25735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 812.116566][ T5851] Bluetooth: hci0: command tx timeout [ 812.196241][ T5851] Bluetooth: hci1: command tx timeout [ 812.276281][ T5851] Bluetooth: hci2: command tx timeout [ 812.329773][T25732] veth0_vlan: entered promiscuous mode [ 812.416387][T25732] veth1_vlan: entered promiscuous mode [ 812.438523][T25734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.506617][T25734] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.548576][T25735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.569924][T25735] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.612946][T17466] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.620161][T17466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.632676][T17466] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.639878][T17466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.665350][T17466] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.672565][T17466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.704620][T25732] veth0_macvtap: entered promiscuous mode [ 812.748229][T17467] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.755490][T17467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.816141][T25732] veth1_macvtap: entered promiscuous mode [ 812.903833][T25732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.968408][T25732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.010324][T17466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.037708][T17466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.165027][T17466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.216554][T17466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.443651][T25900] netlink: 'syz.4.5147': attribute type 2 has an invalid length. [ 813.472154][T25900] : entered promiscuous mode [ 813.509878][T17466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.528013][T25735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.545068][T17466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.569098][T25734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.673608][T25906] tipc: Enabled bearer , priority 0 [ 813.688052][T25906] syzkaller0: entered promiscuous mode [ 813.693552][T25906] syzkaller0: entered allmulticast mode [ 813.788456][T25906] tipc: Resetting bearer [ 813.809347][T25905] tipc: Resetting bearer [ 813.824044][T25905] tipc: Disabling bearer [ 813.858744][T25735] veth0_vlan: entered promiscuous mode [ 813.928976][T25735] veth1_vlan: entered promiscuous mode [ 813.976340][T25734] veth0_vlan: entered promiscuous mode [ 814.043424][T25734] veth1_vlan: entered promiscuous mode [ 814.079682][T25734] veth0_macvtap: entered promiscuous mode [ 814.101521][T25735] veth0_macvtap: entered promiscuous mode [ 814.134557][T25734] veth1_macvtap: entered promiscuous mode [ 814.162366][T25735] veth1_macvtap: entered promiscuous mode [ 814.239154][T25928] block nbd8: Unsupported socket: should be TCP or UNIX. [ 814.239835][T17464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.276177][ T52] Bluetooth: hci1: command tx timeout [ 814.338326][T25734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.355689][T25735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.356806][ T52] Bluetooth: hci2: command tx timeout [ 814.386627][T25734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.412924][T17464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.447394][T25735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.459313][ T8273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.468653][ T8273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.546620][T17464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.585064][ T8273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.609667][ T8273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.688605][T17464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.716970][T25936] __nla_validate_parse: 1 callbacks suppressed [ 814.716989][T25936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5155'. [ 814.778315][T17467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.795904][T17467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.808847][T17467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.826230][T17467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.950553][T25739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 814.970885][T25739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 814.980314][T25739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 814.990205][T25739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 814.998745][T25739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 815.060197][T25941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 815.110839][T25943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5156'. [ 815.182053][ T8271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.211360][ T8271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.279829][T17464] bridge_slave_1: left allmulticast mode [ 815.285661][T17464] bridge_slave_1: left promiscuous mode [ 815.293257][T17464] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.309686][T17464] bridge_slave_0: left allmulticast mode [ 815.315340][T17464] bridge_slave_0: left promiscuous mode [ 815.322251][T17464] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.729912][T17464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.741932][T17464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.752389][T17464] bond0 (unregistering): Released all slaves [ 815.773889][ T8273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.795538][ T8273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.859612][ T8271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.870751][ T8271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.061686][ T8263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.092668][ T8263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.214574][T25971] netlink: 'syz.4.5161': attribute type 8 has an invalid length. [ 816.284147][T25973] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 816.300523][T25973] bond8 (unregistering): Released all slaves [ 816.438748][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 816.660036][T25979] syzkaller0: entered promiscuous mode [ 816.665597][T25979] syzkaller0: entered allmulticast mode [ 816.685279][T25996] netlink: 'syz.0.5109': attribute type 16 has an invalid length. [ 816.698789][T25996] netlink: 'syz.0.5109': attribute type 17 has an invalid length. [ 816.734694][T25987] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.745567][T25987] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.791367][T25993] tipc: Enabled bearer , priority 0 [ 816.833693][T17464] hsr_slave_0: left promiscuous mode [ 816.840601][T17464] hsr_slave_1: left promiscuous mode [ 816.847605][T17464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.855022][T17464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.864481][T17464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.872706][T17464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.966326][T17464] veth1_macvtap: left promiscuous mode [ 816.972011][T17464] veth0_macvtap: left promiscuous mode [ 816.978779][T17464] veth1_vlan: left promiscuous mode [ 816.992511][T17464] veth0_vlan: left promiscuous mode [ 817.076615][ T5851] Bluetooth: hci0: command tx timeout [ 817.560241][T17464] team0 (unregistering): Port device team_slave_1 removed [ 817.599331][T17464] team0 (unregistering): Port device team_slave_0 removed [ 817.991684][T25996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.031909][T25993] tipc: Disabling bearer [ 818.189259][T26011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5169'. [ 818.202134][T26011] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 819.157414][ T5851] Bluetooth: hci0: command tx timeout [ 819.651452][T26013] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 819.780677][T26026] netlink: 'syz.4.5171': attribute type 1 has an invalid length. [ 819.833550][T26030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5172'. [ 819.948882][T26026] bond6: entered promiscuous mode [ 819.954361][T26026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 819.983391][T26033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 819.991375][T26033] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 820.002573][T26033] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 820.016647][T26033] bond6: (slave wireguard0): making interface the new active one [ 820.024439][T26033] wireguard0: entered promiscuous mode [ 820.032470][T26033] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 820.060553][T26036] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 820.074602][T26036] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 820.230084][T25938] chnl_net:caif_netlink_parms(): no params data found [ 820.334973][T17464] veth3: left allmulticast mode [ 820.356015][T17464] veth3: left promiscuous mode [ 820.361235][T17464] bridge0: port 2(veth3) entered disabled state [ 820.478757][T17464] ip6gretap5: left allmulticast mode [ 820.511892][T17464] ip6gretap5: left promiscuous mode [ 820.528300][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5179'. [ 820.557909][T17464] bridge0: port 1(ip6gretap5) entered disabled state [ 820.599974][T26072] netlink: 'syz.3.5179': attribute type 2 has an invalid length. [ 820.643449][T26072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5179'. [ 820.790967][T26086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5181'. [ 820.988902][T17464] bond10 (unregistering): (slave gretap1): Releasing active interface [ 821.089014][T17464] dvmrp0 (unregistering): left allmulticast mode [ 821.140277][T26098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5185'. [ 821.237366][ T5851] Bluetooth: hci0: command tx timeout [ 821.437400][T26109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5188'. [ 821.490645][T17464] bond5 (unregistering): (slave macvlan2): Releasing backup interface [ 821.516325][T17464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.525414][T17464] bond_slave_0: left promiscuous mode [ 821.535240][T17464] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 821.546411][T17464] @0Ù: left promiscuous mode [ 821.553753][T17464] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 821.562815][T17464] dummy0: left promiscuous mode [ 821.571771][T17464] bond0 (unregistering): Released all slaves [ 821.592196][T17464] bond1 (unregistering): Released all slaves [ 821.607630][T17464] bond2 (unregistering): Released all slaves [ 821.621989][T17464] bond3 (unregistering): Released all slaves [ 821.738562][T17464] bond4 (unregistering): Released all slaves [ 821.841721][T17464] bond5 (unregistering): Released all slaves [ 821.857074][T17464] bond6 (unregistering): Released all slaves [ 821.872158][T17464] bond7 (unregistering): Released all slaves [ 821.978981][T17464] bond8 (unregistering): Released all slaves [ 822.078351][T17464] bond9 (unregistering): Released all slaves [ 822.092650][T17464] bond10 (unregistering): Released all slaves [ 822.192654][T17464] bond11 (unregistering): Released all slaves [ 822.237005][T26083] veth3: entered promiscuous mode [ 822.259583][T26097] dvmrp0: left allmulticast mode [ 822.322095][T26111] netlink: 'syz.2.5189': attribute type 1 has an invalid length. [ 822.472375][T17464] æÿîÿ: left promiscuous mode [ 822.533613][T26126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5192'. [ 822.542997][T17464] 9: left promiscuous mode [ 822.546236][T26119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5191'. [ 822.549003][T26126] netlink: 'syz.0.5192': attribute type 13 has an invalid length. [ 822.566666][T26126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5192'. [ 822.597345][T26118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5191'. [ 822.698999][T26118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 822.706749][T17464] tipc: Left network mode [ 822.773912][T17449] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.796257][T17449] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.908197][T26142] netlink: 'syz.4.5195': attribute type 21 has an invalid length. [ 823.033175][T25938] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.046820][T25938] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.062550][T25938] bridge_slave_0: entered allmulticast mode [ 823.081896][T26150] netlink: 'syz.4.5195': attribute type 10 has an invalid length. [ 823.088680][T25938] bridge_slave_0: entered promiscuous mode [ 823.113355][T25938] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.127153][T25938] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.134579][T25938] bridge_slave_1: entered allmulticast mode [ 823.150898][T25938] bridge_slave_1: entered promiscuous mode [ 823.159651][T17449] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.177228][T26144] ip6tnl1: entered allmulticast mode [ 823.208627][T26146] ªªªªªª: renamed from wg2 [ 823.245630][T26150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.255539][T26146] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 823.267993][T26150] batadv0: entered promiscuous mode [ 823.288091][T26150] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 823.316606][ T5851] Bluetooth: hci0: command tx timeout [ 823.377750][T26153] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 823.391631][T26153] bond1 (unregistering): Released all slaves [ 823.449898][T17449] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.601598][T25938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.680568][T25938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.707573][T26172] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 823.750249][T26177] netlink: 'syz.4.5204': attribute type 1 has an invalid length. [ 823.785514][T26169] netlink: 'syz.0.5202': attribute type 10 has an invalid length. [ 823.805559][T25938] team0: Port device team_slave_0 added [ 823.982704][T25938] team0: Port device team_slave_1 added [ 824.212823][T25938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.244354][T25938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.302639][T25938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.374949][T25938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.402159][T25938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.469649][T25938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.483512][T26199] veth0_to_bridge: entered promiscuous mode [ 824.752518][T17464] hsr_slave_0: left promiscuous mode [ 824.769652][T17464] hsr_slave_1: left promiscuous mode [ 824.781896][T17464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.103078][T26211] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 825.723275][T26198] veth0_to_bridge: left promiscuous mode [ 825.950839][T26221] bond7: Removing last arp target with arp_interval on [ 825.981446][T26221] bond7: entered promiscuous mode [ 825.988795][T26221] bond7: entered allmulticast mode [ 825.994498][T26221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 826.075429][T25938] hsr_slave_0: entered promiscuous mode [ 826.123020][T25938] hsr_slave_1: entered promiscuous mode [ 826.143826][T25938] debugfs: 'hsr0' already exists in 'hsr' [ 826.153326][T25938] Cannot create hsr debugfs directory [ 826.247688][T26239] tipc: Started in network mode [ 826.263920][T26239] tipc: Node identity 26826eb90eaf, cluster identity 4711 [ 826.273047][T26239] tipc: Enabled bearer , priority 0 [ 826.281296][T26237] syzkaller0: entered promiscuous mode [ 826.288403][T26237] syzkaller0: entered allmulticast mode [ 826.326675][T26242] geneve2: entered promiscuous mode [ 826.383563][ T8273] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.420555][T26237] tipc: Resetting bearer [ 826.438423][ T8273] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.461264][T26233] tipc: Resetting bearer [ 826.483473][T26233] tipc: Disabling bearer [ 826.499785][ T8273] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.512366][ T8273] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.584816][T17464] IPVS: stop unused estimator thread 0... [ 826.981221][T26263] Bluetooth: MGMT ver 1.23 [ 827.134505][T26267] __nla_validate_parse: 6 callbacks suppressed [ 827.134529][T26267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5230'. [ 827.209538][T26267] syzkaller0: entered promiscuous mode [ 827.215061][T26267] syzkaller0: entered allmulticast mode [ 827.274908][T25938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 827.317688][T26270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5231'. [ 827.340429][T25938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 827.352348][T25938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 827.373571][T25938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 827.504571][T26280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5233'. [ 827.634829][T25938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.673832][T26288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5236'. [ 827.703548][T25938] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.732182][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.739406][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.793592][T17466] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.800941][T17466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.951115][T26293] team0 (unregistering): Port device team_slave_0 removed [ 828.005970][T26293] team0 (unregistering): Port device team_slave_1 removed [ 828.410889][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5241'. [ 828.447112][T26309] netlink: 'syz.3.5241': attribute type 1 has an invalid length. [ 828.820038][T26316] netlink: 'syz.2.5243': attribute type 10 has an invalid length. [ 828.838685][T26316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5243'. [ 828.950631][T26316] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 829.008812][T25938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.142914][T25938] veth0_vlan: entered promiscuous mode [ 829.163912][T25938] veth1_vlan: entered promiscuous mode [ 829.298289][T25938] veth0_macvtap: entered promiscuous mode [ 829.331605][T25938] veth1_macvtap: entered promiscuous mode [ 829.427524][T25938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.439516][T26336] syzkaller0: entered promiscuous mode [ 829.445045][T26336] syzkaller0: entered allmulticast mode [ 829.495586][T25938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.532676][T26336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5249'. [ 829.548447][ T8263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.562403][ T8263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.592658][T26343] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 829.607271][T26343] bridge3: entered allmulticast mode [ 829.614263][ T8263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.655401][ T8263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.708544][T26346] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 829.867446][T26346] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 830.188714][T17457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.199355][T17457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.320161][T17451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.341746][T17451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.664374][T26381] IPv6: addrconf: prefix option has invalid lifetime [ 830.763561][T26386] netlink: 'syz.0.5261': attribute type 3 has an invalid length. [ 830.791249][T26386] tipc: Enabled bearer , priority 0 [ 830.806989][T26386] netlink: 'syz.0.5261': attribute type 8 has an invalid length. [ 830.978714][T26386] syzkaller0: entered promiscuous mode [ 830.995166][T26386] syzkaller0: entered allmulticast mode [ 831.017015][T26386] tipc: Resetting bearer [ 831.099183][T26392] tipc: Resetting bearer [ 832.522200][T26413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5266'. [ 832.577123][T26413] netlink: 'syz.4.5266': attribute type 1 has an invalid length. [ 833.177771][T26427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5269'. [ 834.193793][T26392] tipc: Disabling bearer [ 834.211151][ T7572] tipc: Node number set to 674066105 [ 834.218589][T26409] pim6reg1: entered promiscuous mode [ 834.223943][T26409] pim6reg1: entered allmulticast mode [ 834.253444][T26421] syzkaller1: entered promiscuous mode [ 834.263224][T26421] syzkaller1: entered allmulticast mode [ 913.204791][T26439] syzkaller0: entered promiscuous mode [ 913.221289][T26439] syzkaller0: entered allmulticast mode [ 913.320968][T26442] netlink: 'syz.2.5276': attribute type 1 has an invalid length. [ 913.435160][T26447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5276'. [ 913.514464][T26442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 913.537586][T26449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'. [ 913.646164][T26449] veth3: entered promiscuous mode [ 913.700659][T26442] tipc: Started in network mode [ 913.735918][T26442] tipc: Node identity 120d97a8a556, cluster identity 4711 [ 913.757307][T26442] tipc: Enabled bearer , priority 0 [ 913.889354][T26464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 913.958077][T26447] syzkaller0: entered promiscuous mode [ 913.984116][T26447] syzkaller0: entered allmulticast mode [ 914.000791][T26447] tipc: Resetting bearer [ 914.028366][T26465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5279'. [ 914.069238][T26466] macsec1: entered promiscuous mode [ 914.074584][T26466] macsec1: entered allmulticast mode [ 914.084916][T26441] tipc: Resetting bearer [ 914.126163][T26470] nbd8: detected capacity change from 0 to 3 [ 914.159961][ T5851] block nbd8: Receive control failed (result -32) [ 914.381593][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5285'. [ 914.389487][T26486] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5287'. [ 914.987323][T26497] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5289'. [ 915.903250][T26441] tipc: Disabling bearer [ 915.918072][ T7596] tipc: Node number set to 3076233128 [ 916.196676][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.527390][T26526] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5298'. [ 916.632897][T26525] IPVS: persistence engine module ip_vs_pe_ not found [ 916.814396][T26544] netlink: 'syz.1.5302': attribute type 16 has an invalid length. [ 916.825639][T26542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5301'. [ 916.846075][T26544] netlink: 'syz.1.5302': attribute type 3 has an invalid length. [ 916.854137][T26544] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.5302'. [ 917.792127][T26573] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.838422][T26573] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.949565][T26579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5312'. [ 918.434617][T26602] erspan0: left promiscuous mode [ 918.493136][T26602] .70·: left allmulticast mode [ 918.516162][T26602] hsr_slave_0: left allmulticast mode [ 918.531900][T26602] hsr_slave_1: left allmulticast mode [ 918.549847][T26602] vlan2: left promiscuous mode [ 918.557898][T26610] __nla_validate_parse: 1 callbacks suppressed [ 918.557947][T26610] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5319'. [ 918.583509][T26602] bond0: left promiscuous mode [ 918.588779][T26602] batadv0: left promiscuous mode [ 918.595411][T26602] batadv1: left allmulticast mode [ 918.614206][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5319'. [ 918.636894][T26602] bond3: left promiscuous mode [ 918.641716][T26602] bond3: left allmulticast mode [ 918.648939][T26602] macvlan0: left promiscuous mode [ 918.655447][T26602] bond6: left promiscuous mode [ 918.685435][T26602] wireguard0: left promiscuous mode [ 918.751573][T26602] bond7: left promiscuous mode [ 918.764136][T26602] bond7: left allmulticast mode [ 918.909037][T26602] bridge3: left allmulticast mode [ 918.915338][T26602] macsec1: left promiscuous mode [ 918.920777][T26602] macsec1: left allmulticast mode [ 919.247080][T26620] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 919.288786][T26623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5323'. [ 919.524744][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5326'. [ 919.577880][T26632] syzkaller0: entered promiscuous mode [ 919.584106][T26632] syzkaller0: entered allmulticast mode [ 919.590039][T26634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5326'. [ 919.938118][T26639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5327'. [ 920.413759][T26637] veth0: entered promiscuous mode [ 920.435033][T26640] batadv_slave_0: entered promiscuous mode [ 920.467238][T26640] batadv_slave_0: left promiscuous mode [ 920.478728][T26640] veth0: left promiscuous mode [ 920.634552][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5329'. [ 920.761803][T26655] xt_TCPMSS: Only works on TCP SYN packets [ 920.901755][T26659] tipc: Enabled bearer , priority 0 [ 920.914084][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'. [ 920.963443][T26659] syzkaller0: entered promiscuous mode [ 920.972002][T26659] syzkaller0: entered allmulticast mode [ 921.174795][T26659] tipc: Resetting bearer [ 921.303654][T26657] tipc: Resetting bearer [ 921.445227][T26657] tipc: Disabling bearer [ 921.649242][T26689] syzkaller1: entered promiscuous mode [ 921.666134][T26689] syzkaller1: entered allmulticast mode [ 921.717623][T26694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5341'. [ 921.757159][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 922.300237][T26722] bond2: option mode: invalid value (254) [ 922.335263][T26722] bond2 (unregistering): Released all slaves [ 922.673390][T26737] netlink: 'syz.4.5355': attribute type 3 has an invalid length. [ 923.542268][T26778] xt_TCPMSS: Only works on TCP SYN packets [ 923.636386][T26782] __nla_validate_parse: 5 callbacks suppressed [ 923.636407][T26782] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5367'. [ 923.760891][T26782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 923.961727][T26792] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 923.976177][T26792] bond9 (unregistering): Released all slaves [ 924.017431][T26797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.074186][T26798] bond0: (slave batadv0): Releasing backup interface [ 924.091842][T26798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 924.210576][T26805] vlan2: entered promiscuous mode [ 924.225878][T26805] vlan2: entered allmulticast mode [ 924.231250][T26805] hsr_slave_1: entered allmulticast mode [ 924.240504][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5373'. [ 924.276795][T26811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5374'. [ 924.532219][T26822] syzkaller0: entered promiscuous mode [ 924.539923][T26822] syzkaller0: entered allmulticast mode [ 924.588483][T26825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5378'. [ 924.601151][T26826] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5378'. [ 924.884262][T26838] macvlan1: entered promiscuous mode [ 924.930635][T26838] macvlan1: left promiscuous mode [ 925.501968][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5386'. [ 925.691646][T26869] netlink: 'syz.0.5391': attribute type 1 has an invalid length. [ 925.788760][T26869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.913260][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5393'. [ 925.929857][T26881] netlink: 'syz.0.5394': attribute type 9 has an invalid length. [ 925.953001][T26881] netlink: 'syz.0.5394': attribute type 6 has an invalid length. [ 926.516141][T25737] Bluetooth: hci0: command tx timeout [ 927.697085][T26922] bond1: (slave veth3): Enslaving as an active interface with a down link [ 927.834969][T26926] bond1: (slave ip6gretap1): making interface the new active one [ 927.866998][T26926] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 928.108685][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 928.191595][T26952] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5408'. [ 928.519729][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 928.530098][T25737] Bluetooth: hci1: command 0x0406 tx timeout [ 928.731536][T26976] dvmrp12: entered allmulticast mode [ 928.743870][T26973] dvmrp12: left allmulticast mode [ 929.001829][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5417'. [ 929.036748][T26986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5418'. [ 929.127746][T26992] netlink: 'syz.4.5419': attribute type 1 has an invalid length. [ 929.209260][T27003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5421'. [ 929.223268][T26992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 929.348843][T26992] veth3: entered promiscuous mode [ 929.471248][T17464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.493626][T17464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.502055][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5426'. [ 929.692853][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 930.127747][T27063] x_tables: ip_tables: ah match: only valid for protocol 51 [ 930.137864][T27063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5435'. [ 931.657210][T27122] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5447'. [ 931.733888][T27122] netlink: 'syz.3.5447': attribute type 3 has an invalid length. [ 932.005819][T27141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5452'. [ 932.043592][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5452'. [ 932.139525][T27148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5454'. [ 932.303602][T27152] tipc: Enabled bearer , priority 0 [ 932.323474][T27152] syzkaller0: entered promiscuous mode [ 932.344380][T27152] syzkaller0: entered allmulticast mode [ 933.106842][T27151] tipc: Resetting bearer [ 933.153289][T27151] tipc: Disabling bearer [ 933.677182][T27209] bond9 (unregistering): Released all slaves [ 933.820848][T27229] netlink: 'syz.4.5476': attribute type 1 has an invalid length. [ 933.919059][T27237] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 933.933150][T27244] xt_hashlimit: overflow, try lower: 3/0 [ 933.946305][T27237] bond9: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 933.961869][T27237] bond9: (slave vcan1): making interface the new active one [ 933.976856][T27237] bond9: (slave vcan1): Enslaving as an active interface with an up link [ 933.993737][T27229] bond9: (slave vcan2): The slave device specified does not support setting the MAC address [ 934.022196][T27229] bond9: (slave vcan2): Enslaving as a backup interface with an up link [ 934.034275][T27237] 8021q: adding VLAN 0 to HW filter on device bond9 [ 934.201015][T27261] __nla_validate_parse: 5 callbacks suppressed [ 934.201029][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5484'. [ 934.979242][T27285] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 935.029937][T27285] syzkaller0: entered promiscuous mode [ 935.035483][T27285] syzkaller0: entered allmulticast mode [ 937.412255][T27335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5499'. [ 939.555518][T27343] vetè0_virt_wif: renamed from lo [ 939.626571][T27365] syzkaller0: entered promiscuous mode [ 939.632096][T27365] syzkaller0: entered allmulticast mode [ 939.880929][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 939.955105][T27377] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5510'. [ 940.050454][T27382] tipc: New replicast peer: 255.255.255.255 [ 940.071762][T27382] tipc: Enabled bearer , priority 10 [ 940.109958][T27383] netlink: 'syz.2.5511': attribute type 11 has an invalid length. [ 940.152326][T27383] netlink: 'syz.2.5511': attribute type 11 has an invalid length. [ 940.182210][T27390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5512'. [ 940.191263][T27383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5511'. [ 940.295846][T27390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5512'. [ 940.350662][T27393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5512'. [ 940.553677][T27396] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 940.586157][T27396] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 940.616425][T27396] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 940.952766][T27403] netlink: 'syz.0.5515': attribute type 14 has an invalid length. [ 942.031226][T27456] netlink: 'syz.4.5527': attribute type 21 has an invalid length. [ 942.154358][T27459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5527'. [ 942.186055][T27459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5527'. [ 942.246192][T27456] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5527'. [ 942.255864][T27456] netlink: 'syz.4.5527': attribute type 1 has an invalid length. [ 942.711493][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5531'. [ 942.743581][T27473] tipc: Started in network mode [ 942.749638][T27473] tipc: Node identity ac14140f, cluster identity 4711 [ 942.757211][T27473] tipc: New replicast peer: 255.255.255.255 [ 942.763973][T27473] tipc: Enabled bearer , priority 10 [ 942.775394][T27478] netlink: 'syz.1.5529': attribute type 1 has an invalid length. [ 942.796458][T27478] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5529'. [ 942.866624][T27477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 942.903668][T27479] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 943.039515][T27494] netlink: 'syz.0.5535': attribute type 1 has an invalid length. [ 943.373189][T27487] bond2 (unregistering): (slave vlan0): Releasing backup interface [ 943.390381][T27487] bond2 (unregistering): Released all slaves [ 943.426803][T27488] batadv1: entered promiscuous mode [ 943.471772][T27505] tipc: Enabled bearer , priority 0 [ 943.506794][T27498] tipc: Resetting bearer [ 943.542913][T27497] tipc: Disabling bearer [ 943.702589][T27520] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 943.876088][ T24] tipc: Node number set to 2886997007 [ 944.721345][T27560] netlink: 'syz.4.5555': attribute type 1 has an invalid length. [ 944.874708][T27568] bond10: (slave vxcan7): The slave device specified does not support setting the MAC address [ 944.887242][T27568] bond10: (slave vxcan7): Error -95 calling set_mac_address [ 945.994430][T27594] x_tables: duplicate underflow at hook 3 [ 946.023612][T27594] IPVS: Unknown mcast interface: pimreg [ 946.070054][T27598] __nla_validate_parse: 2 callbacks suppressed [ 946.070076][T27598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5565'. [ 946.330145][T27610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5567'. [ 946.360270][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5568'. [ 946.546555][T27615] syzkaller0: entered promiscuous mode [ 946.557849][T27615] syzkaller0: entered allmulticast mode [ 947.244537][T27648] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.570105][T27655] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.648926][T27655] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.715074][T27663] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 947.801970][T27648] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.970703][T27669] tipc: New replicast peer: 255.255.255.255 [ 947.994148][T27669] tipc: Enabled bearer , priority 10 [ 948.013538][T27648] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.097600][T27655] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.109772][T27655] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.136782][T27662] syzkaller0: entered promiscuous mode [ 948.165124][T27662] syzkaller0: entered allmulticast mode [ 948.219573][T27671] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 948.308347][T27655] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.366360][T27655] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.420424][T27648] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.650785][T27655] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.662101][T27655] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.738615][T27105] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.868829][T27102] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.902780][T27102] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.933885][T27678] openvswitch: netlink: IP tunnel dst address not specified [ 948.958315][T17460] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.013887][T17460] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.045318][T17460] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.139500][T27681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 949.147893][T27102] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.159386][T27102] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.224886][T17466] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.244315][T17466] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.322035][T27694] sctp: [Deprecated]: syz.2.5585 (pid 27694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 949.322035][T27694] Use struct sctp_sack_info instead [ 949.361715][T17466] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.371872][T27696] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 949.386179][T17466] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.431438][T27698] pim6reg: entered allmulticast mode [ 949.564360][T27706] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5588'. [ 949.772644][T27708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.803425][T27708] netlink: 'syz.3.5590': attribute type 2 has an invalid length. [ 950.173018][T27720] netlink: 'syz.3.5593': attribute type 11 has an invalid length. [ 950.205998][T27722] IPVS: set_ctl: invalid protocol: 136 172.30.1.5:20004 [ 950.676361][T27755] netlink: 'syz.1.5597': attribute type 4 has an invalid length. [ 951.116934][T27770] SET target dimension over the limit! [ 951.601450][T27788] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 951.663314][T27788] bond2 (unregistering): Released all slaves [ 951.719710][T27795] netlink: 'syz.3.5607': attribute type 4 has an invalid length. [ 951.752603][T27795] netlink: 'syz.3.5607': attribute type 4 has an invalid length. [ 951.787410][T27810] mac80211_hwsim hwsim67 wlan1: entered allmulticast mode [ 951.848974][T27810] bridge_slave_0: left allmulticast mode [ 951.855376][T27810] bridge_slave_0: left promiscuous mode [ 951.886682][T27810] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.928882][T27815] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5614'. [ 951.942592][T27810] bridge_slave_1: left allmulticast mode [ 951.949068][T27810] bridge_slave_1: left promiscuous mode [ 951.955300][T27810] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.979746][T27810] bond0: (slave bond_slave_0): Releasing backup interface [ 951.990822][T27824] netlink: 'syz.2.5610': attribute type 10 has an invalid length. [ 952.003362][T27810] bond0: (slave bond_slave_1): Releasing backup interface [ 952.024834][T27810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.032601][T27810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.060654][T27810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.068601][T27810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.090260][T27810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 952.212607][T27824] mac80211_hwsim hwsim67 wlan1: left allmulticast mode [ 952.250944][T27824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.264274][T27824] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 952.389339][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5616'. [ 952.400083][T27839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5617'. [ 952.738746][T27866] netlink: 'syz.4.5624': attribute type 1 has an invalid length. [ 952.799839][T27866] bond11: entered promiscuous mode [ 952.806380][T27866] 8021q: adding VLAN 0 to HW filter on device bond11 [ 952.850707][T27866] syzkaller0: entered promiscuous mode [ 952.856825][T27866] syzkaller0: entered allmulticast mode [ 952.880102][T27873] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 952.993745][T27866] bond11: (slave veth5): making interface the new active one [ 953.001678][T27866] veth5: entered promiscuous mode [ 953.011713][T27866] bond11: (slave veth5): Enslaving as an active interface with an up link [ 954.204110][T27940] syz_tun: entered allmulticast mode [ 954.230884][T27940] dvmrp8: entered allmulticast mode [ 954.260249][T27939] x_tables: duplicate underflow at hook 2 [ 954.291178][T27938] syz_tun: left allmulticast mode [ 954.608373][T27954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5644'. [ 954.638686][T27958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5644'. [ 954.826338][T27970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5649'. [ 954.869925][T27970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5649'. [ 955.927828][T28009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5660'. [ 955.982725][T28012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5660'. [ 956.292145][T28024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5663'. [ 956.420966][T28026] sctp: [Deprecated]: syz.0.5663 (pid 28026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.420966][T28026] Use struct sctp_sack_info instead [ 957.849833][T28049] siw: device registration error -23 [ 957.969835][T28056] __nla_validate_parse: 1 callbacks suppressed [ 957.969856][T28056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5671'. [ 958.387409][T28083] netlink: 'syz.3.5679': attribute type 1 has an invalid length. [ 958.485312][T28083] 8021q: adding VLAN 0 to HW filter on device bond9 [ 958.559503][T28083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5679'. [ 958.600057][T28083] bond9: (slave dummy0): making interface the new active one [ 958.612497][T28083] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 958.846291][T28103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5684'. [ 958.855531][T28103] block nbd9: Unsupported socket: should be TCP or UNIX. [ 958.881888][T26230] IPVS: starting estimator thread 0... [ 958.926633][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5685'. [ 958.960531][T28107] hsr_slave_0: left promiscuous mode [ 958.977440][T28105] IPVS: using max 28 ests per chain, 67200 per kthread [ 958.988483][T28107] hsr_slave_1: left promiscuous mode [ 959.080328][T28082] delete_channel: no stack [ 959.368416][T28129] netlink: 'syz.2.5690': attribute type 1 has an invalid length. [ 959.572819][T28138] IPv6: Can't replace route, no match found [ 959.787126][T28149] macsec1: entered promiscuous mode [ 959.803179][T28149] macsec1: entered allmulticast mode [ 960.023729][T28159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 960.292800][T28167] netlink: 'syz.4.5701': attribute type 1 has an invalid length. [ 960.338259][T28167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5701'. [ 960.351171][T28167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5701'. [ 960.780555][T28189] netlink: 'syz.4.5708': attribute type 8 has an invalid length. [ 960.786458][T28185] netlink: 'syz.1.5706': attribute type 10 has an invalid length. [ 960.837725][T28194] netlink: 'syz.1.5706': attribute type 10 has an invalid length. [ 960.843809][T28185] team0: Port device dummy0 added [ 960.861215][T28194] team0: Port device dummy0 removed [ 960.887832][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5711'. [ 960.902924][T28194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 960.912972][T28198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5711'. [ 960.933888][T28197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5710'. [ 960.952315][T28197] netlink: 'syz.3.5710': attribute type 30 has an invalid length. [ 960.990203][T27102] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.998687][T28197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5710'. [ 960.998723][T28197] netlink: 'syz.3.5710': attribute type 30 has an invalid length. [ 961.057985][T27102] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.078578][T27102] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.113877][T27102] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.141394][T28207] netlink: 'syz.3.5714': attribute type 11 has an invalid length. [ 961.180638][T28205] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 961.205045][T28205] tipc: Enabled bearer , priority 0 [ 961.212279][T28202] tipc: Enabling of bearer rejected, already enabled [ 961.254558][T28205] syzkaller0: entered promiscuous mode [ 961.278916][T28205] syzkaller0: entered allmulticast mode [ 961.293115][T28205] tipc: Resetting bearer [ 961.303623][T28201] tipc: Resetting bearer [ 961.324069][T28201] tipc: Disabling bearer [ 961.390329][T28217] netlink: 'syz.2.5716': attribute type 9 has an invalid length. [ 961.590046][T28229] netlink: 'syz.1.5720': attribute type 1 has an invalid length. [ 962.790012][T28257] Unsupported ieee802154 address type: 0 [ 962.844101][T28259] vlan2: entered allmulticast mode [ 962.849775][T28259] bridge0: entered allmulticast mode [ 962.855422][T28259] bridge6: port 1(vlan2) entered blocking state [ 962.868283][T28259] bridge6: port 1(vlan2) entered disabled state [ 962.883409][T28259] vlan2: entered promiscuous mode [ 962.888653][T28259] bridge0: entered promiscuous mode [ 962.914081][T28259] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 962.995276][T28271] __nla_validate_parse: 5 callbacks suppressed [ 962.995296][T28271] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5734'. [ 962.995607][T28269] syzkaller1: entered promiscuous mode [ 963.016631][T28269] syzkaller1: entered allmulticast mode [ 963.111189][T28277] xt_l2tp: v2 doesn't support IP mode [ 963.531727][T28304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5743'. [ 963.680501][T28303] sctp: [Deprecated]: syz.2.5744 (pid 28303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 963.680501][T28303] Use struct sctp_sack_info instead [ 963.800417][T28314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5747'. [ 963.931418][T28315] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5747'. [ 964.100606][T28326] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5749'. [ 964.109787][T28326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5749'. [ 964.413885][T28348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 964.425566][T28348] validate_nla: 3 callbacks suppressed [ 964.425584][T28348] netlink: 'syz.3.5754': attribute type 3 has an invalid length. [ 964.449597][T28348] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 964.512357][T28348] bond10: entered promiscuous mode [ 964.518729][T28348] 8021q: adding VLAN 0 to HW filter on device bond10 [ 964.544601][T28351] 8021q: adding VLAN 0 to HW filter on device bond10 [ 964.558612][T28351] bond10: (slave gre1): The slave device specified does not support setting the MAC address [ 964.570641][T28348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5754'. [ 964.580496][T28351] bond10: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 964.596295][T28351] bond10: (slave gre1): making interface the new active one [ 964.604826][T28351] gre1: entered promiscuous mode [ 964.612020][T28351] bond10: (slave gre1): Enslaving as an active interface with an up link [ 964.623241][T28348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5754'. [ 964.805029][T28363] A link change request failed with some changes committed already. Interface vetè0_virt_wif may have been left with an inconsistent configuration, please check. [ 965.043103][T28374] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:0 [ 965.081891][T28367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5759'. [ 966.520612][T28430] sctp: [Deprecated]: syz.1.5773 (pid 28430) Use of int in maxseg socket option. [ 966.520612][T28430] Use struct sctp_assoc_value instead [ 966.996525][T25739] Bluetooth: hci0: command 0x0405 tx timeout [ 967.246353][T28456] xt_limit: Overflow, try lower: 271964/0 [ 968.455843][T28485] netlink: 'syz.3.5788': attribute type 1 has an invalid length. [ 968.585431][T28485] bond11: entered promiscuous mode [ 968.600099][T28485] 8021q: adding VLAN 0 to HW filter on device bond11 [ 968.718819][T28484] bond11: (slave bridge7): making interface the new active one [ 968.734914][T28496] __nla_validate_parse: 7 callbacks suppressed [ 968.734935][T28496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5789'. [ 968.756606][T28484] bridge7: entered promiscuous mode [ 968.773462][T28484] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 968.776628][T28496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5789'. [ 968.860527][T28496] netlink: 'syz.2.5789': attribute type 14 has an invalid length. [ 968.896495][T28496] netlink: 'syz.2.5789': attribute type 12 has an invalid length. [ 968.928529][T28475] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 968.945070][T28499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5791'. [ 969.504458][T28523] syzkaller0: entered promiscuous mode [ 969.510693][T28523] syzkaller0: entered allmulticast mode [ 969.600272][T28527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5800'. [ 969.888549][T28537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'. [ 970.394648][T28552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5806'. [ 970.619099][T28552] bond12: entered promiscuous mode [ 970.626304][T28552] 8021q: adding VLAN 0 to HW filter on device bond12 [ 970.956959][T28552] bond12 (unregistering): Released all slaves [ 971.010107][T28564] netlink: 'syz.2.5810': attribute type 1 has an invalid length. [ 971.104079][T28566] gretap1: entered allmulticast mode [ 971.140644][T28566] bond2: (slave gretap1): making interface the new active one [ 971.149223][T28566] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 971.309213][T28573] openvswitch: netlink: Tunnel attr 193 out of range max 16 [ 971.634281][T28581] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5816'. [ 971.977438][T28596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5820'. [ 972.061267][T28602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5822'. [ 972.454514][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5824'. [ 972.627171][T28628] netlink: 'syz.0.5826': attribute type 1 has an invalid length. [ 973.358885][T28684] netlink: 'syz.0.5836': attribute type 1 has an invalid length. [ 973.753938][T28685] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 973.768376][T28685] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 973.900895][T28686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 973.945481][T28687] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 973.995583][T28690] macvlan2: entered promiscuous mode [ 974.013036][T28690] macvlan2: entered allmulticast mode [ 974.031483][T28710] __nla_validate_parse: 9 callbacks suppressed [ 974.031506][T28710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5839'. [ 974.050181][T28690] bond2: entered promiscuous mode [ 974.054343][T28710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5839'. [ 974.065072][T28690] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 974.074400][T28710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5839'. [ 974.074752][T28690] bond2: left promiscuous mode [ 974.089545][T28712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5840'. [ 974.504547][T28729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5843'. [ 975.314749][T28745] bridge: RTM_NEWNEIGH with invalid ether address [ 975.468141][T28751] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5848'. [ 975.478907][T28751] nbd: couldn't find a device at index 0 [ 975.977459][T28768] netlink: zone id is out of range [ 976.020152][T28770] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5854'. [ 976.077060][T28773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5855'. [ 976.094094][T28770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5854'. [ 976.148040][T28773] vlan2 (unregistering): left promiscuous mode [ 976.246018][T28773] bridge0 (unregistering): left promiscuous mode [ 976.252634][T28773] bridge6: port 1(vlan2) entered disabled state [ 976.502749][T28780] IPv6: NLM_F_CREATE should be specified when creating new route [ 976.533511][T28782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5858'. [ 977.408150][T28842] bridge0: port 3(syz_tun) entered blocking state [ 977.426240][T28842] bridge0: port 3(syz_tun) entered disabled state [ 977.437756][T28842] syz_tun: entered allmulticast mode [ 977.448108][T28842] syz_tun: entered promiscuous mode [ 978.116081][T28882] netlink: 'syz.2.5882': attribute type 15 has an invalid length. [ 979.729281][T28940] __nla_validate_parse: 5 callbacks suppressed [ 979.729303][T28940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5896'. [ 979.776328][T28940] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5896'. [ 980.613613][T28947] pim6reg1: entered allmulticast mode [ 980.707267][T28958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5902'. [ 980.908443][T28971] netlink: 'syz.2.5905': attribute type 10 has an invalid length. [ 981.254502][T28983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5909'. [ 981.264387][T28983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 981.271669][T28983] IPv6: NLM_F_CREATE should be set when creating new route [ 981.278971][T28983] IPv6: NLM_F_CREATE should be set when creating new route [ 981.356415][T28981] siw: device registration error -23 [ 982.567490][T29024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5918'. [ 982.578969][T29024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5918'. [ 982.590261][T29023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5919'. [ 982.604161][T29023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5919'. [ 982.614269][T29023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5919'. [ 983.983788][T29054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'. [ 984.507615][T29078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 985.339176][T29114] __nla_validate_parse: 4 callbacks suppressed [ 985.339199][T29114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5942'. [ 985.360607][T29114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5942'. [ 985.834370][T29100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.858713][T29100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.441944][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5947'. [ 986.708196][T27110] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.739423][T27110] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.766676][T27110] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.794318][T27110] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.913843][T27110] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.937859][T27110] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.963714][T27110] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.982920][T27110] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.008028][T29153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5953'. [ 987.123310][T29167] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5955'. [ 987.178391][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5954'. [ 987.655071][T29190] netlink: 'syz.3.5960': attribute type 1 has an invalid length. [ 987.695696][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5960'. [ 988.042786][T29210] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20004 [ 988.051441][T29213] netlink: 2736 bytes leftover after parsing attributes in process `syz.0.5967'. [ 988.133723][T29212] netlink: 2736 bytes leftover after parsing attributes in process `syz.0.5967'. [ 988.312542][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.359246][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.379774][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.522982][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.533708][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.550972][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.565469][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.586152][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.615587][T29229] netlink: 'syz.3.5969': attribute type 16 has an invalid length. [ 988.628487][T29246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5973'. [ 989.814679][T29296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 989.923446][T29302] bond3: (slave gretap1): making interface the new active one [ 989.958016][T29302] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 990.158841][T29314] 8021q: VLANs not supported on caif0 [ 990.331956][T29327] syzkaller1: entered promiscuous mode [ 990.337760][T29327] syzkaller1: entered allmulticast mode [ 990.901871][T25739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 990.914791][T25739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 990.923764][T25739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 990.941269][T25739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 990.949804][T25739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 991.255529][T29339] tipc: Enabling of bearer rejected, failed to enable media [ 991.670826][T29336] chnl_net:caif_netlink_parms(): no params data found [ 991.973684][T29380] __nla_validate_parse: 5 callbacks suppressed [ 991.973703][T29380] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6006'. [ 992.020457][T29383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6004'. [ 992.099262][T29336] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.138657][T29336] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.156940][T29336] bridge_slave_0: entered allmulticast mode [ 992.183127][T29336] bridge_slave_0: entered promiscuous mode [ 992.247357][T29336] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.271135][T29336] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.296959][T29336] bridge_slave_1: entered allmulticast mode [ 992.310128][T29336] bridge_slave_1: entered promiscuous mode [ 992.351972][T29394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6008'. [ 992.441132][T29336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.507045][T29336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.593065][T29336] team0: Port device team_slave_0 added [ 992.606263][T29336] team0: Port device team_slave_1 added [ 992.664976][T29404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6012'. [ 992.708154][T29336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.715168][T29336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.749880][T29336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.768827][T29336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.779781][T29336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.807427][T29336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.901291][T29336] hsr_slave_0: entered promiscuous mode [ 992.908935][T29336] hsr_slave_1: entered promiscuous mode [ 992.915439][T29336] debugfs: 'hsr0' already exists in 'hsr' [ 992.924524][T29336] Cannot create hsr debugfs directory [ 992.978772][T29419] syz.4.6018 uses old SIOCAX25GETINFO [ 993.008975][ T52] Bluetooth: hci3: command tx timeout [ 993.151930][T29336] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.163742][T29336] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.229273][T29336] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.240508][T29336] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.718967][T29336] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.739553][T29336] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.768307][T29448] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20001 [ 993.786696][T29450] validate_nla: 27 callbacks suppressed [ 993.786717][T29450] netlink: 'syz.4.6024': attribute type 4 has an invalid length. [ 993.815247][T29449] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 993.830408][T29336] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.858068][T29336] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.935221][T29462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6027'. [ 994.069354][T29455] lec:lec_atm_close: lec0: Shut down! [ 994.189587][T29473] syzkaller0: entered promiscuous mode [ 994.195311][T29473] syzkaller0: entered allmulticast mode [ 994.220965][T29468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6027'. [ 994.237750][T29468] nbd: device at index 64 is going down [ 994.324292][T29475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6030'. [ 994.471260][T29336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 994.504061][T29336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 994.539819][T29336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 994.666703][T29336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 994.728316][T29488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6034'. [ 994.770824][T29488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6034'. [ 994.791282][T29488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6034'. [ 994.826988][T29488] Cannot find set identified by id 0 to match [ 995.063330][T29336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.076967][ T52] Bluetooth: hci3: command tx timeout [ 995.446979][T29336] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.479857][T28058] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.487136][T28058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.537176][T28058] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.544469][T28058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.215166][T29544] pim6reg: entered allmulticast mode [ 996.320295][T29549] netlink: 'syz.1.6049': attribute type 1 has an invalid length. [ 996.403093][T29549] tipc: Enabled bearer , priority 0 [ 996.454889][T29549] tipc: Resetting bearer [ 996.470183][T29336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.494449][T29548] tipc: Disabling bearer [ 996.579827][T29558] netlink: 'syz.4.6052': attribute type 1 has an invalid length. [ 996.588737][T29558] netlink: 'syz.4.6052': attribute type 3 has an invalid length. [ 996.640749][T29336] veth0_vlan: entered promiscuous mode [ 996.697260][T29336] veth1_vlan: entered promiscuous mode [ 996.772430][T29566] pimreg: entered allmulticast mode [ 996.859290][T29336] veth0_macvtap: entered promiscuous mode [ 996.880059][T29336] veth1_macvtap: entered promiscuous mode [ 996.935405][T29336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.989026][T29581] __nla_validate_parse: 4 callbacks suppressed [ 996.989044][T29581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6060'. [ 996.997761][T29336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.014492][T29582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6060'. [ 997.024985][T29587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6062'. [ 997.041024][T29587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6062'. [ 997.067665][T17459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.126450][T17459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.136553][T17459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.148273][T29592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6063'. [ 997.165621][T17459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.167571][ T52] Bluetooth: hci3: command tx timeout [ 997.391568][T27108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.408372][T27108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.530716][T27108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.560644][T27108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.952391][T29603] netlink: 'syz.2.6065': attribute type 6 has an invalid length. [ 998.504758][T29652] netlink: 'syz.2.6075': attribute type 1 has an invalid length. [ 998.515220][T29652] netlink: 'syz.2.6075': attribute type 11 has an invalid length. [ 998.546549][T29652] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6075'. [ 998.603285][T29651] vxcan6: entered allmulticast mode [ 999.050545][T29668] bridge: RTM_NEWNEIGH with invalid ether address [ 999.246991][ T52] Bluetooth: hci3: command tx timeout [ 999.415437][T29674] team0 (unregistering): Port device team_slave_0 removed [ 999.428594][T29674] team0 (unregistering): Port device team_slave_1 removed [ 999.464229][T29691] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 999.525772][T29690] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 999.702917][T29705] netlink: 'syz.3.6093': attribute type 21 has an invalid length. [ 999.734201][T29701] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6092'. [ 1000.398269][T29744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6105'. [ 1000.464457][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1000.555862][T29761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1000.888886][T29770] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1002.234486][T29809] __nla_validate_parse: 4 callbacks suppressed [ 1002.234571][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6119'. [ 1002.256490][T29809] bridge_slave_1: left allmulticast mode [ 1002.262180][T29809] bridge_slave_1: left promiscuous mode [ 1002.271831][T29809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.283691][T29809] bridge_slave_0: left allmulticast mode [ 1002.289604][T29809] bridge_slave_0: left promiscuous mode [ 1002.295660][T29809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.640444][T29814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.845850][T29813] netlink: 'syz.4.6121': attribute type 9 has an invalid length. [ 1003.245892][T29833] netlink: 'syz.0.6128': attribute type 2 has an invalid length. [ 1003.283973][T29833] !: entered promiscuous mode [ 1003.307203][T29841] netlink: 'syz.0.6128': attribute type 2 has an invalid length. [ 1003.319179][T29841] !: left promiscuous mode [ 1003.362052][T29842] xt_hashlimit: size too large, truncated to 1048576 [ 1003.369537][T29842] xt_hashlimit: max too large, truncated to 1048576 [ 1003.444648][T29846] tipc: Enabled bearer , priority 0 [ 1003.465937][T29842] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1003.537274][T29846] syzkaller0: entered promiscuous mode [ 1003.549335][T29846] syzkaller0: entered allmulticast mode [ 1003.564876][T29846] tipc: Resetting bearer [ 1003.603161][T29845] tipc: Resetting bearer [ 1003.672121][T29854] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6134'. [ 1003.832857][T29859] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1003.896573][T29861] netlink: 'syz.2.6135': attribute type 1 has an invalid length. [ 1003.906115][T29861] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1003.915378][T29861] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1003.928942][T29861] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1005.375960][T29845] tipc: Disabling bearer [ 1005.389763][T29860] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1005.640820][T29874] netlink: 'syz.2.6141': attribute type 1 has an invalid length. [ 1005.669363][T29874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6141'. [ 1005.800121][T29876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6139'. [ 1005.956880][T29893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1005.983472][T29895] netlink: 'syz.1.6146': attribute type 32 has an invalid length. [ 1006.026992][T29895] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1006.268611][T29901] team0: Mode changed to "loadbalance" [ 1006.568916][T29919] netlink: 'syz.0.6151': attribute type 11 has an invalid length. [ 1006.770540][T29920] syzkaller0: entered promiscuous mode [ 1006.776755][T29920] syzkaller0: entered allmulticast mode [ 1006.813646][T29929] netlink: 'syz.4.6155': attribute type 13 has an invalid length. [ 1006.824185][T29926] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1008.934693][T29954] __nla_validate_parse: 3 callbacks suppressed [ 1008.934713][T29954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1009.016134][T29960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1009.062957][T29960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1009.094506][T29966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6161'. [ 1009.136691][T29950] syzkaller1: entered allmulticast mode [ 1009.564620][T29982] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6167'. [ 1009.735162][T29992] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1009.753482][T29992] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1009.768001][T29992] syzkaller0: entered allmulticast mode [ 1009.817431][T29996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1009.824868][T29996] IPv6: NLM_F_CREATE should be set when creating new route [ 1009.832252][T29996] IPv6: NLM_F_CREATE should be set when creating new route [ 1009.912450][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1010.026838][T30003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.045308][T30010] netlink: 'syz.4.6174': attribute type 3 has an invalid length. [ 1010.167591][T30008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1010.470287][T30019] bond4: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 1010.526895][T30019] bond4 (unregistering): Released all slaves [ 1010.621194][T30029] netlink: 'syz.4.6180': attribute type 3 has an invalid length. [ 1010.690841][T30029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6180'. [ 1010.834956][T30035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1010.860253][T30037] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 1011.449460][T30071] tipc: Enabling of bearer rejected, failed to enable media [ 1011.981342][T30092] netlink: 'syz.0.6196': attribute type 27 has an invalid length. [ 1012.598906][T30129] SET target dimension over the limit! [ 1012.763465][T30131] xt_TCPMSS: Only works on TCP SYN packets [ 1012.980120][T30138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1013.424553][T30158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1013.480996][T30158] openvswitch: netlink: Flow actions attr not present in new flow. [ 1016.344198][T30214] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1016.628097][T30217] netlink: 'syz.0.6225': attribute type 10 has an invalid length. [ 1016.963484][T30230] netlink: 'syz.3.6228': attribute type 10 has an invalid length. [ 1017.008078][T30230] netlink: 'syz.3.6228': attribute type 10 has an invalid length. [ 1017.031092][T30230] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1017.182824][T30232] ip6gretap1: entered promiscuous mode [ 1017.196732][T30234] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1017.207114][T30232] netlink: 'syz.0.6229': attribute type 1 has an invalid length. [ 1017.343286][T30239] x_tables: duplicate underflow at hook 1 [ 1017.423454][T30236] gretap1: entered promiscuous mode [ 1017.522793][T30238] tipc: Enabled bearer , priority 0 [ 1017.559419][T30241] tipc: Started in network mode [ 1017.564355][T30241] tipc: Node identity fe4921db78aa, cluster identity 4711 [ 1017.590654][T30241] tipc: Enabled bearer , priority 0 [ 1017.611359][T30245] syzkaller0: entered promiscuous mode [ 1017.637568][T30245] syzkaller0: entered allmulticast mode [ 1017.649795][T30249] netlink: 'syz.0.6234': attribute type 10 has an invalid length. [ 1017.693961][T30237] tipc: Resetting bearer [ 1017.739098][T30237] tipc: Disabling bearer [ 1017.767971][T30245] tipc: Resetting bearer [ 1017.804885][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6232'. [ 1017.889162][T30252] bond4: option arp_validate: invalid value (18446744073491447809) [ 1017.898303][T30250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6233'. [ 1017.904787][T30252] bond4 (unregistering): Released all slaves [ 1017.996758][T30240] tipc: Resetting bearer [ 1018.057510][T30240] tipc: Disabling bearer [ 1018.321955][T30272] wg1: entered promiscuous mode [ 1018.327635][T30272] wg1: entered allmulticast mode [ 1018.498208][T30277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1018.719642][T30280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1019.197634][T30292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6246'. [ 1019.632145][T30307] macsec0: entered promiscuous mode [ 1019.647518][T30307] macsec0: left promiscuous mode [ 1019.760890][T30312] tipc: Enabled bearer , priority 0 [ 1019.769142][T30312] syzkaller0: entered promiscuous mode [ 1019.774725][T30312] syzkaller0: entered allmulticast mode [ 1019.892692][T30315] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6253'. [ 1019.953984][T30318] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6254'. [ 1019.965104][T30318] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1020.051477][T30315] team0: No ports can be present during mode change [ 1020.146461][T30314] 8021q: VLANs not supported on gre0 [ 1020.175779][T30328] netlink: 'syz.2.6257': attribute type 1 has an invalid length. [ 1020.189564][T30314] netlink: 'syz.0.6254': attribute type 10 has an invalid length. [ 1020.205872][T30328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1020.221341][T30314] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1020.473274][T30310] tipc: Resetting bearer [ 1020.539818][T30310] tipc: Disabling bearer [ 1020.549625][T30337] netlink: 'syz.0.6258': attribute type 2 has an invalid length. [ 1020.593536][T30341] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6259'. [ 1020.639990][T30341] netlink: 'syz.2.6259': attribute type 1 has an invalid length. [ 1020.668969][T30337] : entered promiscuous mode [ 1021.411178][T30361] __nla_validate_parse: 67 callbacks suppressed [ 1021.411199][T30361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1021.456305][T30367] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6268'. [ 1021.479772][T30364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1021.606633][T30374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6269'. [ 1021.777440][T30381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1021.824134][T30381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1022.206169][T30383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1022.261118][T30406] netlink: 'syz.1.6275': attribute type 4 has an invalid length. [ 1022.308040][T30407] netlink: 'syz.1.6275': attribute type 4 has an invalid length. [ 1022.325275][T28646] IPVS: starting estimator thread 0... [ 1022.456816][T30415] IPVS: using max 26 ests per chain, 62400 per kthread [ 1022.621581][T30419] tipc: Enabled bearer , priority 0 [ 1022.718228][T30419] tipc: Resetting bearer [ 1022.793037][T30418] tipc: Disabling bearer [ 1022.916475][T30427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6278'. [ 1023.162824][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1023.377322][T30453] xt_l2tp: invalid flags combination: 8 [ 1023.403795][T30453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.950869][T30468] syzkaller0: entered promiscuous mode [ 1023.956971][T30468] syzkaller0: entered allmulticast mode [ 1024.059687][T30470] macsec1: entered promiscuous mode [ 1024.065049][T30470] syzkaller0: entered promiscuous mode [ 1024.072392][T30470] macsec1: entered allmulticast mode [ 1024.081601][T30470] syzkaller0: entered allmulticast mode [ 1024.092048][T30470] syzkaller0: left allmulticast mode [ 1024.097742][T30470] syzkaller0: left promiscuous mode [ 1024.256825][T30479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6293'. [ 1025.891183][T30486] tipc: Enabling of bearer rejected, failed to enable media [ 1026.082322][T30496] gretap1: entered promiscuous mode [ 1026.114457][T30501] netlink: 'syz.1.6299': attribute type 1 has an invalid length. [ 1026.131674][T30500] netlink: 'syz.1.6299': attribute type 1 has an invalid length. [ 1026.349041][T30500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1026.373301][T27108] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.406659][T27108] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.423956][T27108] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.478958][T30513] batman_adv: batadv0: Adding interface: macsec3 [ 1026.485345][T30513] batman_adv: batadv0: The MTU of interface macsec3 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1026.557734][T30513] batman_adv: batadv0: Interface activated: macsec3 [ 1026.587273][T30522] __nla_validate_parse: 3 callbacks suppressed [ 1026.587291][T30522] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6303'. [ 1026.590890][T27108] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.980384][T30528] netlink: 'syz.1.6305': attribute type 1 has an invalid length. [ 1027.000165][T30531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.092203][T30528] bond6: entered promiscuous mode [ 1027.099118][T30528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1027.172006][T30533] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1027.188848][T30533] bond6: (slave bond7): making interface the new active one [ 1027.210513][T30533] bond7: entered promiscuous mode [ 1027.226892][T30533] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1027.403909][T30548] netlink: 'syz.2.6312': attribute type 1 has an invalid length. [ 1027.455517][T30548] bond4: entered promiscuous mode [ 1027.462466][T30548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1027.574145][T30548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1027.644583][T30555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1027.670585][T30555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1027.686396][T30555] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1028.170980][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6316'. [ 1028.741566][T30580] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1029.054699][T30592] netlink: 'syz.1.6322': attribute type 1 has an invalid length. [ 1029.258518][T30594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6322'. [ 1029.331548][T30594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6322'. [ 1029.748083][T30607] wg1: entered promiscuous mode [ 1029.760878][T30607] wg1: entered allmulticast mode [ 1030.097676][T30615] bridge0: entered allmulticast mode [ 1030.135993][T30618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6331'. [ 1030.162704][T30618] sctp: [Deprecated]: syz.4.6331 (pid 30618) Use of int in maxseg socket option. [ 1030.162704][T30618] Use struct sctp_assoc_value instead [ 1030.304788][T30623] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1030.881703][T30643] ip6tnl2: entered promiscuous mode [ 1031.527844][T30670] netlink: 'syz.1.6347': attribute type 1 has an invalid length. [ 1031.688875][T30677] netlink: 'syz.0.6351': attribute type 39 has an invalid length. [ 1031.741093][T30682] __nla_validate_parse: 2 callbacks suppressed [ 1031.741113][T30682] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6351'. [ 1031.776771][T30682] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6351'. [ 1031.813532][T30682] netlink: 'syz.0.6351': attribute type 5 has an invalid length. [ 1031.836815][T30682] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6351'. [ 1031.933921][T30694] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 1032.037048][T30696] Cannot find del_set index 1 as target [ 1032.070620][ T30] audit: type=1804 audit(1766061229.237:78): pid=30695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6353" name="/newroot/235/cgroup.controllers" dev="tmpfs" ino=1218 res=1 errno=0 [ 1032.098131][T30682] vlan2: entered allmulticast mode [ 1032.104090][T30682] bridge_slave_0: entered allmulticast mode [ 1032.119628][T30681] block nbd9: server does not support multiple connections per device. [ 1032.127477][ T30] audit: type=1800 audit(1766061229.237:79): pid=30695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6353" name="cgroup.controllers" dev="tmpfs" ino=1218 res=0 errno=0 [ 1032.154231][T30681] block nbd9: shutting down sockets [ 1032.468536][T30705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6356'. [ 1032.569022][T30705] mac80211_hwsim hwsim77 wlan1: entered allmulticast mode [ 1032.591000][T30712] IPVS: set_ctl: invalid protocol: 46 172.20.20.173:24096 [ 1032.620158][T30712] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001 [ 1032.692171][T30710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6357'. [ 1032.770468][T30720] xt_cgroup: invalid path, errno=-2 [ 1033.276822][T30742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1033.336822][T30731] Cannot find del_set index 4 as target [ 1033.504315][T30752] Bluetooth: MGMT ver 1.23 [ 1033.570123][T30756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6366'. [ 1033.629543][T30756] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1033.811508][T30767] netlink: 'syz.1.6368': attribute type 1 has an invalid length. [ 1033.860370][T30767] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6368'. [ 1033.900853][T30775] vxcan2: entered allmulticast mode [ 1034.181981][T30787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6374'. [ 1034.193477][T30787] netlink: 560 bytes leftover after parsing attributes in process `syz.1.6374'. [ 1034.396717][T30796] netlink: 'syz.1.6377': attribute type 13 has an invalid length. [ 1034.417037][T30796] netlink: 'syz.1.6377': attribute type 17 has an invalid length. [ 1034.636912][T30796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1035.324659][T30825] netlink: 'syz.4.6384': attribute type 21 has an invalid length. [ 1035.466635][T30825] IPv6: NLM_F_CREATE should be specified when creating new route [ 1035.474719][T30825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1035.482027][T30825] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.489345][T30825] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.496641][T30825] IPv6: NLM_F_CREATE should be set when creating new route [ 1036.082816][T30851] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 1036.827851][T30867] syz_tun: entered allmulticast mode [ 1036.904718][T30867] dvmrp8: entered allmulticast mode [ 1036.915408][T30866] syz_tun: left allmulticast mode [ 1037.481161][T30870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1037.492061][T30870] team0: Port device bond6 added [ 1037.611783][T30878] __nla_validate_parse: 3 callbacks suppressed [ 1037.611803][T30878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'. [ 1038.269142][T30896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1038.354210][T30898] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6408'. [ 1038.390547][T30901] netlink: 'syz.2.6409': attribute type 4 has an invalid length. [ 1038.411279][T30901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1038.423054][T30901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1038.477719][T30908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1038.485228][T30907] netlink: 'syz.4.6411': attribute type 21 has an invalid length. [ 1038.494771][T30907] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1038.576715][T30911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6412'. [ 1038.586750][T30912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6412'. [ 1038.660442][T30917] tipc: Enabling of bearer rejected, failed to enable media [ 1038.685852][T30912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6412'. [ 1038.873851][T30929] netlink: 'syz.4.6417': attribute type 1 has an invalid length. [ 1038.935151][T30929] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1038.990376][T30929] gretap2: entered promiscuous mode [ 1039.049093][T30929] bond12: (slave gretap2): making interface the new active one [ 1039.095126][T30929] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 1039.122242][T30943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1039.491305][T30961] siw: device registration error -23 [ 1041.977783][T31026] ip6tnl2: entered allmulticast mode [ 1042.204152][T31038] tipc: Failed to remove unknown binding: 66,1,1/1780932378:3439643505/3439643507 [ 1042.252649][T31038] tipc: Failed to remove unknown binding: 66,1,1/1780932378:3439643505/3439643507 [ 1042.266239][T31040] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1042.302471][T31038] tipc: Failed to remove unknown binding: 66,1,1/1780932378:3439643505/3439643507 [ 1042.504964][T31044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1043.472574][T31061] netlink: 'syz.4.6453': attribute type 21 has an invalid length. [ 1043.488138][T31061] netlink: 'syz.4.6453': attribute type 22 has an invalid length. [ 1043.496452][T31061] netlink: 'syz.4.6453': attribute type 23 has an invalid length. [ 1043.515892][T31061] netlink: 'syz.4.6453': attribute type 25 has an invalid length. [ 1043.523787][T31061] netlink: 'syz.4.6453': attribute type 26 has an invalid length. [ 1043.532792][T31061] __nla_validate_parse: 6 callbacks suppressed [ 1043.532808][T31061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1043.849804][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1043.918203][T31080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6458'. [ 1045.259029][T31143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6473'. [ 1045.278041][T31143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6473'. [ 1045.694257][T31161] vlan0: entered promiscuous mode [ 1045.701681][T31161] bond0: entered promiscuous mode [ 1046.362111][T31184] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1046.370332][T31184] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1046.522902][T31192] netlink: 'syz.1.6483': attribute type 83 has an invalid length. [ 1046.547342][T31192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6483'. [ 1046.587279][T31192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1046.594595][T31192] IPv6: NLM_F_CREATE should be set when creating new route [ 1046.601883][T31192] IPv6: NLM_F_CREATE should be set when creating new route [ 1046.684572][T31192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6483'. [ 1046.694671][T31192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1048.373176][T31198] veth5: entered promiscuous mode [ 1048.734718][T31226] netlink: 'syz.0.6491': attribute type 1 has an invalid length. [ 1048.799670][T31215] netlink: set zone limit has 4 unknown bytes [ 1048.889421][T31236] openvswitch: netlink: IP tunnel dst address not specified [ 1049.246762][T31230] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1049.631332][T31261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1049.681682][T31261] netlink: 'syz.1.6498': attribute type 83 has an invalid length. [ 1050.094660][T31275] tipc: Enabled bearer , priority 0 [ 1050.156950][T31277] syzkaller0: entered promiscuous mode [ 1050.201389][T31277] syzkaller0: entered allmulticast mode [ 1050.360267][T31290] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6507'. [ 1050.396060][T31273] tipc: Resetting bearer [ 1050.457465][T31273] tipc: Disabling bearer [ 1050.838937][T27102] nci: nci_ntf_packet: unknown ntf opcode 0x5 [ 1051.394651][T31328] siw: device registration error -23 [ 1051.408202][T31328] siw: device registration error -23 [ 1051.414142][T31328] siw: device registration error -23 [ 1051.420852][T31328] siw: device registration error -23 [ 1051.427524][T31328] siw: device registration error -23 [ 1051.433336][T31328] siw: device registration error -23 [ 1051.439469][T31328] siw: device registration error -23 [ 1051.445355][T31328] siw: device registration error -23 [ 1051.451430][T31328] siw: device registration error -23 [ 1051.459413][T31328] siw: device registration error -23 [ 1051.478131][T31328] siw: device registration error -23 [ 1051.483973][T31328] siw: device registration error -23 [ 1051.490694][T31328] siw: device registration error -23 [ 1051.513572][T31328] siw: device registration error -23 [ 1051.547014][T31328] siw: device registration error -23 [ 1051.562077][T31328] siw: device registration error -23 [ 1051.589641][T31328] siw: device registration error -23 [ 1051.635498][T31328] siw: device registration error -23 [ 1051.655009][T31328] siw: device registration error -23 [ 1051.670834][T31328] siw: device registration error -23 [ 1051.681459][T31328] siw: device registration error -23 [ 1051.708081][T31328] siw: device registration error -23 [ 1051.722405][T31328] siw: device registration error -23 [ 1051.730733][T31328] siw: device registration error -23 [ 1051.739518][T31328] siw: device registration error -23 [ 1051.745293][T31328] siw: device registration error -23 [ 1051.767691][T31328] siw: device registration error -23 [ 1051.797478][T31328] siw: device registration error -23 [ 1051.846823][T31328] siw: device registration error -23 [ 1051.852629][T31328] siw: device registration error -23 [ 1051.867270][T31328] siw: device registration error -23 [ 1051.872974][T31328] siw: device registration error -23 [ 1051.898808][T31328] siw: device registration error -23 [ 1051.904847][T31328] siw: device registration error -23 [ 1051.913588][T31328] siw: device registration error -23 [ 1051.927329][T31347] netlink: 'syz.1.6521': attribute type 3 has an invalid length. [ 1051.964540][T31328] siw: device registration error -23 [ 1052.081575][T31358] netlink: 'syz.1.6523': attribute type 1 has an invalid length. [ 1052.202999][T31358] bond8: entered promiscuous mode [ 1052.216381][T31358] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1052.284914][T31363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6523'. [ 1052.355115][T31363] bond8: entered allmulticast mode [ 1052.368165][T31365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1052.414425][T31365] openvswitch: netlink: Flow actions attr not present in new flow. [ 1052.434358][T31363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6523'. [ 1052.522411][T31368] tipc: Enabled bearer , priority 0 [ 1052.563798][T31358] bond8: (slave bridge6): making interface the new active one [ 1052.611826][T31358] bridge6: entered promiscuous mode [ 1052.632761][T31358] bridge6: entered allmulticast mode [ 1052.640695][T31358] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1052.650115][T31368] syzkaller0: entered promiscuous mode [ 1052.661563][T31368] syzkaller0: entered allmulticast mode [ 1052.699940][T31382] netlink: 'syz.4.6528': attribute type 10 has an invalid length. [ 1052.744797][T31368] tipc: Resetting bearer [ 1052.771048][T31366] tipc: Resetting bearer [ 1052.845166][T31366] tipc: Disabling bearer [ 1052.999477][T31389] gtp0: entered promiscuous mode [ 1053.015297][T31389] gtp0: entered allmulticast mode [ 1053.060370][T31391] 8021q: VLANs not supported on nlmon0 [ 1053.284692][T31405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1053.408861][T31414] ip6gre1: entered allmulticast mode [ 1053.508095][T31423] netlink: 'syz.1.6538': attribute type 13 has an invalid length. [ 1053.525528][T31422] netlink: 'syz.4.6539': attribute type 8 has an invalid length. [ 1053.544377][T31422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6539'. [ 1053.873895][T31433] xt_hashlimit: size too large, truncated to 1048576 [ 1053.933811][T31433] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1054.282248][T31442] netlink: 'syz.2.6544': attribute type 5 has an invalid length. [ 1054.306374][T31442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6544'. [ 1054.589344][T31423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.684114][T31423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.875466][T31444] tipc: Enabled bearer , priority 0 [ 1055.883745][T31445] syzkaller0: entered promiscuous mode [ 1055.890539][T31445] syzkaller0: entered allmulticast mode [ 1055.899107][T17459] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.936229][T17459] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.975803][T17459] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.995883][T17459] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.042975][T31451] tipc: Resetting bearer [ 1056.102588][T31451] tipc: Disabling bearer [ 1057.169220][T31483] tipc: Enabled bearer , priority 0 [ 1057.203743][T31500] tipc: Enabled bearer , priority 0 [ 1057.230193][T31506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6558'. [ 1057.343432][T31482] tipc: Disabling bearer [ 1057.387565][T31499] tipc: Disabling bearer [ 1057.619922][T31516] bond9 (unregistering): Released all slaves [ 1057.650011][T31523] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6562'. [ 1057.694592][T31524] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6562'. [ 1057.758120][T31510] netlink: 'syz.2.6558': attribute type 2 has an invalid length. [ 1058.234867][T31550] tipc: Enabling of bearer rejected, failed to enable media [ 1058.808544][T31565] syzkaller0: entered promiscuous mode [ 1058.814249][T31565] syzkaller0: entered allmulticast mode [ 1060.682778][T31586] netem: change failed [ 1060.693721][T31582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1060.764933][T31582] netlink: 'syz.3.6579': attribute type 2 has an invalid length. [ 1060.813486][T31590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6581'. [ 1060.857019][T31595] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6582'. [ 1061.005084][T31602] netlink: 'syz.0.6585': attribute type 3 has an invalid length. [ 1061.142577][T31614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6591'. [ 1061.597416][T31636] tipc: Enabled bearer , priority 0 [ 1061.611161][T31636] syzkaller0: entered promiscuous mode [ 1061.621736][T31636] syzkaller0: entered allmulticast mode [ 1061.637134][T31636] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6598'. [ 1061.666918][T31636] tipc: Resetting bearer [ 1061.691677][T31635] tipc: Resetting bearer [ 1061.743463][T31635] tipc: Disabling bearer [ 1061.883152][T31646] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6603'. [ 1062.143962][T31652] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 1062.152115][T31652] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6604'. [ 1062.243904][T31656] __nla_validate_parse: 3 callbacks suppressed [ 1062.243924][T31656] netlink: 408 bytes leftover after parsing attributes in process `syz.1.6606'. [ 1062.310258][T31660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6607'. [ 1062.359768][T31659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6606'. [ 1062.667183][T31659] syz_tun: left allmulticast mode [ 1062.680785][T31659] syz_tun: left promiscuous mode [ 1062.706909][T31659] bridge0: port 3(syz_tun) entered disabled state [ 1062.752752][T31659] bridge_slave_1: left allmulticast mode [ 1062.784137][T31659] bridge_slave_1: left promiscuous mode [ 1062.803564][T31659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.840229][T31659] bridge_slave_0: left allmulticast mode [ 1062.859669][T31659] bridge_slave_0: left promiscuous mode [ 1062.872206][T31659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.318133][T31692] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1063.403402][T31701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6613'. [ 1063.572343][T31701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6613'. [ 1063.592038][T31701] : entered promiscuous mode [ 1063.608934][T31701] netlink: 'syz.1.6613': attribute type 1 has an invalid length. [ 1063.682122][T31701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6613'. [ 1063.687742][T31712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6618'. [ 1063.733671][T31720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6613'. [ 1063.801679][T31716] IPVS: set_ctl: invalid protocol: 219 172.20.20.170:20002 [ 1063.921220][T31719] svc: failed to register nfsdv3 RPC service (errno 111). [ 1063.933800][T31719] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1064.654947][T31738] netlink: zone id is out of range [ 1064.692203][T31738] netlink: zone id is out of range [ 1064.723640][T31738] netlink: set zone limit has 8 unknown bytes [ 1064.766854][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6624'. [ 1064.786835][T31745] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6625'. [ 1064.820606][T31745] netlink: 'syz.2.6625': attribute type 10 has an invalid length. [ 1065.081930][T31756] pimreg3: entered allmulticast mode [ 1065.395405][T31768] nbd: couldn't find a device at index 0 [ 1065.468081][T31776] tipc: Enabled bearer , priority 0 [ 1065.500907][T31777] syzkaller0: entered promiscuous mode [ 1065.521135][T31777] syzkaller0: entered allmulticast mode [ 1065.610063][T31778] tipc: Resetting bearer [ 1065.688500][T31778] tipc: Disabling bearer [ 1066.072758][T31797] netlink: 'syz.0.6641': attribute type 1 has an invalid length. [ 1066.102165][T31798] netlink: 'syz.2.6640': attribute type 15 has an invalid length. [ 1067.533595][T31840] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1067.590978][T31842] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1068.460960][T31843] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1068.472898][T31843] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1068.481322][T31843] CPU: 1 UID: 0 PID: 31843 Comm: syz.0.6654 Not tainted syzkaller #0 PREEMPT(full) [ 1068.490779][T31843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1068.500838][T31843] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1068.506576][T31843] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 0d e5 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 e5 e4 ab f7 4d 8b 75 00 4d 8d a7 30 [ 1068.526228][T31843] RSP: 0018:ffffc9000c6477e8 EFLAGS: 00010046 [ 1068.532316][T31843] RAX: 0000000000000000 RBX: ffff888078bc7800 RCX: dffffc0000000000 [ 1068.540301][T31843] RDX: 0000000000000000 RSI: ffffffff8bbfc640 RDI: ffff888078bc7800 [ 1068.548274][T31843] RBP: ffff88806a6b2000 R08: 00000000230108fc R09: 00000000346f75cf [ 1068.556253][T31843] R10: 0000000000000010 R11: ffffffff81ad4ad0 R12: ffff88802c3b9650 [ 1068.564231][T31843] R13: 0000000000000000 R14: ffff888078bc7830 R15: ffff88802c3b9000 [ 1068.572203][T31843] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 1068.581134][T31843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1068.587718][T31843] CR2: 00007f036f3156c0 CR3: 0000000072e3c000 CR4: 00000000003526f0 [ 1068.595700][T31843] Call Trace: [ 1068.598980][T31843] [ 1068.601939][T31843] lec_push+0x3cb/0x1860 [ 1068.606197][T31843] ? __pfx_lec_push+0x10/0x10 [ 1068.610882][T31843] vcc_release+0x15f/0x580 [ 1068.615309][T31843] sock_close+0xc3/0x240 [ 1068.619557][T31843] ? __pfx_sock_close+0x10/0x10 [ 1068.624427][T31843] __fput+0x44c/0xa70 [ 1068.628433][T31843] task_work_run+0x1d4/0x260 [ 1068.633045][T31843] ? __pfx_task_work_run+0x10/0x10 [ 1068.638169][T31843] ? do_raw_spin_unlock+0x122/0x240 [ 1068.643386][T31843] do_exit+0x6c5/0x2310 [ 1068.647563][T31843] ? cgroup1_freezing+0x20/0x350 [ 1068.652609][T31843] ? __pfx_do_exit+0x10/0x10 [ 1068.657234][T31843] ? cgroup1_freezing+0x20/0x350 [ 1068.662189][T31843] ? cgroup1_freezing+0x20/0x350 [ 1068.667147][T31843] do_group_exit+0x21c/0x2d0 [ 1068.671757][T31843] ? lockdep_hardirqs_on+0x98/0x140 [ 1068.676975][T31843] get_signal+0x1285/0x1340 [ 1068.681506][T31843] arch_do_signal_or_restart+0x9a/0x7a0 [ 1068.687071][T31843] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1068.693260][T31843] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1068.698728][T31843] exit_to_user_mode_loop+0x87/0x4f0 [ 1068.704104][T31843] ? rcu_is_watching+0x15/0xb0 [ 1068.708883][T31843] do_syscall_64+0x2e3/0xf80 [ 1068.713482][T31843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.719568][T31843] ? clear_bhb_loop+0x60/0xb0 [ 1068.724256][T31843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.730156][T31843] RIP: 0033:0x7f412138f749 [ 1068.734579][T31843] Code: Unable to access opcode bytes at 0x7f412138f71f. [ 1068.741612][T31843] RSP: 002b:00007f41221cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1068.750039][T31843] RAX: fffffffffffffffc RBX: 00007f41215e6180 RCX: 00007f412138f749 [ 1068.758030][T31843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1068.766014][T31843] RBP: 00007f4121413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1068.774000][T31843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.781974][T31843] R13: 00007f41215e6218 R14: 00007f41215e6180 R15: 00007fff3f8669c8 [ 1068.789968][T31843] [ 1068.792998][T31843] Modules linked in: [ 1068.796904][T31843] ---[ end trace 0000000000000000 ]--- [ 1068.802361][T31843] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1068.808124][T31843] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 0d e5 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 e5 e4 ab f7 4d 8b 75 00 4d 8d a7 30 [ 1068.827738][T31843] RSP: 0018:ffffc9000c6477e8 EFLAGS: 00010046 [ 1068.833814][T31843] RAX: 0000000000000000 RBX: ffff888078bc7800 RCX: dffffc0000000000 [ 1068.841787][T31843] RDX: 0000000000000000 RSI: ffffffff8bbfc640 RDI: ffff888078bc7800 [ 1068.849768][T31843] RBP: ffff88806a6b2000 R08: 00000000230108fc R09: 00000000346f75cf [ 1068.857757][T31843] R10: 0000000000000010 R11: ffffffff81ad4ad0 R12: ffff88802c3b9650 [ 1068.865766][T31843] R13: 0000000000000000 R14: ffff888078bc7830 R15: ffff88802c3b9000 [ 1068.873745][T31843] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 1068.882678][T31843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1068.889266][T31843] CR2: 00007f036f3156c0 CR3: 0000000072e3c000 CR4: 00000000003526f0 [ 1068.897252][T31843] Kernel panic - not syncing: Fatal exception [ 1068.903668][T31843] Kernel Offset: disabled [ 1068.907992][T31843] Rebooting in 86400 seconds..