last executing test programs: 8m17.844402271s ago: executing program 3 (id=3299): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001300)="349a7b81c308dc78e5475a608f4ee9bb", 0x10}], 0x2, 0x0, 0x0, 0x80}, 0x40) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 8m17.843630304s ago: executing program 3 (id=3300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 8m16.964278894s ago: executing program 3 (id=3316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 8m16.862583406s ago: executing program 3 (id=3318): r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20) 8m15.946580534s ago: executing program 3 (id=3335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 8m15.802781368s ago: executing program 3 (id=3341): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m15.660821756s ago: executing program 32 (id=3341): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.736104399s ago: executing program 5 (id=8650): pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000", @ANYRES16=r0], 0xc4}}, 0x0) 2m18.521560359s ago: executing program 5 (id=8656): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m17.448144625s ago: executing program 5 (id=8663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a2b", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$phonet_pipe(r4, &(0x7f0000000280)={0x23, 0x8, 0x3, 0x6}, 0x10) 2m17.035330927s ago: executing program 5 (id=8664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 2m16.749302485s ago: executing program 5 (id=8667): pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000", @ANYRES16=r0], 0xc4}}, 0x0) 2m16.628851684s ago: executing program 5 (id=8669): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) socket(0x11, 0x800000003, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x1, 0x8}}}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r7, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) sendmmsg(r5, 0x0, 0x0, 0x0) 2m1.309415114s ago: executing program 33 (id=8669): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) socket(0x11, 0x800000003, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x1, 0x8}}}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r7, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) sendmmsg(r5, 0x0, 0x0, 0x0) 5.268288683s ago: executing program 4 (id=9549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r3], 0x44}}, 0x20008040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8, r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r12, &(0x7f0000000180), 0x40010) 5.028010541s ago: executing program 2 (id=9552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000100), 0x0, 0x726, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000c40), &(0x7f0000000e80)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5ced1a9ed4e19044b2e1d182e389e0395bb14472b95056fa0df9e8a891b12197cd2d7e1b049a5d7b9d9423601188014c2d6f2afe609464032d78738a390c1e8320cc6798f9776e46c9561cf666a7bf2c28c03f0847fd8aa908d420a2dbcd7fe68a95e0b9349c334f065ed1814e4e61b3846d872986"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) sendmsg$AUDIT_USER(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfe, "0f772360d4ddad4f929e412f72f34d0a818fc426dc4560f5e3d113210528151e8c464be2a6089fa5f93a02e46cca23c18f58e5eb9b3cdf38e4232fa0f1de1cf7dca2b97ad1a37f0bb784238d06080d189bd1a3c5baaf0c759cf0867f420f9470f556397d60fad1623232d5e327354da1aa67c166208341fc2b2e65917827fec5b657f45260c0fefe254a5b82abe2a68b00286b9113e1700aa4db1112d19c829b56b2996d0958f939a884af5d11ca8e218f091e948b2a9ef4dec1d628bbc7ced191418feb1aac033f8dde4f48e478dbf5420f4156bd955f1be806b92bbd7a1cfbd04b6459d6f117", ["", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0xc4) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.903903938s ago: executing program 6 (id=9553): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_gettime(0x0, &(0x7f0000003c40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f0000000080)=""/61, 0x3d}, 0x9}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5}, 0x558df09a}, {{&(0x7f00000006c0)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000740)=""/135, 0x87}], 0x1, &(0x7f0000000800)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/123, 0x7b}, {&(0x7f0000001d00)=""/245, 0xf5}], 0x5, &(0x7f0000001e80)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000001f80)=@nfc, 0x80, &(0x7f0000000940)}, 0x4}, {{&(0x7f0000002000)=@pptp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002080)=""/166, 0xa6}, {&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/158, 0x9e}], 0x4, &(0x7f0000003240)=""/18, 0x12}, 0x4}, {{&(0x7f0000003280)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @remote, @default, @null, @null]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003300)=""/97, 0x61}], 0x1, &(0x7f00000033c0)=""/98, 0x62}, 0x9}, {{&(0x7f0000003440)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/82, 0x52}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/165, 0xa5}, {&(0x7f0000003800)=""/229, 0xe5}], 0x6, &(0x7f0000003980)=""/137, 0x89}, 0x9}], 0x8, 0x102, &(0x7f0000003c80)={r8, r9+10000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 4.876213196s ago: executing program 4 (id=9554): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x7ffffffe, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x5, 0x0, 0x208000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 4.146489872s ago: executing program 6 (id=9556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 3.87490619s ago: executing program 1 (id=9557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x970b) shutdown(r1, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x28, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 3.573273445s ago: executing program 2 (id=9558): pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b40000000000600"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x1, 0x0) shutdown(r4, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) 3.520256315s ago: executing program 6 (id=9559): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 3.446175683s ago: executing program 2 (id=9561): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r7}, 0x38) socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) 3.323582485s ago: executing program 4 (id=9562): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r3, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x401, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x3, 0x9}, 0x10}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) sendmsg$rds(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000240)}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/254, 0xfe}], 0x6, &(0x7f0000000880)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3ff}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0xffffffff}, &(0x7f0000000280)=0xfffffffffffffff7, &(0x7f0000000300)=0x3b7caa38, 0xf8, 0xfffffffffffffffa, 0x9, 0xffffffffffffff0c, 0x40, 0xfffffffffffff800}}], 0x70, 0x4004800}, 0x4000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200"/15], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.60159621s ago: executing program 2 (id=9563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 2.411086201s ago: executing program 6 (id=9565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 2.404499643s ago: executing program 4 (id=9566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) 2.220744263s ago: executing program 0 (id=9567): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00'], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@tcp=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 1.982693612s ago: executing program 0 (id=9568): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x7ffffffe, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x5, 0x0, 0x208000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.591319186s ago: executing program 4 (id=9569): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r3, r4}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r5, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) close(0x3) 1.303321902s ago: executing program 1 (id=9570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0) unshare(0x28040680) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000050000000000020000000900020073797a310000000005000100070000002c000780180001801400024020010000000000000000000000000002060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.302287199s ago: executing program 4 (id=9571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x88}}], 0x2, 0x2400c044) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r7, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r8, 0x0, 0x4010) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 1.301508641s ago: executing program 6 (id=9572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x20008040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) 937.730663ms ago: executing program 0 (id=9573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r3, 0x0, &(0x7f0000000a80)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) pipe(&(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 937.015206ms ago: executing program 1 (id=9574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010005000200000000", @ANYRES8], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x4}, 0xfffffffffffffefc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="980000002000010001000000000000000a202000000000000000000014001400fe88000000000000000000000000010114000200fc0200000000000000000000000000001400020000000000000000000000ffffffffffff050015000000000008000e000200000014000100ff02000000000000000000000000000114000100fe8000000000000000000000000000190800"], 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000001900010025bd7000fbcbdf250a80"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000008002907800000000e000032200009078006400d2"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xc5, 0x37b2, 0x3ff, 0x20020, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001", @ANYRESDEC=r8, @ANYRESOCT=r8], 0xc8}}, 0x0) close(r4) 864.499294ms ago: executing program 6 (id=9575): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 851.782247ms ago: executing program 2 (id=9576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r3], 0x44}}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8, r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r12, &(0x7f0000000180), 0x40010) 322.3127ms ago: executing program 0 (id=9577): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a000000"], 0x184}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 297.095774ms ago: executing program 1 (id=9578): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00'], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@tcp=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 291.851435ms ago: executing program 2 (id=9579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)='%pS \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 208.467666ms ago: executing program 0 (id=9580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r3], 0x44}}, 0x20008040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8, r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r12, &(0x7f0000000180), 0x40010) 169.764744ms ago: executing program 1 (id=9581): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r3, r4}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r5, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) close(0x3) 67.690491ms ago: executing program 1 (id=9582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r6}, 0x10) ppoll(&(0x7f0000000100)=[{r3}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='xfrm0\x00', 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40020000", @ANYRES16, @ANYBLOB="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", @ANYBLOB='!'], 0x240}}, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 0s ago: executing program 0 (id=9583): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@tcp=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): omiscuous mode [ 554.014940][T28254] vlan0: left allmulticast mode [ 554.020077][T28254] bond9: left allmulticast mode [ 554.066053][T28254] gretap3: left promiscuous mode [ 554.072196][T28254] veth13: left promiscuous mode [ 554.205148][T28254] veth15: left promiscuous mode [ 554.292836][T28258] erspan0: left allmulticast mode [ 554.397856][T28258] veth33: left promiscuous mode [ 554.422664][T28258] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 554.516938][T28270] netlink: 'syz.4.8502': attribute type 1 has an invalid length. [ 554.565243][T28262] hsr_slave_0: left promiscuous mode [ 554.573995][T28262] hsr_slave_1: left promiscuous mode [ 554.597129][ T49] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.611294][T28273] netlink: 'syz.2.8503': attribute type 1 has an invalid length. [ 554.617469][ T49] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.636443][ T49] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.651763][T28260] lo speed is unknown, defaulting to 1000 [ 554.668130][T28273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.700102][ T49] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.723206][T28271] lo speed is unknown, defaulting to 1000 [ 554.749512][T28273] veth37: entered promiscuous mode [ 554.793044][T28281] __nla_validate_parse: 4 callbacks suppressed [ 554.793061][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8504'. [ 554.830666][T28273] erspan0: entered allmulticast mode [ 555.015487][T28285] lo speed is unknown, defaulting to 1000 [ 555.069728][T28297] netlink: 'syz.5.8507': attribute type 2 has an invalid length. [ 555.105193][T28297] k›*·]‘: entered promiscuous mode [ 555.174964][T28297] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.185404][T28297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.274332][T28304] erspan0: left allmulticast mode [ 555.294059][T28304] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.303282][T28304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.325648][T28297] veth0_to_team: entered promiscuous mode [ 555.331417][T28297] veth0_to_team: entered allmulticast mode [ 555.474868][T28313] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 555.644514][T28317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8513'. [ 555.674078][T28317] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8513'. [ 555.698147][T28317] lo speed is unknown, defaulting to 1000 [ 555.860204][T28328] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8516'. [ 555.871600][T28328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8516'. [ 556.888853][T28361] netlink: 'syz.1.8524': attribute type 10 has an invalid length. [ 557.406366][T28374] netlink: 'syz.0.8528': attribute type 1 has an invalid length. [ 557.427956][T28374] 8021q: adding VLAN 0 to HW filter on device bond20 [ 557.469126][T28374] veth25: entered promiscuous mode [ 557.485064][T28374] bond20: (slave veth25): Enslaving as an active interface with a down link [ 557.527642][T28372] lo speed is unknown, defaulting to 1000 [ 557.537129][T28379] netlink: 'syz.2.8529': attribute type 13 has an invalid length. [ 557.554227][T28379] netlink: 'syz.2.8529': attribute type 17 has an invalid length. [ 557.610733][T28379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.647537][T28381] bridge_slave_0: entered promiscuous mode [ 557.720545][T28385] : left promiscuous mode [ 557.788621][T28382] lo speed is unknown, defaulting to 1000 [ 557.815722][T28379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.833420][T28389] syzkaller0: entered promiscuous mode [ 557.843758][T28389] syzkaller0: entered allmulticast mode [ 557.851404][T28391] netlink: 'syz.4.8533': attribute type 1 has an invalid length. [ 557.859739][T28391] netlink: 'syz.4.8533': attribute type 1 has an invalid length. [ 558.096530][T28391] 8021q: adding VLAN 0 to HW filter on device bond11 [ 558.114679][T28391] bond11: (slave wlan0): Opening slave failed [ 558.129689][T28391] vlan1: entered allmulticast mode [ 558.135269][T28391] veth1: entered allmulticast mode [ 558.141461][T28391] bond11: (slave vlan1): Opening slave failed [ 558.208530][T28403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8535'. [ 558.264913][T28405] lo speed is unknown, defaulting to 1000 [ 558.653313][T28412] syzkaller0: entered promiscuous mode [ 558.658838][T28412] syzkaller0: entered allmulticast mode [ 558.828687][T28414] lo speed is unknown, defaulting to 1000 [ 558.889932][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8539'. [ 558.918898][T28419] validate_nla: 1 callbacks suppressed [ 558.918914][T28419] netlink: 'syz.0.8540': attribute type 1 has an invalid length. [ 558.949176][T28421] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8539'. [ 559.038555][T28427] Unsupported ieee802154 address type: 0 [ 559.041485][T28419] 8021q: adding VLAN 0 to HW filter on device bond21 [ 559.072000][T28421] lo speed is unknown, defaulting to 1000 [ 559.085174][T28428] veth27: entered promiscuous mode [ 559.139254][T28428] bond21: (slave veth27): Enslaving as an active interface with a down link [ 559.263413][T28431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8541'. [ 559.309049][T28437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8543'. [ 559.358400][T28437] bridge7: port 1(veth29) entered blocking state [ 559.367220][T28437] bridge7: port 1(veth29) entered disabled state [ 559.384314][T28437] veth29: entered allmulticast mode [ 559.390644][T28437] veth29: entered promiscuous mode [ 559.407629][T28426] lo speed is unknown, defaulting to 1000 [ 559.431809][T28439] geneve5: entered promiscuous mode [ 559.442111][T28441] bridge7: port 2(veth0_to_bond) entered blocking state [ 559.455441][T28441] bridge7: port 2(veth0_to_bond) entered disabled state [ 559.480571][T28441] veth0_to_bond: entered allmulticast mode [ 559.493360][T28441] veth0_to_bond: entered promiscuous mode [ 559.514452][T28437] vlan3: entered allmulticast mode [ 559.520227][T28437] veth1: entered allmulticast mode [ 559.527811][T28437] bridge7: port 3(vlan3) entered blocking state [ 559.535396][T28437] bridge7: port 3(vlan3) entered disabled state [ 559.550083][T28437] vlan3: entered promiscuous mode [ 559.556389][T28437] veth1: entered promiscuous mode [ 559.681926][T28447] netlink: 'syz.2.8547': attribute type 2 has an invalid length. [ 559.809357][T28450] __nla_validate_parse: 2 callbacks suppressed [ 559.809373][T28450] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8548'. [ 559.852102][T28448] lo speed is unknown, defaulting to 1000 [ 559.881601][T28450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8548'. [ 560.188400][T28473] lo speed is unknown, defaulting to 1000 [ 560.370463][T28483] netlink: 'syz.5.8554': attribute type 1 has an invalid length. [ 560.399796][T28483] 8021q: adding VLAN 0 to HW filter on device bond15 [ 560.504805][T28483] veth17: entered promiscuous mode [ 560.549569][T28483] bond15: (slave veth17): Enslaving as an active interface with a down link [ 560.589436][T28483] erspan0: entered allmulticast mode [ 560.619057][T28495] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 560.652955][T28495] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 560.794096][T28498] netlink: 'syz.5.8558': attribute type 5 has an invalid length. [ 560.894661][T28498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8558'. [ 561.284285][T28508] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8561'. [ 561.304000][T28508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8561'. [ 561.446529][T28522] lo speed is unknown, defaulting to 1000 [ 561.734203][T28534] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8567'. [ 561.833880][T28535] wireguard0: entered promiscuous mode [ 561.860236][T28535] wireguard0: entered allmulticast mode [ 561.921267][T28540] netlink: 1360 bytes leftover after parsing attributes in process `syz.4.8568'. [ 561.931493][T28540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8568'. [ 562.069504][T28543] 8021q: adding VLAN 0 to HW filter on device bond12 [ 562.080569][T28543] bond0: (slave bond12): Enslaving as an active interface with a down link [ 562.198227][T28551] syzkaller0: entered promiscuous mode [ 562.204144][T28551] syzkaller0: entered allmulticast mode [ 562.269238][T28553] lo speed is unknown, defaulting to 1000 [ 562.434454][T28553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.545923][T28575] lo speed is unknown, defaulting to 1000 [ 562.626921][T28583] lo speed is unknown, defaulting to 1000 [ 563.035706][T28591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.412448][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 563.514857][T28602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8583'. [ 563.541181][T28602] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8583'. [ 563.625587][T28602] lo speed is unknown, defaulting to 1000 [ 563.628683][T28606] netlink: 'syz.0.8585': attribute type 1 has an invalid length. [ 563.704698][T28606] 8021q: adding VLAN 0 to HW filter on device bond22 [ 563.799488][T28606] veth31: entered promiscuous mode [ 563.831011][T28606] bond22: (slave veth31): Enslaving as an active interface with a down link [ 564.029408][T28223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.080971][T28223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.368389][T28625] lo speed is unknown, defaulting to 1000 [ 564.492595][T28642] lo speed is unknown, defaulting to 1000 [ 564.627854][T28649] syzkaller0: entered promiscuous mode [ 564.634080][T28649] syzkaller0: entered allmulticast mode [ 564.876783][T28654] __nla_validate_parse: 3 callbacks suppressed [ 564.876802][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8595'. [ 565.061280][T28661] macsec0: entered promiscuous mode [ 565.076907][T28661] macsec0: entered allmulticast mode [ 565.090278][T28661] veth1_macvtap: entered allmulticast mode [ 565.101920][T28661] macsec0: left promiscuous mode [ 565.111991][T28661] macsec0: left allmulticast mode [ 565.121507][T28661] veth1_macvtap: left allmulticast mode [ 565.409241][T28670] lo speed is unknown, defaulting to 1000 [ 565.571316][T28674] lo speed is unknown, defaulting to 1000 [ 566.498634][T28694] netlink: 'syz.4.8607': attribute type 13 has an invalid length. [ 566.515229][T28694] netlink: 'syz.4.8607': attribute type 17 has an invalid length. [ 566.557529][T28694] 8021q: adding VLAN 0 to HW filter on device à [ 566.578278][T28694] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.604125][T28694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.665283][T28696] lo speed is unknown, defaulting to 1000 [ 566.751672][T28694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.941061][T28708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8611'. [ 567.141391][T28716] syzkaller0: entered promiscuous mode [ 567.177134][T28714] netlink: 'syz.2.8610': attribute type 1 has an invalid length. [ 567.187255][T28714] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8610'. [ 567.198554][T28716] syzkaller0: entered allmulticast mode [ 567.206462][T28714] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8610'. [ 567.366901][T28722] lo speed is unknown, defaulting to 1000 [ 567.885131][T28735] bridge_slave_0: entered promiscuous mode [ 568.041039][T28740] lo speed is unknown, defaulting to 1000 [ 568.208537][T28745] netlink: 'syz.1.8619': attribute type 1 has an invalid length. [ 568.276725][T28745] 8021q: adding VLAN 0 to HW filter on device bond15 [ 568.310325][T28745] veth21: entered promiscuous mode [ 568.336080][T28748] syzkaller0: entered promiscuous mode [ 568.348442][T28748] syzkaller0: entered allmulticast mode [ 569.155016][T28774] tipc: Enabling of bearer rejected, failed to enable media [ 569.317224][ T12] syzkaller0: tun_net_xmit 76 [ 569.322097][ T12] syzkaller0: tun_net_xmit 48 [ 569.405508][T28797] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8628'. [ 569.426306][T28797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8628'. [ 569.446421][T28797] pimreg: left allmulticast mode [ 569.496686][T28801] IPVS: stopping backup sync thread 25915 ... [ 569.510332][T28797] lo speed is unknown, defaulting to 1000 [ 569.517475][T28797] lo speed is unknown, defaulting to 1000 [ 569.524125][T28797] lo speed is unknown, defaulting to 1000 [ 569.636674][T28802] erspan0: left allmulticast mode [ 569.749748][T28802] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 569.766170][ T24] lo speed is unknown, defaulting to 1000 [ 569.771913][ T24] syz2: Port: 1 Link ACTIVE [ 569.787622][T28805] lo speed is unknown, defaulting to 1000 [ 569.822793][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 569.936359][T28797] infiniband syz0: set active [ 569.941178][T28797] infiniband syz0: added lo [ 569.969322][T28797] RDS/IB: syz0: added [ 569.974138][T28797] smc: adding ib device syz0 with port count 1 [ 569.983322][ T3584] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 569.991695][T28797] smc: ib device syz0 port 1 has pnetid [ 570.059717][T19751] lo speed is unknown, defaulting to 1000 [ 570.107700][T28799] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8629'. [ 570.162960][T19751] syz0: Port: 1 Link ACTIVE [ 570.167973][T28797] lo speed is unknown, defaulting to 1000 [ 570.192767][T19746] lo speed is unknown, defaulting to 1000 [ 570.400820][T28797] lo speed is unknown, defaulting to 1000 [ 570.565522][T28797] lo speed is unknown, defaulting to 1000 [ 570.692510][T13976] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 570.838326][T28797] lo speed is unknown, defaulting to 1000 [ 570.886239][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8636'. [ 570.905196][T28835] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8636'. [ 571.013746][ T73] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.024943][T28838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8637'. [ 571.026241][ T73] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.054618][T28838] unsupported nlmsg_type 40 [ 571.115194][T28797] lo speed is unknown, defaulting to 1000 [ 571.233126][ T73] syzkaller0: tun_net_xmit 76 [ 571.244571][ T73] syzkaller0: tun_net_xmit 48 [ 571.262801][T19746] syzkaller0: tun_net_xmit 76 [ 571.373448][T19746] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.430384][T28797] lo speed is unknown, defaulting to 1000 [ 571.571667][T28851] syzkaller0: entered promiscuous mode [ 571.588955][T28851] syzkaller0: entered allmulticast mode [ 571.646320][T28797] lo speed is unknown, defaulting to 1000 [ 571.794186][T28835] lo speed is unknown, defaulting to 1000 [ 571.866906][T28856] netlink: 'syz.1.8645': attribute type 1 has an invalid length. [ 571.886913][T28856] netlink: 'syz.1.8645': attribute type 1 has an invalid length. [ 572.121049][T28874] netlink: 'syz.1.8645': attribute type 1 has an invalid length. [ 572.164297][T28853] lo speed is unknown, defaulting to 1000 [ 572.174798][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.193117][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.231268][T28874] 8021q: adding VLAN 0 to HW filter on device bond16 [ 572.269987][T28853] lo speed is unknown, defaulting to 1000 [ 572.286890][T28882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8648'. [ 572.816701][T28892] pimreg: entered allmulticast mode [ 573.108735][T28911] netlink: 'syz.5.8656': attribute type 10 has an invalid length. [ 573.120272][T28908] IPVS: Scheduler module ip_vs_sip not found [ 573.171153][T28914] netlink: 'syz.5.8656': attribute type 10 has an invalid length. [ 573.229184][T28912] syzkaller0: entered promiscuous mode [ 573.236849][T28912] syzkaller0: entered allmulticast mode [ 573.255919][T28918] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 573.259823][T28911] team0: Port device 0! added [ 573.355757][T28914] team0: Port device 0! removed [ 573.822884][T28932] wireguard0: entered promiscuous mode [ 573.848744][T28932] wireguard0: entered allmulticast mode [ 574.201523][T28936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8662'. [ 574.479347][T28953] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 574.541262][T28953] bond15: (slave veth17): Releasing active interface [ 574.602110][T28953] netlink: 'syz.5.8664': attribute type 10 has an invalid length. [ 574.610558][T28953] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 574.772378][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.038711][T28975] netlink: 'syz.2.8672': attribute type 3 has an invalid length. [ 575.333384][ T5864] Bluetooth: hci0: command tx timeout [ 575.934930][T28987] netlink: 'syz.1.8673': attribute type 2 has an invalid length. [ 575.983097][T28987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.011581][T28992] netlink: 'syz.0.8674': attribute type 1 has an invalid length. [ 576.029333][T19746] lo speed is unknown, defaulting to 1000 [ 576.081300][T28992] 8021q: adding VLAN 0 to HW filter on device bond23 [ 576.093981][T28996] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8676'. [ 576.148611][T28992] veth33: entered promiscuous mode [ 576.159372][T29001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8673'. [ 576.182671][T29001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8673'. [ 576.268124][T29004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8677'. [ 576.401691][T29009] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8677'. [ 576.418275][T29007] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8677'. [ 576.459080][T29011] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 576.474743][T29011] bond10: (slave veth19): Releasing active interface [ 576.508164][T29011] bond0: (slave veth21): Releasing active interface [ 576.522217][T29011] bond0: (slave veth21): the permanent HWaddr of slave - 7a:07:75:52:d6:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 576.548781][T29011] bond0: (slave bond12): Releasing active interface [ 576.576669][T28999] netlink: 'syz.2.8676': attribute type 1 has an invalid length. [ 576.585172][T28999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8676'. [ 576.681831][T29019] syz_tun: entered allmulticast mode [ 576.719016][T29019] dvmrp8: entered allmulticast mode [ 576.743580][T29021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8681'. [ 576.776711][T29019] lo speed is unknown, defaulting to 1000 [ 576.786141][T29019] lo speed is unknown, defaulting to 1000 [ 577.059649][T29018] syz_tun: left allmulticast mode [ 577.065882][T29018] dvmrp8: left allmulticast mode [ 577.259709][T29041] lo speed is unknown, defaulting to 1000 [ 577.272893][T29041] lo speed is unknown, defaulting to 1000 [ 577.803245][T29053] !: renamed from dummy0 [ 577.881084][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8692'. [ 577.908988][T29056] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 578.051826][T29063] lo speed is unknown, defaulting to 1000 [ 578.093899][T29063] lo speed is unknown, defaulting to 1000 [ 578.144870][T29060] lo speed is unknown, defaulting to 1000 [ 578.289820][T29060] lo speed is unknown, defaulting to 1000 [ 578.515465][T29081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8695'. [ 578.609831][T29084] pimreg: left allmulticast mode [ 580.077392][T29120] lo speed is unknown, defaulting to 1000 [ 580.086164][T29120] lo speed is unknown, defaulting to 1000 [ 580.243457][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 580.599023][T29140] lo speed is unknown, defaulting to 1000 [ 580.607069][T29140] lo speed is unknown, defaulting to 1000 [ 580.664884][T29142] lo speed is unknown, defaulting to 1000 [ 580.807541][T29142] lo speed is unknown, defaulting to 1000 [ 581.424566][T29153] syzkaller0: entered promiscuous mode [ 581.430334][T29153] syzkaller0: entered allmulticast mode [ 581.595306][T29160] tipc: Enabling of bearer rejected, failed to enable media [ 581.605111][T29160] syzkaller0: entered promiscuous mode [ 581.610600][T29160] syzkaller0: entered allmulticast mode [ 582.171221][T29169] lo speed is unknown, defaulting to 1000 [ 582.275944][T29169] lo speed is unknown, defaulting to 1000 [ 582.856764][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 582.915874][T29179] validate_nla: 2 callbacks suppressed [ 582.915891][T29179] netlink: 'syz.4.8722': attribute type 2 has an invalid length. [ 582.947705][T29179] k›*·]‘: entered promiscuous mode [ 582.960437][T29179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.980973][T29179] veth0_to_team: entered promiscuous mode [ 582.990961][T29179] veth0_to_team: entered allmulticast mode [ 583.077620][T29184] syzkaller1: entered promiscuous mode [ 583.088605][T29184] syzkaller1: entered allmulticast mode [ 583.136148][T29186] lo speed is unknown, defaulting to 1000 [ 583.143698][T29186] lo speed is unknown, defaulting to 1000 [ 583.583789][T29196] geneve5: entered promiscuous mode [ 583.720892][T29199] __nla_validate_parse: 1 callbacks suppressed [ 583.720912][T29199] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8728'. [ 583.861868][T29199] batadv2: entered promiscuous mode [ 583.884010][T29201] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8728'. [ 583.891792][T29199] batadv2: entered allmulticast mode [ 584.136496][T29207] syzkaller0: entered promiscuous mode [ 584.142024][T29207] syzkaller0: entered allmulticast mode [ 584.263211][T29215] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8731'. [ 584.278968][T29213] lo speed is unknown, defaulting to 1000 [ 584.304665][T29213] lo speed is unknown, defaulting to 1000 [ 584.471334][T29219] lo speed is unknown, defaulting to 1000 [ 584.480818][T29219] lo speed is unknown, defaulting to 1000 [ 584.881768][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8735'. [ 584.900778][T29227] netlink: 'syz.0.8736': attribute type 3 has an invalid length. [ 584.924620][T29226] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8735'. [ 584.939929][T29227] syz_tun: entered allmulticast mode [ 584.978144][T29227] siw: device registration error -23 [ 584.984186][T29226] lo speed is unknown, defaulting to 1000 [ 584.987438][T29229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8737'. [ 584.991777][T29226] lo speed is unknown, defaulting to 1000 [ 585.080263][T29232] erspan0: left allmulticast mode [ 585.112525][T29232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.276497][T29225] syz_tun: left allmulticast mode [ 585.540533][T29238] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 585.558461][T29238] netlink: 'syz.4.8749': attribute type 10 has an invalid length. [ 585.570996][T29238] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 585.638499][T29247] syzkaller0: entered promiscuous mode [ 585.645991][T29247] syzkaller0: entered allmulticast mode [ 585.682141][T29245] lo speed is unknown, defaulting to 1000 [ 585.713584][T29257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8742'. [ 585.742403][T29245] lo speed is unknown, defaulting to 1000 [ 585.988270][T29272] syzkaller0: entered promiscuous mode [ 585.998130][T29272] syzkaller0: entered allmulticast mode [ 586.228028][T29293] IPVS: stopping backup sync thread 29294 ... [ 586.236005][T29294] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 586.509776][T29304] lo speed is unknown, defaulting to 1000 [ 586.531580][T29308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8752'. [ 586.576806][T29308] macvtap0: entered promiscuous mode [ 586.592450][T29308] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 586.601595][T29304] lo speed is unknown, defaulting to 1000 [ 586.825776][T29308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8752'. [ 586.926156][T29312] lo speed is unknown, defaulting to 1000 [ 587.027657][T29314] lo speed is unknown, defaulting to 1000 [ 587.058719][T29316] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 587.072579][T29312] lo speed is unknown, defaulting to 1000 [ 587.076049][T19746] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.257895][T29314] lo speed is unknown, defaulting to 1000 [ 587.488535][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8757'. [ 587.533403][T29346] netlink: 'syz.0.8760': attribute type 1 has an invalid length. [ 587.651979][T29346] 8021q: adding VLAN 0 to HW filter on device bond24 [ 587.707255][T29350] veth35: entered promiscuous mode [ 587.725353][T29350] bond24: (slave veth35): Enslaving as an active interface with a down link [ 587.751704][T29346] erspan0: entered allmulticast mode [ 587.773066][T29352] lo speed is unknown, defaulting to 1000 [ 587.780675][T29352] lo speed is unknown, defaulting to 1000 [ 588.136546][T19751] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 588.653907][T29378] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 588.877412][T29381] veth0_to_bond: left allmulticast mode [ 588.887109][T29381] veth0_to_bond: left promiscuous mode [ 588.893471][T29381] bridge7: port 2(veth0_to_bond) entered disabled state [ 588.917136][T29378] netlink: 'syz.0.8765': attribute type 10 has an invalid length. [ 588.934894][T29381] bond15: (slave ip6gretap1): Releasing active interface [ 588.948257][T29381] bond15: (slave ip6gretap1): the permanent HWaddr of slave - d6:44:16:74:d4:1f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 588.991569][T29381] bond15: (slave veth17): Releasing active interface [ 589.015925][T29381] bond17: (slave veth19): Releasing active interface [ 589.026109][T29381] bond0: (slave veth21): Releasing active interface [ 589.038521][T29381] bond20: (slave veth25): Releasing active interface [ 589.051849][T29381] bond21: (slave veth27): Releasing active interface [ 589.067383][T29381] veth29: left allmulticast mode [ 589.072482][T29381] veth29: left promiscuous mode [ 589.077558][T29381] bridge7: port 1(veth29) entered disabled state [ 589.087002][T29381] vlan3: left promiscuous mode [ 589.091822][T29381] veth1: left promiscuous mode [ 589.097273][T29381] bridge7: port 3(vlan3) entered disabled state [ 589.106507][T29381] bond22: (slave veth31): Releasing active interface [ 589.118151][T29381] bond24: (slave veth35): Releasing active interface [ 589.132899][T29378] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 589.275719][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8767'. [ 589.375037][T29395] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 589.388542][T29395] veth37: left promiscuous mode [ 589.395141][T29395] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 589.402920][T29395] macvtap0: left promiscuous mode [ 589.511911][T29398] hsr_slave_0: left promiscuous mode [ 589.670051][T29409] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8769'. [ 589.680061][T29409] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8769'. [ 589.812541][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 589.824588][T29415] netlink: 'syz.1.8772': attribute type 1 has an invalid length. [ 589.855392][T29415] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8772'. [ 590.514734][T29427] lo speed is unknown, defaulting to 1000 [ 590.614395][T29427] lo speed is unknown, defaulting to 1000 [ 590.724733][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.733094][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.740482][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.753935][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.793616][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 590.897447][T29434] lo speed is unknown, defaulting to 1000 [ 590.968132][T29434] lo speed is unknown, defaulting to 1000 [ 591.141216][T29439] netlink: 'syz.2.8777': attribute type 1 has an invalid length. [ 591.194294][T29439] 8021q: adding VLAN 0 to HW filter on device bond22 [ 591.237641][T29442] 8021q: adding VLAN 0 to HW filter on device bond22 [ 591.248653][T29442] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address [ 591.262504][T29442] bond22: (slave vxcan1): Error -95 calling set_mac_address [ 591.310058][T26936] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 591.430091][T29448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8778'. [ 591.606768][T29434] chnl_net:caif_netlink_parms(): no params data found [ 591.803535][T29434] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.812583][T29434] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.819908][T29434] bridge_slave_0: entered allmulticast mode [ 591.826996][T29434] bridge_slave_0: entered promiscuous mode [ 591.835807][T29434] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.843433][T29434] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.850937][T29434] bridge_slave_1: entered allmulticast mode [ 591.858695][T29434] bridge_slave_1: entered promiscuous mode [ 591.894528][T29434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.918574][T29434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.943900][T29434] team0: Port device team_slave_0 added [ 591.951155][T29434] team0: Port device team_slave_1 added [ 591.977167][T29434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.984300][T29434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.000187][T29457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8782'. [ 592.011099][T29434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.035537][T29434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.042657][T29434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.071680][T29434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.096186][T29474] syzkaller0: entered promiscuous mode [ 592.101864][T29474] syzkaller0: entered allmulticast mode [ 592.135377][T29434] hsr_slave_0: entered promiscuous mode [ 592.142106][T29434] hsr_slave_1: entered promiscuous mode [ 592.187426][T29476] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 592.307059][T29482] tipc: Enabling of bearer rejected, failed to enable media [ 592.316642][T29434] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 592.327630][T29482] syzkaller0: entered promiscuous mode [ 592.333837][T29482] syzkaller0: entered allmulticast mode [ 592.340710][T29434] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 592.350414][T29434] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 592.359988][T29434] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 592.437534][T29434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.460605][T29434] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.475063][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.482260][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.495208][T26936] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.502348][T26936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.517950][T29495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8788'. [ 592.600248][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8789'. [ 592.615459][T29498] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8789'. [ 592.660480][T29498] lo speed is unknown, defaulting to 1000 [ 592.674615][T29498] lo speed is unknown, defaulting to 1000 [ 592.729591][T29434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.877187][T29508] netlink: 'syz.0.8791': attribute type 2 has an invalid length. [ 592.936067][ T51] Bluetooth: hci5: command tx timeout [ 593.107582][T29434] veth0_vlan: entered promiscuous mode [ 593.148711][T29434] veth1_vlan: entered promiscuous mode [ 593.218316][T29434] veth0_macvtap: entered promiscuous mode [ 593.290758][T29434] veth1_macvtap: entered promiscuous mode [ 593.359705][T29434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.378582][T29434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.397954][T26936] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.410183][T26936] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.434751][T29513] erspan0: left allmulticast mode [ 593.444512][T29513] tipc: Resetting bearer [ 593.455863][T26936] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.467046][T26936] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.553385][T29543] lo speed is unknown, defaulting to 1000 [ 593.559265][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.575949][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.585091][T29543] lo speed is unknown, defaulting to 1000 [ 593.601816][T26936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.618633][T26936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.690179][T29546] tipc: Enabling of bearer rejected, failed to enable media [ 593.702515][T29546] syzkaller0: entered promiscuous mode [ 593.708071][T29546] syzkaller0: entered allmulticast mode [ 593.758378][T29548] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.917811][T29556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8800'. [ 594.416353][T29572] netlink: 'syz.1.8803': attribute type 1 has an invalid length. [ 594.457984][T29572] 8021q: adding VLAN 0 to HW filter on device bond17 [ 594.496691][T29572] veth23: entered promiscuous mode [ 594.509344][T29572] bond17: (slave veth23): Enslaving as an active interface with a down link [ 594.520307][T29575] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 594.528745][T29572] erspan0: entered allmulticast mode [ 594.873464][T29588] __nla_validate_parse: 4 callbacks suppressed [ 594.873485][T29588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8808'. [ 594.908301][T29590] tipc: Enabling of bearer rejected, failed to enable media [ 594.930423][T29590] syzkaller0: entered promiscuous mode [ 594.936626][T29590] syzkaller0: entered allmulticast mode [ 594.960640][T29594] netlink: zone id is out of range [ 594.970517][T29594] netlink: zone id is out of range [ 595.012667][ T51] Bluetooth: hci5: command tx timeout [ 595.060738][T29594] netlink: set zone limit has 4 unknown bytes [ 595.090740][T29595] netlink: del zone limit has 4 unknown bytes [ 595.114266][T29599] syz_tun: entered allmulticast mode [ 595.136650][T29599] dvmrp8: entered allmulticast mode [ 595.192146][T29548] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.225379][T29606] netlink: 'syz.4.8811': attribute type 23 has an invalid length. [ 595.229922][T29605] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8812'. [ 595.290328][T29605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8812'. [ 595.300337][T29599] lo speed is unknown, defaulting to 1000 [ 595.371138][T29599] lo speed is unknown, defaulting to 1000 [ 595.556114][T29612] tipc: Enabled bearer , priority 0 [ 595.614641][T29612] syzkaller0: entered promiscuous mode [ 595.620401][T29612] syzkaller0: entered allmulticast mode [ 595.657105][T29614] netlink: 'syz.1.8816': attribute type 1 has an invalid length. [ 595.684895][T29614] 8021q: adding VLAN 0 to HW filter on device bond18 [ 595.698154][T29612] tipc: Resetting bearer [ 595.708170][T29611] tipc: Resetting bearer [ 595.717342][T29611] tipc: Disabling bearer [ 595.737596][T29614] veth25: entered promiscuous mode [ 595.747093][T29614] bond18: (slave veth25): Enslaving as an active interface with a down link [ 595.762099][T29596] syz_tun: left allmulticast mode [ 595.771717][T29596] dvmrp8: left allmulticast mode [ 595.974906][T29629] netlink: 'syz.4.8819': attribute type 10 has an invalid length. [ 596.013120][T29629] netlink: 'syz.4.8819': attribute type 10 has an invalid length. [ 596.175573][T29632] bond17: (slave veth31): Releasing active interface [ 596.216609][T29634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8821'. [ 596.231549][T29632] bond19: (slave gretap3): Releasing active interface [ 596.244821][T29632] bond21: (slave geneve4): Releasing active interface [ 596.255994][T29632] batman_adv: batadv0: Removing interface: ip6gretap1 [ 596.458063][T29632] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.470753][T29632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.510855][T29548] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.590263][T29634] nbd: socks must be embedded in a SOCK_ITEM attr [ 596.618850][T29548] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.750812][T29645] tipc: Enabling of bearer rejected, failed to enable media [ 596.779513][T29645] syzkaller0: entered promiscuous mode [ 596.800626][T29645] syzkaller0: entered allmulticast mode [ 596.820503][T29646] lo speed is unknown, defaulting to 1000 [ 596.828797][T28223] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.856806][T28223] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.895706][T29646] lo speed is unknown, defaulting to 1000 [ 596.911470][T28223] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.930660][T28223] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.933102][T29647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8822'. [ 597.093144][ T51] Bluetooth: hci5: command tx timeout [ 597.110667][T29653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8824'. [ 597.211333][T29652] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.219003][T29652] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.376030][T29652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.414550][T29652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.455535][T29668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8826'. [ 597.572398][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.627941][T28223] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.654550][T28223] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.672099][T29663] lo speed is unknown, defaulting to 1000 [ 597.679073][T29664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8827'. [ 597.716031][T29664] netlink: 'syz.1.8827': attribute type 13 has an invalid length. [ 597.724922][T29664] netlink: 'syz.1.8827': attribute type 17 has an invalid length. [ 597.735446][T28223] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.744909][T29671] netlink: 'syz.0.8828': attribute type 1 has an invalid length. [ 597.745740][T28223] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.789621][T29664] erspan0: left allmulticast mode [ 597.819335][T29664] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 597.843305][ T980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.859161][T29671] 8021q: adding VLAN 0 to HW filter on device bond25 [ 597.867001][T29663] lo speed is unknown, defaulting to 1000 [ 597.893480][T29676] veth37: entered promiscuous mode [ 597.905052][T29676] bond25: (slave veth37): Enslaving as an active interface with a down link [ 597.915644][T29671] erspan0: entered allmulticast mode [ 598.183820][T28223] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 598.192064][T28223] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 598.320343][T29681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8831'. [ 598.376173][T29685] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8831'. [ 598.428634][T29681] lo speed is unknown, defaulting to 1000 [ 598.432757][ T980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 598.449403][T29681] lo speed is unknown, defaulting to 1000 [ 598.462804][ T980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 598.629042][T29694] lo speed is unknown, defaulting to 1000 [ 598.738574][T29694] lo speed is unknown, defaulting to 1000 [ 599.173794][ T51] Bluetooth: hci5: command tx timeout [ 600.066596][T29729] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 600.107724][T29736] bond17: (slave veth23): Releasing active interface [ 600.122585][T19736] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 600.136840][T29736] bond18: (slave veth25): Releasing active interface [ 600.183835][T29733] rdma_op ffff88807b8f29f0 conn xmit_rdma 0000000000000000 [ 600.197428][T29733] netlink: 'syz.1.8841': attribute type 10 has an invalid length. [ 600.307321][T29745] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 600.960039][T29768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8849'. [ 601.100252][T29772] netlink: 'syz.2.8850': attribute type 10 has an invalid length. [ 601.139260][T29772] !: entered promiscuous mode [ 601.148867][T29772] team0: Port device 0! added [ 601.154126][T29773] netlink: 'syz.2.8850': attribute type 10 has an invalid length. [ 601.169256][T29773] team0: Port device 0! removed [ 601.172939][T19749] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 601.892423][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.264180][T29778] !: renamed from dummy0 [ 603.314070][T29791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8861'. [ 603.387386][T29797] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8853'. [ 603.454845][T29798] lo speed is unknown, defaulting to 1000 [ 603.469903][T29798] lo speed is unknown, defaulting to 1000 [ 603.536988][T29804] geneve5: entered promiscuous mode [ 603.561274][T29808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8857'. [ 603.576167][T29800] lo speed is unknown, defaulting to 1000 [ 603.754367][T29800] lo speed is unknown, defaulting to 1000 [ 604.070040][T29825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.149340][T29829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8859'. [ 604.221179][T29825] siw: device registration error -23 [ 604.549169][T29837] lo speed is unknown, defaulting to 1000 [ 604.584898][T29837] lo speed is unknown, defaulting to 1000 [ 605.126775][T29862] netlink: 'syz.4.8866': attribute type 12 has an invalid length. [ 605.170970][T29866] syzkaller0: entered promiscuous mode [ 605.183637][T29871] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 605.207362][T29866] syzkaller0: entered allmulticast mode [ 605.227214][T29861] lo speed is unknown, defaulting to 1000 [ 605.237618][T29861] lo speed is unknown, defaulting to 1000 [ 605.252401][T29131] Bluetooth: hci5: command 0x0405 tx timeout [ 605.265365][T29873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8869'. [ 605.279006][T29873] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8869'. [ 605.319846][T29875] tipc: Enabling of bearer rejected, failed to enable media [ 605.329777][T29875] syzkaller0: entered promiscuous mode [ 605.335442][T29875] syzkaller0: entered allmulticast mode [ 605.380326][T29873] lo speed is unknown, defaulting to 1000 [ 605.425295][T29878] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 605.447825][T29873] lo speed is unknown, defaulting to 1000 [ 605.656850][T29887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8873'. [ 605.665921][T29887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8873'. [ 605.676321][T29887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8873'. [ 605.785700][T29887] netlink: 'syz.0.8873': attribute type 16 has an invalid length. [ 605.793950][T29887] netlink: 'syz.0.8873': attribute type 17 has an invalid length. [ 605.990368][T29885] 0·: left allmulticast mode [ 605.995696][T29885] hsr_slave_0: left allmulticast mode [ 606.001334][T29885] hsr_slave_1: left allmulticast mode [ 606.056639][T29885] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 606.085541][T29885] veth19: left promiscuous mode [ 606.092785][T29885] veth21: left promiscuous mode [ 606.104064][T29885] veth23: left promiscuous mode [ 606.110730][T29885] veth25: left promiscuous mode [ 606.122634][ T9] lo speed is unknown, defaulting to 1000 [ 606.139512][ T9] syz0: Port: 1 Link DOWN [ 606.210766][T29887] tipc: Resetting bearer [ 606.319354][ T9] lo speed is unknown, defaulting to 1000 [ 606.341837][T29891] lo speed is unknown, defaulting to 1000 [ 606.350668][T29891] lo speed is unknown, defaulting to 1000 [ 606.589493][T29927] lo speed is unknown, defaulting to 1000 [ 606.607798][T29932] geneve5: entered promiscuous mode [ 606.630077][T29927] lo speed is unknown, defaulting to 1000 [ 606.663411][T29930] syzkaller0: entered promiscuous mode [ 606.668913][T29930] syzkaller0: entered allmulticast mode [ 607.160013][T29956] __nla_validate_parse: 2 callbacks suppressed [ 607.160032][T29956] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8879'. [ 607.332463][T29131] Bluetooth: hci5: command 0x0405 tx timeout [ 607.502676][ T51] Bluetooth: hci0: command tx timeout [ 607.675666][T29941] tipc: Enabling of bearer rejected, failed to enable media [ 607.684635][T29939] netlink: 'syz.1.8884': attribute type 1 has an invalid length. [ 607.692844][T29939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8884'. [ 607.721809][T29943] syzkaller0: entered promiscuous mode [ 607.741204][T29943] syzkaller0: entered allmulticast mode [ 607.779850][T29962] erspan0: left allmulticast mode [ 607.788466][T29962] bridge_slave_0: left promiscuous mode [ 607.799311][T29962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.870480][T29965] tap0: tun_chr_ioctl cmd 1074025675 [ 607.882102][T29965] tap0: persist disabled [ 607.965343][T29974] tipc: Enabling of bearer rejected, failed to enable media [ 608.247297][T26936] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 608.675775][T30002] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 608.689169][T30002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.779973][T30008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8894'. [ 608.830376][T30004] lo speed is unknown, defaulting to 1000 [ 608.838737][T30004] lo speed is unknown, defaulting to 1000 [ 609.042077][T30012] netlink: 596 bytes leftover after parsing attributes in process `syz.2.8895'. [ 609.152226][T30021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8899'. [ 609.191234][T30019] veth27: entered promiscuous mode [ 609.222051][T30015] erspan0: entered allmulticast mode [ 609.401940][T30036] netlink: 'syz.1.8902': attribute type 1 has an invalid length. [ 609.429247][T30039] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8903'. [ 609.441531][T30039] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8903'. [ 609.476441][T30036] 8021q: adding VLAN 0 to HW filter on device bond19 [ 609.507353][T30041] netlink: 'syz.0.8900': attribute type 7 has an invalid length. [ 609.515301][T30041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8900'. [ 609.581896][T30035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8901'. [ 609.626785][T30044] veth27: entered promiscuous mode [ 609.641527][T30044] bond19: (slave veth27): Enslaving as an active interface with a down link [ 609.663490][T30032] lo speed is unknown, defaulting to 1000 [ 609.678393][T30035] syzkaller1: entered promiscuous mode [ 609.685462][T30035] syzkaller1: entered allmulticast mode [ 609.705775][T30032] lo speed is unknown, defaulting to 1000 [ 610.064939][T30054] tipc: Enabling of bearer rejected, failed to enable media [ 610.072405][T30052] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8907'. [ 610.076936][T30054] syzkaller0: entered promiscuous mode [ 610.098447][T30054] syzkaller0: entered allmulticast mode [ 610.461170][T30060] lo speed is unknown, defaulting to 1000 [ 610.473908][T30060] lo speed is unknown, defaulting to 1000 [ 610.933289][ T12] wlan0: Trigger new scan to find an IBSS to join [ 611.446022][T30086] bond25: (slave veth37): Releasing active interface [ 611.480409][T30090] rdma_op ffff8880524d99f0 conn xmit_rdma 0000000000000000 [ 611.512885][T30092] sctp: [Deprecated]: syz.4.8916 (pid 30092) Use of int in max_burst socket option deprecated. [ 611.512885][T30092] Use struct sctp_assoc_value instead [ 611.546700][T30079] lo speed is unknown, defaulting to 1000 [ 611.554760][T30079] lo speed is unknown, defaulting to 1000 [ 611.638467][T30086] netlink: 'syz.0.8915': attribute type 10 has an invalid length. [ 611.757419][T30098] netlink: 'syz.6.8917': attribute type 1 has an invalid length. [ 611.891972][T30098] veth3: entered promiscuous mode [ 611.930466][T30103] erspan0: entered allmulticast mode [ 612.229441][T30114] __nla_validate_parse: 5 callbacks suppressed [ 612.229474][T30114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8922'. [ 612.555096][T30133] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8928'. [ 612.651347][T30133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8928'. [ 612.846801][T30140] syzkaller0: entered allmulticast mode [ 612.863321][T30131] syzkaller0 (unregistering): left allmulticast mode [ 612.971641][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8930'. [ 613.003172][T30139] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8929'. [ 613.084795][T30150] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 613.097774][T30150] netlink: 'syz.1.8931': attribute type 4 has an invalid length. [ 613.113724][T30159] gretap3: entered promiscuous mode [ 613.194310][T30159] netlink: 'syz.4.8933': attribute type 7 has an invalid length. [ 613.206311][T30153] lo speed is unknown, defaulting to 1000 [ 613.271922][T30153] lo speed is unknown, defaulting to 1000 [ 613.294494][T30163] lo speed is unknown, defaulting to 1000 [ 613.404814][T30171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8935'. [ 613.421987][T30173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8936'. [ 613.440491][T30171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8935'. [ 613.485987][T30171] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8935'. [ 613.796568][T30163] lo speed is unknown, defaulting to 1000 [ 613.826117][T30179] lo speed is unknown, defaulting to 1000 [ 614.267675][T30179] lo speed is unknown, defaulting to 1000 [ 614.962270][T30193] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 614.986060][T30193] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 615.054021][T30193] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 615.177576][T30198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8943'. [ 615.385396][T30205] tipc: Enabled bearer , priority 0 [ 615.402080][T30205] tipc: Resetting bearer [ 615.422685][T30204] tipc: Disabling bearer [ 615.534457][T30210] smc: net device bond0 applied user defined pnetid SYZ2 [ 615.575857][T30214] smc: net device bond0 erased user defined pnetid SYZ2 [ 615.884827][ T30] audit: type=1800 audit(1756343863.847:18): pid=30219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8948" name="memory.events" dev="tmpfs" ino=9245 res=0 errno=0 [ 615.945753][T30219] lo speed is unknown, defaulting to 1000 [ 615.977126][T30226] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 615.987360][T30219] lo speed is unknown, defaulting to 1000 [ 616.040577][T30228] bridge_slave_0: left promiscuous mode [ 616.098327][T30228] veth0_to_team: left promiscuous mode [ 616.119437][T30228] veth0_to_team: left allmulticast mode [ 616.138487][T30228] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 616.149259][T30228] veth21: left promiscuous mode [ 616.184914][T30228] gretap3: left promiscuous mode [ 616.597949][T30240] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 617.007472][T30255] lo speed is unknown, defaulting to 1000 [ 617.024367][T30255] lo speed is unknown, defaulting to 1000 [ 617.779474][T30268] __nla_validate_parse: 9 callbacks suppressed [ 617.779493][T30268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8960'. [ 618.145248][T30286] lo speed is unknown, defaulting to 1000 [ 618.153812][T30286] lo speed is unknown, defaulting to 1000 [ 618.509273][ T30] audit: type=1800 audit(1756343866.477:19): pid=30291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8966" name="memory.events" dev="tmpfs" ino=9266 res=0 errno=0 [ 618.546333][T30302] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8969'. [ 618.777009][T30311] lo speed is unknown, defaulting to 1000 [ 618.784567][T30311] lo speed is unknown, defaulting to 1000 [ 618.818781][T30314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8971'. [ 618.996096][T30321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8974'. [ 619.031517][T30321] nbd: socks must be embedded in a SOCK_ITEM attr [ 619.090893][T30323] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8975'. [ 619.103459][T30323] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8975'. [ 619.182153][T30327] syzkaller0: entered promiscuous mode [ 619.194619][T30327] syzkaller0: entered allmulticast mode [ 619.257524][T30333] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8978'. [ 619.269494][T30333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8978'. [ 619.571746][ T5919] IPVS: starting estimator thread 0... [ 619.682359][T30350] IPVS: using max 41 ests per chain, 98400 per kthread [ 619.806836][T30354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8982'. [ 619.850217][T30354] nbd: socks must be embedded in a SOCK_ITEM attr [ 619.996141][T30362] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 620.917004][T30379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.119815][T30382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8988'. [ 621.405853][T30392] lo speed is unknown, defaulting to 1000 [ 621.413794][T30392] lo speed is unknown, defaulting to 1000 [ 621.767873][T30408] netlink: 'syz.2.8993': attribute type 3 has an invalid length. [ 622.130657][T30432] lo speed is unknown, defaulting to 1000 [ 622.139509][T30432] lo speed is unknown, defaulting to 1000 [ 622.956386][T30480] __nla_validate_parse: 7 callbacks suppressed [ 622.956407][T30480] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9006'. [ 623.084579][T30485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9007'. [ 623.144309][T30485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9007'. [ 623.165018][T30484] netlink: 'syz.4.9008': attribute type 3 has an invalid length. [ 623.178243][T30484] syz_tun: entered allmulticast mode [ 623.194283][T30484] pimreg: left allmulticast mode [ 623.268531][T30482] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9007'. [ 623.280657][T30486] siw: device registration error -23 [ 623.312069][T30484] 8021q: adding VLAN 0 to HW filter on device à [ 623.331166][T30484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.464035][T30483] syz_tun: left allmulticast mode [ 623.473709][T30498] netlink: 'syz.2.9011': attribute type 1 has an invalid length. [ 623.488950][T30500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9019'. [ 623.521425][T30498] bond23: entered promiscuous mode [ 623.527497][T30498] 8021q: adding VLAN 0 to HW filter on device bond23 [ 623.569774][T30498] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9011'. [ 623.590193][T30498] batadv2: entered promiscuous mode [ 623.599104][T30498] batadv2: entered allmulticast mode [ 623.613778][T30498] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 623.648694][T30498] bond23: (slave batadv2): making interface the new active one [ 623.681449][T30498] bond23: (slave batadv2): Enslaving as an active interface with an up link [ 623.737856][T30512] lo speed is unknown, defaulting to 1000 [ 623.747680][T30512] lo speed is unknown, defaulting to 1000 [ 623.855932][T30510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9011'. [ 624.045946][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9014'. [ 624.096856][T30523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9014'. [ 624.199688][T30527] netlink: 'syz.2.9015': attribute type 10 has an invalid length. [ 624.287471][T30527] !: left promiscuous mode [ 624.293409][T30530] netlink: 'syz.2.9015': attribute type 10 has an invalid length. [ 624.480166][T30527] !: entered promiscuous mode [ 624.552944][T30527] team0: Port device 0! added [ 624.608678][T30530] team0: Port device 0! removed [ 624.770339][T30544] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9020'. [ 625.130628][T30555] pimreg: left allmulticast mode [ 625.729170][T30568] lo speed is unknown, defaulting to 1000 [ 625.744396][T30568] lo speed is unknown, defaulting to 1000 [ 625.891378][T30564] raw_sendmsg: syz.6.9025 forgot to set AF_INET. Fix it! [ 626.037696][T30576] lo speed is unknown, defaulting to 1000 [ 626.218951][T30576] lo speed is unknown, defaulting to 1000 [ 626.466369][T30580] lo speed is unknown, defaulting to 1000 [ 626.809590][T30580] lo speed is unknown, defaulting to 1000 [ 627.914913][T30592] lo speed is unknown, defaulting to 1000 [ 627.929906][T30592] lo speed is unknown, defaulting to 1000 [ 628.121824][T30599] tipc: Started in network mode [ 628.135917][T30599] tipc: Node identity 3e30cee15904, cluster identity 4711 [ 628.151738][T30599] tipc: Enabled bearer , priority 0 [ 628.170605][T30599] syzkaller0: entered promiscuous mode [ 628.184348][T30599] syzkaller0: entered allmulticast mode [ 628.212136][T30598] tipc: Resetting bearer [ 628.246471][T30602] netlink: 'syz.0.9034': attribute type 13 has an invalid length. [ 628.265231][T30598] tipc: Disabling bearer [ 628.276398][T30602] netlink: 'syz.0.9034': attribute type 17 has an invalid length. [ 628.447091][T30606] __nla_validate_parse: 2 callbacks suppressed [ 628.447111][T30606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9036'. [ 628.504216][T30602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.551648][T30610] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9036'. [ 628.748180][T30602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.767265][T30608] lo speed is unknown, defaulting to 1000 [ 628.777641][T30608] lo speed is unknown, defaulting to 1000 [ 628.838751][T30604] lo speed is unknown, defaulting to 1000 [ 628.949397][T30604] lo speed is unknown, defaulting to 1000 [ 629.840717][T30642] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9042'. [ 629.860323][T30642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9042'. [ 630.369556][T30649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9045'. [ 630.431369][T30651] lo speed is unknown, defaulting to 1000 [ 630.451441][T30651] lo speed is unknown, defaulting to 1000 [ 630.537481][T30657] netlink: 'syz.0.9048': attribute type 10 has an invalid length. [ 630.556716][T30657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9048'. [ 630.587069][T30657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.907911][T30668] lo speed is unknown, defaulting to 1000 [ 630.928867][T30668] lo speed is unknown, defaulting to 1000 [ 631.024191][T30673] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9053'. [ 631.052402][T30673] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9053'. [ 631.145743][T30679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9054'. [ 631.287343][ T30] audit: type=1800 audit(1756343879.257:20): pid=30662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9048" name="memory.events" dev="tmpfs" ino=9554 res=0 errno=0 [ 631.824062][T30689] netlink: 'syz.1.9056': attribute type 13 has an invalid length. [ 631.850178][T30689] netlink: 'syz.1.9056': attribute type 17 has an invalid length. [ 631.926444][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9058'. [ 631.996028][T30689] erspan0: left allmulticast mode [ 632.001542][T30693] netlink: 'syz.6.9058': attribute type 21 has an invalid length. [ 632.106097][T30689] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 632.157002][ T9] lo speed is unknown, defaulting to 1000 [ 632.184919][ T9] syz0: Port: 1 Link ACTIVE [ 632.189690][ T9] lo speed is unknown, defaulting to 1000 [ 632.249285][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 632.361977][T30694] lo speed is unknown, defaulting to 1000 [ 632.399225][T30694] lo speed is unknown, defaulting to 1000 [ 632.642126][T30708] tipc: Enabled bearer , priority 0 [ 632.660743][T30708] syzkaller0: entered promiscuous mode [ 632.672448][T30708] syzkaller0: entered allmulticast mode [ 632.695005][T30708] tipc: Resetting bearer [ 632.714260][T30707] tipc: Resetting bearer [ 632.727743][T30707] tipc: Disabling bearer [ 632.844926][T30710] syz_tun: entered allmulticast mode [ 632.866176][T30710] dvmrp8: entered allmulticast mode [ 632.959608][T30717] veth39: entered promiscuous mode [ 632.972008][T30710] lo speed is unknown, defaulting to 1000 [ 633.000250][T30710] lo speed is unknown, defaulting to 1000 [ 633.021163][T30719] netlink: 'syz.6.9062': attribute type 23 has an invalid length. [ 633.039408][T30720] erspan0: entered allmulticast mode [ 633.484696][T30709] syz_tun: left allmulticast mode [ 633.490630][T30709] dvmrp8: left allmulticast mode [ 633.725580][T30736] __nla_validate_parse: 2 callbacks suppressed [ 633.725602][T30736] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9069'. [ 633.747965][T30736] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9069'. [ 633.758600][T30738] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9070'. [ 633.767955][T30738] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9070'. [ 633.923736][T30748] tipc: Enabled bearer , priority 0 [ 633.955712][T30748] syzkaller0: entered promiscuous mode [ 633.961232][T30748] syzkaller0: entered allmulticast mode [ 634.005030][T30750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9072'. [ 634.045145][T30748] tipc: Resetting bearer [ 634.087362][T30745] tipc: Resetting bearer [ 634.119031][T30745] tipc: Disabling bearer [ 634.389335][T30759] veth39: entered promiscuous mode [ 634.923150][T30777] syzkaller0: entered promiscuous mode [ 634.929961][T30777] syzkaller0: entered allmulticast mode [ 634.941708][T30780] netlink: 'syz.1.9081': attribute type 23 has an invalid length. [ 635.037714][T30778] lo speed is unknown, defaulting to 1000 [ 635.054450][T30778] lo speed is unknown, defaulting to 1000 [ 635.260687][T30785] erspan0: entered promiscuous mode [ 635.336974][T30785] erspan0: left promiscuous mode [ 635.367109][T30788] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9083'. [ 635.398708][T30788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9083'. [ 635.519659][T30784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9082'. [ 635.696650][T30795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9085'. [ 635.860147][T30799] lo speed is unknown, defaulting to 1000 [ 635.884217][T30799] lo speed is unknown, defaulting to 1000 [ 635.905154][T30804] lo speed is unknown, defaulting to 1000 [ 635.924283][T30808] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9087'. [ 636.052368][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 636.072636][T30804] lo speed is unknown, defaulting to 1000 [ 636.373423][T30812] veth25: entered promiscuous mode [ 636.513831][T30814] erspan0: entered allmulticast mode [ 637.582557][T30829] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 638.655158][T30841] lo speed is unknown, defaulting to 1000 [ 638.664144][T30841] lo speed is unknown, defaulting to 1000 [ 638.685723][T30849] syz_tun: entered allmulticast mode [ 638.721782][T30849] dvmrp8: entered allmulticast mode [ 638.736965][T30845] syz_tun: left allmulticast mode [ 638.742910][T30845] dvmrp8: left allmulticast mode [ 638.916208][T30859] __nla_validate_parse: 4 callbacks suppressed [ 638.916227][T30859] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9099'. [ 639.395979][T30867] lo speed is unknown, defaulting to 1000 [ 639.468912][T30867] lo speed is unknown, defaulting to 1000 [ 639.655344][T30880] tipc: Enabled bearer , priority 0 [ 639.684947][T30880] syzkaller0: entered promiscuous mode [ 639.690452][T30880] syzkaller0: entered allmulticast mode [ 639.720860][T30872] siw: device registration error -23 [ 639.806543][T30872] tipc: Resetting bearer [ 639.864603][T30871] tipc: Resetting bearer [ 639.907973][T30871] tipc: Disabling bearer [ 639.927050][T30885] tipc: Enabled bearer , priority 0 [ 640.123445][T30884] syzkaller0: entered promiscuous mode [ 640.137064][T30884] syzkaller0: entered allmulticast mode [ 640.180755][T30892] tipc: Resetting bearer [ 640.209661][T30883] tipc: Resetting bearer [ 640.231020][T30883] tipc: Disabling bearer [ 640.526776][T30905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9109'. [ 640.740388][T30922] tipc: Enabled bearer , priority 0 [ 640.766148][T30922] syzkaller0: entered promiscuous mode [ 640.771769][T30922] syzkaller0: entered allmulticast mode [ 640.791328][T30922] tipc: Resetting bearer [ 640.799508][T30921] tipc: Resetting bearer [ 640.810081][T30921] tipc: Disabling bearer [ 640.850812][T30924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9113'. [ 640.925682][T30924] netlink: 'syz.6.9113': attribute type 10 has an invalid length. [ 640.996230][T30927] lo speed is unknown, defaulting to 1000 [ 641.004876][T30927] lo speed is unknown, defaulting to 1000 [ 641.342437][T30937] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9117'. [ 641.351716][T30937] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9117'. [ 641.378780][T30938] lo speed is unknown, defaulting to 1000 [ 641.386669][T30938] lo speed is unknown, defaulting to 1000 [ 641.407618][T30940] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 641.422670][T30940] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 641.434138][T30940] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 641.978164][T30955] syzkaller0: entered promiscuous mode [ 641.986818][T30955] syzkaller0: entered allmulticast mode [ 642.450812][T30977] netlink: 'syz.4.9126': attribute type 4 has an invalid length. [ 642.480586][T30977] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9126'. [ 642.874167][T30972] lo speed is unknown, defaulting to 1000 [ 642.903551][T30978] lo speed is unknown, defaulting to 1000 [ 642.919748][T30972] lo speed is unknown, defaulting to 1000 [ 643.447000][T30993] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9138'. [ 643.500424][T30978] lo speed is unknown, defaulting to 1000 [ 643.652323][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 643.734273][T31008] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 643.758933][T31013] netlink: 'syz.2.9130': attribute type 4 has an invalid length. [ 644.292520][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 644.347471][T31029] tipc: Enabled bearer , priority 0 [ 644.381472][T31025] syzkaller0: entered promiscuous mode [ 644.401013][T31025] syzkaller0: entered allmulticast mode [ 644.441927][T31025] tipc: Resetting bearer [ 644.463277][T31024] tipc: Resetting bearer [ 644.481180][T31024] tipc: Disabling bearer [ 644.648041][T31039] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9136'. [ 644.664048][T31037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9133'. [ 644.682812][T31038] lo speed is unknown, defaulting to 1000 [ 644.745938][T31041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9133'. [ 644.824356][T31041] syz_tun (unregistering): left promiscuous mode [ 644.853904][T31038] lo speed is unknown, defaulting to 1000 [ 644.958163][T31045] netlink: 452 bytes leftover after parsing attributes in process `syz.0.9139'. [ 645.220417][T31049] lo speed is unknown, defaulting to 1000 [ 645.260117][T31056] netlink: 844 bytes leftover after parsing attributes in process `syz.4.9143'. [ 645.264092][T31049] lo speed is unknown, defaulting to 1000 [ 645.385477][T31056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9143'. [ 645.604777][T31064] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9144'. [ 645.613897][T31064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9144'. [ 646.021090][T31073] tipc: Enabled bearer , priority 0 [ 646.123508][T31073] syzkaller0: entered promiscuous mode [ 646.157448][T31073] syzkaller0: entered allmulticast mode [ 646.251803][T31072] tipc: Resetting bearer [ 646.278134][T31072] tipc: Disabling bearer [ 646.542671][T31066] netlink: 'syz.2.9145': attribute type 1 has an invalid length. [ 646.565806][T31066] netlink: 'syz.2.9145': attribute type 1 has an invalid length. [ 646.594955][T31066] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9145'. [ 646.945592][T31082] lo speed is unknown, defaulting to 1000 [ 647.019966][T31082] lo speed is unknown, defaulting to 1000 [ 647.182554][T31100] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9151'. [ 647.506080][T31105] veth25: entered promiscuous mode [ 647.637431][T31116] netlink: 'syz.6.9156': attribute type 3 has an invalid length. [ 647.698113][T31112] geneve5: entered promiscuous mode [ 647.706206][T31112] geneve5: entered allmulticast mode [ 647.747052][T26936] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 33047 - 0 [ 647.772728][T26936] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56678 - 0 [ 647.786965][T26936] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 33047 - 0 [ 647.809213][T26936] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56678 - 0 [ 647.825697][T31118] syz_tun: entered allmulticast mode [ 647.834478][T26936] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 33047 - 0 [ 647.852695][T26936] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56678 - 0 [ 647.873310][T31128] netlink: 'syz.1.9158': attribute type 303 has an invalid length. [ 647.875936][T31116] siw: device registration error -23 [ 647.896431][T31116] erspan0: left allmulticast mode [ 647.939462][T31116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.973736][T31116] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.993552][T31116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.023852][T26936] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 33047 - 0 [ 648.081417][T26936] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56678 - 0 [ 648.133273][T31113] syz_tun: left allmulticast mode [ 648.148352][T31136] dvmrp8: entered allmulticast mode [ 648.241885][T31135] lo speed is unknown, defaulting to 1000 [ 648.264775][T31141] tipc: Enabled bearer , priority 0 [ 648.275509][T31135] lo speed is unknown, defaulting to 1000 [ 648.283381][T31141] syzkaller0: entered promiscuous mode [ 648.288894][T31141] syzkaller0: entered allmulticast mode [ 648.317510][T31144] syz_tun: entered allmulticast mode [ 648.339208][T31141] tipc: Resetting bearer [ 648.351959][T31130] lo speed is unknown, defaulting to 1000 [ 648.371865][T31144] dvmrp8: entered allmulticast mode [ 648.395330][T31140] tipc: Resetting bearer [ 648.417119][T31140] tipc: Disabling bearer [ 648.476557][T31130] lo speed is unknown, defaulting to 1000 [ 648.525600][T31144] lo speed is unknown, defaulting to 1000 [ 648.688464][T31144] lo speed is unknown, defaulting to 1000 [ 648.861379][T31129] dvmrp8: left allmulticast mode [ 649.149507][T31143] syz_tun: left allmulticast mode [ 649.173730][T31143] dvmrp8: left allmulticast mode [ 649.257801][T31164] tipc: Enabled bearer , priority 0 [ 649.305463][T31164] syzkaller0: entered promiscuous mode [ 649.326124][T31164] syzkaller0: entered allmulticast mode [ 649.363591][T31171] 8021q: adding VLAN 0 to HW filter on device bond24 [ 649.371859][T31162] tipc: Resetting bearer [ 649.380980][T31162] tipc: Disabling bearer [ 649.421223][T31171] veth39: entered promiscuous mode [ 649.428811][T31171] bond24: (slave veth39): Enslaving as an active interface with an up link [ 649.453576][T31171] erspan0: entered allmulticast mode [ 649.473434][T31171] bond24: (slave erspan0): Enslaving as an active interface with an up link [ 649.669491][T31182] netlink: 'syz.2.9174': attribute type 3 has an invalid length. [ 649.687635][T31182] siw: device registration error -23 [ 649.693613][T31181] tipc: Enabled bearer , priority 0 [ 649.713499][T31182] erspan0: left allmulticast mode [ 649.726774][T31182] !: left promiscuous mode [ 649.741287][T31182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.759434][T31181] syzkaller0: entered promiscuous mode [ 649.767775][T31181] syzkaller0: entered allmulticast mode [ 649.805978][T31181] tipc: Resetting bearer [ 649.817713][T31179] tipc: Resetting bearer [ 649.907905][T31179] tipc: Disabling bearer [ 649.957095][T31194] netlink: 'syz.2.9178': attribute type 1 has an invalid length. [ 649.998368][T31194] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address [ 650.010558][T31194] bond25: (slave vxcan1): Error -95 calling set_mac_address [ 650.055749][T31197] gretap4: entered promiscuous mode [ 650.089502][T31197] bond25: (slave gretap4): making interface the new active one [ 650.108305][T31197] bond25: (slave gretap4): Enslaving as an active interface with an up link [ 650.177162][T31203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 650.263973][T31207] __nla_validate_parse: 8 callbacks suppressed [ 650.263994][T31207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9180'. [ 650.339138][T31209] tipc: Enabled bearer , priority 0 [ 650.363566][T31209] syzkaller0: entered promiscuous mode [ 650.377578][T31209] syzkaller0: entered allmulticast mode [ 650.409747][T31209] tipc: Resetting bearer [ 650.419619][T31208] tipc: Resetting bearer [ 650.436434][T31208] tipc: Disabling bearer [ 650.529026][T31218] syzkaller0: entered promiscuous mode [ 650.546894][T31218] syzkaller0: entered allmulticast mode [ 650.781477][T31222] geneve3: entered promiscuous mode [ 650.806518][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.827215][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.857519][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.966211][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 651.000441][T31239] lo speed is unknown, defaulting to 1000 [ 651.010312][T31239] lo speed is unknown, defaulting to 1000 [ 651.377047][T31257] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 651.409469][T31261] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.9193'. [ 651.433691][T31257] netlink: 'syz.6.9192': attribute type 4 has an invalid length. [ 651.593809][T31267] tipc: Enabled bearer , priority 0 [ 651.603510][T31267] syzkaller0: entered promiscuous mode [ 651.609008][T31267] syzkaller0: entered allmulticast mode [ 651.637994][T31267] tipc: Resetting bearer [ 651.650670][T31266] tipc: Resetting bearer [ 651.676126][T31266] tipc: Disabling bearer [ 651.739904][T31275] tipc: Enabled bearer , priority 0 [ 651.766019][T31275] syzkaller0: entered promiscuous mode [ 651.771532][T31275] syzkaller0: entered allmulticast mode [ 651.783287][T31275] tipc: Resetting bearer [ 651.790839][T31274] tipc: Resetting bearer [ 651.799772][T31274] tipc: Disabling bearer [ 652.058442][T31288] netlink: 'syz.0.9198': attribute type 303 has an invalid length. [ 652.088758][T31289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9211'. [ 652.153480][T31279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'. [ 652.217110][T31290] lo speed is unknown, defaulting to 1000 [ 652.282849][T31290] lo speed is unknown, defaulting to 1000 [ 652.813842][T31297] tipc: Enabled bearer , priority 0 [ 652.836887][T31297] syzkaller0: entered promiscuous mode [ 652.854810][T31297] syzkaller0: entered allmulticast mode [ 652.868327][T31297] tipc: Resetting bearer [ 652.876440][T31303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9206'. [ 652.885545][T31296] tipc: Resetting bearer [ 652.895922][T31296] tipc: Disabling bearer [ 652.919199][T31305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9205'. [ 652.930389][T31307] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9206'. [ 652.979755][T31307] lo speed is unknown, defaulting to 1000 [ 653.024271][T31307] lo speed is unknown, defaulting to 1000 [ 653.031047][T31304] lo speed is unknown, defaulting to 1000 [ 653.402563][T31304] lo speed is unknown, defaulting to 1000 [ 653.538314][T31315] netlink: 8444 bytes leftover after parsing attributes in process `syz.4.9208'. [ 653.869023][T31319] tipc: Enabled bearer , priority 0 [ 653.883116][T31319] syzkaller0: entered promiscuous mode [ 653.888707][T31319] syzkaller0: entered allmulticast mode [ 653.913972][T31319] tipc: Resetting bearer [ 653.924775][T31318] tipc: Resetting bearer [ 653.931640][T31318] tipc: Disabling bearer [ 653.941315][T31321] tipc: Enabled bearer , priority 0 [ 653.971229][T31321] syzkaller0: entered promiscuous mode [ 653.991183][T31321] syzkaller0: entered allmulticast mode [ 654.161266][T31324] tipc: Resetting bearer [ 654.190167][T31320] tipc: Resetting bearer [ 654.214516][T31320] tipc: Disabling bearer [ 654.356490][T31332] dvmrp8: entered allmulticast mode [ 654.447249][T31332] lo speed is unknown, defaulting to 1000 [ 654.455651][T31332] lo speed is unknown, defaulting to 1000 [ 654.491573][T31333] netlink: 'syz.1.9215': attribute type 23 has an invalid length. [ 654.671078][T31342] tipc: Enabled bearer , priority 0 [ 654.712596][T31342] syzkaller0: entered promiscuous mode [ 654.718122][T31342] syzkaller0: entered allmulticast mode [ 654.764991][T31339] siw: device registration error -23 [ 654.771916][T31337] netlink: 'syz.2.9216': attribute type 303 has an invalid length. [ 654.826913][T31339] tipc: Resetting bearer [ 654.833085][T31337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9216'. [ 654.872683][T31338] tipc: Resetting bearer [ 654.880716][T31338] tipc: Disabling bearer [ 654.898386][T31331] dvmrp8: left allmulticast mode [ 655.005293][T31348] netlink: 'syz.6.9218': attribute type 1 has an invalid length. [ 655.029819][T31346] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 655.057426][T31351] netlink: 'syz.0.9219': attribute type 4 has an invalid length. [ 655.080970][T31348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.099445][T31353] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 655.109234][T31356] netlink: 'syz.4.9220': attribute type 13 has an invalid length. [ 655.143116][T31356] netlink: 'syz.4.9220': attribute type 17 has an invalid length. [ 655.156344][T31359] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 655.209009][T31356] erspan0: left allmulticast mode [ 655.221712][T31356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.259788][T31348] veth3: entered promiscuous mode [ 655.274530][T31356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.276454][T31348] bond1: (slave veth3): Enslaving as an active interface with an up link [ 655.299399][T31353] erspan0: entered allmulticast mode [ 655.342046][T31353] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 655.368044][T31362] lo speed is unknown, defaulting to 1000 [ 655.451852][T31366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9224'. [ 655.462575][T31362] lo speed is unknown, defaulting to 1000 [ 655.466625][T31370] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9225'. [ 655.479015][T31370] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9225'. [ 655.555368][T31372] tipc: Enabled bearer , priority 0 [ 655.605450][T31374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9228'. [ 655.618521][T31372] syzkaller0: entered promiscuous mode [ 655.647228][T31372] syzkaller0: entered allmulticast mode [ 655.696158][T31372] tipc: Resetting bearer [ 655.710033][T31371] tipc: Resetting bearer [ 655.746943][T31371] tipc: Disabling bearer [ 656.157903][T31386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9231'. [ 656.418487][T31397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9233'. [ 656.593790][T31404] veth41: entered promiscuous mode [ 656.619582][T31397] erspan0: entered allmulticast mode [ 656.641421][T31397] bond24: (slave erspan0): Releasing backup interface [ 656.773186][T31408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9235'. [ 656.942069][T31411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9236'. [ 657.767312][T31432] lo speed is unknown, defaulting to 1000 [ 657.834150][T31432] lo speed is unknown, defaulting to 1000 [ 657.906792][ T30] audit: type=1800 audit(1756343905.877:21): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9239" name="memory.events" dev="tmpfs" ino=9566 res=0 errno=0 [ 658.015815][T31437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9241'. [ 658.092152][T31442] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9242'. [ 659.551053][T31470] tipc: Enabling of bearer rejected, failed to enable media [ 659.828492][T31482] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 659.873241][T31480] lo speed is unknown, defaulting to 1000 [ 659.880890][T31480] lo speed is unknown, defaulting to 1000 [ 660.321868][T31489] netlink: 'syz.0.9253': attribute type 1 has an invalid length. [ 660.438627][T31491] lo speed is unknown, defaulting to 1000 [ 660.455323][T31491] lo speed is unknown, defaulting to 1000 [ 660.463544][T31494] netlink: zone id is out of range [ 660.509611][T31494] netlink: zone id is out of range [ 660.523137][T31494] netlink: zone id is out of range [ 660.566588][T31494] netlink: zone id is out of range [ 660.572109][T31494] netlink: zone id is out of range [ 660.605768][T31494] netlink: zone id is out of range [ 660.633822][T31494] netlink: zone id is out of range [ 660.639301][T31494] netlink: zone id is out of range [ 660.644823][T31494] netlink: zone id is out of range [ 660.650235][T31494] netlink: zone id is out of range [ 660.932527][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 661.451105][T31520] __nla_validate_parse: 9 callbacks suppressed [ 661.451127][T31520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9259'. [ 661.583019][T31521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9258'. [ 661.636936][T31520] netlink: 'syz.6.9259': attribute type 10 has an invalid length. [ 661.795638][T31526] syz_tun: entered allmulticast mode [ 661.863300][T31526] dvmrp8: entered allmulticast mode [ 661.921855][T31526] lo speed is unknown, defaulting to 1000 [ 661.965753][T31531] netlink: 'syz.0.9260': attribute type 23 has an invalid length. [ 661.975978][T31526] lo speed is unknown, defaulting to 1000 [ 661.993167][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9258'. [ 662.528630][T31552] lo speed is unknown, defaulting to 1000 [ 662.559234][T31552] lo speed is unknown, defaulting to 1000 [ 662.573931][T31523] syz_tun: left allmulticast mode [ 662.579760][T31523] dvmrp8: left allmulticast mode [ 662.637119][T31558] dvmrp8: entered allmulticast mode [ 662.819345][T31559] lo speed is unknown, defaulting to 1000 [ 662.840754][T31561] syz_tun: entered allmulticast mode [ 662.886416][T31561] dvmrp8: entered allmulticast mode [ 663.116920][T31559] lo speed is unknown, defaulting to 1000 [ 663.208882][T31566] netlink: 192 bytes leftover after parsing attributes in process `syz.1.9268'. [ 663.298235][T31561] lo speed is unknown, defaulting to 1000 [ 663.447893][T31561] lo speed is unknown, defaulting to 1000 [ 663.468942][T31557] dvmrp8: left allmulticast mode [ 663.740139][T31560] syz_tun: left allmulticast mode [ 663.777351][T31560] dvmrp8: left allmulticast mode [ 663.903278][T31573] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9269'. [ 663.922371][T31573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9269'. [ 664.328279][T31580] erspan0: left allmulticast mode [ 664.979888][T31580] veth3: left promiscuous mode [ 665.026744][T31587] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9272'. [ 665.231438][T31592] lo speed is unknown, defaulting to 1000 [ 665.241072][T31597] netlink: 'syz.1.9276': attribute type 1 has an invalid length. [ 665.248224][T31592] lo speed is unknown, defaulting to 1000 [ 665.279469][T31604] netlink: 'syz.6.9273': attribute type 13 has an invalid length. [ 665.304055][T31597] bond20 (unregistering): Released all slaves [ 665.313307][T31604] netlink: 'syz.6.9273': attribute type 17 has an invalid length. [ 665.510134][T31611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.590405][T31611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.729219][T31604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.759090][T31604] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.776446][T31604] net_ratelimit: 55 callbacks suppressed [ 665.776458][T31604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.851502][T31608] lo speed is unknown, defaulting to 1000 [ 665.860366][T31608] lo speed is unknown, defaulting to 1000 [ 666.318933][T31627] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9280'. [ 666.344644][T31627] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9280'. [ 666.610642][T31635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9281'. [ 666.715972][T31639] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9284'. [ 666.738945][T31643] tipc: Enabled bearer , priority 0 [ 666.774313][T31643] syzkaller0: entered promiscuous mode [ 666.780103][T31643] syzkaller0: entered allmulticast mode [ 666.812613][T31643] tipc: Resetting bearer [ 666.902947][T31640] tipc: Resetting bearer [ 666.935904][T31640] tipc: Disabling bearer [ 666.995558][T31646] erspan0: left allmulticast mode [ 667.988948][T31646] bond23: left promiscuous mode [ 667.997930][T31646] batadv2: left promiscuous mode [ 668.010611][T31646] batadv2: left allmulticast mode [ 668.025961][T31646] geneve5: left promiscuous mode [ 668.037209][T31646] geneve5: left allmulticast mode [ 668.056177][T31646] veth39: left promiscuous mode [ 668.080733][T31646] gretap4: left promiscuous mode [ 668.122422][T28223] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 33047 - 0 [ 668.130887][T28223] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 56678 - 0 [ 668.149648][T31648] lo speed is unknown, defaulting to 1000 [ 668.159320][T28223] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 33047 - 0 [ 668.172264][T28223] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 56678 - 0 [ 668.220334][T28223] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 33047 - 0 [ 668.244260][T28223] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 56678 - 0 [ 668.263515][T31648] lo speed is unknown, defaulting to 1000 [ 668.268490][T31683] dvmrp8: entered allmulticast mode [ 668.283441][T28223] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 33047 - 0 [ 668.296505][T28223] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 56678 - 0 [ 668.385462][T31691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9295'. [ 668.428114][T31683] netlink: 'syz.2.9292': attribute type 23 has an invalid length. [ 668.436694][T31685] lo speed is unknown, defaulting to 1000 [ 668.485581][T31691] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9295'. [ 668.579452][T31685] lo speed is unknown, defaulting to 1000 [ 668.822080][T31691] lo speed is unknown, defaulting to 1000 [ 668.949284][T31691] lo speed is unknown, defaulting to 1000 [ 669.096947][T31682] dvmrp8: left allmulticast mode [ 669.391062][ T51] Bluetooth: hci5: link tx timeout [ 669.396382][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 669.404593][T29131] Bluetooth: hci5: link tx timeout [ 669.409815][T29131] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 669.570073][T31712] netlink: 'syz.6.9297': attribute type 1 has an invalid length. [ 669.608524][T31712] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9297'. [ 669.840536][T31717] tipc: Enabled bearer , priority 0 [ 669.900478][T31717] syzkaller0: entered promiscuous mode [ 669.906607][T31717] syzkaller0: entered allmulticast mode [ 669.924821][T31717] tipc: Resetting bearer [ 669.984437][T31716] tipc: Resetting bearer [ 670.017625][T31716] tipc: Disabling bearer [ 670.062600][T31721] tipc: Enabled bearer , priority 0 [ 670.076092][T31721] syzkaller0: entered promiscuous mode [ 670.081685][T31721] syzkaller0: entered allmulticast mode [ 670.117118][T31721] tipc: Resetting bearer [ 670.139020][T31719] tipc: Resetting bearer [ 670.193150][T31719] tipc: Disabling bearer [ 670.210529][T31725] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9303'. [ 670.220590][T31725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9303'. [ 670.401040][T31723] netlink: 'syz.2.9302': attribute type 10 has an invalid length. [ 670.497948][T31737] netlink: 'syz.6.9306': attribute type 6 has an invalid length. [ 670.751295][T31749] netlink: 'syz.6.9306': attribute type 12 has an invalid length. [ 670.765650][T31749] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.9306'. [ 670.811042][T31732] veth27: left promiscuous mode [ 670.915906][ T5904] lo speed is unknown, defaulting to 1000 [ 670.935627][ T5904] syz0: Port: 1 Link DOWN [ 670.954022][ T5904] lo speed is unknown, defaulting to 1000 [ 671.098683][T31740] lo speed is unknown, defaulting to 1000 [ 671.189588][T31740] lo speed is unknown, defaulting to 1000 [ 671.294013][T31756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9309'. [ 671.398215][T31762] lo speed is unknown, defaulting to 1000 [ 671.478502][T31756] netlink: 'syz.4.9309': attribute type 10 has an invalid length. [ 671.495173][T31774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9312'. [ 671.504308][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 671.633979][T31762] lo speed is unknown, defaulting to 1000 [ 671.755994][T31777] netlink: 'syz.6.9313': attribute type 4 has an invalid length. [ 671.770634][T31777] netlink: 17 bytes leftover after parsing attributes in process `syz.6.9313'. [ 672.119127][T31783] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9314'. [ 672.162895][T31783] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9314'. [ 672.227884][T31788] tipc: Enabled bearer , priority 0 [ 672.238544][T31788] syzkaller0: entered promiscuous mode [ 672.266106][T31788] syzkaller0: entered allmulticast mode [ 672.323510][T31788] tipc: Resetting bearer [ 672.344484][T31787] tipc: Resetting bearer [ 672.378425][T31787] tipc: Disabling bearer [ 672.536088][T31794] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 672.550891][T31794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9317'. [ 672.557098][T31796] lo speed is unknown, defaulting to 1000 [ 672.560621][T31794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9317'. [ 672.660891][T31796] lo speed is unknown, defaulting to 1000 [ 672.816612][T31803] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 672.833133][T31806] tun0: tun_chr_ioctl cmd 2147767520 [ 673.718127][T31815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9323'. [ 673.760369][T31815] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9323'. [ 673.835632][T31815] lo speed is unknown, defaulting to 1000 [ 673.854764][T31815] lo speed is unknown, defaulting to 1000 [ 674.009806][T31825] tipc: Enabled bearer , priority 0 [ 674.127805][T31825] syzkaller0: entered promiscuous mode [ 674.149702][T31825] syzkaller0: entered allmulticast mode [ 674.201029][T31830] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9327'. [ 674.210513][T31830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9327'. [ 674.222658][T31825] tipc: Resetting bearer [ 674.241291][T31824] tipc: Resetting bearer [ 674.253455][T31824] tipc: Disabling bearer [ 674.385591][T31839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9328'. [ 674.613307][T29131] Bluetooth: hci2: command 0x0406 tx timeout [ 674.626169][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 675.261619][T31860] dvmrp8: entered allmulticast mode [ 675.321453][T31864] bond2: entered promiscuous mode [ 675.327910][T31864] bond2: entered allmulticast mode [ 675.336780][T31864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 675.347850][T31862] tipc: Enabled bearer , priority 0 [ 675.357940][T31862] syzkaller0: entered promiscuous mode [ 675.364638][T31862] syzkaller0: entered allmulticast mode [ 675.404148][T31862] sch_fq: defrate 257 ignored. [ 675.408906][T31860] netlink: 'syz.1.9336': attribute type 23 has an invalid length. [ 675.413254][T31862] tipc: Resetting bearer [ 675.476043][T31869] lo speed is unknown, defaulting to 1000 [ 675.482181][T31861] tipc: Resetting bearer [ 675.508554][T31861] tipc: Disabling bearer [ 675.531640][T31870] lo speed is unknown, defaulting to 1000 [ 675.534732][T31869] lo speed is unknown, defaulting to 1000 [ 675.545759][T31873] netlink: 'syz.4.9340': attribute type 1 has an invalid length. [ 675.585980][T31873] 8021q: adding VLAN 0 to HW filter on device bond13 [ 675.667926][T31868] lo speed is unknown, defaulting to 1000 [ 675.681260][T31870] lo speed is unknown, defaulting to 1000 [ 675.733665][T31873] veth25: entered promiscuous mode [ 675.744670][T31873] bond13: (slave veth25): Enslaving as an active interface with an up link [ 675.758541][T31859] dvmrp8: left allmulticast mode [ 675.788048][T31875] erspan0: entered allmulticast mode [ 675.801951][T31878] tipc: Enabled bearer , priority 0 [ 675.837017][T31878] syzkaller0: entered promiscuous mode [ 675.854542][T31878] syzkaller0: entered allmulticast mode [ 675.931962][T31878] tipc: Resetting bearer [ 675.951696][T31868] lo speed is unknown, defaulting to 1000 [ 675.959357][T31877] tipc: Resetting bearer [ 675.981844][T31877] tipc: Disabling bearer [ 676.049151][T31883] dvmrp8: entered allmulticast mode [ 676.145954][T31883] netlink: 'syz.1.9342': attribute type 23 has an invalid length. [ 676.276957][T31881] lo speed is unknown, defaulting to 1000 [ 676.346971][T31881] lo speed is unknown, defaulting to 1000 [ 676.801610][T31879] dvmrp8: left allmulticast mode [ 676.947791][T31906] __nla_validate_parse: 9 callbacks suppressed [ 676.947811][T31906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9349'. [ 677.176320][T31921] tipc: Enabled bearer , priority 0 [ 677.188012][T31921] syzkaller0: entered promiscuous mode [ 677.209205][T31921] syzkaller0: entered allmulticast mode [ 677.231867][T31921] tipc: Resetting bearer [ 677.278741][T31917] tipc: Resetting bearer [ 677.297011][T31917] tipc: Disabling bearer [ 677.413159][T31928] lo speed is unknown, defaulting to 1000 [ 677.427971][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9352'. [ 677.498946][T31928] lo speed is unknown, defaulting to 1000 [ 677.571372][T31936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9356'. [ 677.616496][T31933] lo speed is unknown, defaulting to 1000 [ 677.618419][T31939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9357'. [ 677.635038][T31936] veth29: entered promiscuous mode [ 677.677123][T31943] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9357'. [ 677.904907][T31933] lo speed is unknown, defaulting to 1000 [ 677.925668][T31942] erspan0: entered allmulticast mode [ 678.007779][T31943] lo speed is unknown, defaulting to 1000 [ 678.096198][T31941] lo speed is unknown, defaulting to 1000 [ 678.102144][T31949] netlink: 452 bytes leftover after parsing attributes in process `syz.6.9358'. [ 678.343971][T31943] lo speed is unknown, defaulting to 1000 [ 678.769996][T31966] netlink: 844 bytes leftover after parsing attributes in process `syz.6.9360'. [ 678.812340][T31941] lo speed is unknown, defaulting to 1000 [ 678.876324][T31966] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9360'. [ 679.305675][T31976] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9362'. [ 679.956761][T31982] lo speed is unknown, defaulting to 1000 [ 680.271989][T31982] lo speed is unknown, defaulting to 1000 [ 680.386177][T31990] tipc: Enabled bearer , priority 0 [ 680.421151][T31991] syzkaller0: entered promiscuous mode [ 680.445678][T31991] syzkaller0: entered allmulticast mode [ 680.480682][T31990] tipc: Resetting bearer [ 680.531425][T31989] tipc: Resetting bearer [ 680.654353][T31989] tipc: Disabling bearer [ 680.898423][T31996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9366'. [ 681.051219][T32001] netlink: 'syz.0.9370': attribute type 5 has an invalid length. [ 681.100575][T32002] veth27: entered promiscuous mode [ 681.202394][T32006] lo speed is unknown, defaulting to 1000 [ 681.209992][T32006] lo speed is unknown, defaulting to 1000 [ 681.441702][T32015] lo speed is unknown, defaulting to 1000 [ 681.465216][T32015] lo speed is unknown, defaulting to 1000 [ 681.755878][T32026] netlink: 'syz.4.9374': attribute type 13 has an invalid length. [ 681.770804][T32026] netlink: 'syz.4.9374': attribute type 17 has an invalid length. [ 681.800522][T32026] erspan0: left allmulticast mode [ 681.839775][T32026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 681.860570][T32032] tipc: Enabled bearer , priority 0 [ 681.868998][T32023] syzkaller0: entered promiscuous mode [ 681.876960][T32023] syzkaller0: entered allmulticast mode [ 681.888925][T32021] tipc: Resetting bearer [ 681.933358][T32021] tipc: Disabling bearer [ 682.015953][T32036] tipc: Enabling of bearer rejected, failed to enable media [ 682.188826][T32028] lo speed is unknown, defaulting to 1000 [ 682.199123][T32026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.219229][T32037] netlink: 'syz.0.9378': attribute type 10 has an invalid length. [ 682.283090][T32028] lo speed is unknown, defaulting to 1000 [ 682.490954][T32048] syz_tun: entered allmulticast mode [ 682.526933][T32048] dvmrp8: entered allmulticast mode [ 682.643792][T32048] netlink: 'syz.6.9381': attribute type 23 has an invalid length. [ 682.736318][T32046] syz_tun: left allmulticast mode [ 682.751962][T32046] dvmrp8: left allmulticast mode [ 683.046723][T32055] __nla_validate_parse: 9 callbacks suppressed [ 683.046745][T32055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9384'. [ 683.112293][T32058] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9385'. [ 683.122779][T32055] veth29: entered promiscuous mode [ 683.133073][T32058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9385'. [ 683.700289][T32079] tipc: Enabled bearer , priority 0 [ 683.715339][T32079] syzkaller0: entered promiscuous mode [ 683.720843][T32079] syzkaller0: entered allmulticast mode [ 683.729752][T32080] netlink: 452 bytes leftover after parsing attributes in process `syz.0.9391'. [ 683.746304][T32077] tipc: Resetting bearer [ 683.774075][T32077] tipc: Disabling bearer [ 683.850100][T32084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9392'. [ 683.929054][T32088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9393'. [ 684.050937][T32094] netlink: 788 bytes leftover after parsing attributes in process `syz.0.9396'. [ 684.068897][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9395'. [ 684.105623][T32096] tipc: Enabled bearer , priority 0 [ 684.109093][T32092] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9395'. [ 684.139513][T32096] syzkaller0: entered promiscuous mode [ 684.151867][T32096] syzkaller0: entered allmulticast mode [ 684.170281][T32092] lo speed is unknown, defaulting to 1000 [ 684.183545][T32096] tipc: Resetting bearer [ 684.195189][T32095] tipc: Resetting bearer [ 684.219737][T32095] tipc: Disabling bearer [ 684.233151][T32092] lo speed is unknown, defaulting to 1000 [ 684.430923][ T30] audit: type=1800 audit(1756343932.397:22): pid=32101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9398" name="memory.events" dev="tmpfs" ino=9514 res=0 errno=0 [ 684.953861][T32127] tipc: Enabled bearer , priority 0 [ 684.967312][T32129] team0: No ports can be present during mode change [ 684.976067][T32129] vlan0: entered promiscuous mode [ 684.986774][T32127] syzkaller0: entered promiscuous mode [ 684.995275][T32127] syzkaller0: entered allmulticast mode [ 685.002699][T32129] tipc: Enabled bearer , priority 0 [ 685.013752][T32126] tipc: Resetting bearer [ 685.047168][T32126] tipc: Disabling bearer [ 685.667176][T32144] netlink: 'syz.4.9410': attribute type 4 has an invalid length. [ 685.701179][T32144] netlink: 'syz.4.9410': attribute type 4 has an invalid length. [ 685.723218][T32148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9411'. [ 685.813655][T32154] veth29: entered promiscuous mode [ 686.123660][ T5904] tipc: Node number set to 1731514081 [ 686.296047][T32178] lo speed is unknown, defaulting to 1000 [ 686.304832][T32178] lo speed is unknown, defaulting to 1000 [ 686.801269][T32198] tipc: Enabled bearer , priority 0 [ 686.809890][T32198] syzkaller0: entered promiscuous mode [ 686.815870][T32198] syzkaller0: entered allmulticast mode [ 686.839154][T32198] tipc: Resetting bearer [ 686.847740][T32197] tipc: Resetting bearer [ 686.861405][T32197] tipc: Disabling bearer [ 687.098865][T32202] veth5: entered promiscuous mode [ 687.135428][T32206] erspan0: entered allmulticast mode [ 687.149190][T32206] bond1: (slave erspan0): Releasing backup interface [ 687.649388][T32225] lo speed is unknown, defaulting to 1000 [ 687.689728][T32225] lo speed is unknown, defaulting to 1000 [ 688.373522][T29131] Bluetooth: hci5: command 0x0405 tx timeout [ 688.459710][T32238] __nla_validate_parse: 8 callbacks suppressed [ 688.459730][T32238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9435'. [ 688.474616][T32237] dvmrp8: entered allmulticast mode [ 688.577981][T32237] lo speed is unknown, defaulting to 1000 [ 688.596382][T32245] netlink: 'syz.2.9434': attribute type 23 has an invalid length. [ 688.606101][T32237] lo speed is unknown, defaulting to 1000 [ 688.735635][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9437'. [ 688.816186][T32249] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 688.954108][T32249] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.040293][T32249] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.109218][T32249] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.182753][T32236] dvmrp8: left allmulticast mode [ 689.261442][T32256] veth39: entered promiscuous mode [ 689.359093][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.444524][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.472646][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.481251][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.505841][T32260] tipc: Enabled bearer , priority 0 [ 689.523443][T32263] syz_tun: entered allmulticast mode [ 689.530252][T32260] syzkaller0: entered promiscuous mode [ 689.539599][T32260] syzkaller0: entered allmulticast mode [ 689.551425][T32263] dvmrp8: entered allmulticast mode [ 689.567165][T32260] tipc: Resetting bearer [ 689.582010][T32259] tipc: Resetting bearer [ 689.599992][T32259] tipc: Disabling bearer [ 689.623616][T32263] lo speed is unknown, defaulting to 1000 [ 689.631184][T32263] lo speed is unknown, defaulting to 1000 [ 689.673185][T32272] netlink: 'syz.0.9442': attribute type 23 has an invalid length. [ 689.993676][T32281] lo speed is unknown, defaulting to 1000 [ 690.123479][T32281] lo speed is unknown, defaulting to 1000 [ 690.306635][T32261] syz_tun: left allmulticast mode [ 690.322062][T32261] dvmrp8: left allmulticast mode [ 690.817071][T32316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9450'. [ 690.852090][T32311] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9451'. [ 690.897866][T32311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9451'. [ 691.090727][T32320] veth27: entered promiscuous mode [ 691.152393][T32324] erspan0: entered allmulticast mode [ 692.473267][T32372] netlink: 'syz.4.9465': attribute type 6 has an invalid length. [ 692.507587][T32375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9464'. [ 692.559471][T32367] tipc: Resetting bearer [ 692.568079][T32377] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9464'. [ 692.615345][T32372] netlink: 'syz.4.9465': attribute type 12 has an invalid length. [ 692.632678][T32372] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.9465'. [ 692.643626][T32377] lo speed is unknown, defaulting to 1000 [ 692.654974][T32377] lo speed is unknown, defaulting to 1000 [ 693.410057][T32395] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9470'. [ 693.538335][T32399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9472'. [ 693.660653][T32413] syz_tun: entered allmulticast mode [ 693.687293][T32413] dvmrp8: entered allmulticast mode [ 693.723618][T32413] lo speed is unknown, defaulting to 1000 [ 693.731392][T32413] lo speed is unknown, defaulting to 1000 [ 693.776492][T32416] netlink: 'syz.6.9475': attribute type 23 has an invalid length. [ 693.848602][T32419] netlink: 'syz.0.9476': attribute type 4 has an invalid length. [ 693.881332][T32419] netlink: 'syz.0.9476': attribute type 4 has an invalid length. [ 694.040465][T32412] syz_tun: left allmulticast mode [ 694.070262][T32412] dvmrp8: left allmulticast mode [ 694.250465][T32431] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9479'. [ 694.281875][T32431] veth5: entered promiscuous mode [ 694.504896][T32442] dvmrp8: entered allmulticast mode [ 694.554767][T32442] lo speed is unknown, defaulting to 1000 [ 694.565292][T32442] lo speed is unknown, defaulting to 1000 [ 694.638561][T32447] netlink: 'syz.2.9482': attribute type 23 has an invalid length. [ 694.746484][T32453] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9484'. [ 695.033821][T32462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9486'. [ 695.248132][T32441] dvmrp8: left allmulticast mode [ 695.327101][T32466] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9487'. [ 695.710339][T32482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9491'. [ 695.823471][T32482] veth39: entered promiscuous mode [ 695.849741][T32488] netlink: 452 bytes leftover after parsing attributes in process `syz.1.9493'. [ 695.883260][T32494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9495'. [ 695.904436][T32490] tipc: Enabled bearer , priority 0 [ 695.951997][T32497] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9495'. [ 696.027534][T32490] syzkaller0: entered promiscuous mode [ 696.033637][T32490] syzkaller0: entered allmulticast mode [ 696.054335][T32490] tipc: Resetting bearer [ 696.075441][T32489] tipc: Resetting bearer [ 696.093816][T32489] tipc: Disabling bearer [ 696.111889][T32497] lo speed is unknown, defaulting to 1000 [ 696.119891][T32497] lo speed is unknown, defaulting to 1000 [ 696.775764][T32514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9500'. [ 696.869621][T32517] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 697.104437][T32523] netlink: zone id is out of range [ 697.130018][T32523] netlink: zone id is out of range [ 697.141193][T32520] lo speed is unknown, defaulting to 1000 [ 697.153651][T32523] netlink: zone id is out of range [ 697.174379][T32520] lo speed is unknown, defaulting to 1000 [ 697.209956][T32523] netlink: zone id is out of range [ 697.217541][T32523] netlink: zone id is out of range [ 697.232308][T32523] netlink: zone id is out of range [ 697.246837][T32523] netlink: zone id is out of range [ 697.252082][T32523] netlink: zone id is out of range [ 697.258114][T32523] netlink: zone id is out of range [ 697.263967][T32523] netlink: zone id is out of range [ 697.859872][T32535] bond26: entered promiscuous mode [ 697.866291][T32531] netlink: 'syz.6.9504': attribute type 11 has an invalid length. [ 697.886488][T32535] bond26: entered allmulticast mode [ 697.906103][T32535] 8021q: adding VLAN 0 to HW filter on device bond26 [ 698.032130][T32539] lo speed is unknown, defaulting to 1000 [ 698.165079][T32539] lo speed is unknown, defaulting to 1000 [ 698.391245][T32561] tipc: Can't bind to reserved service type 2 [ 698.509447][T32562] lo speed is unknown, defaulting to 1000 [ 698.558565][T32562] lo speed is unknown, defaulting to 1000 [ 698.585911][T32568] __nla_validate_parse: 4 callbacks suppressed [ 698.585931][T32568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9510'. [ 698.657819][T32568] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9510'. [ 698.704487][T32566] lo speed is unknown, defaulting to 1000 [ 698.785711][T32572] lo speed is unknown, defaulting to 1000 [ 698.877911][T32569] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9509'. [ 698.940129][T32566] lo speed is unknown, defaulting to 1000 [ 699.326002][T32572] lo speed is unknown, defaulting to 1000 [ 699.570905][T32588] netlink: 452 bytes leftover after parsing attributes in process `syz.4.9512'. [ 699.875940][T32596] netlink: 788 bytes leftover after parsing attributes in process `syz.1.9515'. [ 699.921705][T32598] dvmrp8: entered allmulticast mode [ 700.038056][T32598] lo speed is unknown, defaulting to 1000 [ 700.334483][T32598] lo speed is unknown, defaulting to 1000 [ 700.432649][T32601] netlink: 'syz.2.9516': attribute type 23 has an invalid length. [ 700.660839][T32597] dvmrp8: left allmulticast mode [ 700.733670][T32608] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 701.006631][T32614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9519'. [ 701.276615][T32622] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9520'. [ 701.302281][T32620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9521'. [ 701.902987][T32635] bridge_slave_0: left allmulticast mode [ 701.913791][T32635] bridge_slave_0: left promiscuous mode [ 701.935695][T32635] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.969011][T32635] bridge_slave_1: left allmulticast mode [ 701.979135][T32635] bridge_slave_1: left promiscuous mode [ 701.994426][T32635] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.021723][T32635] bond0: (slave bond_slave_0): Releasing backup interface [ 702.039489][ T30] audit: type=1800 audit(1756343950.007:23): pid=32636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9522" name="memory.events" dev="tmpfs" ino=10075 res=0 errno=0 [ 702.072093][T32647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9525'. [ 702.086536][T32648] netlink: 'syz.6.9534': attribute type 10 has an invalid length. [ 702.140781][T32635] bond0: (slave bond_slave_1): Releasing backup interface [ 702.177326][T32635] team0: Port device team_slave_0 removed [ 702.219609][T32635] team0: Port device team_slave_1 removed [ 702.257932][T32635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.277576][T32635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.305741][T32635] bond1: (slave ip6gretap1): Releasing backup interface [ 702.316420][T32635] bond1: (slave ip6gretap1): the permanent HWaddr of slave - d6:d1:b2:c6:38:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 702.455126][T32635] bond1: (slave veth3): Releasing backup interface [ 702.662546][T32663] lo speed is unknown, defaulting to 1000 [ 702.682447][T32638] netlink: 452 bytes leftover after parsing attributes in process `syz.4.9524'. [ 702.785889][T32663] lo speed is unknown, defaulting to 1000 [ 702.936471][T32667] lo speed is unknown, defaulting to 1000 [ 703.049016][T32667] lo speed is unknown, defaulting to 1000 [ 703.124617][T32676] lo speed is unknown, defaulting to 1000 [ 703.259720][T32676] lo speed is unknown, defaulting to 1000 [ 703.480231][T32686] net_ratelimit: 17 callbacks suppressed [ 703.480314][T32686] netlink: zone id is out of range [ 703.481659][T32680] lo speed is unknown, defaulting to 1000 [ 703.486898][T32686] netlink: zone id is out of range [ 703.502479][T32686] netlink: zone id is out of range [ 703.507811][T32686] netlink: zone id is out of range [ 703.517042][T32686] netlink: zone id is out of range [ 703.522516][T32686] netlink: zone id is out of range [ 703.528152][T32686] netlink: zone id is out of range [ 703.534563][T32686] netlink: zone id is out of range [ 703.540713][T32686] netlink: zone id is out of range [ 703.550061][T32686] netlink: zone id is out of range [ 703.578066][T32691] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 703.598305][T32680] lo speed is unknown, defaulting to 1000 [ 703.661159][T32693] __nla_validate_parse: 6 callbacks suppressed [ 703.661177][T32693] netlink: 844 bytes leftover after parsing attributes in process `syz.0.9536'. [ 703.746598][T32693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9536'. [ 704.145769][T32711] netlink: 'syz.0.9539': attribute type 12 has an invalid length. [ 704.156156][T32711] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.9539'. [ 704.639656][T32722] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 704.978993][T32733] syz_tun: entered allmulticast mode [ 705.095424][T32733] dvmrp8: entered allmulticast mode [ 705.130391][T32731] lo speed is unknown, defaulting to 1000 [ 705.244746][T32731] lo speed is unknown, defaulting to 1000 [ 705.255336][T32735] netlink: 'syz.6.9545': attribute type 23 has an invalid length. [ 705.671106][T32733] lo speed is unknown, defaulting to 1000 [ 705.745786][T32733] lo speed is unknown, defaulting to 1000 [ 705.838247][T32732] syz_tun: left allmulticast mode [ 705.865814][T32732] dvmrp8: left allmulticast mode [ 706.124718][T32748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9547'. [ 706.491999][T32760] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9551'. [ 706.511597][T32760] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9551'. [ 706.922009][ T305] netlink: 'syz.1.9550': attribute type 10 has an invalid length. [ 707.133896][T32763] bond19: (slave veth27): Releasing active interface [ 707.362023][ T310] lo speed is unknown, defaulting to 1000 [ 707.371302][ T310] lo speed is unknown, defaulting to 1000 [ 707.470051][ T313] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9556'. [ 707.688228][ T322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9557'. [ 707.727940][ T317] veth5: entered promiscuous mode [ 707.747503][ T324] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9557'. [ 707.882334][ T316] lo speed is unknown, defaulting to 1000 [ 707.945213][ T324] lo speed is unknown, defaulting to 1000 [ 707.979631][ T316] lo speed is unknown, defaulting to 1000 [ 707.997752][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9558'. [ 708.109643][ T337] netlink: 'syz.2.9561': attribute type 1 has an invalid length. [ 708.201938][ T343] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 708.237609][ T337] 8021q: adding VLAN 0 to HW filter on device bond27 [ 708.332738][ T339] 8021q: adding VLAN 0 to HW filter on device bond27 [ 708.341127][ T339] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address [ 708.425649][ T339] bond27: (slave vxcan1): Error -95 calling set_mac_address [ 708.603590][ T344] veth41: entered promiscuous mode [ 708.614022][ T344] bond27: (slave veth41): Enslaving as an active interface with a down link [ 708.646549][ T324] lo speed is unknown, defaulting to 1000 [ 708.941333][ T362] dvmrp8: entered allmulticast mode [ 709.104282][ T364] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9564'. [ 709.128533][ T364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9564'. [ 709.182508][ T366] netlink: 'syz.2.9563': attribute type 23 has an invalid length. [ 709.206210][ T362] lo speed is unknown, defaulting to 1000 [ 709.258488][ T368] syz_tun: entered allmulticast mode [ 709.274318][ T368] dvmrp8: entered allmulticast mode [ 709.345549][ T362] lo speed is unknown, defaulting to 1000 [ 709.360772][ T374] netlink: 'syz.6.9565': attribute type 23 has an invalid length. [ 709.442962][ T368] lo speed is unknown, defaulting to 1000 [ 709.806625][ T368] lo speed is unknown, defaulting to 1000 [ 709.879927][ T361] dvmrp8: left allmulticast mode [ 709.959578][ T367] syz_tun: left allmulticast mode [ 709.990625][ T367] dvmrp8: left allmulticast mode [ 710.244793][ T395] netlink: 'syz.4.9571': attribute type 13 has an invalid length. [ 710.253662][ T395] netlink: 'syz.4.9571': attribute type 17 has an invalid length. [ 710.302961][ T395] erspan0: left allmulticast mode [ 710.311587][ T395] net_ratelimit: 17 callbacks suppressed [ 710.311601][ T395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.365677][ T392] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9572'. [ 710.382699][ T396] vxcan2: entered promiscuous mode [ 710.554836][ T395] lo speed is unknown, defaulting to 1000 [ 710.576914][ T395] lo speed is unknown, defaulting to 1000 [ 710.588326][ T399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.686988][ T407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9573'. [ 710.909335][ T416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9576'. [ 711.047184][ T411] dvmrp8: entered allmulticast mode [ 711.073287][ T402] dvmrp8: left allmulticast mode [ 711.224402][ T421] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9577'. [ 711.241630][ T421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9577'. [ 711.492289][ C1] ================================================================== [ 711.500511][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 711.508451][ C1] Read of size 2 at addr ffff8880496d482a by task syz.1.9582/443 [ 711.516198][ C1] [ 711.518552][ C1] CPU: 1 UID: 0 PID: 443 Comm: syz.1.9582 Not tainted syzkaller #0 PREEMPT(full) [ 711.518583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.518599][ C1] Call Trace: [ 711.518609][ C1] [ 711.518619][ C1] dump_stack_lvl+0x189/0x250 [ 711.518652][ C1] ? rcu_is_watching+0x15/0xb0 [ 711.518678][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.518703][ C1] ? rcu_is_watching+0x15/0xb0 [ 711.518727][ C1] ? lock_release+0x4b/0x3e0 [ 711.518763][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 711.518792][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 711.518824][ C1] print_report+0xca/0x240 [ 711.518845][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 711.518876][ C1] kasan_report+0x118/0x150 [ 711.518910][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 711.518947][ C1] rose_timer_expiry+0x471/0x4b0 [ 711.518978][ C1] call_timer_fn+0x17e/0x5f0 [ 711.519024][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 711.519056][ C1] ? call_timer_fn+0xbe/0x5f0 [ 711.519089][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 711.519129][ C1] ? rcu_is_watching+0x15/0xb0 [ 711.519151][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 711.519185][ C1] __run_timer_base+0x61a/0x860 [ 711.519215][ C1] ? ktime_get+0x3e/0x1f0 [ 711.519249][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 711.519278][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 711.519317][ C1] run_timer_softirq+0xb7/0x180 [ 711.519349][ C1] handle_softirqs+0x283/0x870 [ 711.519374][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 711.519400][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 711.519430][ C1] __irq_exit_rcu+0xca/0x1f0 [ 711.519452][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 711.519481][ C1] irq_exit_rcu+0x9/0x30 [ 711.519501][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 711.519535][ C1] [ 711.519545][ C1] [ 711.519554][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 711.519581][ C1] RIP: 0010:memset_orig+0x36/0xb0 [ 711.519606][ C1] Code: 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 <48> 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 [ 711.519629][ C1] RSP: 0018:ffffc90019bd7870 EFLAGS: 00000202 [ 711.519653][ C1] RAX: 0000000000000000 RBX: ffff888030c59400 RCX: 0000000000000002 [ 711.519671][ C1] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffff888030c59540 [ 711.519688][ C1] RBP: 0000000000002dc0 R08: 0000000000000001 R09: 0000000000000000 [ 711.519703][ C1] R10: ffff888030c59400 R11: ffffed100f14d515 R12: 0000000000000200 [ 711.519721][ C1] R13: ffff888030c59400 R14: 0000000000102a00 R15: ffff88801a441c80 [ 711.519751][ C1] __kmalloc_cache_noprof+0x1e2/0x3d0 [ 711.519784][ C1] ? __genradix_ptr_alloc+0x352/0x4a0 [ 711.519817][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 711.519851][ C1] __genradix_prealloc+0x44/0x90 [ 711.519880][ C1] sctp_stream_init+0x14b/0x440 [ 711.519913][ C1] sctp_association_new+0x10dd/0x25f0 [ 711.519947][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 711.519974][ C1] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 711.520007][ C1] ? __ipv6_addr_type+0x118/0x2f0 [ 711.520042][ C1] ? sctp_inet6_send_verify+0x6e/0x300 [ 711.520073][ C1] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 711.520100][ C1] __sctp_connect+0x5ba/0xd50 [ 711.520128][ C1] ? lock_release+0x4b/0x3e0 [ 711.520161][ C1] ? __pfx___sctp_connect+0x10/0x10 [ 711.520183][ C1] ? __might_fault+0xcc/0x130 [ 711.520217][ C1] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 711.520246][ C1] ? security_sctp_bind_connect+0x7e/0x2e0 [ 711.520279][ C1] sctp_getsockopt_connectx3+0x2c4/0x440 [ 711.520317][ C1] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 711.520350][ C1] ? sctp_getsockopt+0x135/0xb60 [ 711.520372][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 711.520394][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 711.520424][ C1] sctp_getsockopt+0x98a/0xb60 [ 711.520445][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 711.520481][ C1] do_sock_getsockopt+0x372/0x450 [ 711.520508][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 711.520531][ C1] ? rcu_needs_cpu+0xa0/0xb0 [ 711.520552][ C1] ? __fget_files+0x3a0/0x420 [ 711.520572][ C1] ? __fget_files+0x2a/0x420 [ 711.520596][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 711.520619][ C1] ? rcu_needs_cpu+0xa0/0xb0 [ 711.520642][ C1] ? rcu_needs_cpu+0xa0/0xb0 [ 711.520666][ C1] do_syscall_64+0xfa/0x3b0 [ 711.520689][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.520712][ C1] ? clear_bhb_loop+0x60/0xb0 [ 711.520739][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.520762][ C1] RIP: 0033:0x7f2fc498ebe9 [ 711.520783][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.520804][ C1] RSP: 002b:00007f2fc57b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 711.520829][ C1] RAX: ffffffffffffffda RBX: 00007f2fc4bb6090 RCX: 00007f2fc498ebe9 [ 711.520848][ C1] RDX: 000000000000006f RSI: 0000000000000084 RDI: 000000000000000a [ 711.520863][ C1] RBP: 00007f2fc4a11e19 R08: 0000200000000140 R09: 0000000000000000 [ 711.520879][ C1] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 711.520895][ C1] R13: 00007f2fc4bb6128 R14: 00007f2fc4bb6090 R15: 00007ffc34449d28 [ 711.520923][ C1] [ 711.520933][ C1] [ 712.043126][ C1] Allocated by task 32477: [ 712.047539][ C1] kasan_save_track+0x3e/0x80 [ 712.052235][ C1] __kasan_kmalloc+0x93/0xb0 [ 712.056842][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 712.062227][ C1] alloc_bprm+0x7d/0x5c0 [ 712.066544][ C1] kernel_execve+0x9b/0x9f0 [ 712.071086][ C1] call_usermodehelper_exec_async+0x210/0x360 [ 712.077188][ C1] ret_from_fork+0x3f9/0x770 [ 712.081845][ C1] ret_from_fork_asm+0x1a/0x30 [ 712.086626][ C1] [ 712.088951][ C1] Freed by task 32477: [ 712.093032][ C1] kasan_save_track+0x3e/0x80 [ 712.097713][ C1] kasan_save_free_info+0x46/0x50 [ 712.102758][ C1] __kasan_slab_free+0x5b/0x80 [ 712.107531][ C1] kfree+0x18e/0x440 [ 712.111431][ C1] kernel_execve+0x3c7/0x9f0 [ 712.116116][ C1] call_usermodehelper_exec_async+0x210/0x360 [ 712.122194][ C1] ret_from_fork+0x3f9/0x770 [ 712.126778][ C1] ret_from_fork_asm+0x1a/0x30 [ 712.131546][ C1] [ 712.133882][ C1] The buggy address belongs to the object at ffff8880496d4800 [ 712.133882][ C1] which belongs to the cache kmalloc-512 of size 512 [ 712.148212][ C1] The buggy address is located 42 bytes inside of [ 712.148212][ C1] freed 512-byte region [ffff8880496d4800, ffff8880496d4a00) [ 712.161940][ C1] [ 712.164270][ C1] The buggy address belongs to the physical page: [ 712.170696][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880496d5800 pfn:0x496d4 [ 712.180779][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 712.189300][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 712.197830][ C1] page_type: f5(slab) [ 712.201827][ C1] raw: 00fff00000000240 ffff88801a441c80 ffffea0000cab410 ffffea00016bcd10 [ 712.210423][ C1] raw: ffff8880496d5800 0000000000100003 00000000f5000000 0000000000000000 [ 712.219019][ C1] head: 00fff00000000240 ffff88801a441c80 ffffea0000cab410 ffffea00016bcd10 [ 712.227800][ C1] head: ffff8880496d5800 0000000000100003 00000000f5000000 0000000000000000 [ 712.236479][ C1] head: 00fff00000000002 ffffea000125b501 00000000ffffffff 00000000ffffffff [ 712.245156][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 712.253830][ C1] page dumped because: kasan: bad access detected [ 712.260248][ C1] page_owner tracks the page as allocated [ 712.265968][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22726, tgid 22724 (syz.0.6922), ts 386966589106, free_ts 382084155073 [ 712.287505][ C1] post_alloc_hook+0x240/0x2a0 [ 712.292289][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 712.297836][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 712.303643][ C1] alloc_pages_mpol+0x232/0x4a0 [ 712.308501][ C1] allocate_slab+0x8a/0x370 [ 712.313006][ C1] ___slab_alloc+0xbeb/0x1410 [ 712.317880][ C1] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 712.324332][ C1] kmemdup_noprof+0x2b/0x70 [ 712.328857][ C1] cache_create_net+0x2f/0x260 [ 712.333652][ C1] gss_svc_init_net+0x104/0x570 [ 712.338947][ C1] ops_init+0x359/0x5c0 [ 712.343118][ C1] setup_net+0x10c/0x320 [ 712.347373][ C1] copy_net_ns+0x31b/0x4d0 [ 712.351802][ C1] create_new_namespaces+0x3f3/0x720 [ 712.357097][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 712.362850][ C1] ksys_unshare+0x4c8/0x8c0 [ 712.367375][ C1] page last free pid 22496 tgid 22496 stack trace: [ 712.373889][ C1] __free_frozen_pages+0xbc4/0xd30 [ 712.379026][ C1] __slab_free+0x303/0x3c0 [ 712.383458][ C1] qlist_free_all+0x97/0x140 [ 712.388063][ C1] kasan_quarantine_reduce+0x148/0x160 [ 712.393532][ C1] __kasan_slab_alloc+0x22/0x80 [ 712.398564][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 712.404033][ C1] jbd2__journal_start+0x146/0x5b0 [ 712.409150][ C1] __ext4_journal_start_sb+0x227/0x5c0 [ 712.414636][ C1] ext4_dirty_inode+0x93/0x110 [ 712.419395][ C1] __mark_inode_dirty+0x2e9/0xe10 [ 712.424419][ C1] file_update_time+0x40c/0x490 [ 712.429274][ C1] ext4_page_mkwrite+0x20e/0x1190 [ 712.434298][ C1] do_page_mkwrite+0x14d/0x310 [ 712.439063][ C1] __handle_mm_fault+0x1916/0x5440 [ 712.444177][ C1] handle_mm_fault+0x40a/0x8e0 [ 712.448947][ C1] do_user_addr_fault+0xa81/0x1390 [ 712.454068][ C1] [ 712.456390][ C1] Memory state around the buggy address: [ 712.462021][ C1] ffff8880496d4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 712.470082][ C1] ffff8880496d4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 712.478152][ C1] >ffff8880496d4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 712.486213][ C1] ^ [ 712.491693][ C1] ffff8880496d4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 712.499758][ C1] ffff8880496d4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 712.507818][ C1] ================================================================== [ 712.515993][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 712.523207][ C1] CPU: 1 UID: 0 PID: 443 Comm: syz.1.9582 Not tainted syzkaller #0 PREEMPT(full) [ 712.532427][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.542504][ C1] Call Trace: [ 712.545802][ C1] [ 712.548655][ C1] dump_stack_lvl+0x99/0x250 [ 712.553257][ C1] ? __asan_memcpy+0x40/0x70 [ 712.557855][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.563064][ C1] ? __pfx__printk+0x10/0x10 [ 712.567661][ C1] vpanic+0x281/0x750 [ 712.571648][ C1] ? __pfx_vpanic+0x10/0x10 [ 712.576165][ C1] ? rcu_is_watching+0x15/0xb0 [ 712.580960][ C1] panic+0xb9/0xc0 [ 712.584685][ C1] ? __pfx_panic+0x10/0x10 [ 712.589113][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 712.595031][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 712.600963][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 712.606086][ C1] check_panic_on_warn+0x89/0xb0 [ 712.611034][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 712.616153][ C1] end_report+0x78/0x160 [ 712.620411][ C1] kasan_report+0x129/0x150 [ 712.624928][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 712.630053][ C1] rose_timer_expiry+0x471/0x4b0 [ 712.635002][ C1] call_timer_fn+0x17e/0x5f0 [ 712.639625][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 712.645096][ C1] ? call_timer_fn+0xbe/0x5f0 [ 712.649779][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 712.654908][ C1] ? rcu_is_watching+0x15/0xb0 [ 712.659674][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 712.665139][ C1] __run_timer_base+0x61a/0x860 [ 712.670002][ C1] ? ktime_get+0x3e/0x1f0 [ 712.674333][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 712.679713][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 712.685964][ C1] run_timer_softirq+0xb7/0x180 [ 712.690824][ C1] handle_softirqs+0x283/0x870 [ 712.695594][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 712.700374][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 712.705663][ C1] __irq_exit_rcu+0xca/0x1f0 [ 712.710251][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 712.715456][ C1] irq_exit_rcu+0x9/0x30 [ 712.719696][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 712.725338][ C1] [ 712.728272][ C1] [ 712.731209][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.737193][ C1] RIP: 0010:memset_orig+0x36/0xb0 [ 712.742220][ C1] Code: 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 <48> 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 [ 712.761825][ C1] RSP: 0018:ffffc90019bd7870 EFLAGS: 00000202 [ 712.767901][ C1] RAX: 0000000000000000 RBX: ffff888030c59400 RCX: 0000000000000002 [ 712.775899][ C1] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffff888030c59540 [ 712.784045][ C1] RBP: 0000000000002dc0 R08: 0000000000000001 R09: 0000000000000000 [ 712.792018][ C1] R10: ffff888030c59400 R11: ffffed100f14d515 R12: 0000000000000200 [ 712.799990][ C1] R13: ffff888030c59400 R14: 0000000000102a00 R15: ffff88801a441c80 [ 712.807982][ C1] __kmalloc_cache_noprof+0x1e2/0x3d0 [ 712.813374][ C1] ? __genradix_ptr_alloc+0x352/0x4a0 [ 712.818757][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 712.823969][ C1] __genradix_prealloc+0x44/0x90 [ 712.828923][ C1] sctp_stream_init+0x14b/0x440 [ 712.833802][ C1] sctp_association_new+0x10dd/0x25f0 [ 712.839184][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 712.844465][ C1] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 712.850267][ C1] ? __ipv6_addr_type+0x118/0x2f0 [ 712.855391][ C1] ? sctp_inet6_send_verify+0x6e/0x300 [ 712.860860][ C1] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 712.866767][ C1] __sctp_connect+0x5ba/0xd50 [ 712.871458][ C1] ? lock_release+0x4b/0x3e0 [ 712.876060][ C1] ? __pfx___sctp_connect+0x10/0x10 [ 712.881258][ C1] ? __might_fault+0xcc/0x130 [ 712.885947][ C1] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 712.891523][ C1] ? security_sctp_bind_connect+0x7e/0x2e0 [ 712.897340][ C1] sctp_getsockopt_connectx3+0x2c4/0x440 [ 712.902985][ C1] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 712.909145][ C1] ? sctp_getsockopt+0x135/0xb60 [ 712.914082][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 712.919451][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 712.925261][ C1] sctp_getsockopt+0x98a/0xb60 [ 712.930024][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 712.935957][ C1] do_sock_getsockopt+0x372/0x450 [ 712.940985][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 712.946535][ C1] ? rcu_needs_cpu+0xa0/0xb0 [ 712.951127][ C1] ? __fget_files+0x3a0/0x420 [ 712.955806][ C1] ? __fget_files+0x2a/0x420 [ 712.960397][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 712.965859][ C1] ? rcu_needs_cpu+0xa0/0xb0 [ 712.970459][ C1] ? rcu_needs_cpu+0xa0/0xb0 [ 712.975086][ C1] do_syscall_64+0xfa/0x3b0 [ 712.979598][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.985669][ C1] ? clear_bhb_loop+0x60/0xb0 [ 712.990352][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.996246][ C1] RIP: 0033:0x7f2fc498ebe9 [ 713.000665][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.020278][ C1] RSP: 002b:00007f2fc57b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 713.028806][ C1] RAX: ffffffffffffffda RBX: 00007f2fc4bb6090 RCX: 00007f2fc498ebe9 [ 713.036813][ C1] RDX: 000000000000006f RSI: 0000000000000084 RDI: 000000000000000a [ 713.044897][ C1] RBP: 00007f2fc4a11e19 R08: 0000200000000140 R09: 0000000000000000 [ 713.052873][ C1] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 713.060867][ C1] R13: 00007f2fc4bb6128 R14: 00007f2fc4bb6090 R15: 00007ffc34449d28 [ 713.068856][ C1] [ 713.072242][ C1] Kernel Offset: disabled [ 713.076576][ C1] Rebooting in 86400 seconds..