last executing test programs: 1m0.922924988s ago: executing program 0 (id=9567): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) socket$packet(0x11, 0x2, 0x300) close(0x3) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, &(0x7f0000000040)=0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000000), 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 59.804840148s ago: executing program 0 (id=9578): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x2000}, 0xffffffffffffff60}, 0x48) 59.526124945s ago: executing program 0 (id=9583): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x4040, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1b, 0x10, 0x0, 0x1, [@generic="cb614ab2728e5231ec9690c04c522d08003ccc3ac0008b"]}]}, @typed={0x4, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 59.408516992s ago: executing program 0 (id=9585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x9e, &(0x7f0000000180)=""/158, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000895) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x0, 0x1, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) r7 = socket$inet6(0xa, 0x4, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000001380)={0xa, 0x4e20, 0x100, @mcast1, 0xfffffffc}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, 0x1000}, 0x7}], 0x1, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000001c0)={0x1f, 0xfffd, 0x2}, 0x6) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 58.724488931s ago: executing program 0 (id=9590): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000040000000000000e03000000000000000100000000000011048000000a000000000000000000000202000000002e000061"], 0x0, 0x4a}, 0x28) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2004c890}, 0x0) r2 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x0, 0x498}], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x44}, 0x28) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="160000000108010100000000000040a33cda00"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x38}}, 0x0) write$rfkill(r0, &(0x7f00000002c0)={0x20000000, 0x8, 0x3, 0x3, 0xfd}, 0x8) 57.75829111s ago: executing program 0 (id=9603): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) epoll_create(0x8) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 42.66196227s ago: executing program 32 (id=9603): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) epoll_create(0x8) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 4.310733342s ago: executing program 3 (id=10034): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', r0, 0x80, 0x7800, 0xcf1, 0x5, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x67, 0x0, 0xe, 0x2f, 0x0, @remote, @remote, {[@lsrr={0x83, 0x2b, 0x4d, [@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, @broadcast, @broadcast, @multicast2, @remote, @rand_addr=0x64010102, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xf, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @empty, @local]}, @noop]}}}}}) 4.212625321s ago: executing program 5 (id=10036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x110, 0xd, "95d79569"}], 0x18}, 0x4008060) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x9, 0x28, 0x2}, @srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}, @dstopts={0x3b}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x31}}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x2, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={&(0x7f0000000400), 0x0, 0x0, 0x0, 0x101, r6}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18ea1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000003000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) 3.969548976s ago: executing program 3 (id=10037): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1800, 0x3}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000) mmap(&(0x7f0000189000/0x2000)=nil, 0x2000, 0x0, 0x3032, r1, 0xaa990000) (async) r3 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) 3.752937793s ago: executing program 3 (id=10039): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x461e, 0x5, @empty, 0x6}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r9 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e22, 0x1, 0x2, 0x80, 0x0, 0x3c, r8, r9}, {0x2, 0xe, 0x4000000000000000, 0x1, 0x145d19be, 0x6, 0x3, 0x6}, {0x6, 0x10000, 0x6, 0x1}, 0x8001, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x2b}, 0x2, @in=@multicast1, 0x3503, 0x3, 0x0, 0x7, 0x7052b70d, 0xfff, 0x4}}, 0xe8) r10 = getgid() sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="af68a448511004d2509812d0ed7fbd561215ed1c97084a0bce5d57683b2ea9a9e217206b8bcf4e6f7f9b234d45927086ea68715eb37df8e43921b73ee000e27820a33681c0498aca5a0afe4da38fbeda46038661e9c58ca908058b9acfcd80f5910a9fb4536ed129ee447213bb1d5d746afa0115a1f5adfc3566afd49d648974898651096ebf7f5008b98ab9c953fa5f5243f8fb2bfe2ff25deb4ed48b6ab7eb014c8c51f47da129c6ba844edbc0abd59263ca0d4af7fb62a6c4af1aae5bb88cff56388da77770e0a66a6afcb180fca18e7b4fd836f379fe8979d2213486b94c8695697cc2bdd2ce3c353316", 0xec}, {&(0x7f0000000240)="7a9e77e781283a734f60ef30daec474700b9595f7bae6572b57aa76207adaa25e2e50b0e76cb3f594a8483209d2eec47558c3958fcdb0b51dca36091f7dbc77e1ecbab4f6dac166d8de331eecc0d91fbadf9085bdeb7052615fcb3cc5ea1aa4a7e9f1ec93861db8ae5a2c3b3852c3683b11b3e534d737bb6c3704d4f895934ed7f79811febd9df8ec0e79890a6ee3131d75e10e494d56508064ea8c585551e8e6f3937fcd15dc1a47941df679623429c69d38897e52c187167164950bdd2d33f02", 0xc1}], 0x2, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r3, r9, r10}}}], 0x20, 0x400c4}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x400000, 0x2000001, {0x0, 0x0, 0x0, r11, {0x2}, {0xd, 0xfff2}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xa055}, 0x20008014) 3.659358736s ago: executing program 5 (id=10040): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xf1}, 0xffffffffffffff60}, 0x48) 3.510248659s ago: executing program 5 (id=10043): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x2, 0x1, 0xffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b40)=ANY=[@ANYBLOB="54e7ff00", @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000900000006001600030000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x48, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x820) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0x4004081) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000580)={r7, 0x1}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.260371447s ago: executing program 4 (id=10051): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x610}, 0x24044800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}}, 0x400c044) 2.121292934s ago: executing program 2 (id=10053): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x102}, 0xffffffffffffff60}, 0x48) 1.901435227s ago: executing program 2 (id=10054): getuid() r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x461e, 0x5, @empty, 0x6}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e22, 0x1, 0x2, 0x80, 0x0, 0x3c, r2, r3}, {0x2, 0xe, 0x4000000000000000, 0x1, 0x145d19be, 0x6, 0x3, 0x6}, {0x6, 0x10000, 0x6, 0x1}, 0x8001, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x2b}, 0x2, @in=@multicast1, 0x3503, 0x3, 0x0, 0x7, 0x7052b70d, 0xfff, 0x4}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@ipv6_delrule={0x4c, 0x21, 0x200, 0x70bd26, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x40, 0x39, 0x0, 0x0, 0x6, 0x10002}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x3}, @FRA_DST={0x14, 0x1, @private2}, @FRA_SRC={0x14, 0x2, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r4 = socket(0x26, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48) sendmsg$nl_crypto(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=@del={0x128, 0x11, 0x100, 0x70bd27, 0x25dfdbfc, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8, 0x1, 0x98}, {0x8, 0x1, 0xffff0000}, {0x8, 0x1, 0x7c}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x10001}, {0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0xb02}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet6(0xa, 0x2, 0xffffffff) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4f23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7daa}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000380), 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x11, 0x8}}]}}]}, 0x44}}, 0x802) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, r12, 0x25, 0x0, @void}, 0x10) 1.837640677s ago: executing program 1 (id=10055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c54acd3295e9558a738558a0b6e0000", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000001280)=""/83, 0x53}, {&(0x7f0000001300)=""/202, 0xca}, {&(0x7f0000000100)=""/2, 0x2}], 0x5, &(0x7f0000001480)=""/165, 0xa5}, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001540)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x802, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, {{0x111, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001580), 0x4) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c54acd3295e9558a738558a0b6e0000", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000001280)=""/83, 0x53}, {&(0x7f0000001300)=""/202, 0xca}, {&(0x7f0000000100)=""/2, 0x2}], 0x5, &(0x7f0000001480)=""/165, 0xa5}, 0x2000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001540)) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x802, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, {{0x111, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001580), 0x4) (async) 1.836933083s ago: executing program 3 (id=10056): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x40, r0, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x34}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfb}]}]}]}, 0x40}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r5, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.527434404s ago: executing program 2 (id=10057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000c40a0000000000009500007b0000000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x92, &(0x7f0000000240)=""/146}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xe, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={r1, 0x6, 0x10001, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xda1a}, [@generic={0x6b, 0x1, 0x1, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000104050000000000000000000500000308000340000000040a000200fffffff76500000006000640000600000600064000050000060006400001000005000100030000000a00020000000003010000000a0002000000100001000000ff442cc37ab8478cee69555879b88af42f15ea79300b4438dd5e7f25f7362a3420e48414ef632c094e84a7c6391f4fde627fadd92eba658727676c68"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000eeddb137a4558fdad86806f2d9fcf46c626c2fc7e8225c49260c23903cb36a1c3fe51a0e36210837b830b8226ea619c5fcf40262bf3db0a88d36793f2bef1ac67c27f680b68cebfef94dc92db32c43db90bdd078cf"], 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r6, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@deltfilter={0x204, 0x2d, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0xe}, {0x9, 0x3}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1cc, 0x2, [@TCA_CGROUP_EMATCHES={0x1c8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="cd9e9103b4", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="95588fed184221"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf9, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0xc00}, {0x0, 0x4, 0x0, "fc585ae4"}}}, @TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "4632c94aac159d10e6623a8e84b4dcee9f88b80ac5cc81ced0f285d22ac250a7286c5759c5a188e8b79696cc7aeeb670a5c4eb4fb0bf445691a21d6394c37df2347dce30bec0e709ab184437138695d544cf409ed205790476554a"}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7ff}, "5354a3d093e573750683102e19570c32e3574664345e4110b74279bf59d022e53990c342c7a516a82198e9f5217e4266f466986c00b8c315908b60469d0b7e53e78fa5a7208820a19d7ca3a70b6342cd2d9469a57f1d253abf3ecde218b41e93898e1224618c73fc71896c397d8ee069f61444f09825a2f0630e021898b883401bbe88065961f1a088c7e74c85a29961e0e547f3"}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x7}, {0x4, 0x2, 0x7, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa68, 0x2, 0xd7}, {0x101, 0x5, 0x0, "990f972ce5"}}}]}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) 1.454161181s ago: executing program 4 (id=10058): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000240)=""/10, 0x2}, 0x20) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}], &(0x7f0000000180)='syzkaller\x00', 0xffff, 0xb5, &(0x7f00000002c0)=""/181, 0x41100, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r3, r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000480)=[{0x1, 0x4, 0xf, 0x9}, {0x1, 0x5, 0x0, 0x3}, {0x0, 0x4, 0x4, 0xc}, {0x2, 0x2, 0x5, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xcb, r10}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.398602048s ago: executing program 1 (id=10059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0xf5ff, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x5, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x21, 0x0, 0x0, 0xab8}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0\x00'}]}, 0x48}}, 0x0) 1.360484956s ago: executing program 5 (id=10060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x1f, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x3ff}, [@map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @generic={0x0, 0x5, 0xa, 0x5, 0xffff954d}, @generic={0x6, 0xb, 0xc, 0x1ff, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000100)='syzkaller\x00', 0xffff, 0xf7, &(0x7f0000000140)=""/247, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x3, 0x1c, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x5, 0x4, 0x9, 0x2}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) syz_80211_inject_frame(&(0x7f0000000440)=@device_b, &(0x7f0000000480)=@ctrl_frame=@ack={{}, {0x7f}}, 0xa) syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000000500)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @initial, @device_a, @device_b, {0x6, 0xffc}, "", @value={0x8, 0x0, 0x0, 0x0, 0x5}, @value=@ver_80211n={0x0, 0x7ffc, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x1000, "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"}, {@device_b, @broadcast}, {@device_b, @device_a, 0x1a, "26adf3e69aba8afe168c4fd4fdbe19f81e0e960154e033c9cdf7"}, {@device_a, @device_b, 0x3b, "ce92b7f0ce5a4164b03f5ef690a081bfe1b10ac244c601e3747c13e18dfce9b0348d24e0482418b6ba1f0bfda6947840453e5d1443f41288f10b60"}]}, 0x10b2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0x1, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'vcan0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x17b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)=@o_path={&(0x7f0000001940)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x2, 0x8, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x6000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000016c0)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000001700)=""/169, 0x41000, 0x12, '\x00', r2, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001840)={0x2, 0xe, 0x3, 0x90}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000019c0)=[r3, r4, r5], &(0x7f0000001a00)=[{0x1, 0x4, 0xa, 0x7}], 0x10, 0x6}, 0x94) vmsplice(r1, &(0x7f0000002bc0)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="038677e2377479d047d686cf0b56c3e36ced190436bfd06362c5d6f7834a29e843dd0043104ce65ff2ef1853eb96daff3190b740fea1414210990cbae4427dd750540535b24aeff9f75d2f05941be8df52902494b45452ec4dee09b87640b05df769abbed104c2d2467560cf8f391b7c02fcef4cbdc200be03ae0356847258a9764aa15e0a0ad846ddb61dd0cc8f6ed297590cab42a3783522d91c0ed2548df9a57bc4df693ad4abed4d6a8e26a3107231ef1c162da2", 0xb6}], 0x2, 0x5) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000002c40)={0x81, 0x28, '\x00', 0x1, &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f00)={&(0x7f0000002dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xa, [@struct={0xa, 0x6, 0x0, 0x4, 0x0, 0xd, [{0x0, 0x5, 0x101}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0xc6e}, {0x2, 0x3, 0x7ff}, {0xc, 0x1, 0xce}, {0xf, 0x0, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x70, 0x2}]}, {0x0, [0x30, 0x30, 0x2e, 0x5f, 0x61, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000002e80)=""/78, 0x9e, 0x4e, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003000)={0x6, 0xa, &(0x7f0000002c80)=@raw=[@call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000002d00)='syzkaller\x00', 0x7fff, 0x69, &(0x7f0000002d40)=""/105, 0x41100, 0x1a, '\x00', r2, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002f40)={0x0, 0x9, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000002f80)=[{0x0, 0x1, 0x3, 0xa}, {0x1, 0x2, 0x7, 0xb}, {0x0, 0x4, 0x1, 0x3}, {0x3, 0x3, 0x1, 0xa}, {0x2, 0x2, 0xe, 0x5}], 0x10, 0x1}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000030c0)=0xbc, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000003140)="a1c5a8272417cb88127f960adda31fb9", 0x10) socketpair(0x2b, 0x5, 0x40, &(0x7f0000003180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f00000031c0)="9770b8b6b8dd14b4bd9b477d9571b87c", 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003240), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x38, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x23, 0x44}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004050) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000003380)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000035c0)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003580)={&(0x7f00000034c0)={0x8c, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '\\$\\)/-\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '-\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000003600)=0x0) syz_open_procfs$namespace(r12, &(0x7f0000003640)='ns/uts\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000004780)={r3, &(0x7f0000003680)="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", &(0x7f0000004680)=""/215}, 0x20) r13 = accept4$ax25(r9, &(0x7f00000047c0)={{0x3, @null}, [@default, @remote, @null, @default, @default, @netrom, @remote, @rose]}, &(0x7f0000004840)=0x48, 0x80000) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000004880), &(0x7f00000048c0)=0xc) 1.073998709s ago: executing program 4 (id=10061): socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x1}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000003c0)=0xc) write$cgroup_pid(r0, &(0x7f0000000400)=r3, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b160000000000000000020000085400048018000180080001006f7366000c000280080001400000000438000180080001006e6174002c000280080001400000000008000540000000170800034000000014080002400000000208000440070000150900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000808000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780080001001f0000190800064000000001090001"], 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='Z', 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x800, 0x2, 0x6, 0x7e15, 0x2a2b, 0xfff, 0x8dc3}}], 0x48, 0x4855}, 0x24000052) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b028054021780"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@val={0x88a8, 0x2}, {0x8100, 0x4, 0x1, 0x2}}, {@llc={0x4, {@llc={0x2, 0x8e, '1M', "1d72c9458035ba43979e2d3a39b84b5289d868cd4c259203d0903c9672d9c692afd1c3e4ba90e721e401e865ec8113dd75e10b902bf192318bf9f8531ad9c67b6ff4006f256b8f2435067de3c2ea5417ce200b60c9a6f425ed12429f1ceaae2a74c9a91d510572e6dd454fad4696e28570ed80c1eb29c59ea529b46a7bb57a0536ea4d6218437872067ff026cd7fed6ed0d2d089eeec"}}}}}, &(0x7f0000000080)={0x1, 0x3, [0x64c, 0x44d, 0x739, 0xb2a]}) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.022030809s ago: executing program 2 (id=10062): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x84, 0x7, 0xd, 0x7fc0000000000003, 0x1, 0x7, 0x2000000000000007, 0x2}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (async) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) read(r5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) (async) sendto$inet(r9, &(0x7f0000000540)="7dde2e6a09d52121746bac9caa502cc9c257e03168809d16e92d5eb0a33d3f80af970f601be97a85a7ab8404bb29c47edd90757def1da48c75346433c75c2f99c83fd8116e7da63f75b1caa4149886c3566b6a0745574d615db8ee86e4d89f203157c1b922393d5a539cee95b5a51a8ff42a1419ab17c844bfd127257f99d269c79cd662e0c40bcbe13878b636937b7f276dc429549108b0885c44381b056446", 0xa0, 0x10, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r10, r6, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e64000000006e13727fffffffffffffff21cc140002", @ANYRES32=r12, @ANYBLOB], 0x44}}, 0x0) 865.478282ms ago: executing program 1 (id=10063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'virt_wifi0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "e629bd6970bd15aba3954e41407721d2f8d4ce93fb2d19cf393a05682faac9ae", "3f02c40e88b6eeac6da59b3e05243609aa2592001eef3f9960a261e2e74905d5", "730826c040bad073cfe36d88eb3803b5327fa4623c364c6d0c4a644bc3f65f7b", "dfe6bb0e049221adac3221e6061268a27fc7350aa6229746d38f9e84bde00713", "d095f0a352437ac2c9e0640e784a5ab78505c7cf6c32924a303722c2181a5ccb", "1faca906c49991c92e43a3f4", 0xbf, 0x46d5, 0x0, 0x0, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x6e, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 747.515204ms ago: executing program 4 (id=10064): unshare(0x20000400) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x3}, {0x1, 0x7, 0x5, 0x81}]}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x2, 0x1) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4450) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000004c0)="62c99e05d9", 0x5}], 0x2}}], 0x1, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0), 0x8) 676.989568ms ago: executing program 3 (id=10065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) recvmmsg$unix(r1, &(0x7f0000012b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 618.734028ms ago: executing program 5 (id=10066): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x29, 0x1}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146, 0x0, 0x1, [@generic]}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 588.495539ms ago: executing program 2 (id=10067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x8, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc03, 0x6, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x8, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x9, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x3, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x9, 0x2, 0x2, 0x7fffffff}, {0x0, 0x1, 0x2, 0x3ff, 0x1, 0xd9}, 0x80, 0xfffffffb, 0x698}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) 575.714971ms ago: executing program 4 (id=10068): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x0, 0x0, 'none\x00'}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000010000104000000000300000000004000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a44001280110001006272696467655f736c617665000000002c0005800500190003000000050009000100000006001f00d500000005000800000000000500090001000000140003006272696467655f736c6176655f30"], 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x11, 0x4010, r0, 0xd4aa8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x7, 0x80, 0xff, 0x1, {{0x22, 0x4, 0x3, 0x24, 0x88, 0x67, 0x0, 0x81, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@remote}, {@broadcast, 0xf5}]}, @end, @timestamp_prespec={0x44, 0x4c, 0x4d, 0x3, 0x9, [{@empty, 0xfffffff7}, {@multicast1, 0x3}, {@local, 0x5}, {@remote, 0x4}, {@broadcast, 0x80}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xa818}, {@empty, 0xa76e}, {@loopback, 0x5}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xb0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x31, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x6, 0x20058, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pS \x00'}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x4, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff4}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x41, &(0x7f0000000100)=""/65, 0x41100, 0x4, '\x00', r2, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x6, &(0x7f0000000800)=[r5, r6, r7], &(0x7f0000000840)=[{0x5, 0x2, 0x2, 0x7}, {0x3, 0x5, 0xb, 0x8}, {0x0, 0x3, 0x5, 0x1}, {0x1, 0x1, 0x4, 0x9}, {0x5, 0x5, 0xc, 0x3}, {0x2, 0x4, 0x1, 0xc}], 0x10, 0x80}, 0x94) 453.470164ms ago: executing program 1 (id=10069): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r3, @ANYBLOB="05003300d6"], 0x2c}}, 0x80) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4d}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20040008) 387.720665ms ago: executing program 5 (id=10070): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) close(0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb894f"], 0x72) (async) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb894f"], 0x72) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffdc9, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000010000000900000084b3c3d9e982a2c3231c54c46a4dcb07e21cfb038dc726ff7c50f7d57f189704e7bbb12d19158cde5e4d6c81b848c1a63f774d145c0200"/84], 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 269.776761ms ago: executing program 1 (id=10071): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000240)=""/10, 0x2}, 0x20) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}], &(0x7f0000000180)='syzkaller\x00', 0xffff, 0xb5, &(0x7f00000002c0)=""/181, 0x41100, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r3, r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000480)=[{0x1, 0x4, 0xf, 0x9}, {0x1, 0x5, 0x0, 0x3}, {0x0, 0x4, 0x4, 0xc}, {0x2, 0x2, 0x5, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43014037115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xcb, r10}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 157.96326ms ago: executing program 4 (id=10072): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xf3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x401}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x841) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getneigh={0x9, 0x1e, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xf3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x401}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x841) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getneigh={0x9, 0x1e, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) (async) 115.335115ms ago: executing program 2 (id=10073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0xffef, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x5, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x21, 0x0, 0x0, 0xab8}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0\x00'}]}, 0x48}}, 0x0) 11.363341ms ago: executing program 3 (id=10074): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) writev(r0, &(0x7f0000001680), 0x0) 0s ago: executing program 1 (id=10075): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) kernel console output (not intermixed with test programs): 89 01 48 [ 1117.456727][ T6929] RSP: 002b:00007f020f7fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.456748][ T6929] RAX: ffffffffffffffda RBX: 00007f020ec15fa0 RCX: 00007f020e99aeb9 [ 1117.456763][ T6929] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 1117.456776][ T6929] RBP: 00007f020f7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.456788][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1117.456799][ T6929] R13: 00007f020ec16038 R14: 00007f020ec15fa0 R15: 00007ffef433cb18 [ 1117.456832][ T6929] [ 1117.877543][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8733'. [ 1117.981286][ T30] audit: type=1800 audit(1769943133.756:29): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8734" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=44 res=0 errno=0 [ 1118.018599][ T6921] bond9: option all_slaves_active: invalid value (13) [ 1118.068702][ T6921] bond9 (unregistering): Released all slaves [ 1118.132435][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 1118.140682][ C1] lec:lec_tx_timeout: lec0 [ 1118.202887][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1118.889058][ T6993] netlink: 'syz.2.8742': attribute type 1 has an invalid length. [ 1118.969880][ T7000] netlink: 'syz.0.8743': attribute type 3 has an invalid length. [ 1119.060664][ T6993] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1119.259915][ T6986] bond7: (slave ip6gretap3): making interface the new active one [ 1119.273869][ T6986] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1119.360717][ T7002] veth7: entered promiscuous mode [ 1119.367537][ T7010] erspan0: entered allmulticast mode [ 1119.527356][ T7024] tipc: Started in network mode [ 1119.545385][ T7024] tipc: Node identity 3ac55f149298, cluster identity 4711 [ 1119.565364][ T7024] tipc: Enabled bearer , priority 0 [ 1119.589424][ T7024] syzkaller0: entered promiscuous mode [ 1119.604081][ T7024] syzkaller0: entered allmulticast mode [ 1119.643720][ T7024] tipc: Resetting bearer [ 1119.676727][ T7024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8747'. [ 1119.767363][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8749'. [ 1119.776612][ T7023] tipc: Resetting bearer [ 1119.841953][ T7023] tipc: Disabling bearer [ 1119.877923][ T7030] netlink: 'syz.1.8749': attribute type 4 has an invalid length. [ 1119.888587][ T7036] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8749'. [ 1120.087241][ T7051] netlink: 'syz.1.8755': attribute type 10 has an invalid length. [ 1120.139087][ T7054] dvmrp6: left allmulticast mode [ 1120.154978][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1120.344622][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8760'. [ 1120.371298][ T7068] veth0_to_team: entered promiscuous mode [ 1120.402880][ T7068] veth0_to_team: left promiscuous mode [ 1120.567819][ T7080] lo speed is unknown, defaulting to 1000 [ 1120.587918][ T7084] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8765'. [ 1120.699835][ T7092] netlink: 'syz.4.8767': attribute type 6 has an invalid length. [ 1120.845669][ T7080] wg1 speed is unknown, defaulting to 1000 [ 1120.926688][ T7099] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1121.265203][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1122.182126][ T7163] lo speed is unknown, defaulting to 1000 [ 1122.245370][ T8021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.272945][ T8021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.343844][ T7167] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1122.353274][ T7175] __nla_validate_parse: 9 callbacks suppressed [ 1122.353293][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8789'. [ 1122.444737][ T7158] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8786'. [ 1122.588514][ T7185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1122.963013][ T7163] wg1 speed is unknown, defaulting to 1000 [ 1123.599991][ T7222] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1123.609603][ T7220] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.8799'. [ 1123.663441][ T7225] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8800'. [ 1123.726783][ T7224] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 1123.776850][ T7225] netlink: 'syz.3.8800': attribute type 13 has an invalid length. [ 1123.912765][ T7230] "syz.2.8801" (7230) uses obsolete ecb(arc4) skcipher [ 1123.943132][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8801'. [ 1124.161906][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.169550][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.265243][ T7243] netlink: 'syz.2.8803': attribute type 1 has an invalid length. [ 1124.461541][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.515714][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.779599][ T7267] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8806'. [ 1124.921666][ T7242] pimreg: entered allmulticast mode [ 1124.954206][ T7245] pimreg: left allmulticast mode [ 1124.994988][ T7711] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.004247][ T7711] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.037517][ T7711] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.051623][ T7711] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.164318][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8809'. [ 1125.205755][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8809'. [ 1125.325075][ T7282] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1125.377949][ T7285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.889608][ T7318] netlink: 'syz.4.8815': attribute type 1 has an invalid length. [ 1125.964446][ T7318] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1126.272244][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1126.280328][ C1] lec:lec_tx_timeout: lec0 [ 1126.297555][ T7299] bond12: (slave ip6gretap1): making interface the new active one [ 1126.324646][ T7299] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1126.460826][ T7304] veth3: entered promiscuous mode [ 1126.469269][ T7331] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1126.477619][ T7310] erspan0: entered allmulticast mode [ 1126.490138][ T7310] bond12: (slave erspan0): Enslaving as an active interface with an up link [ 1126.520053][ T7329] netlink: 'syz.1.8820': attribute type 4 has an invalid length. [ 1126.691881][ T7337] tipc: Enabled bearer , priority 0 [ 1126.727278][ T7337] syzkaller0: entered promiscuous mode [ 1126.754486][ T7337] syzkaller0: entered allmulticast mode [ 1126.778095][ T7337] tipc: Resetting bearer [ 1126.806600][ T7336] tipc: Resetting bearer [ 1126.844414][ T7336] tipc: Disabling bearer [ 1126.889006][ T7343] lo speed is unknown, defaulting to 1000 [ 1127.054072][ T7356] Cannot find set identified by id 65534 to match [ 1127.608062][ T7343] wg1 speed is unknown, defaulting to 1000 [ 1127.753082][ T7396] __nla_validate_parse: 4 callbacks suppressed [ 1127.753101][ T7396] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8835'. [ 1127.867923][ T7406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8836'. [ 1127.899954][ T7398] lo speed is unknown, defaulting to 1000 [ 1127.979921][ T7404] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1128.019767][ T7405] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1128.261772][ T7398] wg1 speed is unknown, defaulting to 1000 [ 1128.324993][ T7432] netlink: 'syz.3.8844': attribute type 1 has an invalid length. [ 1128.367236][ T7432] netlink: 'syz.3.8844': attribute type 4 has an invalid length. [ 1128.387541][ T7432] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.8844'. [ 1128.442121][ T7437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8844'. [ 1128.475038][ T7437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8844'. [ 1128.499580][ T7437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1128.736785][ T7446] netlink: 'syz.3.8846': attribute type 2 has an invalid length. [ 1128.840775][ T7446] hmac(sha224): entered promiscuous mode [ 1129.239730][ T7468] netlink: 'syz.4.8851': attribute type 1 has an invalid length. [ 1129.280195][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8851'. [ 1129.506028][ T7483] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1129.543453][ T7486] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8855'. [ 1129.714534][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8857'. [ 1129.730586][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8857'. [ 1129.977872][ T7515] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1129.983073][ T7516] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1130.108405][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8864'. [ 1130.925580][ T7568] lo speed is unknown, defaulting to 1000 [ 1130.939661][ T7574] geneve4: entered promiscuous mode [ 1130.969974][ T7574] geneve4: entered allmulticast mode [ 1130.977215][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.012871][ T1169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.037770][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.065377][ T1169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.581297][ T7568] wg1 speed is unknown, defaulting to 1000 [ 1132.359319][T28702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.369893][T28702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.382511][T28702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.402514][T28702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.422912][T28702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1132.639691][ T7614] lo speed is unknown, defaulting to 1000 [ 1132.826783][ T7636] __nla_validate_parse: 4 callbacks suppressed [ 1132.826802][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1132.842448][ T7639] netlink: 'syz.2.8887': attribute type 6 has an invalid length. [ 1132.866189][ T7639] IPv6: NLM_F_CREATE should be specified when creating new route [ 1132.872554][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1132.916047][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1133.204972][ T7614] wg1 speed is unknown, defaulting to 1000 [ 1133.277444][ T7648] syzkaller0: entered promiscuous mode [ 1133.283482][ T7648] syzkaller0: entered allmulticast mode [ 1133.419712][ T7666] netlink: 'syz.3.8894': attribute type 13 has an invalid length. [ 1133.475568][ T7671] delete_channel: no stack [ 1133.485692][ T7671] delete_channel: no stack [ 1133.711127][ T7684] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.8899'. [ 1133.837779][ T7614] chnl_net:caif_netlink_parms(): no params data found [ 1133.849956][ T7696] netlink: 'syz.4.8902': attribute type 10 has an invalid length. [ 1133.896122][ T7696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.934703][ T7696] bond0: (slave team0): Enslaving as an active interface with an up link [ 1134.173706][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.181012][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.189741][ T7614] bridge_slave_0: entered allmulticast mode [ 1134.197678][ T7614] bridge_slave_0: entered promiscuous mode [ 1134.206620][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.214451][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.221738][ T7614] bridge_slave_1: entered allmulticast mode [ 1134.229917][ T7614] bridge_slave_1: entered promiscuous mode [ 1134.292111][ T7614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.313012][ T7614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.390593][ T7614] team0: Port device team_slave_0 added [ 1134.416404][ T7614] team0: Port device team_slave_1 added [ 1134.452395][T20586] Bluetooth: hci0: command tx timeout [ 1134.494005][ T7741] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.8913'. [ 1134.511351][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.521593][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.582328][ T7614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.793855][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.800848][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.852421][ T7614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.076150][ T7614] hsr_slave_0: entered promiscuous mode [ 1135.085002][ T7614] hsr_slave_1: entered promiscuous mode [ 1135.091546][ T7614] debugfs: 'hsr0' already exists in 'hsr' [ 1135.097837][ T7614] Cannot create hsr debugfs directory [ 1135.113476][ T7775] tipc: Enabled bearer , priority 0 [ 1135.140330][ T7775] syzkaller0: entered promiscuous mode [ 1135.146021][ T7775] syzkaller0: entered allmulticast mode [ 1135.213936][ T7775] tipc: Resetting bearer [ 1135.222911][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8921'. [ 1135.435605][ T7774] tipc: Resetting bearer [ 1135.473053][ T7774] tipc: Disabling bearer [ 1135.480462][ T7800] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1135.540257][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1135.592900][ T7805] openvswitch: netlink: Unknown key attributes 2 [ 1136.051469][ T7832] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.8932'. [ 1136.148373][ T7614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1136.183913][ T7614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1136.303428][ T7836] batman_adv: batadv0: Adding interface: macvtap1 [ 1136.309917][ T7836] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.411504][ T7836] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1136.425262][ T7614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1136.462811][ T7614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1136.534489][T20586] Bluetooth: hci0: command tx timeout [ 1136.727303][ T7855] netlink: 'syz.4.8938': attribute type 2 has an invalid length. [ 1136.758680][ T7855] netlink: 'syz.4.8938': attribute type 1 has an invalid length. [ 1137.026139][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.026505][ T7891] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1137.100337][ T7614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.155312][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.162615][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.205837][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.213036][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.226369][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8947'. [ 1137.628903][ T7921] netlink: 'syz.3.8952': attribute type 4 has an invalid length. [ 1137.658370][ T7921] netlink: 'syz.3.8952': attribute type 4 has an invalid length. [ 1137.719297][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.819554][ T7614] veth0_vlan: entered promiscuous mode [ 1137.862489][ T7614] veth1_vlan: entered promiscuous mode [ 1137.955796][ T7614] veth0_macvtap: entered promiscuous mode [ 1138.020731][ T7941] tipc: Enabled bearer , priority 0 [ 1138.028927][ T7941] syzkaller0: entered promiscuous mode [ 1138.036492][ T7941] syzkaller0: entered allmulticast mode [ 1138.048022][ T7936] lo speed is unknown, defaulting to 1000 [ 1138.056729][ T7941] __nla_validate_parse: 3 callbacks suppressed [ 1138.056744][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1138.104142][ T7614] veth1_macvtap: entered promiscuous mode [ 1138.114345][ T7941] tipc: Resetting bearer [ 1138.153253][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1138.191484][ T7938] tipc: Resetting bearer [ 1138.244327][ T7938] tipc: Disabling bearer [ 1138.281351][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.339484][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.348278][ T7951] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1138.403095][ T7711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.419088][ T7711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.455173][ T437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.477271][ T437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.612952][T20586] Bluetooth: hci0: command tx timeout [ 1138.703718][ T7936] wg1 speed is unknown, defaulting to 1000 [ 1138.803177][ T8040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.824201][ T8040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.956709][ T8040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.968839][ T8040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.991304][ T7980] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1139.001172][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1139.179462][ T7986] openvswitch: netlink: Key type 300 is out of range max 32 [ 1139.618925][ T7992] tipc: Enabled bearer , priority 10 [ 1139.628823][ T8002] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1139.886476][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8973'. [ 1139.911108][T28702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1139.921666][T28702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1139.934291][T28702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1139.945200][T28702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1139.955660][T28702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1140.189665][ T8019] lo speed is unknown, defaulting to 1000 [ 1140.483345][ T8047] netlink: 'syz.1.8977': attribute type 1 has an invalid length. [ 1140.538389][ T8043] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.593197][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8976'. [ 1140.693143][T20586] Bluetooth: hci0: command tx timeout [ 1140.750183][ T8043] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.920531][ T8059] lo speed is unknown, defaulting to 1000 [ 1141.207063][ T8043] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.229560][ T8019] wg1 speed is unknown, defaulting to 1000 [ 1141.239839][ T7992] tipc: Resetting bearer [ 1141.273123][ T8059] wg1 speed is unknown, defaulting to 1000 [ 1141.302979][ T7989] tipc: Disabling bearer [ 1141.392522][ T8043] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.735824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.889456][ T7711] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.989846][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.052820][T20586] Bluetooth: hci4: command tx timeout [ 1142.104099][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.139415][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8984'. [ 1142.154549][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8984'. [ 1142.204590][ T437] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.248999][ T8019] chnl_net:caif_netlink_parms(): no params data found [ 1142.399908][ T8102] netlink: 'syz.0.8986': attribute type 33 has an invalid length. [ 1142.403166][ T8100] netlink: 'syz.0.8986': attribute type 33 has an invalid length. [ 1142.562497][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.569694][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.602693][ T8019] bridge_slave_0: entered allmulticast mode [ 1142.610407][ T8019] bridge_slave_0: entered promiscuous mode [ 1142.651595][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.670695][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.684641][ T8019] bridge_slave_1: entered allmulticast mode [ 1142.707818][ T8019] bridge_slave_1: entered promiscuous mode [ 1142.794169][ T8117] lo speed is unknown, defaulting to 1000 [ 1142.831763][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.877584][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.035195][ T8127] syzkaller0: entered promiscuous mode [ 1143.040762][ T8127] syzkaller0: entered allmulticast mode [ 1143.103072][ T8019] team0: Port device team_slave_0 added [ 1143.408796][ T8136] __nla_validate_parse: 4 callbacks suppressed [ 1143.408815][ T8136] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8993'. [ 1144.017900][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8995'. [ 1144.132482][T20586] Bluetooth: hci4: command tx timeout [ 1144.923136][ T8019] team0: Port device team_slave_1 added [ 1144.928835][ T8117] wg1 speed is unknown, defaulting to 1000 [ 1145.098014][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.117963][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.191137][ T8019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.226091][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.251338][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.325693][ T8172] netlink: 'syz.0.9002': attribute type 1 has an invalid length. [ 1145.338258][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1145.349839][ T8172] netlink: 364 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1145.359632][ T8019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.370668][ T8172] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1145.501507][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1145.661349][ T8019] hsr_slave_0: entered promiscuous mode [ 1145.714492][ T8019] hsr_slave_1: entered promiscuous mode [ 1145.720913][ T8019] debugfs: 'hsr0' already exists in 'hsr' [ 1145.762662][ T8019] Cannot create hsr debugfs directory [ 1145.978677][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9005'. [ 1146.010523][ T8194] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1146.089755][ T8041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.097845][ T8041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.215072][T20586] Bluetooth: hci4: command tx timeout [ 1146.516746][ T8215] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1146.527432][ T8019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.591755][ T8215] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1146.704155][ T8019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.754457][ T8230] tipc: Enabling of bearer rejected, failed to enable media [ 1146.826367][ T8232] lo speed is unknown, defaulting to 1000 [ 1146.852888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.874274][ T8019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.000716][ T8019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.339691][ T8019] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1147.381459][ T8232] wg1 speed is unknown, defaulting to 1000 [ 1147.396277][ T8019] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1147.485962][ T8019] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1147.527033][ T8019] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1147.742740][ T8279] netlink: 'syz.0.9022': attribute type 11 has an invalid length. [ 1147.772404][ T8279] netlink: 'syz.0.9022': attribute type 11 has an invalid length. [ 1147.780260][ T8279] netlink: 204 bytes leftover after parsing attributes in process `syz.0.9022'. [ 1147.957360][ T8288] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1148.007373][ T8306] netlink: 'syz.3.9027': attribute type 3 has an invalid length. [ 1148.026650][ T8306] netlink: 'syz.3.9027': attribute type 3 has an invalid length. [ 1148.036650][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.103860][ T8308] gtp0: entered promiscuous mode [ 1148.108861][ T8308] gtp0: entered allmulticast mode [ 1148.216731][ T8019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.279118][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.286283][ T8040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.293616][T28702] Bluetooth: hci4: command tx timeout [ 1148.338137][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.345334][ T8040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.433185][ T8321] x_tables: duplicate underflow at hook 3 [ 1148.549256][ T8324] __nla_validate_parse: 5 callbacks suppressed [ 1148.549274][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1148.601385][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1148.621090][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1148.721114][ T8333] netlink: 'syz.0.9035': attribute type 11 has an invalid length. [ 1149.102924][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9041'. [ 1149.163182][ T8352] syzkaller0: entered promiscuous mode [ 1149.179282][ T8352] syzkaller0: entered allmulticast mode [ 1149.241829][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.357473][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1149.366828][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1149.380304][ T8375] syzkaller0: entered promiscuous mode [ 1149.386255][ T8375] syzkaller0: entered allmulticast mode [ 1149.862713][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9047'. [ 1149.870705][ T8019] veth0_vlan: entered promiscuous mode [ 1149.889626][ T8019] veth1_vlan: entered promiscuous mode [ 1149.934949][ T8019] veth0_macvtap: entered promiscuous mode [ 1149.947061][ T8019] veth1_macvtap: entered promiscuous mode [ 1149.971247][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.991276][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.009937][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.039822][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.064225][ T437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.083252][ T437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.508892][ T8405] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1151.980348][ T8358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1153.852494][ T8428] sctp: [Deprecated]: syz.3.9055 (pid 8428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1153.852494][ T8428] Use struct sctp_sack_info instead [ 1154.021620][ T8431] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.9056'. [ 1154.510943][ T8423] : entered promiscuous mode [ 1154.642609][ T7711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.663884][ T7711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.776929][ T8449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1154.849619][ T7711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.876412][ T7711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.028172][ T8466] netlink: 316 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1155.030419][ T8460] lo speed is unknown, defaulting to 1000 [ 1155.515983][ T8460] wg1 speed is unknown, defaulting to 1000 [ 1155.553905][ T8495] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9068'. [ 1155.569683][T20586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1155.592763][T20586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1155.600643][T20586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1155.613002][T20586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1155.620726][T20586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1155.711589][ T8496] lo speed is unknown, defaulting to 1000 [ 1155.740596][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9069'. [ 1156.283558][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9075'. [ 1156.339353][ T8496] wg1 speed is unknown, defaulting to 1000 [ 1156.340515][ T8522] netlink: 'syz.2.9074': attribute type 4 has an invalid length. [ 1156.390532][ T8521] netlink: 'syz.2.9074': attribute type 4 has an invalid length. [ 1156.819630][ T8557] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1156.973361][ T8554] lo speed is unknown, defaulting to 1000 [ 1157.252969][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.296775][ T7711] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.307836][ T7711] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.391292][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 1157.417292][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.436858][ T7711] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.447991][ T7711] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.516428][ T8588] dvmrp1: entered allmulticast mode [ 1157.611042][ T8554] wg1 speed is unknown, defaulting to 1000 [ 1157.625520][ T7711] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.638497][ T7711] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.652457][T20586] Bluetooth: hci2: command tx timeout [ 1157.669010][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9088'. [ 1157.767130][ T7711] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.791568][ T7711] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.884708][ T8605] bond1: Removing last arp target with arp_interval on [ 1157.920593][ T8600] lo speed is unknown, defaulting to 1000 [ 1158.027737][ T8615] netlink: 'syz.3.9092': attribute type 1 has an invalid length. [ 1158.035901][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9092'. [ 1158.157185][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1158.175132][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1158.197715][ T8040] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1158.208758][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.222817][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.240271][ T8496] bridge_slave_0: entered allmulticast mode [ 1158.254123][ T8496] bridge_slave_0: entered promiscuous mode [ 1158.293893][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.354187][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.367076][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.374988][ T8496] bridge_slave_1: entered allmulticast mode [ 1158.384020][ T8496] bridge_slave_1: entered promiscuous mode [ 1158.418912][ T8021] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1158.428502][ T8021] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1158.484263][ T8021] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1158.525392][ T7711] bond0: left allmulticast mode [ 1158.530383][ T7711] bond_slave_0: left allmulticast mode [ 1158.537121][ T7711] bond_slave_1: left allmulticast mode [ 1158.543508][ T7711] bridge0: port 3(bond0) entered disabled state [ 1158.554064][ T7711] bridge_slave_1: left allmulticast mode [ 1158.559739][ T7711] bridge_slave_1: left promiscuous mode [ 1158.566838][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.576504][ T7711] bridge_slave_0: left allmulticast mode [ 1158.582839][ T7711] bridge_slave_0: left promiscuous mode [ 1158.588637][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.617446][ T7711] batman_adv: batadv0: Interface deactivated: geneve2 [ 1158.943748][ T7711] batman_adv: batadv0: Removing interface: geneve2 [ 1159.332436][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.369282][ T7711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.379190][ T7711] bond_slave_0: left promiscuous mode [ 1159.388437][ T7711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.397832][ T7711] bond_slave_1: left promiscuous mode [ 1159.404866][ T7711] bond0 (unregistering): Released all slaves [ 1159.507124][ T7711] bond1 (unregistering): Released all slaves [ 1159.520307][ T7711] bond2 (unregistering): Released all slaves [ 1159.533450][ T7711] bond3 (unregistering): Released all slaves [ 1159.641990][ T7711] bond4 (unregistering): Released all slaves [ 1159.656741][ T8600] wg1 speed is unknown, defaulting to 1000 [ 1159.665721][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.733283][T20586] Bluetooth: hci2: command tx timeout [ 1159.751082][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.886651][ T7711] : left promiscuous mode [ 1159.940036][ T8496] team0: Port device team_slave_0 added [ 1159.974069][ T8496] team0: Port device team_slave_1 added [ 1160.037345][ T8638] IPVS: Scheduler module ip_vs_sip not found [ 1160.049639][ T8641] IPVS: length: 140 != 8 [ 1160.071753][ T7711] tipc: Left network mode [ 1160.196941][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.215213][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.251276][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.266454][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.273743][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.312076][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.383413][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.452911][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.729651][ T8496] hsr_slave_0: entered promiscuous mode [ 1160.753822][ T8496] hsr_slave_1: entered promiscuous mode [ 1160.767653][ T8496] debugfs: 'hsr0' already exists in 'hsr' [ 1160.779937][ T8496] Cannot create hsr debugfs directory [ 1160.960010][ T437] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1160.989051][ T8678] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9105'. [ 1161.016076][ T437] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1161.025502][ T437] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1161.058776][ T437] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1161.138285][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9105'. [ 1161.412869][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.449505][ T7711] veth1_macvtap: left promiscuous mode [ 1161.480978][ T7711] veth0_macvtap: left promiscuous mode [ 1161.491151][ T7711] veth1_vlan: left promiscuous mode [ 1161.506964][ T7711] veth0_vlan: left promiscuous mode [ 1161.571114][ T8696] netlink: 'syz.2.9109': attribute type 21 has an invalid length. [ 1161.587971][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.596575][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.648584][ T8696] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9109'. [ 1161.684249][ T8699] netlink: 'syz.2.9109': attribute type 1 has an invalid length. [ 1161.692032][ T8699] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9109'. [ 1161.776194][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9110'. [ 1161.816795][T20586] Bluetooth: hci2: command tx timeout [ 1161.825832][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9110'. [ 1161.998148][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9112'. [ 1162.352647][ T7711] team0 (unregistering): Port device team_slave_1 removed [ 1162.394777][ T7711] team0 (unregistering): Port device team_slave_0 removed [ 1162.456795][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.796250][ T8696] netlink: 'syz.2.9109': attribute type 4 has an invalid length. [ 1162.804237][ T8696] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9109'. [ 1162.817103][ T8712] kthread_run failed with err -4 [ 1162.899542][ T8717] lo speed is unknown, defaulting to 1000 [ 1163.053041][ T8496] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1163.143803][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9117'. [ 1163.265774][ T8496] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1163.297333][ T8742] netlink: 'syz.0.9117': attribute type 9 has an invalid length. [ 1163.406472][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9119'. [ 1163.479008][ T8496] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1163.509845][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.593348][ T8717] wg1 speed is unknown, defaulting to 1000 [ 1163.601127][ T7711] IPVS: stop unused estimator thread 0... [ 1163.713294][ T8496] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1163.892655][T20586] Bluetooth: hci2: command tx timeout [ 1164.327817][ T8496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1164.345871][ T8786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1164.389017][ T8496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1164.461065][ T8496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1164.535807][ T8496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1164.536635][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.566174][ T8801] netlink: 'syz.3.9132': attribute type 8 has an invalid length. [ 1164.575758][ T8801] netlink: 'syz.3.9132': attribute type 9 has an invalid length. [ 1164.598787][ T8801] netlink: 'syz.3.9132': attribute type 10 has an invalid length. [ 1164.617593][ T8801] netlink: 'syz.3.9132': attribute type 11 has an invalid length. [ 1164.698719][T31989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.875156][ T8825] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1164.894069][T31989] IPVS: starting estimator thread 0... [ 1164.982586][ T8828] IPVS: using max 28 ests per chain, 67200 per kthread [ 1165.133079][ T8832] macvtap2: entered promiscuous mode [ 1165.138454][ T8832] syz_tun: entered promiscuous mode [ 1165.206551][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.255670][ T8843] netlink: 'syz.4.9140': attribute type 1 has an invalid length. [ 1165.263798][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.324874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.332086][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.370466][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.377686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.573581][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.711948][ T8866] bond1 (unregistering): Released all slaves [ 1165.901996][ T8876] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1165.916333][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.052562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.091319][ T8496] veth0_vlan: entered promiscuous mode [ 1166.154565][ T8496] veth1_vlan: entered promiscuous mode [ 1166.194335][ T8888] netlink: 'syz.4.9152': attribute type 1 has an invalid length. [ 1166.254483][ T8496] veth0_macvtap: entered promiscuous mode [ 1166.295020][ T8496] veth1_macvtap: entered promiscuous mode [ 1166.366642][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.404857][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.428348][ T8021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.475385][ T8021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.522912][ T8021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.578193][ T8021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.636770][ T8908] batman_adv: batadv0: Adding interface: wlan0 [ 1166.655292][ T8908] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.695441][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.710143][ T8908] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1166.723563][ T8909] __nla_validate_parse: 6 callbacks suppressed [ 1166.723583][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9156'. [ 1166.793419][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9156'. [ 1166.902763][ T8021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.910708][ T8021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.993862][ T797] IPVS: starting estimator thread 0... [ 1167.020827][ T8925] SET target dimension over the limit! [ 1167.030505][ T8041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.053974][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1167.071460][ T8041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.082683][ T8927] IPVS: using max 30 ests per chain, 72000 per kthread [ 1167.132758][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1167.391545][ T8946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9164'. [ 1167.426439][ T1169] bridge_slave_1: left allmulticast mode [ 1167.432484][ T1169] bridge_slave_1: left promiscuous mode [ 1167.449362][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.520312][ T1169] bridge_slave_0: left allmulticast mode [ 1167.545184][ T1169] bridge_slave_0: left promiscuous mode [ 1167.565621][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.732705][ T797] net_ratelimit: 3 callbacks suppressed [ 1167.732725][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.746442][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.844876][ T8971] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1167.976320][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.993008][ T8983] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9170'. [ 1168.141161][ T1169] bond12 (unregistering): (slave ip6gretap1): Releasing active interface [ 1168.150701][ T1169] bond12 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 4e:d8:47:79:08:85 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1168.170107][ T1169] bond12 (unregistering): (slave erspan0): making interface the new active one [ 1168.338527][ T1169] bond12 (unregistering): (slave erspan0): Releasing active interface [ 1168.396447][ T1169] bond7 (unregistering): (slave gre1): Releasing backup interface [ 1168.407809][ T8998] netlink: 'syz.2.9172': attribute type 16 has an invalid length. [ 1168.415777][ T8998] netlink: 'syz.2.9172': attribute type 17 has an invalid length. [ 1168.424948][ T1169] gre1 (unregistering): left promiscuous mode [ 1168.475193][ T9000] netlink: 'syz.2.9172': attribute type 10 has an invalid length. [ 1168.490772][ T9000] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1168.516647][ T1169] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1168.664131][ T1169] team0: Port device bridge1 removed [ 1168.734044][ T1169] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1168.743438][ T1169] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - 9a:a6:d8:0c:2b:22 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1168.782749][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.826894][ T1169] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1168.990588][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.000733][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.014419][ T1169] bond0 (unregistering): (slave team0): Releasing backup interface [ 1169.024992][ T1169] bond0 (unregistering): Released all slaves [ 1169.129706][ T1169] bond1 (unregistering): Released all slaves [ 1169.143133][ T1169] bond2 (unregistering): Released all slaves [ 1169.243969][ T1169] bond3 (unregistering): Released all slaves [ 1169.345092][ T1169] bond4 (unregistering): Released all slaves [ 1169.442982][ T1169] bond5 (unregistering): Released all slaves [ 1169.541939][ T1169] bond6 (unregistering): Released all slaves [ 1169.644071][ T1169] bond7 (unregistering): Released all slaves [ 1169.750457][ T1169] bond8 (unregistering): (slave bond9): Releasing backup interface [ 1169.758559][ T1169] bond9 (unregistering): left promiscuous mode [ 1169.765837][ T1169] bond8 (unregistering): Released all slaves [ 1169.817006][T20873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.871106][ T1169] bond9 (unregistering): Released all slaves [ 1169.973304][ T1169] bond10 (unregistering): Released all slaves [ 1169.989857][ T1169] bond11 (unregistering): Released all slaves [ 1170.090193][ T1169] bond12 (unregistering): Released all slaves [ 1170.104889][ T8954] veth0: entered promiscuous mode [ 1170.110065][ T8954] veth0: entered allmulticast mode [ 1170.160005][ T8998] erspan0: entered promiscuous mode [ 1170.168348][ T8998] erspan0: left allmulticast mode [ 1170.311060][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.362859][ T8998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.418855][ T8998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1170.750078][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9179'. [ 1170.776598][ T9033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9179'. [ 1170.804053][ T9036] netlink: 'syz.3.9182': attribute type 1 has an invalid length. [ 1170.811951][ T9036] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1170.852911][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.014256][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.046553][ T9052] syzkaller1: entered promiscuous mode [ 1171.052080][ T9052] syzkaller1: entered allmulticast mode [ 1171.334266][ T9077] netlink: 'syz.2.9188': attribute type 6 has an invalid length. [ 1171.362702][ T9082] netlink: 'syz.2.9188': attribute type 6 has an invalid length. [ 1171.560595][ T9094] gretap1: entered promiscuous mode [ 1171.619747][ T9097] netlink: 'syz.3.9193': attribute type 1 has an invalid length. [ 1171.697777][ T9105] delete_channel: no stack [ 1171.765873][ T1169] tipc: Left network mode [ 1171.807313][ T9107] __nla_validate_parse: 6 callbacks suppressed [ 1171.807331][ T9107] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.9196'. [ 1171.808122][ T9109] macsec0: entered allmulticast mode [ 1171.904522][T20873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.945865][ T9109] veth1_macvtap: entered allmulticast mode [ 1171.982362][ T9109] macsec0: left allmulticast mode [ 1171.987496][ T9109] veth1_macvtap: left allmulticast mode [ 1172.127698][ T1169] IPVS: stopping backup sync thread 7222 ... [ 1172.545260][ T9158] tipc: Started in network mode [ 1172.572345][ T9158] tipc: Node identity f242392674d, cluster identity 4711 [ 1172.610036][ T9158] tipc: Enabled bearer , priority 0 [ 1172.639805][ T9156] syzkaller0: entered promiscuous mode [ 1172.687155][ T9156] syzkaller0: entered allmulticast mode [ 1172.886959][ T9170] veth0_to_bridge: entered promiscuous mode [ 1172.901630][ T9176] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.9212'. [ 1172.938788][T20873] net_ratelimit: 1 callbacks suppressed [ 1172.938803][T20873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.967129][ T9153] tipc: Resetting bearer [ 1173.018051][ T9153] tipc: Disabling bearer [ 1173.052704][ T9169] veth0_to_bridge: left promiscuous mode [ 1173.374022][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.769556][ T9220] Bluetooth: MGMT ver 1.23 [ 1173.988523][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.059280][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.182690][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 1174.225894][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 1174.510427][ T9188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9215'. [ 1174.520319][ T9188] netlink: 13 bytes leftover after parsing attributes in process `syz.2.9215'. [ 1174.539891][ T9223] syzkaller0: entered promiscuous mode [ 1174.582744][ T9223] syzkaller0: entered allmulticast mode [ 1174.738200][ T9243] veth0: entered promiscuous mode [ 1174.745924][ T9243] veth0: entered allmulticast mode [ 1174.823375][ T9251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.955792][ T9251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.013694][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.180941][ T9273] vlan2: entered promiscuous mode [ 1175.200326][ T9273] bridge0: entered promiscuous mode [ 1175.225308][ T9276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9236'. [ 1175.237937][ T9276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9236'. [ 1175.270921][ T9280] netlink: 596 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1175.283499][ T9276] ip6t_srh: unknown srh match flags 4000 [ 1175.327818][ T9280] netlink: 'syz.4.9237': attribute type 10 has an invalid length. [ 1175.348600][ T9280] tls_set_device_offload: netdev not found [ 1175.437618][ T9284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.446832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.486968][ T9291] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 1175.526956][ T9291] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 1175.553843][ T9289] lo speed is unknown, defaulting to 1000 [ 1175.615495][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9243'. [ 1175.813880][ T9310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9245'. [ 1176.053582][ T9329] netlink: 'syz.2.9249': attribute type 36 has an invalid length. [ 1176.062665][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.085462][ T9333] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9250'. [ 1176.115940][ T9289] wg1 speed is unknown, defaulting to 1000 [ 1176.239839][ T9341] netlink: 'syz.2.9251': attribute type 4 has an invalid length. [ 1176.295532][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.353170][ T1169] IPVS: stop unused estimator thread 0... [ 1176.362340][ T9344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.371578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.256079][ T9383] netlink: 'syz.1.9260': attribute type 1 has an invalid length. [ 1177.306159][ T9383] netlink: 'syz.1.9260': attribute type 3 has an invalid length. [ 1177.333335][ T9383] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9260'. [ 1177.441132][ T9383] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1177.458783][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1177.514898][ T9399] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.9262'. [ 1177.586917][ T9394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1177.866730][ T9412] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1178.048618][ T9426] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9268'. [ 1178.105261][ T9419] bond2: Removing last arp target with arp_interval on [ 1178.132868][T20873] net_ratelimit: 4 callbacks suppressed [ 1178.132887][T20873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.158513][ T9419] syzkaller0: entered promiscuous mode [ 1178.171297][ T9419] syzkaller0: entered allmulticast mode [ 1178.179239][T20440] lec:lec_start_xmit: lec0:No lecd attached [ 1178.365914][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9268'. [ 1178.783411][ T9445] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1178.914247][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9273'. [ 1178.965294][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9273'. [ 1179.011202][ T9449] syzkaller0: entered promiscuous mode [ 1179.033929][ T9449] syzkaller0: entered allmulticast mode [ 1179.086193][ T9450] veth0_to_team: entered promiscuous mode [ 1179.113982][ T9450] veth0_to_team: left promiscuous mode [ 1179.168122][ T9452] veth0_to_team: entered promiscuous mode [ 1179.177373][T20873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.217938][ T9452] veth0_to_team: left promiscuous mode [ 1179.277902][ T9461] lo speed is unknown, defaulting to 1000 [ 1179.417159][ T9477] netlink: 348 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1179.697453][ T9488] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9279'. [ 1180.138368][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.222731][T20873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.151554][ T9461] wg1 speed is unknown, defaulting to 1000 [ 1181.158824][ T9492] siw: device registration error -23 [ 1181.261269][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.390381][ T9558] lo speed is unknown, defaulting to 1000 [ 1182.605217][ T9576] __nla_validate_parse: 4 callbacks suppressed [ 1182.605237][ T9576] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9300'. [ 1182.733046][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9301'. [ 1182.756262][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9301'. [ 1182.850623][ T9558] wg1 speed is unknown, defaulting to 1000 [ 1182.902927][ T797] IPVS: starting estimator thread 0... [ 1182.929642][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9304'. [ 1183.022326][ T9595] IPVS: using max 29 ests per chain, 69600 per kthread [ 1183.192294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1183.200461][ C1] lec:lec_tx_timeout: lec0 [ 1183.205370][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1183.325385][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9308'. [ 1183.555901][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9311'. [ 1185.330318][ T9560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1185.604418][ T9631] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1185.619468][ T9631] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 1185.702547][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1185.737430][ T9633] netlink: 'syz.3.9318': attribute type 1 has an invalid length. [ 1185.773024][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1185.855458][ T9650] netlink: 'syz.1.9323': attribute type 1 has an invalid length. [ 1185.973013][ T9650] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1186.183784][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9326'. [ 1186.380207][ T9685] netlink: 'syz.0.9328': attribute type 39 has an invalid length. [ 1186.765053][ T9699] lo speed is unknown, defaulting to 1000 [ 1186.788652][ T9704] pim6reg: entered allmulticast mode [ 1186.888832][ T9701] lo speed is unknown, defaulting to 1000 [ 1187.108340][ T9699] wg1 speed is unknown, defaulting to 1000 [ 1187.386404][ T9701] wg1 speed is unknown, defaulting to 1000 [ 1187.494940][ T9700] pim6reg: left allmulticast mode [ 1188.212205][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1188.220282][ C1] lec:lec_tx_timeout: lec0 [ 1189.208381][ T9675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1189.416968][ T9728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.430298][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9340'. [ 1189.457528][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9338'. [ 1189.539895][ T9738] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9340'. [ 1189.619393][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9342'. [ 1189.684043][ T9735] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1189.901292][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9346'. [ 1189.933128][ T9756] netlink: 'syz.3.9347': attribute type 2 has an invalid length. [ 1189.964125][ T9756] !: entered promiscuous mode [ 1190.003598][ T9756] netlink: 'syz.3.9347': attribute type 2 has an invalid length. [ 1190.108991][ T9773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9350'. [ 1190.399149][ T9783] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.9353'. [ 1190.651900][ T9787] lo speed is unknown, defaulting to 1000 [ 1190.997071][ T9800] netlink: 'syz.2.9357': attribute type 2 has an invalid length. [ 1191.157198][ T9787] wg1 speed is unknown, defaulting to 1000 [ 1191.520168][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9362'. [ 1191.559653][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9363'. [ 1191.670141][ T9845] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.9364'. [ 1192.033908][ T9855] netlink: 'syz.0.9365': attribute type 30 has an invalid length. [ 1192.139463][ T9855] netlink: 'syz.0.9365': attribute type 30 has an invalid length. [ 1192.683399][ T9886] x_tables: duplicate underflow at hook 2 [ 1192.731234][ T9887] TCP: TCP_TX_DELAY enabled [ 1192.781279][ T9891] netlink: 'syz.0.9375': attribute type 39 has an invalid length. [ 1192.821409][ T9894] netlink: 'syz.1.9374': attribute type 21 has an invalid length. [ 1193.340830][ T9915] vlan0: entered promiscuous mode [ 1193.392619][ T9915] geneve1: entered promiscuous mode [ 1193.398057][ T9915] vlan0: entered allmulticast mode [ 1193.424126][ T9915] geneve1: entered allmulticast mode [ 1193.694886][ T9927] syzkaller0: entered promiscuous mode [ 1193.700411][ T9927] syzkaller0: entered allmulticast mode [ 1193.752918][ T9927] xt_recent: hitcount (65536) is larger than allowed maximum (65535) [ 1193.773014][ T9927] netlink: 'syz.0.9384': attribute type 1 has an invalid length. [ 1194.360909][ T9968] netlink: 'syz.3.9390': attribute type 30 has an invalid length. [ 1194.824120][ T9988] lo speed is unknown, defaulting to 1000 [ 1194.849628][ T9992] tipc: Started in network mode [ 1194.858295][ T9992] tipc: Node identity 0a1b15e30031, cluster identity 4711 [ 1194.868569][ T9992] tipc: Enabled bearer , priority 0 [ 1194.898382][ T9992] syzkaller0: entered promiscuous mode [ 1194.935496][ T9992] syzkaller0: entered allmulticast mode [ 1194.989115][T10006] __nla_validate_parse: 12 callbacks suppressed [ 1194.989132][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9399'. [ 1195.052895][T10001] tipc: Resetting bearer [ 1195.187672][T10001] tipc: Resetting bearer [ 1195.229399][T10001] tipc: Disabling bearer [ 1195.403522][ T9988] wg1 speed is unknown, defaulting to 1000 [ 1195.451999][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9405'. [ 1195.484902][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9405'. [ 1195.513414][T10027] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9405'. [ 1195.874314][T10044] netlink: 73 bytes leftover after parsing attributes in process `syz.3.9410'. [ 1195.885472][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9410'. [ 1195.912399][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9410'. [ 1196.064747][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9413'. [ 1196.563449][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9416'. [ 1196.691038][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9420'. [ 1197.676002][T10165] siw: device registration error -23 [ 1197.894120][T10174] batman_adv: batadv0: Removing interface: macvtap1 [ 1197.905617][T10185] netlink: 'syz.0.9437': attribute type 13 has an invalid length. [ 1197.941137][T10174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.061690][T10182] ip6_vti0: entered promiscuous mode [ 1198.259014][T10192] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1198.267211][T10192] syzkaller0: entered promiscuous mode [ 1198.283704][T10192] syzkaller0: entered allmulticast mode [ 1198.310676][T10165] infiniband !yz!: set down [ 1198.330731][T10165] infiniband !yz!: added team_slave_0 [ 1198.445470][T10165] RDS/IB: !yz!: added [ 1198.496342][T10165] smc: adding ib device !yz! with port count 1 [ 1198.532379][T10165] smc: ib device !yz! port 1 has no pnetid [ 1199.346550][T10248] syzkaller0: entered promiscuous mode [ 1199.369402][T10248] syzkaller0: entered allmulticast mode [ 1199.969014][T10273] netlink: 'syz.0.9460': attribute type 1 has an invalid length. [ 1200.056087][T10273] __nla_validate_parse: 4 callbacks suppressed [ 1200.056112][T10273] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1200.427089][T10286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.572259][T10289] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.9463'. [ 1200.830526][T10286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.155851][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9467'. [ 1201.210002][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9467'. [ 1201.286349][T10310] bond1: Invalid ad_actor_system MAC address. [ 1201.292667][T10310] bond1: option ad_actor_system: invalid value (7) [ 1201.314246][T10310] bond1 (unregistering): Released all slaves [ 1201.795328][T10338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9473'. [ 1202.482069][T10377] netlink: 'syz.0.9480': attribute type 1 has an invalid length. [ 1202.520243][T10377] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9480'. [ 1202.595835][T10378] lo speed is unknown, defaulting to 1000 [ 1202.638516][T10381] tipc: Enabled bearer , priority 0 [ 1202.653807][T10381] syzkaller0: entered promiscuous mode [ 1202.668016][T10381] syzkaller0: entered allmulticast mode [ 1202.762611][T10380] tipc: Resetting bearer [ 1202.867970][T10380] tipc: Disabling bearer [ 1202.932369][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9484'. [ 1202.955963][T10386] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9484'. [ 1202.978438][T10378] wg1 speed is unknown, defaulting to 1000 [ 1203.276963][T10399] lo speed is unknown, defaulting to 1000 [ 1203.354221][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9487'. [ 1203.387911][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9487'. [ 1203.569840][T10399] wg1 speed is unknown, defaulting to 1000 [ 1203.844498][T10415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1205.516464][T10475] FAULT_INJECTION: forcing a failure. [ 1205.516464][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.572316][T10475] CPU: 0 UID: 0 PID: 10475 Comm: syz.1.9502 Not tainted syzkaller #0 PREEMPT(full) [ 1205.572343][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1205.572355][T10475] Call Trace: [ 1205.572363][T10475] [ 1205.572371][T10475] dump_stack_lvl+0xe8/0x150 [ 1205.572400][T10475] should_fail_ex+0x412/0x560 [ 1205.572426][T10475] should_failslab+0xa8/0x100 [ 1205.572450][T10475] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1205.572478][T10475] ? __alloc_skb+0x186/0x7d0 [ 1205.572500][T10475] ? __alloc_skb+0x1d0/0x7d0 [ 1205.572519][T10475] ? __local_bh_enable_ip+0xd0/0x130 [ 1205.572540][T10475] __alloc_skb+0x1d0/0x7d0 [ 1205.572585][T10475] netlink_sendmsg+0x5d4/0xb40 [ 1205.572625][T10475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.572652][T10475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1205.572677][T10475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1205.572703][T10475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.572724][T10475] ____sys_sendmsg+0xa68/0xad0 [ 1205.572752][T10475] ? __might_fault+0xaf/0x130 [ 1205.572787][T10475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1205.572823][T10475] ? import_iovec+0x73/0xa0 [ 1205.572854][T10475] ___sys_sendmsg+0x2a5/0x360 [ 1205.572878][T10475] ? __lock_acquire+0x6b5/0x2cf0 [ 1205.572909][T10475] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.572972][T10475] ? __fget_files+0x2a/0x420 [ 1205.572992][T10475] ? __fget_files+0x3a0/0x420 [ 1205.573024][T10475] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1205.573054][T10475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1205.573090][T10475] ? __pfx_ksys_write+0x10/0x10 [ 1205.573129][T10475] do_syscall_64+0xe2/0xf80 [ 1205.573154][T10475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.573172][T10475] ? trace_irq_disable+0x37/0x100 [ 1205.573190][T10475] ? clear_bhb_loop+0x60/0xb0 [ 1205.573213][T10475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.573232][T10475] RIP: 0033:0x7ff17219aeb9 [ 1205.573250][T10475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.573267][T10475] RSP: 002b:00007ff172f74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.573287][T10475] RAX: ffffffffffffffda RBX: 00007ff172415fa0 RCX: 00007ff17219aeb9 [ 1205.573302][T10475] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000007 [ 1205.573314][T10475] RBP: 00007ff172f74090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.573326][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.573339][T10475] R13: 00007ff172416038 R14: 00007ff172415fa0 R15: 00007ffceeccd628 [ 1205.573371][T10475] [ 1205.906502][T10477] IPVS: length: 206 != 8 [ 1206.538293][T10503] pim6reg1: entered allmulticast mode [ 1206.943694][T10514] __nla_validate_parse: 2 callbacks suppressed [ 1206.943734][T10514] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9511'. [ 1207.000066][T10514] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1207.230039][T10527] lo speed is unknown, defaulting to 1000 [ 1207.642465][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1207.777900][T10566] mac80211_hwsim hwsim113 wlan0: entered promiscuous mode [ 1207.803598][T10566] mac80211_hwsim hwsim113 wlan0: entered allmulticast mode [ 1207.825196][T10566] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1207.852972][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1207.895577][T10527] wg1 speed is unknown, defaulting to 1000 [ 1208.388575][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9532'. [ 1208.476110][T10600] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1208.629015][T10611] openvswitch: netlink: Key type 30 is not supported [ 1208.689135][T10612] lo speed is unknown, defaulting to 1000 [ 1209.430146][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9540'. [ 1209.461521][T10649] netlink: 'syz.1.9541': attribute type 13 has an invalid length. [ 1209.557914][T10652] netlink: 'syz.4.9542': attribute type 4 has an invalid length. [ 1209.619391][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9541'. [ 1209.764645][T10662] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1209.807822][T10612] wg1 speed is unknown, defaulting to 1000 [ 1209.916378][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9543'. [ 1209.933404][T10668] FAULT_INJECTION: forcing a failure. [ 1209.933404][T10668] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.946600][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.1.9545 Not tainted syzkaller #0 PREEMPT(full) [ 1209.946623][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1209.946636][T10668] Call Trace: [ 1209.946645][T10668] [ 1209.946654][T10668] dump_stack_lvl+0xe8/0x150 [ 1209.946685][T10668] should_fail_ex+0x412/0x560 [ 1209.946713][T10668] should_failslab+0xa8/0x100 [ 1209.946738][T10668] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1209.946770][T10668] ? skb_clone+0x212/0x3a0 [ 1209.946801][T10668] skb_clone+0x212/0x3a0 [ 1209.946827][T10668] ? dev_queue_xmit_nit+0x268/0xad0 [ 1209.946855][T10668] dev_queue_xmit_nit+0x29a/0xad0 [ 1209.946881][T10668] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1209.946926][T10668] dev_hard_start_xmit+0x1c1/0x7f0 [ 1209.946979][T10668] __dev_queue_xmit+0x168f/0x3850 [ 1209.947023][T10668] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1209.947062][T10668] ? __dev_queue_xmit+0x274/0x3850 [ 1209.947100][T10668] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1209.947138][T10668] ? __copy_skb_header+0xa3/0x4a0 [ 1209.947166][T10668] ? __asan_memcpy+0x40/0x70 [ 1209.947210][T10668] ? skb_clone+0x246/0x3a0 [ 1209.947241][T10668] __netlink_deliver_tap+0x5ad/0x850 [ 1209.947287][T10668] ? netlink_deliver_tap+0x2e/0x1b0 [ 1209.947310][T10668] netlink_deliver_tap+0x19c/0x1b0 [ 1209.947332][T10668] netlink_unicast+0x7e3/0x9b0 [ 1209.947359][T10668] ? __pfx_netlink_unicast+0x10/0x10 [ 1209.947379][T10668] ? netlink_sendmsg+0x650/0xb40 [ 1209.947398][T10668] ? skb_put+0x11b/0x210 [ 1209.947424][T10668] netlink_sendmsg+0x813/0xb40 [ 1209.947455][T10668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.947480][T10668] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1209.947505][T10668] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1209.947526][T10668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.947546][T10668] ____sys_sendmsg+0xa68/0xad0 [ 1209.947571][T10668] ? __might_fault+0xaf/0x130 [ 1209.947604][T10668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.947638][T10668] ? import_iovec+0x73/0xa0 [ 1209.947668][T10668] ___sys_sendmsg+0x2a5/0x360 [ 1209.947691][T10668] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.947721][T10668] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.947781][T10668] ? __fget_files+0x2a/0x420 [ 1209.947801][T10668] ? __fget_files+0x3a0/0x420 [ 1209.947831][T10668] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1209.947858][T10668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1209.947893][T10668] ? __pfx_ksys_write+0x10/0x10 [ 1209.947930][T10668] do_syscall_64+0xe2/0xf80 [ 1209.947959][T10668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.947976][T10668] ? trace_irq_disable+0x37/0x100 [ 1209.947993][T10668] ? clear_bhb_loop+0x60/0xb0 [ 1209.948016][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.948033][T10668] RIP: 0033:0x7ff17219aeb9 [ 1209.948049][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.948064][T10668] RSP: 002b:00007ff172f74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.948083][T10668] RAX: ffffffffffffffda RBX: 00007ff172415fa0 RCX: 00007ff17219aeb9 [ 1209.948096][T10668] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000007 [ 1209.948108][T10668] RBP: 00007ff172f74090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.948119][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.948130][T10668] R13: 00007ff172416038 R14: 00007ff172415fa0 R15: 00007ffceeccd628 [ 1209.948161][T10668] [ 1210.380770][T10677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9547'. [ 1210.411646][T10677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9547'. [ 1210.514511][T10682] sctp: [Deprecated]: syz.1.9550 (pid 10682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1210.514511][T10682] Use struct sctp_sack_info instead [ 1210.636288][T10686] vlan0: entered allmulticast mode [ 1210.641490][T10686] team0: entered allmulticast mode [ 1210.647340][T10686] team_slave_0: entered allmulticast mode [ 1210.655247][T10686] team_slave_1: entered allmulticast mode [ 1210.741607][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.763824][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.804854][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.824984][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.902439][T10704] syzkaller0: entered promiscuous mode [ 1210.911250][T10704] syzkaller0: entered allmulticast mode [ 1211.019972][T10710] xt_ecn: cannot match TCP bits for non-tcp packets [ 1211.245988][T10712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.258308][T10712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.446335][T10712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.457733][T10712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.513037][T10717] netlink: 'syz.2.9557': attribute type 9 has an invalid length. [ 1211.586550][T10717] syzkaller0: entered promiscuous mode [ 1211.592600][T10717] syzkaller0: entered allmulticast mode [ 1211.623903][T10712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.634736][T10712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.315391][T10712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1213.325971][T10712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.437695][T10744] netlink: 'syz.2.9561': attribute type 1 has an invalid length. [ 1213.472828][T10744] __nla_validate_parse: 9 callbacks suppressed [ 1213.472847][T10744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9561'. [ 1213.570070][ T437] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.578860][ T437] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.614401][ T437] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.644769][ T437] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.703142][ T437] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.715119][ T437] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.807236][ T437] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.835266][ T437] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.853751][T10756] tap0: tun_chr_ioctl cmd 1074025692 [ 1214.167768][T10779] netlink: 'syz.4.9570': attribute type 10 has an invalid length. [ 1214.351128][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9571'. [ 1214.713686][T10799] syzkaller1: entered promiscuous mode [ 1214.719219][T10799] syzkaller1: entered allmulticast mode [ 1214.926284][T10810] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1215.062985][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9579'. [ 1215.126737][T10823] Bluetooth: MGMT ver 1.23 [ 1215.180729][T10823] geneve2: entered promiscuous mode [ 1215.266947][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9581'. [ 1215.296857][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9584'. [ 1215.535661][T10847] gretap1: entered promiscuous mode [ 1215.655844][T10847] veth0: left promiscuous mode [ 1215.769152][T10847] gretap1: left promiscuous mode [ 1216.104746][T10876] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9593'. [ 1216.258257][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1216.410758][T10895] syzkaller0: entered promiscuous mode [ 1216.418201][T10895] syzkaller0: entered allmulticast mode [ 1216.738561][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9592'. [ 1217.172827][T10943] netlink: 'syz.3.9606': attribute type 61 has an invalid length. [ 1217.183060][T10943] netlink: 'syz.3.9606': attribute type 62 has an invalid length. [ 1217.252548][T10940] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1217.266842][T10940] bond10: entered allmulticast mode [ 1217.296766][T10940] team0: Port device bond10 added [ 1217.386226][T10952] IPVS: length: 111 != 8 [ 1217.684399][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9613'. [ 1217.703411][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9613'. [ 1217.759094][T10970] lo speed is unknown, defaulting to 1000 [ 1217.784375][T20873] IPVS: starting estimator thread 0... [ 1217.887284][T10975] IPVS: using max 33 ests per chain, 79200 per kthread [ 1218.116668][T10970] wg1 speed is unknown, defaulting to 1000 [ 1218.832805][T11003] __nla_validate_parse: 1 callbacks suppressed [ 1218.832825][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9620'. [ 1218.853122][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9620'. [ 1219.019883][T11015] netlink: 'syz.3.9623': attribute type 19 has an invalid length. [ 1219.050268][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9623'. [ 1219.069987][T10992] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1219.095481][T11015] netlink: 'syz.3.9623': attribute type 19 has an invalid length. [ 1219.122583][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9623'. [ 1219.247756][T11017] tipc: Enabling of bearer rejected, failed to enable media [ 1219.931762][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9632'. [ 1220.003991][T11053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1220.123559][T11053] bond1: (slave batadv1): Opening slave failed [ 1220.293697][T20586] Bluetooth: hci2: command 0x0401 tx timeout [ 1220.575524][T11096] IPVS: Error connecting to the multicast addr [ 1220.793075][T20873] hid-generic 0005:0006:5508.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1220.993797][T11115] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9642'. [ 1221.028484][T11115] tipc: Enabling of bearer rejected, failed to enable media [ 1221.059421][T11115] netlink: 'syz.2.9642': attribute type 1 has an invalid length. [ 1221.174863][T11119] Bluetooth: MGMT ver 1.23 [ 1221.594014][T11147] 8021q: VLANs not supported on ip_vti0 [ 1221.714131][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9653'. [ 1221.744278][T11153] IPVS: ip_vs_add_dest(): server weight less than zero [ 1222.753246][T11232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9675'. [ 1222.772466][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9675'. [ 1222.791759][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9675'. [ 1223.612237][T11283] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 1223.927577][T11299] __nla_validate_parse: 4 callbacks suppressed [ 1223.927598][T11299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9688'. [ 1224.205881][T11307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9691'. [ 1224.951780][T11335] netlink: 'syz.2.9697': attribute type 13 has an invalid length. [ 1225.671712][ T437] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.681413][ T437] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.704893][T11363] team0: Device vlan2 is already an upper device of the team interface [ 1225.732332][T11288] Bluetooth: hci5: command 0x0405 tx timeout [ 1225.763039][ T437] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.821539][ T437] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.893913][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9702'. [ 1225.972749][T11379] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1226.022378][T11379] smc: net device geneve0 applied user defined pnetid ÐYZ0 [ 1226.122036][T11384] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1226.134531][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1226.353486][T11390] netlink: 'syz.4.9708': attribute type 13 has an invalid length. [ 1226.376698][T11390] netlink: 'syz.4.9708': attribute type 17 has an invalid length. [ 1226.621082][T11398] sctp: [Deprecated]: syz.3.9710 (pid 11398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1226.621082][T11398] Use struct sctp_sack_info instead [ 1226.637820][T11390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1226.853357][T11414] netlink: 'syz.3.9714': attribute type 10 has an invalid length. [ 1226.861647][T11414] veth0_vlan: left promiscuous mode [ 1226.874115][T11414] veth0_vlan: entered promiscuous mode [ 1226.897530][T11414] team0: Device veth0_vlan failed to register rx_handler [ 1226.999705][T11420] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9716'. [ 1227.108138][T11430] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9718'. [ 1227.425594][T11443] netlink: 'syz.3.9724': attribute type 1 has an invalid length. [ 1227.433659][T11443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9724'. [ 1227.455884][T11443] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9724'. [ 1227.826519][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9728'. [ 1227.901040][T11465] netlink: 'syz.4.9729': attribute type 11 has an invalid length. [ 1227.909124][T11465] netlink: 'syz.4.9729': attribute type 23 has an invalid length. [ 1227.988422][T11472] netlink: 'syz.3.9732': attribute type 2 has an invalid length. [ 1228.013914][T11472] netlink: 'syz.3.9732': attribute type 1 has an invalid length. [ 1228.199848][T11480] veth0: entered promiscuous mode [ 1228.205089][T11480] veth0: entered allmulticast mode [ 1228.271430][T11484] netlink: 'syz.4.9735': attribute type 1 has an invalid length. [ 1228.300234][T11486] netlink: 'syz.1.9736': attribute type 1 has an invalid length. [ 1228.363127][T11484] geneve3: entered promiscuous mode [ 1228.382369][T11484] geneve3: entered allmulticast mode [ 1228.495271][T11490] lo speed is unknown, defaulting to 1000 [ 1228.541432][T11494] lo speed is unknown, defaulting to 1000 [ 1228.723948][ T30] audit: type=1800 audit(1769943244.506:30): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9738" name="memory.events" dev="tmpfs" ino=1245 res=0 errno=0 [ 1228.978833][T11515] __nla_validate_parse: 4 callbacks suppressed [ 1228.978854][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9741'. [ 1229.004816][T11490] wg1 speed is unknown, defaulting to 1000 [ 1229.361861][T11515] veth9: entered allmulticast mode [ 1229.368177][T11494] wg1 speed is unknown, defaulting to 1000 [ 1230.036368][T11552] netlink: 'syz.3.9747': attribute type 1 has an invalid length. [ 1230.044640][T11552] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9747'. [ 1230.065149][T11552] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9747'. [ 1231.041449][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9750'. [ 1231.298965][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9753'. [ 1231.527409][T11596] vlan3: entered allmulticast mode [ 1231.543390][T11596] dummy0: entered allmulticast mode [ 1231.548978][T11596] bridge0: port 3(vlan3) entered blocking state [ 1231.562467][T11596] bridge0: port 3(vlan3) entered disabled state [ 1231.581248][T11596] vlan3: entered promiscuous mode [ 1231.592433][T11596] dummy0: entered promiscuous mode [ 1231.748554][T11601] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9754'. [ 1232.328141][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1232.430457][T11288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1232.442025][T11288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1232.451765][T11288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1232.466523][T11288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1232.474629][T11288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1232.545849][T11624] lo speed is unknown, defaulting to 1000 [ 1232.724255][T11631] lo speed is unknown, defaulting to 1000 [ 1232.747812][T11637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9762'. [ 1232.787363][T11639] netlink: 'syz.1.9763': attribute type 1 has an invalid length. [ 1232.811263][T11639] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9763'. [ 1232.821428][T11641] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9762'. [ 1232.839275][T11641] 0ªX¹¦À: renamed from caif0 [ 1232.857444][T11641] 0ªX¹¦À: entered allmulticast mode [ 1232.863517][T11641] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1233.022614][T11624] wg1 speed is unknown, defaulting to 1000 [ 1233.442696][T11658] tipc: Enabled bearer , priority 0 [ 1233.462314][T11631] wg1 speed is unknown, defaulting to 1000 [ 1233.482367][T11658] netlink: 'syz.1.9767': attribute type 9 has an invalid length. [ 1233.533102][T11658] syzkaller0: entered promiscuous mode [ 1233.538619][T11658] syzkaller0: entered allmulticast mode [ 1233.558400][T11663] tipc: Enabled bearer , priority 0 [ 1233.605396][T11658] tipc: Resetting bearer [ 1233.631303][T11663] syzkaller0: entered promiscuous mode [ 1233.641303][T11663] syzkaller0: entered allmulticast mode [ 1233.668995][T11656] tipc: Resetting bearer [ 1233.692415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.749759][T11656] tipc: Disabling bearer [ 1233.773022][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.837522][T11663] tipc: Resetting bearer [ 1233.875397][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.915453][T11662] tipc: Resetting bearer [ 1233.996652][T11662] tipc: Disabling bearer [ 1234.237205][T11689] netlink: 'syz.2.9773': attribute type 1 has an invalid length. [ 1234.245614][T11689] __nla_validate_parse: 2 callbacks suppressed [ 1234.245629][T11689] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1234.314166][T11689] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1234.459875][T11697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9775'. [ 1234.533335][T11288] Bluetooth: hci1: command tx timeout [ 1234.604116][T11624] chnl_net:caif_netlink_parms(): no params data found [ 1234.862579][T11714] tipc: Enabled bearer , priority 0 [ 1234.942000][T11717] siw: device registration error -23 [ 1235.091226][T11714] syzkaller0: entered promiscuous mode [ 1235.097856][T11714] syzkaller0: entered allmulticast mode [ 1235.104472][T11714] tipc: Resetting bearer [ 1235.241461][T11734] rdma_rxe: rxe_newlink: failed to add lo [ 1235.290014][T11726] lo speed is unknown, defaulting to 1000 [ 1235.373626][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.387544][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.396263][T11624] bridge_slave_0: entered allmulticast mode [ 1235.417405][T11624] bridge_slave_0: entered promiscuous mode [ 1235.434418][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.446388][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.458040][T11624] bridge_slave_1: entered allmulticast mode [ 1235.466627][T11624] bridge_slave_1: entered promiscuous mode [ 1235.647255][ T8041] tipc: Resetting bearer [ 1235.688567][T11726] wg1 speed is unknown, defaulting to 1000 [ 1235.697444][T11624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.715992][T11713] tipc: Resetting bearer [ 1235.733255][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1236.615074][T11288] Bluetooth: hci1: command tx timeout [ 1237.238019][T11713] tipc: Disabling bearer [ 1237.250729][T11624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.294534][T20873] tipc: Node number set to 2824691476 [ 1237.324316][T11740] lo speed is unknown, defaulting to 1000 [ 1237.339721][T11624] team0: Port device team_slave_0 added [ 1237.358460][T11624] team0: Port device team_slave_1 added [ 1237.455547][T11624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.485797][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.537519][T11624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.575652][T11624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.593020][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.620497][T11624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.688635][T11754] mac80211_hwsim hwsim114 wlan1: entered promiscuous mode [ 1237.719151][T11754] macsec1: entered promiscuous mode [ 1237.865441][T11624] hsr_slave_0: entered promiscuous mode [ 1237.885059][T11624] hsr_slave_1: entered promiscuous mode [ 1237.891427][T11624] debugfs: 'hsr0' already exists in 'hsr' [ 1237.908875][T11624] Cannot create hsr debugfs directory [ 1238.004486][T11764] syzkaller1: entered promiscuous mode [ 1238.020338][T11764] syzkaller1: entered allmulticast mode [ 1238.047300][T11740] wg1 speed is unknown, defaulting to 1000 [ 1238.694889][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9790'. [ 1238.709236][T11288] Bluetooth: hci1: command tx timeout [ 1238.807238][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9790'. [ 1238.834345][T11795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.866784][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9790'. [ 1238.973547][T11795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.289769][T11624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1239.355583][T11624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1239.422766][T11624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1239.468331][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9795'. [ 1239.507666][T11624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1239.738776][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9798'. [ 1239.760462][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9798'. [ 1239.852672][T11849] x_tables: duplicate underflow at hook 2 [ 1239.859797][T11624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.940229][T11624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.018303][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.025500][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.049363][T11851] netlink: 'syz.2.9799': attribute type 21 has an invalid length. [ 1240.061796][T11851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9799'. [ 1240.136089][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.143302][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.220914][T11624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1240.680701][T11624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.773094][T11288] Bluetooth: hci1: command tx timeout [ 1241.143156][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9808'. [ 1241.183666][T11903] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1241.519143][T11624] veth0_vlan: entered promiscuous mode [ 1241.538223][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9813'. [ 1241.586462][T11624] veth1_vlan: entered promiscuous mode [ 1241.603788][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1241.621861][T11918] netlink: 'syz.1.9813': attribute type 13 has an invalid length. [ 1241.644077][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1241.677495][T11924] netlink: 'syz.3.9814': attribute type 1 has an invalid length. [ 1241.830353][T20440] lec:lec_start_xmit: lec0:No lecd attached [ 1241.850240][T11624] veth0_macvtap: entered promiscuous mode [ 1241.915109][T11624] veth1_macvtap: entered promiscuous mode [ 1242.001959][T11624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.061303][T11624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.097641][ T1169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.128702][ T1169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.182578][ T1169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.197269][ T1169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.221301][T11946] lo speed is unknown, defaulting to 1000 [ 1242.400416][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.411392][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.563422][T11953] macsec2: entered promiscuous mode [ 1242.582995][T11953] mac80211_hwsim hwsim89 wlan1: entered promiscuous mode [ 1242.635603][T11964] netlink: 'syz.1.9822': attribute type 1 has an invalid length. [ 1242.664148][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.685707][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.801136][T11946] wg1 speed is unknown, defaulting to 1000 [ 1242.861511][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1242.871632][T11979] Cannot find set identified by id 0 to match [ 1243.063648][T11985] bridge_slave_1: left promiscuous mode [ 1243.096337][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.126933][T11985] ¾x9ÿ: left allmulticast mode [ 1243.147867][T11985] ¾x9ÿ: left promiscuous mode [ 1243.163713][T11985] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1243.423847][T20586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1243.444617][T20586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1243.459092][T20586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1243.469424][T20586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1243.477473][T20586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1243.617097][T11995] syzkaller0: entered promiscuous mode [ 1243.632896][T11995] syzkaller0: entered allmulticast mode [ 1243.950082][T11991] lo speed is unknown, defaulting to 1000 [ 1244.343295][T12028] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 1244.541873][T12035] __nla_validate_parse: 3 callbacks suppressed [ 1244.541891][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9839'. [ 1244.577654][T12028] lo speed is unknown, defaulting to 1000 [ 1244.588780][T11991] wg1 speed is unknown, defaulting to 1000 [ 1244.606955][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9839'. [ 1244.858541][ T8041] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1244.887695][ T8041] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1245.159139][ T8041] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1245.169003][ T8041] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1245.214637][ T1047] vlan3: left promiscuous mode [ 1245.219450][ T1047] dummy0: left promiscuous mode [ 1245.246992][ T1047] bridge0: port 3(vlan3) entered disabled state [ 1245.268846][ T1047] bridge_slave_1: left allmulticast mode [ 1245.277943][ T1047] bridge_slave_1: left promiscuous mode [ 1245.293044][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.313245][ T1047] bridge_slave_0: left allmulticast mode [ 1245.318935][ T1047] bridge_slave_0: left promiscuous mode [ 1245.334595][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.416055][ T1047] ip6gretap0 (unregistering): left promiscuous mode [ 1245.491462][ T1047] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 1245.513488][ T1047] ip6gretap2 (unregistering): left promiscuous mode [ 1245.530313][ T1047] ip6gretap2 (unregistering): left allmulticast mode [ 1245.572664][T11288] Bluetooth: hci6: command tx timeout [ 1245.652003][ T1047] bond7 (unregistering): (slave ip6gretap3): Releasing active interface [ 1245.851378][ T1047] gretap0 (unregistering): left promiscuous mode [ 1245.928010][ T1047] dvmrp1 (unregistering): left allmulticast mode [ 1245.959392][ T1047] tipc: Disabling bearer [ 1246.120283][ T1047] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1246.128970][ T1047] bridge1 (unregistering): left promiscuous mode [ 1246.322767][ T1047] bond0 (unregistering): left promiscuous mode [ 1246.329099][ T1047] bond_slave_0: left promiscuous mode [ 1246.336110][ T1047] bond_slave_1: left promiscuous mode [ 1246.349906][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.363109][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.379401][ T1047] bond0 (unregistering): Released all slaves [ 1246.516114][ T1047] bond1 (unregistering): Released all slaves [ 1246.619580][ T1047] bond2 (unregistering): Released all slaves [ 1246.634572][ T1047] bond3 (unregistering): Released all slaves [ 1246.641922][T12052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9842'. [ 1246.655190][ T1047] bond4 (unregistering): Released all slaves [ 1246.669204][ T1047] bond5 (unregistering): Released all slaves [ 1246.782292][ T1047] bond6 (unregistering): Released all slaves [ 1246.887902][ T1047] bond7 (unregistering): Released all slaves [ 1246.901171][ T1047] bond8 (unregistering): Released all slaves [ 1246.915330][ T1047] bond9 (unregistering): Released all slaves [ 1247.033890][ T1047] bond10 (unregistering): left allmulticast mode [ 1247.041889][ T1047] team0: Port device bond10 removed [ 1247.048762][ T1047] bond10 (unregistering): Released all slaves [ 1247.075648][T12028] wg1 speed is unknown, defaulting to 1000 [ 1247.092191][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 1247.100234][ C1] lec:lec_tx_timeout: lec0 [ 1247.105360][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1247.323601][ T1047] !: left promiscuous mode [ 1247.352005][T12058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.486743][ T1047] tipc: Left network mode [ 1247.653802][T11288] Bluetooth: hci6: command tx timeout [ 1247.727920][T12070] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9848'. [ 1247.815655][T12067] netlink: 'syz.5.9847': attribute type 12 has an invalid length. [ 1247.903434][T11991] chnl_net:caif_netlink_parms(): no params data found [ 1248.008488][T12074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1248.244038][T12086] tipc: Started in network mode [ 1248.248964][T12086] tipc: Node identity e2bec6c6431f, cluster identity 4711 [ 1248.279523][T12086] tipc: Enabled bearer , priority 0 [ 1248.365108][T12083] syzkaller0: entered promiscuous mode [ 1248.371424][T12083] syzkaller0: entered allmulticast mode [ 1248.378556][T12083] tipc: Resetting bearer [ 1248.405615][T12082] tipc: Resetting bearer [ 1249.733700][T11288] Bluetooth: hci6: command tx timeout [ 1250.071729][T12082] tipc: Disabling bearer [ 1250.116653][ T5909] tipc: Node number set to 2711733958 [ 1250.283436][T12103] lo speed is unknown, defaulting to 1000 [ 1250.294264][T12109] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9855'. [ 1250.340466][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9856'. [ 1250.403448][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9856'. [ 1250.473308][T12118] team1: entered promiscuous mode [ 1250.478396][T12118] team1: entered allmulticast mode [ 1250.484465][T12118] 8021q: adding VLAN 0 to HW filter on device team1 [ 1250.568906][T11991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.593456][T11991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.613641][T11991] bridge_slave_0: entered allmulticast mode [ 1250.637434][T11991] bridge_slave_0: entered promiscuous mode [ 1250.701906][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9858'. [ 1250.729784][T12119] team2: entered promiscuous mode [ 1250.762632][T12119] team2: entered allmulticast mode [ 1250.769606][T12119] 8021q: adding VLAN 0 to HW filter on device team2 [ 1250.815875][T11991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.837915][T11991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.855795][T11991] bridge_slave_1: entered allmulticast mode [ 1250.874903][T11991] bridge_slave_1: entered promiscuous mode [ 1250.901609][T12103] wg1 speed is unknown, defaulting to 1000 [ 1251.283728][T12131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1251.385828][T11991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.418302][T12135] gretap0: refused to change device tx_queue_len [ 1251.435792][T12135] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1251.507721][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9860'. [ 1251.528739][T11991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.689927][T12149] netlink: 27 bytes leftover after parsing attributes in process `syz.5.9861'. [ 1251.812314][T11288] Bluetooth: hci6: command tx timeout [ 1251.955400][ T1047] mac80211_hwsim hwsim89 wlan1 (unregistering): left promiscuous mode [ 1251.973408][T12160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9863'. [ 1252.046413][T11991] team0: Port device team_slave_0 added [ 1252.088113][T11991] team0: Port device team_slave_1 added [ 1252.132319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1252.140475][ C1] lec:lec_tx_timeout: lec0 [ 1252.262970][T11991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.269970][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.303174][T11991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.377902][T11991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.402949][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.449878][T12166] netlink: 'syz.4.9865': attribute type 1 has an invalid length. [ 1252.476242][T11991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.508633][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9865'. [ 1252.739351][T12172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1252.950764][T11991] hsr_slave_0: entered promiscuous mode [ 1252.995326][T11991] hsr_slave_1: entered promiscuous mode [ 1253.001667][T11991] debugfs: 'hsr0' already exists in 'hsr' [ 1253.029340][T11991] Cannot create hsr debugfs directory [ 1253.038276][T12189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9870'. [ 1253.117786][T12192] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9871'. [ 1253.838811][ T1047] hsr_slave_0: left promiscuous mode [ 1254.680129][ T1047] team_slave_1 (unregistering): left allmulticast mode [ 1254.690517][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 1254.736971][ T1047] team_slave_0 (unregistering): left allmulticast mode [ 1254.745252][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 1254.755242][T12247] smc: removing ib device !yz! [ 1255.052053][T12252] veth0: entered promiscuous mode [ 1255.060528][T12252] veth0: entered allmulticast mode [ 1255.072354][T12254] syzkaller0: entered promiscuous mode [ 1255.077870][T12254] syzkaller0: entered allmulticast mode [ 1255.378560][T12261] veth0_macvtap: mtu less than device minimum [ 1255.643405][T12265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.651047][T12265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.745599][T12265] veth0: left promiscuous mode [ 1255.750645][T12265] veth0: left allmulticast mode [ 1255.845354][T12265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.864245][T12265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.263793][T12276] netlink: 'syz.4.9886': attribute type 5 has an invalid length. [ 1256.326811][ T8042] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.343057][ T8042] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.351998][ T8042] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.370639][ T8042] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.468257][T12251] Bluetooth: hci3: command 0x0406 tx timeout [ 1256.475333][T12251] Bluetooth: hci0: command 0x0406 tx timeout [ 1256.516960][T12279] lo speed is unknown, defaulting to 1000 [ 1256.543686][T11991] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1256.723784][T12303] netlink: 'syz.5.9891': attribute type 4 has an invalid length. [ 1256.756731][T12303] netlink: 'syz.5.9891': attribute type 8 has an invalid length. [ 1256.803426][T12303] netlink: 212 bytes leftover after parsing attributes in process `syz.5.9891'. [ 1256.914589][T12311] netlink: 548 bytes leftover after parsing attributes in process `syz.4.9890'. [ 1256.958684][T11991] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1257.010154][T12299] netlink: 'syz.4.9890': attribute type 29 has an invalid length. [ 1257.057545][T12306] netlink: 'syz.4.9890': attribute type 29 has an invalid length. [ 1257.285475][T11991] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1257.481502][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9895'. [ 1257.521325][T11991] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1257.643665][T12339] bridge_slave_1: left allmulticast mode [ 1257.649362][T12339] bridge_slave_1: left promiscuous mode [ 1257.689663][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.785139][T12339] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1258.079016][T12360] netlink: 'syz.3.9900': attribute type 8 has an invalid length. [ 1258.297127][T12363] netlink: 27 bytes leftover after parsing attributes in process `syz.5.9902'. [ 1258.463893][T11991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1258.608253][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9904'. [ 1258.657593][T11991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1258.694479][T11991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1258.786967][T11991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1258.796921][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9905'. [ 1258.845439][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9905'. [ 1258.898785][ T1047] IPVS: stop unused estimator thread 0... [ 1259.018347][T12395] netlink: 'syz.5.9906': attribute type 10 has an invalid length. [ 1259.063733][T12395] team0: Cannot enslave team device to itself [ 1259.089147][T12395] netlink: 'syz.5.9906': attribute type 4 has an invalid length. [ 1259.137337][T12382] netlink: 'syz.5.9906': attribute type 4 has an invalid length. [ 1259.273582][T11991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.374670][T11991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.424422][T12239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.431662][T12239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.456406][T12407] netlink: 165 bytes leftover after parsing attributes in process `syz.5.9909'. [ 1259.466169][T12239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.473380][T12239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.511612][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.521113][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.967231][T11991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.980151][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.118698][T11991] veth0_vlan: entered promiscuous mode [ 1260.155045][T11991] veth1_vlan: entered promiscuous mode [ 1260.254061][T11991] veth0_macvtap: entered promiscuous mode [ 1260.295512][T11991] veth1_macvtap: entered promiscuous mode [ 1260.359421][T11991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.391567][T11991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.441531][ T8041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.463658][ T8041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.491003][ T8041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.556101][ T8041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.589607][T12453] ¾x9ÿ: renamed from bridge_slave_0 [ 1260.751076][T12454] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 1261.012881][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.445146][ T8041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.471842][ T8041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.578868][ T8042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.602311][ T8042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.058497][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.529507][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9940'. [ 1262.542566][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.626534][T12545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.635975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.892429][T12560] tipc: Started in network mode [ 1262.907770][T12560] tipc: Node identity 72c09b5eeb01, cluster identity 4711 [ 1262.927638][T12560] tipc: Enabled bearer , priority 0 [ 1262.968135][T12565] syzkaller0: entered promiscuous mode [ 1262.982636][T12565] syzkaller0: entered allmulticast mode [ 1263.069382][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9948'. [ 1263.095094][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.122329][T12569] netlink: 23 bytes leftover after parsing attributes in process `syz.3.9948'. [ 1263.157571][T12565] tipc: Resetting bearer [ 1263.316226][T12558] tipc: Resetting bearer [ 1263.404154][T12558] tipc: Disabling bearer [ 1264.135553][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.858488][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9963'. [ 1265.181878][ T8293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.233570][T12661] veth0: entered promiscuous mode [ 1265.242324][T12661] veth0: entered allmulticast mode [ 1265.459544][T12666] lo speed is unknown, defaulting to 1000 [ 1265.589617][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.188655][T12714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.198193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.215790][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.326177][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9979'. [ 1266.364692][T12724] netlink: 'syz.4.9979': attribute type 5 has an invalid length. [ 1266.405152][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9979'. [ 1266.497054][T12724] geneve4: entered promiscuous mode [ 1266.502800][T12724] geneve4: entered allmulticast mode [ 1266.520280][ T8041] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1266.704138][T12295] Bluetooth: hci4: command 0x0406 tx timeout [ 1266.720856][ T8041] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1266.741370][ T8041] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1266.751927][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9983'. [ 1266.762699][ T8041] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1267.252861][ T8293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.957051][T12802] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1267.982465][T12802] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1267.995187][T12802] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1268.294977][ T8293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.424574][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10001'. [ 1268.556214][T12834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10006'. [ 1268.613773][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.675334][T12845] netlink: 428 bytes leftover after parsing attributes in process `syz.3.10005'. [ 1268.707240][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10005'. [ 1268.764764][T12849] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1268.798437][T12849] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1268.878113][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1268.895931][T12859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10010'. [ 1269.209046][T12878] netlink: 'syz.3.10016': attribute type 1 has an invalid length. [ 1269.223421][T12875] netlink: 'syz.1.10015': attribute type 21 has an invalid length. [ 1269.255320][T12875] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10015'. [ 1269.306252][T12878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1269.332529][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.351145][T12887] vlan4: entered promiscuous mode [ 1269.395059][T12887] bond5: entered promiscuous mode [ 1269.400311][T12887] vlan4: entered allmulticast mode [ 1269.406961][T12887] bond5: entered allmulticast mode [ 1269.413316][T12875] netlink: 'syz.1.10015': attribute type 4 has an invalid length. [ 1269.427069][T12875] netlink: 'syz.1.10015': attribute type 3 has an invalid length. [ 1269.447676][T12875] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10015'. [ 1269.577116][T12889] lo speed is unknown, defaulting to 1000 [ 1269.736965][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.845050][T12911] bridge_slave_1: left allmulticast mode [ 1269.850843][T12911] bridge_slave_1: left promiscuous mode [ 1269.867113][T12911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.373099][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.531722][T12946] dvmrp12: entered allmulticast mode [ 1270.617514][T12944] dvmrp12: left allmulticast mode [ 1270.725660][T12961] netlink: 'syz.5.10036': attribute type 2 has an invalid length. [ 1270.815820][T12956] lo speed is unknown, defaulting to 1000 [ 1271.086910][T12972] xt_hashlimit: size too large, truncated to 1048576 [ 1271.422412][ T8293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.648878][T12989] bridge_slave_0 (unregistering): left allmulticast mode [ 1271.656381][T12989] bridge_slave_0 (unregistering): left promiscuous mode [ 1271.665374][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.832023][T12990] lo speed is unknown, defaulting to 1000 [ 1271.881286][T13004] netlink: 'syz.2.10046': attribute type 1 has an invalid length. [ 1272.284214][T13017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1272.330168][T13010] vlan2: entered promiscuous mode [ 1272.335646][T13010] bond0: entered promiscuous mode [ 1272.352253][T13010] bond_slave_0: entered promiscuous mode [ 1272.358189][T13010] bond_slave_1: entered promiscuous mode [ 1272.452479][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.581484][T13035] netlink: 'syz.4.10051': attribute type 1 has an invalid length. [ 1272.677925][T13035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1272.780762][T13035] veth5: entered promiscuous mode [ 1272.804547][T13035] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1272.853549][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.890099][T13043] bond5: (slave ip6gretap1): making interface the new active one [ 1272.909139][T13043] ip6gretap1: entered promiscuous mode [ 1272.916071][T13043] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1272.968219][T13035] erspan0: entered allmulticast mode [ 1272.990043][T13035] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 1273.039997][T13047] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1273.386045][T13066] netlink: 'syz.4.10058': attribute type 1 has an invalid length. [ 1273.447369][T13071] __nla_validate_parse: 6 callbacks suppressed [ 1273.447388][T13071] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10058'. [ 1273.493111][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.564393][T13064] veth0: entered promiscuous mode [ 1273.787241][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.796628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.815739][T13083] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1273.827016][T13083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.933814][T13092] netlink: 'syz.1.10063': attribute type 1 has an invalid length. [ 1274.093007][T13095] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10063'. [ 1274.134073][T13095] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10063'. [ 1274.231948][T13105] syzkaller0: entered promiscuous mode [ 1274.247879][T13105] syzkaller0: entered allmulticast mode [ 1274.533378][ T1920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.570056][T13123] netlink: 'syz.1.10071': attribute type 1 has an invalid length. [ 1274.587864][T13123] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10071'. [ 1274.613957][T13123] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10071'. [ 1274.626204][T13119] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10070'. [ 1274.695185][T13126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10072'. [ 1274.804828][T13126] ------------[ cut here ]------------ [ 1274.810642][T13126] wbt_init(disk) [ 1274.810663][T13126] WARNING: block/blk-wbt.c:741 at wbt_init_enable_default+0x4e/0x60, CPU#0: syz.4.10072/13126 [ 1274.825247][T13126] Modules linked in: [ 1274.830414][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.4.10072 Not tainted syzkaller #0 PREEMPT(full) [ 1274.840001][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1274.850180][T13126] RIP: 0010:wbt_init_enable_default+0x4e/0x60 [ 1274.859853][T13126] Code: ff 89 c6 e8 04 cb 31 fd 85 db 75 18 e8 bb c6 31 fd 5b e9 c5 02 09 07 cc e8 af c6 31 fd 5b c3 cc cc cc cc cc e8 a3 c6 31 fd 90 <0f> 0b 90 5b c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 1274.863535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.883280][T13126] RSP: 0018:ffffc90004adee78 EFLAGS: 00010293 [ 1274.894509][T13126] RAX: ffffffff849290ad RBX: 00000000fffffff4 RCX: ffff88801f7b1e80 [ 1274.903203][T13126] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1274.911210][T13126] RBP: 1ffff1100f872212 R08: ffffffff8fef3477 R09: 1ffffffff1fde68e [ 1274.919278][T13126] R10: dffffc0000000000 R11: fffffbfff1fde68f R12: 0000000000000000 [ 1274.927356][T13126] R13: 1ffff110052055f7 R14: ffff88807c391000 R15: ffff88802902afa8 [ 1274.935824][T13126] FS: 00007fc5ad21e6c0(0000) GS:ffff8881256ed000(0000) knlGS:0000000000000000 [ 1274.944946][T13126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1274.951568][T13126] CR2: 0000000000000000 CR3: 00000000521d0000 CR4: 00000000003526f0 [ 1274.959669][T13126] Call Trace: [ 1274.963060][T13126] [ 1274.966053][T13126] blk_register_queue+0x36a/0x3f0 [ 1274.971123][T13126] __add_disk+0x677/0xd50 [ 1274.975656][T13126] ? down_read+0x272/0x2e0 [ 1274.980127][T13126] add_disk_fwnode+0xfb/0x480 [ 1274.984913][T13126] nbd_dev_add+0x72c/0xb50 [ 1274.989380][T13126] ? __pfx_nbd_dev_add+0x10/0x10 [ 1274.994895][T13126] ? bpf_lsm_capable+0x9/0x20 [ 1274.999620][T13126] ? security_capable+0x7e/0x2c0 [ 1275.005213][T13126] ? radix_tree_lookup+0x25c/0x290 [ 1275.010382][T13126] nbd_genl_connect+0x962/0x1cf0 [ 1275.015868][T13126] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1275.021287][T13126] ? rcu_is_watching+0x15/0xb0 [ 1275.026406][T13126] ? __nla_parse+0x40/0x60 [ 1275.030883][T13126] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1275.037396][T13126] genl_family_rcv_msg_doit+0x22a/0x330 [ 1275.043034][T13126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1275.049158][T13126] ? __lock_acquire+0x6b5/0x2cf0 [ 1275.054261][T13126] genl_rcv_msg+0x61c/0x7a0 [ 1275.058816][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.063968][T13126] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1275.069449][T13126] netlink_rcv_skb+0x232/0x4b0 [ 1275.074342][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.079409][T13126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1275.084800][T13126] ? genl_rcv+0x19/0x40 [ 1275.089017][T13126] ? down_read+0x272/0x2e0 [ 1275.094378][T13126] ? genl_rcv+0xd/0x40 [ 1275.098506][T13126] genl_rcv+0x28/0x40 [ 1275.102932][T13126] netlink_unicast+0x80f/0x9b0 [ 1275.107763][T13126] ? __pfx_netlink_unicast+0x10/0x10 [ 1275.113274][T13126] ? netlink_sendmsg+0x650/0xb40 [ 1275.118253][T13126] ? skb_put+0x11b/0x210 [ 1275.122659][T13126] netlink_sendmsg+0x813/0xb40 [ 1275.127485][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.133071][T13126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1275.138061][T13126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1275.143475][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.148797][T13126] ____sys_sendmsg+0xa68/0xad0 [ 1275.153834][T13126] ? __might_fault+0xaf/0x130 [ 1275.158572][T13126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.164002][T13126] ? import_iovec+0x73/0xa0 [ 1275.168570][T13126] ___sys_sendmsg+0x2a5/0x360 [ 1275.173540][T13126] ? __lock_acquire+0x6b5/0x2cf0 [ 1275.178532][T13126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.183877][T13126] ? futex_wait+0x29a/0x380 [ 1275.188443][T13126] ? __fget_files+0x2a/0x420 [ 1275.193134][T13126] ? __fget_files+0x3a0/0x420 [ 1275.198249][T13126] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1275.203664][T13126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1275.209184][T13126] ? rcu_is_watching+0x15/0xb0 [ 1275.214158][T13126] do_syscall_64+0xe2/0xf80 [ 1275.218697][T13126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.224860][T13126] ? trace_irq_disable+0x37/0x100 [ 1275.229914][T13126] ? clear_bhb_loop+0x60/0xb0 [ 1275.234711][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.240647][T13126] RIP: 0033:0x7fc5ac39aeb9 [ 1275.245198][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.264995][T13126] RSP: 002b:00007fc5ad21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.273559][T13126] RAX: ffffffffffffffda RBX: 00007fc5ac615fa0 RCX: 00007fc5ac39aeb9 [ 1275.281566][T13126] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 1275.289675][T13126] RBP: 00007fc5ac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1275.298173][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.306642][T13126] R13: 00007fc5ac616038 R14: 00007fc5ac615fa0 R15: 00007ffef50dab48 [ 1275.314718][T13126] [ 1275.317763][T13126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1275.325067][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.4.10072 Not tainted syzkaller #0 PREEMPT(full) [ 1275.334538][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1275.344609][T13126] Call Trace: [ 1275.347898][T13126] [ 1275.350845][T13126] vpanic+0x1e0/0x670 [ 1275.354848][T13126] panic+0xc5/0xd0 [ 1275.358605][T13126] ? __pfx_panic+0x10/0x10 [ 1275.363062][T13126] __warn+0x315/0x4a0 [ 1275.367062][T13126] ? wbt_init_enable_default+0x4e/0x60 [ 1275.372564][T13126] ? wbt_init_enable_default+0x4e/0x60 [ 1275.378057][T13126] __report_bug+0x29a/0x540 [ 1275.382586][T13126] ? wbt_init_enable_default+0x4e/0x60 [ 1275.388076][T13126] ? __pfx___report_bug+0x10/0x10 [ 1275.393134][T13126] ? wbt_init_enable_default+0x4e/0x60 [ 1275.398615][T13126] report_bug+0x16a/0x220 [ 1275.402964][T13126] ? wbt_init_enable_default+0x4e/0x60 [ 1275.408446][T13126] ? wbt_init_enable_default+0x50/0x60 [ 1275.413922][T13126] handle_bug+0x98/0x200 [ 1275.418192][T13126] exc_invalid_op+0x1a/0x50 [ 1275.422716][T13126] asm_exc_invalid_op+0x1a/0x20 [ 1275.427581][T13126] RIP: 0010:wbt_init_enable_default+0x4e/0x60 [ 1275.433667][T13126] Code: ff 89 c6 e8 04 cb 31 fd 85 db 75 18 e8 bb c6 31 fd 5b e9 c5 02 09 07 cc e8 af c6 31 fd 5b c3 cc cc cc cc cc e8 a3 c6 31 fd 90 <0f> 0b 90 5b c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 1275.453287][T13126] RSP: 0018:ffffc90004adee78 EFLAGS: 00010293 [ 1275.459368][T13126] RAX: ffffffff849290ad RBX: 00000000fffffff4 RCX: ffff88801f7b1e80 [ 1275.467357][T13126] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1275.475335][T13126] RBP: 1ffff1100f872212 R08: ffffffff8fef3477 R09: 1ffffffff1fde68e [ 1275.483321][T13126] R10: dffffc0000000000 R11: fffffbfff1fde68f R12: 0000000000000000 [ 1275.491320][T13126] R13: 1ffff110052055f7 R14: ffff88807c391000 R15: ffff88802902afa8 [ 1275.499314][T13126] ? wbt_init_enable_default+0x4d/0x60 [ 1275.504810][T13126] ? wbt_init_enable_default+0x4d/0x60 [ 1275.510304][T13126] blk_register_queue+0x36a/0x3f0 [ 1275.515362][T13126] __add_disk+0x677/0xd50 [ 1275.519721][T13126] ? down_read+0x272/0x2e0 [ 1275.524166][T13126] add_disk_fwnode+0xfb/0x480 [ 1275.528877][T13126] nbd_dev_add+0x72c/0xb50 [ 1275.533320][T13126] ? __pfx_nbd_dev_add+0x10/0x10 [ 1275.538303][T13126] ? bpf_lsm_capable+0x9/0x20 [ 1275.543001][T13126] ? security_capable+0x7e/0x2c0 [ 1275.547975][T13126] ? radix_tree_lookup+0x25c/0x290 [ 1275.553113][T13126] nbd_genl_connect+0x962/0x1cf0 [ 1275.558077][T13126] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1275.563478][T13126] ? rcu_is_watching+0x15/0xb0 [ 1275.568265][T13126] ? __nla_parse+0x40/0x60 [ 1275.572718][T13126] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1275.579070][T13126] genl_family_rcv_msg_doit+0x22a/0x330 [ 1275.584635][T13126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1275.590724][T13126] ? __lock_acquire+0x6b5/0x2cf0 [ 1275.595696][T13126] genl_rcv_msg+0x61c/0x7a0 [ 1275.600225][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.605267][T13126] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1275.610675][T13126] netlink_rcv_skb+0x232/0x4b0 [ 1275.615451][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.620495][T13126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1275.625790][T13126] ? genl_rcv+0x19/0x40 [ 1275.629992][T13126] ? down_read+0x272/0x2e0 [ 1275.634476][T13126] ? genl_rcv+0xd/0x40 [ 1275.638567][T13126] genl_rcv+0x28/0x40 [ 1275.642571][T13126] netlink_unicast+0x80f/0x9b0 [ 1275.647353][T13126] ? __pfx_netlink_unicast+0x10/0x10 [ 1275.652647][T13126] ? netlink_sendmsg+0x650/0xb40 [ 1275.657600][T13126] ? skb_put+0x11b/0x210 [ 1275.661859][T13126] netlink_sendmsg+0x813/0xb40 [ 1275.666678][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.671978][T13126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1275.676936][T13126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1275.682241][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.687536][T13126] ____sys_sendmsg+0xa68/0xad0 [ 1275.692332][T13126] ? __might_fault+0xaf/0x130 [ 1275.697033][T13126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.702339][T13126] ? import_iovec+0x73/0xa0 [ 1275.706860][T13126] ___sys_sendmsg+0x2a5/0x360 [ 1275.711548][T13126] ? __lock_acquire+0x6b5/0x2cf0 [ 1275.716506][T13126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.721735][T13126] ? futex_wait+0x29a/0x380 [ 1275.726283][T13126] ? __fget_files+0x2a/0x420 [ 1275.730887][T13126] ? __fget_files+0x3a0/0x420 [ 1275.735583][T13126] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1275.740549][T13126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1275.746052][T13126] ? rcu_is_watching+0x15/0xb0 [ 1275.750831][T13126] do_syscall_64+0xe2/0xf80 [ 1275.755346][T13126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.761428][T13126] ? trace_irq_disable+0x37/0x100 [ 1275.766471][T13126] ? clear_bhb_loop+0x60/0xb0 [ 1275.771169][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.777094][T13126] RIP: 0033:0x7fc5ac39aeb9 [ 1275.781526][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.801140][T13126] RSP: 002b:00007fc5ad21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.809567][T13126] RAX: ffffffffffffffda RBX: 00007fc5ac615fa0 RCX: 00007fc5ac39aeb9 [ 1275.817566][T13126] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 1275.825554][T13126] RBP: 00007fc5ac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1275.833545][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.841535][T13126] R13: 00007fc5ac616038 R14: 00007fc5ac615fa0 R15: 00007ffef50dab48 [ 1275.849530][T13126] [ 1275.853152][T13126] Kernel Offset: disabled [ 1275.857509][T13126] Rebooting in 86400 seconds..