last executing test programs: 1m41.621520173s ago: executing program 4 (id=2818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x200000000000000}}, {0x28}}}}, 0x400) 1m41.444717974s ago: executing program 4 (id=2820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050428095a00fedb5f25010000000800017a4d6418fa1b91d2bd0d4e44f4dd08", @ANYRES32=r2, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000200040008000600", @ANYRES32=r2, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000001200)=[{{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000bc0)="8af87e1b60bd405bfd42651baae015d4674ad2bfb0cf2a8afa99aaa0cf949dcd6342ad182b71503a696d105f57100a8015f1c52d78378ca6a8cf2f2285dba5739d19b24c4546daa609e014c4f468274541760e172f379db732aca13d3b82cad0c7bbf02487ac566385af95854cf90c9b5cec965598499ebf8041837cd8474dcac2258f1422aefb9c700530c9", 0xfffffff6}, {&(0x7f0000000b00)="a69103a3a4a8c52711c5c0336648b7c9d02953c02d902912ab0fc78e921de2ee1ccd7d805eab30af06fad04154f79f338bdf0236905712ccf7163d187cc39049130b419d905fecc214a92b50f4e43d749e4c9fa04076ddd140a42b82cc87f6bfb7fc08087a808b23180c8be27176a3252e2820f88ee65a9f714ba04a5602c769e3432a19c46f1945893660146bbbfd10d54400cc997cb1e8cfcc134d8a444d90a0f116d577bcea9c9545eb189df8b02f5d70177b5427c6da6ad613b0662c1528", 0xc0}, {0x0}], 0x3, &(0x7f0000000880)=[@rights={{0x38}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred={{0x1c}}, @cred={{0x1c}}], 0x100, 0x4000890}}], 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1b, &(0x7f0000000540)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018117400", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018590000080000000000000000000000852000000100000018140000", @ANYRES32=r6, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000003a7350000800000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000cc2a010004000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x5d, &(0x7f00000006c0)=""/93, 0x40f00, 0x0, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000740)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xa, 0xa, 0xffff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x4, 0x3, 0xd, 0x2}, {0x3, 0x1, 0x10, 0x4}, {0x0, 0x4, 0x6, 0x7}, {0x4, 0x2, 0x8, 0x8}, {0x1, 0x2, 0x1, 0xc}], 0x10, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0xc, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x1, 0x8, 0x3f9a, 0x0, 0x3, 0x5}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) unshare(0x4020400) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00ebff8dc40000040023000100000000000000", @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r12}, 0x38) close(r3) 1m40.432894952s ago: executing program 4 (id=2827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000880000009500040000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffff00ff71122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.current\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, 0x1403, 0x300, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0x13}, {}, {0xfff1, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x4e, 0x5, 0x59c5}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400088c}, 0x20044804) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x4, 0xec, 0xcc, 0x1, 0x44, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0x72, 0x80}}) 1m40.276977813s ago: executing program 4 (id=2830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x400000000000000}}, {0x28}}}}, 0x400) 1m40.239149617s ago: executing program 4 (id=2831): recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x3}]}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000000)={'erspan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c0002803400038008000200070000000800010001000000080002000000000008000100070000000800010007000000080002000200000008000200e50b00000c0003"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) close(0x4) 1m39.81476222s ago: executing program 4 (id=2839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m24.805892657s ago: executing program 32 (id=2839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 15.265715295s ago: executing program 3 (id=3696): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x1010, r3, 0x11a24000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000000)=0xfffffc01) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00007afe8805b13d2bc1b2085a820c10008506", @ANYRES32=r0, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_IKEY={0x8}]}}}, @IFLA_CARRIER={0x5, 0x21, 0xea}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 14.633342991s ago: executing program 3 (id=3706): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x1, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 14.203887261s ago: executing program 3 (id=3711): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="dbae00fe10010000711014000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)="ebddfa", 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x4c880) 13.900978431s ago: executing program 3 (id=3715): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff, 0x0, 0x1000000}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 13.809276257s ago: executing program 3 (id=3716): close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYBLOB="01000000000001dcdf251700000008000300", @ANYRES32=r3, @ANYRES8=r2], 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) (async) ioctl$sock_netdev_private(r0, 0x891d, &(0x7f0000000000)="61d7f5aa3a") 13.312761226s ago: executing program 3 (id=3722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r2, 0x0, 0x0, 0x40, &(0x7f0000000400)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000000c0)={0x5, 0x1, 0x2}) 2.684137705s ago: executing program 5 (id=3845): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000980)=@newtaction={0x1cc, 0x32, 0xffffffffffffffff, 0xfffffffc, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x188, 0x1, [@m_vlan={0x184, 0x2, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbb7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff5, 0x3ff, 0x2, 0x800, 0x100}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x7fff, 0xffffffffffffffff, 0x0, 0x10001}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x904}]}, {0xf6, 0x6, "7158374c8246fdbb7d4612f7ff29b5f729a64a802f83f8c35e30c8ae41645df59c325096151f91b6e1dce0c0b77e65881ffe9349f609497970b0010b36a361af8e145da6a41f8cae5f88cacfff62003fe1eca0bf3d1819e335012004e71249aff4f5e1c465cb39282307088f59adda37195b5678b21ecfb5d86b5cfadbcc5d0367512aef407a9db8d748229627230b50cd0aab841e38c56776fdd322a37301b3c2b9a0f0f82fcc9182f4ce7678118015e21bfa4782f436d3c7a2df7886f456255870c98e29c45ef3e6192889ec59a8344b3bf4a87a5ff5f69536eab2592ee8cf5662a5e24086bb8efa134f71eb9d8e384cce"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1cc}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x8, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xa002a0, 0xc, 0x0, &(0x7f0000000800)="e178f2789b76e4074d8840d7", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x80000001, 0x3) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x5e20, 0x4821, @mcast2, 0x2}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2], &(0x7f0000000680)='syzkaller\x00', 0x2a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000, 0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10, r6}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) 1.94188744s ago: executing program 2 (id=3860): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="f1ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x8, 0x9, 0x3fb, 0x3c0fb90a, 0x7c, 0x4, 0x40}, &(0x7f0000000640)=0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000680)={r5, @in6={{0xa, 0x4e20, 0x7f, @private0, 0x400}}, [0x2000, 0xf5e, 0x1, 0x9, 0x862d, 0x2, 0x0, 0x1, 0x8000000000000000, 0xfffffffffffffff9, 0x5, 0xffffffffffffffff, 0x8001, 0x43, 0x4]}, &(0x7f0000000780)=0x100) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) (async, rerun: 32) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x8, 0x3, 0xd, @remote, @local, 0x700, 0x20, 0x3, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0xe8, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f00000000c0)) 1.801398227s ago: executing program 2 (id=3863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x38}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x20, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9d4, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xcf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0x6, 0x1, 0x2, 0xc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x71, &(0x7f0000000300)=""/113, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0xffff}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x6, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xb, 0xa}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x6}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000200), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r12 = openat$cgroup_procs(r10, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000300), 0x12) sendfile(r5, r11, 0x0, 0x10001) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001840)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r13, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='hrtimer_start\x00', r0, 0x0, 0x6}, 0x18) 1.680917569s ago: executing program 5 (id=3864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1.380462827s ago: executing program 5 (id=3866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x80, 0x80000) accept$packet(r1, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bind$ax25(r3, &(0x7f0000000400)={{0x3, @default, 0x2}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000003c0)=0x242200) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x5, 0x4, 0x9}, 0x50) 1.226463689s ago: executing program 0 (id=3867): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000140)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x5, 0x402, 0x9, 0x1}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.176953093s ago: executing program 5 (id=3868): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x34, 0x70, 0x100, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x32, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xfffffc00}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x17af7d6dea3f63a4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000003c0)=r5, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x8, [@float={0x2, 0x0, 0x0, 0x10, 0xc}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0x8, [{0xc, 0x1, 0x3}, {0x2, 0x6, 0x5f2a}, {0x7, 0x900, 0x1}, {0xd, 0x4, 0x2}, {0x4, 0x5, 0x1}, {0xa, 0xe, 0x4}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @typedef={0x1, 0x0, 0x0, 0x8, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xfd4}}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0xffffffff, [{0xc, 0x2, 0x2}, {0x6, 0x0, 0x20}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000500)=""/229, 0xe0, 0xe5, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x10000, 0xa0000000, 0xb9, 0x6080, 0xffffffffffffffff, 0x5, '\x00', r2, r6, 0x4, 0x2, 0x3, 0x8}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000700)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r3) syz_80211_join_ibss(&(0x7f0000000780)='wlan1\x00', &(0x7f00000007c0)=@default_ap_ssid, 0x6, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000840)={0x0, 0x30, 0x9, 0x401}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@bridge_delneigh={0x3c, 0x1d, 0x800, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, r2, 0x0, 0x0, 0x5}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_PROBES={0x8, 0x4, 0x7fffffff}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000980), &(0x7f00000009c0)=0xc) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f0000000a40)=0x8) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000a80)) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r10, &(0x7f0000000ac0)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x6, "9c7f3af70c5cc6ba170ac90ce97da06359425c7cff76353f93825b933f3179"}}}, 0x24) bind$802154_dgram(r9, &(0x7f0000000b00)={0x24, @none={0x0, 0xffff}}, 0x14) 1.128699798s ago: executing program 0 (id=3870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000480)=0x8) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xfee}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x254, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x81}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x21c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x150, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x144, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x130, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "f63d3c7b6977b41672bd0929c43aa38753a3409d4e9f887c154f0ed3b00236aaa921a7b8cb3b6af74d554308dbadac4edc63678f86bdf23eb701d4f95f8d8a9e07e55a08df93598cef309479ba500751259b1156252159bf64a81403631e6f323a9996fdabbafae662c3193d3953e28e74b50d3e8c2a6bd96a3877d2de7dd6c5c5c55dbf0fdc4f1f944197b149c28e7e9e09fd2c0ec6eeb17202f0c0991aa223992b0dd19266ebcebbb6d8f07c3bb63f45f72b45ddfa0d8c1055dbf528c958f898000398c0367a8dc506791efec9c0ba6dc802"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x939d337aea1a7128}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x45c}, 0x1, 0x0, 0x0, 0x40004}, 0x200080c0) (async) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r7, 0x89e3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'vcan0\x00', {0x2}}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r9, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0xf00) (async) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 932.215005ms ago: executing program 5 (id=3871): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x2c, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'}) r2 = accept(r0, &(0x7f00000002c0)=@ax25={{0x3, @netrom}, [@remote, @remote, @default, @null, @bcast, @rose, @bcast, @rose]}, &(0x7f0000000380)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x300}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000004}, 0xc0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xe8, 0x43, 0xa0, 0x198, 0x98, 0x198, 0x178, 0x178, 0x198, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0xe8, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x53) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x20, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)) 783.814099ms ago: executing program 0 (id=3873): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="f7", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 773.329928ms ago: executing program 2 (id=3874): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000003c0)={0x2}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702b20e00000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000002000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x20000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x1, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x20040015) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 688.984265ms ago: executing program 1 (id=3875): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x50) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) 623.133497ms ago: executing program 0 (id=3876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) 592.798997ms ago: executing program 1 (id=3877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x801, 0x709d2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) 460.88597ms ago: executing program 1 (id=3878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24000001) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="7800000054000100279d70080000000000000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000004006401010200000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="0101040000000000000000000000ffffac1414248edd000020000100", @ANYRES32=0x0, @ANYBLOB="010303006401010000000000000000000000000086dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x4030600) (async) unshare(0x2c020400) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @local, 0x0, "7d528fccf436166ec8e9e9560478469c8f02dabc48d384584f611eb269d6fde9", 0xffffffff, 0x5, 0x4, 0x95}, 0x3c) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8804) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) (async) r9 = openat$cgroup_devices(r5, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 452.287803ms ago: executing program 0 (id=3879): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0x1c000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x1, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x9, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000800)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x6, 'hugetlb'}]}, 0x9) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f00000000c0)="4152d371305584764e95543946ea70f27ee55e1a881f4591b2797622fd4e5786af0744e34a522c66b040d3e81c625dd0cb8bcc500ba471413d5fd794b243b87b6fbb600900ca139d13832af453f50c2a352caa3e9ce353fda0955fd03ef6e0517d7ab75d15232bc8e2f4158bdaa1251dfbc91d49f292546dfb43d0469ab2d641bb167fae", 0x84}], 0x2, 0x0, 0x0, 0x4a0f0000}, 0x0) 437.772016ms ago: executing program 2 (id=3880): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000140)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x5, 0x402, 0x9, 0x1}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 391.936954ms ago: executing program 1 (id=3881): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @empty}, 0x800}}}, &(0x7f0000000340)=0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0xfffffd3c}, 0x1, 0x0, 0x0, 0x4004804}, 0x4048050) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) unshare(0x22020400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r4, 0x11c, 0x8, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) 325.271555ms ago: executing program 2 (id=3882): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000181100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x7}}, {0x4}}]}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x7}}, {0x4}}]}]}, 0x58}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xffff, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x6, 0xe, 0x64100, r4, 0xfffffff8, '\x00', r5, r6, 0x3, 0x4, 0x5, 0xa}, 0x50) 216.861266ms ago: executing program 2 (id=3883): socket$unix(0x1, 0x1, 0x0) (async) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000400), 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x44, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x44}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4004810) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r7, 0x0, 0xa0028000}, 0x86) 194.961863ms ago: executing program 1 (id=3884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x400, 0x70bd2a, 0x25df5c01, {0x0, 0x0, 0x0, r3, 0x100, 0xa62b}, [@IFLA_PHYS_PORT_ID={0x16, 0x22, "08fbb524abf49623fb6ab4e5d88bcaeb27f5"}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x40}, 0x1, 0xba01, 0x0, 0x8000}, 0x10) 58.253691ms ago: executing program 1 (id=3885): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000140)=@can={0x1d, 0x0}, &(0x7f00000001c0)=0x80) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000001540)=@gcm_256={{0x303}, "66a33f5b28f7e1a9", "7d8cb29ca109f230aaaf8ca0a660ef4591fef8a5798e536fe2571ddaa2d73fdb", "038600", "6a6c64dce3f0632c"}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010000000000fdffffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000282112800e0001006970366772657461700000001400028006000f00000000000600ed248a1ad13b041a64a20e0000000000"], 0x48}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0xe770, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000300)="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", &(0x7f0000000240)=""/41, &(0x7f0000001300)="58031c25323e2c4e598586b3bc994401fed8fbc5571d1bad1627b4147c73977b132d168ed862ca2ef5b4eadcf5e99bb040d59f585c3f4bb1c914a5a3439b9c5a0d07e02e5fd16bcbc0b86901e3bdbeedc0f32d17adf6db3e48e8664f0a8abb827acf538716208728208f2edccbcec62a4df6990b8fe1bfe53c5e936b37d8c268a1c53f7006d25dcb800d77adbd519bfb8788bae5943d7ee5817870600d8cd02a29b010720281f2b3918afab26c290e95eb5133adcd81", &(0x7f00000013c0)="8748edd8a3b674fb23d481be069fc501a21d25cace933ffb3654801cc4ed745dba86d29282a1c864335a7c8ecfd34172985cb64cb07f235108abd4fa5202a3411d125406a60d4ad6202b41f3cd4b1a8e7cd89ce3a788c6f2ebb06679a3fca8e2a74e45d71be6165dd3e2dfdf57eb0174e1f2ecc9993deaa0ec7382feb78713f30b6260ea0ca2a76eacd1c0e524ffaa399476731638ed8de2d3733a6104155cd06a1d08933ddd16fdcf8e5946d5f594", 0x5, r4}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 434.436µs ago: executing program 0 (id=3886): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x7, r4, 0x17}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x6, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xd}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x1}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x7, r4, 0x17}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x6, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xd}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) (async) 0s ago: executing program 5 (id=3887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001f80)=ANY=[@ANYBLOB="b0130000120001000000000005000000a013"], 0x13b0}], 0x1}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r3}, 0x10) close(r1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001200)={0x60000010}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1a000, r7, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) socket(0x10, 0x80002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x101, &(0x7f0000000680)=""/257, 0x40f00, 0x48}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) kernel console output (not intermixed with test programs): process `syz.2.2193'. [ 409.184815][T14537] netlink: 'syz.3.2194': attribute type 2 has an invalid length. [ 409.361592][T14548] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2197'. [ 409.393937][T14551] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2195'. [ 409.776103][T14562] netlink: 'syz.2.2200': attribute type 10 has an invalid length. [ 409.846333][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.867111][T14565] debugfs: 'netdev:nicvf0' already exists in 'phy8' [ 409.882034][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.896180][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.986072][T14566] macvtap1: entered promiscuous mode [ 410.005315][T14566] macvtap1: entered allmulticast mode [ 410.010760][T14566] team0: entered allmulticast mode [ 410.023773][T14566] team_slave_0: entered allmulticast mode [ 410.035210][T14566] team_slave_1: entered allmulticast mode [ 410.041653][T14566] bond6: entered allmulticast mode [ 410.050303][T14575] SET target dimension over the limit! [ 410.056828][T14566] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 410.058149][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.121568][T14573] team0: left allmulticast mode [ 410.126826][T14573] team_slave_0: left allmulticast mode [ 410.142548][T14573] team_slave_1: left allmulticast mode [ 410.148298][T14573] bond6: left allmulticast mode [ 410.247861][T14583] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 410.433565][T14592] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.879467][T14620] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 410.890442][T14615] syzkaller1: entered promiscuous mode [ 410.909397][T14615] syzkaller1: entered allmulticast mode [ 411.070151][T14626] netlink: 'syz.4.2217': attribute type 2 has an invalid length. [ 411.116748][T14626] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 411.118595][T14628] SET target dimension over the limit! [ 411.253704][T14635] xt_bpf: check failed: parse error [ 411.342451][T14637] wg1 speed is unknown, defaulting to 1000 [ 411.390396][T14639] syz_tun: entered allmulticast mode [ 411.454542][T14639] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 411.495396][T14636] syz_tun: left allmulticast mode [ 411.729844][T14658] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 411.961761][T14674] SET target dimension over the limit! [ 412.117073][T14682] xt_bpf: check failed: parse error [ 412.555348][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 412.568524][ T12] bond0: (slave bond_slave_0): interface is now down [ 412.580793][T14697] bond0: left promiscuous mode [ 412.587636][T14697] bond_slave_0: left promiscuous mode [ 412.597279][T14714] bond0: (slave bond_slave_0): interface is now down [ 412.601328][T14697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.615451][ T49] bond0: (slave bond_slave_0): interface is now down [ 412.624763][T14697] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.637066][ T49] bond0: (slave bond_slave_0): interface is now down [ 412.663244][T14697] batman_adv: batadv0: Interface activated: dummy0 [ 412.669701][T14724] __nla_validate_parse: 8 callbacks suppressed [ 412.669725][T14724] netlink: 69 bytes leftover after parsing attributes in process `syz.3.2240'. [ 412.671450][ T49] bond0: (slave bond_slave_0): interface is now down [ 412.700614][T14697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.718864][ T60] bond0: (slave bond_slave_0): interface is now down [ 412.736761][ T49] bond0: (slave bond_slave_0): interface is now down [ 412.761410][ T49] bond0: now running without any active interface! [ 412.861764][T14704] wg1 speed is unknown, defaulting to 1000 [ 413.068542][T14733] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 413.221014][T14746] IPVS: set_ctl: invalid protocol: 59 172.20.20.18:20000 [ 413.513851][T14770] wg1 speed is unknown, defaulting to 1000 [ 413.610546][T14776] syzkaller0: left promiscuous mode [ 413.618286][T14776] syzkaller0: left allmulticast mode [ 414.427563][T14815] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.448623][T14815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.504159][T14820] tipc: Enabling of bearer rejected, failed to enable media [ 414.731797][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2265'. [ 414.900447][T14857] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 415.050058][T14866] netlink: 'syz.2.2276': attribute type 11 has an invalid length. [ 415.277235][T14881] validate_nla: 3 callbacks suppressed [ 415.277258][T14881] netlink: 'syz.3.2279': attribute type 13 has an invalid length. [ 415.295702][T14881] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2279'. [ 415.991597][T14888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2282'. [ 416.387258][T14910] wg1 speed is unknown, defaulting to 1000 [ 416.651101][T14925] team0: left allmulticast mode [ 416.657221][T14925] team_slave_0: left allmulticast mode [ 416.662842][T14925] team_slave_1: left allmulticast mode [ 416.669173][T14925] team0: left promiscuous mode [ 416.674148][T14925] team_slave_0: left promiscuous mode [ 416.681781][T14925] team_slave_1: left promiscuous mode [ 416.688404][T14925] bridge0: port 3(team0) entered disabled state [ 416.706600][T14925] batman_adv: batadv0: Interface deactivated: dummy0 [ 416.714244][T14925] batman_adv: batadv0: Removing interface: dummy0 [ 416.740000][T14925] bridge_slave_0: left allmulticast mode [ 416.749601][T14925] bridge_slave_0: left promiscuous mode [ 416.756103][T14925] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.773174][T14925] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.794051][T14925] bond0: (slave bond_slave_0): Releasing backup interface [ 416.814738][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 416.847894][T14925] team0: Port device team_slave_0 removed [ 416.867859][T14925] team0: Port device team_slave_1 removed [ 416.874255][T14925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.883312][T14925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.893320][T14925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 417.004863][T14927] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 417.635887][T14970] erspan0: left allmulticast mode [ 417.723463][T14976] xt_bpf: check failed: parse error [ 417.865928][T14970] 0ªX¹¦À: left allmulticast mode [ 417.883791][T14970] batadv1: left promiscuous mode [ 417.889133][T14970] batadv1: left allmulticast mode [ 417.894503][T14970] tipc: Resetting bearer [ 417.910308][T14970] bond2: left promiscuous mode [ 417.915728][T14970] bridge0: left promiscuous mode [ 417.946250][T14970] bond5: left promiscuous mode [ 417.967782][T14970] team0: left allmulticast mode [ 417.972898][T14970] geneve0: left allmulticast mode [ 417.978953][T14970] macvtap2: left promiscuous mode [ 417.984232][T14970] macvtap2: left allmulticast mode [ 418.023186][T14968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.034590][T14968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.123356][T14968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.136109][T14968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.247447][T14968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.259838][T14968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.353664][T14968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.364931][T14968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.451283][T14999] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2312'. [ 418.487423][T14712] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.500456][T14712] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.526834][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.541326][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.565057][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.583494][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.612517][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 418.625118][ T9085] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.639043][ T9085] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.685649][T14999] wg1 speed is unknown, defaulting to 1000 [ 418.714943][T15012] xt_bpf: check failed: parse error [ 419.123913][T15035] Cannot find add_set index 0 as target [ 419.252921][T15041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2325'. [ 419.338266][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 419.347097][T15046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2328'. [ 419.348126][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'. [ 419.376749][T14712] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.376852][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 419.401766][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'. [ 419.411889][T14712] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.421622][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2328'. [ 419.564750][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 420.915990][T14712] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.924424][T14712] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.063523][T15055] wg1 speed is unknown, defaulting to 1000 [ 421.186896][T15056] wg1 speed is unknown, defaulting to 1000 [ 421.279703][T15087] SET target dimension over the limit! [ 421.408330][T15089] wg1 speed is unknown, defaulting to 1000 [ 421.528084][T15101] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 422.275884][T15141] netlink: 'syz.4.2353': attribute type 2 has an invalid length. [ 422.288461][T15139] netlink: 'syz.4.2353': attribute type 2 has an invalid length. [ 422.638782][T15162] !: renamed from dummy0 [ 422.806684][T15175] Cannot find add_set index 0 as target [ 422.815894][T15171] wg1 speed is unknown, defaulting to 1000 [ 423.387067][T15201] Bluetooth: MGMT ver 1.23 [ 423.505741][T15206] __nla_validate_parse: 5 callbacks suppressed [ 423.505761][T15206] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2370'. [ 423.517599][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2369'. [ 423.556016][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 423.658190][T15213] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 424.218214][T15242] SET target dimension over the limit! [ 424.507430][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'. [ 424.863140][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2382'. [ 424.939402][T15268] wg1 speed is unknown, defaulting to 1000 [ 425.022759][T15273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2384'. [ 425.049215][T15273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2384'. [ 425.093838][T15273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2384'. [ 425.144489][T15273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2384'. [ 425.430181][T15281] tipc: Enabling of bearer rejected, already enabled [ 425.587641][T15285] Cannot find add_set index 0 as target [ 425.922682][T15301] wg1 speed is unknown, defaulting to 1000 [ 425.993093][T15306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2395'. [ 426.095452][ T8485] lec:lec_start_xmit: lec0:No lecd attached [ 426.478421][T15326] Cannot find add_set index 0 as target [ 427.273604][T15368] tipc: New replicast peer: 255.255.255.255 [ 427.285936][T15368] tipc: Enabled bearer , priority 10 [ 427.442765][T15376] Cannot find add_set index 0 as target [ 427.552732][T15378] syzkaller1: entered promiscuous mode [ 427.560929][T15378] syzkaller1: entered allmulticast mode [ 427.972615][T15400] wg1 speed is unknown, defaulting to 1000 [ 428.020938][T15403] netlink: 'syz.2.2418': attribute type 9 has an invalid length. [ 428.127758][T15409] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 428.478975][T15403] can: request_module (can-proto-0) failed. [ 428.587935][T15425] SET target dimension over the limit! [ 428.723425][T15421] wg1 speed is unknown, defaulting to 1000 [ 429.137557][T15441] __nla_validate_parse: 5 callbacks suppressed [ 429.137578][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 429.216622][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 429.527922][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 429.565947][T15453] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 429.712735][T15457] wg1 speed is unknown, defaulting to 1000 [ 429.967296][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2435'. [ 430.086211][ T30] audit: type=1800 audit(1760136983.239:5): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2436" name="memory.events" dev="tmpfs" ino=2498 res=0 errno=0 [ 430.291640][T15480] Cannot find add_set index 0 as target [ 430.573988][T15491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'. [ 430.762348][T15496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2445'. [ 430.783760][T15498] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 430.807915][T15498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2447'. [ 430.950225][T15506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2448'. [ 430.959986][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 431.098602][T15512] SET target dimension over the limit! [ 431.227771][T15522] wg1 speed is unknown, defaulting to 1000 [ 431.262362][T15526] tipc: Enabling of bearer rejected, already enabled [ 431.422555][T15532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2456'. [ 431.741075][T15548] wg1 speed is unknown, defaulting to 1000 [ 431.915073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 431.923166][ C1] lec:lec_tx_timeout: lec0 [ 432.077138][T15555] xt_l2tp: missing protocol rule (udp|l2tpip) [ 432.094818][T15561] SET target dimension over the limit! [ 432.211921][T15564] xt_l2tp: missing protocol rule (udp|l2tpip) [ 432.740192][T15589] netlink: 'syz.1.2473': attribute type 1 has an invalid length. [ 432.753634][T15589] netlink: 'syz.1.2473': attribute type 4 has an invalid length. [ 432.757748][T15591] netlink: 'syz.3.2474': attribute type 12 has an invalid length. [ 432.801340][T15593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 432.837099][T15593] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 432.844832][T15593] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 432.920153][T15603] ip6gre1: entered allmulticast mode [ 433.238579][T15620] tipc: Enabling of bearer rejected, failed to enable media [ 433.321209][T15621] wg1 speed is unknown, defaulting to 1000 [ 433.338833][T15614] wg1 speed is unknown, defaulting to 1000 [ 433.467701][T15634] netlink: 'syz.0.2486': attribute type 3 has an invalid length. [ 433.781587][T15647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 434.161007][T15645] __nla_validate_parse: 13 callbacks suppressed [ 434.161031][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 434.209953][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 434.288717][T15668] Cannot find add_set index 0 as target [ 434.484132][T15680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2501'. [ 434.511992][T15682] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2502'. [ 434.605161][T15687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 434.617342][T15689] syzkaller1: entered promiscuous mode [ 434.622969][T15689] syzkaller1: entered allmulticast mode [ 434.676996][T15695] netlink: 'syz.4.2507': attribute type 30 has an invalid length. [ 434.747577][T15697] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2505'. [ 434.791945][T15694] Can't find ip_set type hash:ip$mec [ 434.947117][T15715] Cannot find add_set index 0 as target [ 435.034812][T15717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'. [ 435.065923][T15721] netlink: 'syz.3.2513': attribute type 1 has an invalid length. [ 435.081319][T15721] netlink: 9864 bytes leftover after parsing attributes in process `syz.3.2513'. [ 435.090741][T15720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2514'. [ 435.261034][T15735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2519'. [ 435.271482][T15735] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 435.537209][T15750] SET target dimension over the limit! [ 435.653072][T15753] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 436.169047][T15778] netlink: 'syz.0.2532': attribute type 10 has an invalid length. [ 436.242277][T15778] €Â: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 436.288124][T15786] : renamed from veth0_to_bond [ 437.263588][T15825] tipc: Can't bind to reserved service type 0 [ 437.768956][T15860] sch_fq: defrate 0 ignored. [ 437.795661][T15861] wg1: entered promiscuous mode [ 437.800707][T15861] wg1: entered allmulticast mode [ 437.832943][T15859] IPVS: set_ctl: invalid protocol: 47308 0.0.0.0:20000 [ 438.348772][T15890] netlink: 'syz.0.2564': attribute type 5 has an invalid length. [ 438.358311][T15890] netlink: 'syz.0.2564': attribute type 5 has an invalid length. [ 438.518728][T15895] netlink: 'syz.0.2566': attribute type 10 has an invalid length. [ 438.664571][T15906] vxcan1: entered allmulticast mode [ 438.702071][T14711] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.721684][T14711] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.740761][T14711] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.781838][T14711] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.843077][T15909] wg1 speed is unknown, defaulting to 1000 [ 438.881778][T15915] SET target dimension over the limit! [ 439.009488][T15913] wg1 speed is unknown, defaulting to 1000 [ 439.217668][T15939] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 439.460178][T15943] wg1 speed is unknown, defaulting to 1000 [ 439.538316][T15946] tipc: Enabled bearer , priority 0 [ 439.551801][T15949] syzkaller0: entered promiscuous mode [ 439.558607][T15949] syzkaller0: entered allmulticast mode [ 440.018539][T15964] SET target dimension over the limit! [ 440.046982][T15967] netlink: 'syz.4.2590': attribute type 66 has an invalid length. [ 440.353531][T15985] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 442.848078][T15997] syz_tun: entered allmulticast mode [ 442.868948][T15998] __nla_validate_parse: 11 callbacks suppressed [ 442.868968][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 442.892353][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 442.996827][T15996] syz_tun: left allmulticast mode [ 443.127783][T16003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2597'. [ 443.241030][T16010] wg1 speed is unknown, defaulting to 1000 [ 443.380809][T16024] Cannot find add_set index 0 as target [ 443.401984][T16019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2600'. [ 443.471635][T16019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2600'. [ 443.690197][T16020] wg1 speed is unknown, defaulting to 1000 [ 443.712060][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2605'. [ 443.799960][T16037] vlan0: entered promiscuous mode [ 444.508029][T16061] wg1 speed is unknown, defaulting to 1000 [ 444.532433][T16064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2610'. [ 444.867686][T16075] SET target dimension over the limit! [ 445.129532][T16086] SET target dimension over the limit! [ 445.202939][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 445.410488][T16097] wg1 speed is unknown, defaulting to 1000 [ 445.570269][T16039] syzkaller1: entered promiscuous mode [ 445.585685][T16039] syzkaller1: entered allmulticast mode [ 446.098861][T16111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2622'. [ 446.212286][T16124] SET target dimension over the limit! [ 446.262852][T16117] bond11: entered promiscuous mode [ 446.269560][T16117] bond11: entered allmulticast mode [ 446.277050][T16117] 8021q: adding VLAN 0 to HW filter on device bond11 [ 446.469831][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2630'. [ 446.497020][T16133] block nbd2: server does not support multiple connections per device. [ 446.505872][T16133] block nbd2: shutting down sockets [ 446.784751][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 447.839206][T16221] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.894139][T16223] __nla_validate_parse: 3 callbacks suppressed [ 447.894158][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2665'. [ 447.969660][T16221] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.049291][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'. [ 448.088782][T16221] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.126998][T16233] xt_CT: No such helper "syz1" [ 448.173122][T16221] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.253398][T14712] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.328500][T14712] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.356318][T14712] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.374893][T14712] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.691974][T16254] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 448.977750][T16261] tipc: Enabling of bearer rejected, already enabled [ 449.193366][T16269] Unsupported ieee802154 address type: 0 [ 449.203713][T16263] wg1 speed is unknown, defaulting to 1000 [ 449.554431][T16277] wg1 speed is unknown, defaulting to 1000 [ 449.743070][T16286] Cannot find add_set index 0 as target [ 449.756674][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 449.868505][T16289] siw: device registration error -23 [ 450.158443][T16302] wg1 speed is unknown, defaulting to 1000 [ 450.159182][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2678'. [ 450.651472][T16327] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.2684'. [ 450.875229][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 450.883306][ C1] lec:lec_tx_timeout: lec0 [ 450.913421][T16339] Cannot find add_set index 0 as target [ 450.979515][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 451.028042][T16334] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2684'. [ 451.168353][T16350] xt_bpf: check failed: parse error [ 451.308798][T16348] wg1 speed is unknown, defaulting to 1000 [ 451.880577][T16370] tc_dump_action: action bad kind [ 451.950513][T16378] SET target dimension over the limit! [ 452.079773][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 452.118080][T16386] xt_bpf: check failed: parse error [ 452.373492][T16406] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2709'. [ 452.409038][T16406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2709'. [ 452.600274][T16418] SET target dimension over the limit! [ 452.636563][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 452.663268][T16414] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 452.748297][T16414] bond13 (unregistering): Released all slaves [ 452.843735][T16422] netlink: 'syz.3.2712': attribute type 1 has an invalid length. [ 452.917718][T16427] __nla_validate_parse: 1 callbacks suppressed [ 452.917738][T16427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2715'. [ 453.227849][ T5841] block nbd2: Receive control failed (result -32) [ 453.268827][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 453.278160][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 453.288615][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 453.427937][T16440] xt_bpf: check failed: parse error [ 453.519841][T16441] wg1 speed is unknown, defaulting to 1000 [ 453.571720][T16446] netlink: 'syz.1.2721': attribute type 4 has an invalid length. [ 453.703673][T16451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2723'. [ 453.716016][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'. [ 453.809801][T16457] SET target dimension over the limit! [ 454.387339][T16437] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 454.431047][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 454.639064][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 454.675579][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2728'. [ 454.759005][T16468] 8021q: adding VLAN 0 to HW filter on device bond13 [ 454.788954][T16478] netlink: 'syz.2.2731': attribute type 17 has an invalid length. [ 454.836149][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'. [ 454.911576][T16480] 8021q: adding VLAN 0 to HW filter on device bond13 [ 454.929007][T16480] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 454.949228][T16480] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 455.074299][T16492] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.128353][T16492] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.162699][T16497] SET target dimension over the limit! [ 455.169068][T16492] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.250324][ T49] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.271318][T16486] wg1 speed is unknown, defaulting to 1000 [ 455.279796][ T49] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.306286][ T49] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.374020][T16492] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.396546][T16492] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.418681][T16492] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.460718][ T49] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.544461][T16492] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.562813][T16492] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.582466][T16492] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.681554][T16512] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 455.724798][T16520] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 455.725962][T16512] CPU: 0 UID: 0 PID: 16512 Comm: syz.2.2740 Not tainted syzkaller #0 PREEMPT(full) [ 455.725994][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.726014][T16512] Call Trace: [ 455.726024][T16512] [ 455.726035][T16512] dump_stack_lvl+0x189/0x250 [ 455.726072][T16512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.726099][T16512] ? __pfx__printk+0x10/0x10 [ 455.726133][T16512] ? kernfs_path_from_node+0x2f/0x290 [ 455.726162][T16512] ? kernfs_path_from_node+0x250/0x290 [ 455.726190][T16512] ? kernfs_path_from_node+0x2f/0x290 [ 455.726226][T16512] sysfs_warn_dup+0x8e/0xa0 [ 455.726255][T16512] sysfs_do_create_link_sd+0xc0/0x110 [ 455.726289][T16512] device_add_class_symlinks+0x1cf/0x240 [ 455.726333][T16512] device_add+0x475/0xb50 [ 455.726377][T16512] wiphy_register+0x1c81/0x2aa0 [ 455.726435][T16512] ? __pfx_wiphy_register+0x10/0x10 [ 455.726466][T16512] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 455.726501][T16512] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 455.726546][T16512] ieee80211_register_hw+0x3473/0x40d0 [ 455.726591][T16512] ? ieee80211_register_hw+0x14a1/0x40d0 [ 455.726628][T16512] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 455.726650][T16512] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 455.726685][T16512] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 455.726712][T16512] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 455.726751][T16512] ? __hrtimer_setup+0x187/0x210 [ 455.726784][T16512] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 455.726824][T16512] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 455.726895][T16512] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 455.726922][T16512] ? trace_kmalloc+0x1f/0xd0 [ 455.726952][T16512] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 455.726988][T16512] ? kstrndup+0xbf/0x160 [ 455.727028][T16512] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 455.727066][T16512] ? __pfx___nla_validate_parse+0x10/0x10 [ 455.727120][T16512] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 455.727160][T16512] ? rcu_is_watching+0x15/0xb0 [ 455.727192][T16512] ? __nla_parse+0x40/0x60 [ 455.727228][T16512] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 455.727276][T16512] genl_family_rcv_msg_doit+0x212/0x300 [ 455.727320][T16512] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 455.727372][T16512] ? bpf_lsm_capable+0x9/0x20 [ 455.727401][T16512] ? security_capable+0x7e/0x2e0 [ 455.727442][T16512] genl_rcv_msg+0x60e/0x790 [ 455.727484][T16512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.727521][T16512] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 455.727569][T16512] netlink_rcv_skb+0x205/0x470 [ 455.727593][T16512] ? __lock_acquire+0xab9/0xd20 [ 455.727616][T16512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.727651][T16512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.727704][T16512] ? down_read+0x1ad/0x2e0 [ 455.727743][T16512] genl_rcv+0x28/0x40 [ 455.727781][T16512] netlink_unicast+0x82f/0x9e0 [ 455.727832][T16512] ? __pfx_netlink_unicast+0x10/0x10 [ 455.727874][T16512] ? netlink_sendmsg+0x642/0xb30 [ 455.727898][T16512] ? skb_put+0x11b/0x210 [ 455.727928][T16512] netlink_sendmsg+0x805/0xb30 [ 455.727968][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.728000][T16512] ? aa_sock_msg_perm+0xf1/0x1d0 [ 455.728035][T16512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.728058][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.728086][T16512] __sock_sendmsg+0x21c/0x270 [ 455.728126][T16512] ____sys_sendmsg+0x505/0x830 [ 455.728165][T16512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.728206][T16512] ? import_iovec+0x74/0xa0 [ 455.728236][T16512] ___sys_sendmsg+0x21f/0x2a0 [ 455.728268][T16512] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.728349][T16512] ? __fget_files+0x2a/0x420 [ 455.728371][T16512] ? __fget_files+0x3a0/0x420 [ 455.728408][T16512] __x64_sys_sendmsg+0x19b/0x260 [ 455.728441][T16512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.728494][T16512] ? do_syscall_64+0xbe/0xfa0 [ 455.728529][T16512] do_syscall_64+0xfa/0xfa0 [ 455.728559][T16512] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.728587][T16512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.728610][T16512] ? clear_bhb_loop+0x60/0xb0 [ 455.728642][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.728665][T16512] RIP: 0033:0x7feae218eec9 [ 455.728688][T16512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.728709][T16512] RSP: 002b:00007feae03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.728735][T16512] RAX: ffffffffffffffda RBX: 00007feae23e6180 RCX: 00007feae218eec9 [ 455.728760][T16512] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 455.728776][T16512] RBP: 00007feae2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.728790][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.728805][T16512] R13: 00007feae23e6218 R14: 00007feae23e6180 R15: 00007ffdfd289518 [ 455.728849][T16512] [ 456.256418][T16492] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.268141][T16492] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 456.278298][T16492] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.372879][T16509] wg1 speed is unknown, defaulting to 1000 [ 456.506911][T14714] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.516441][T14714] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.524914][T14714] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.542200][T16527] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 456.549531][T16527] syzkaller1: linktype set to 778 [ 456.664404][T14711] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.685017][T14711] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.709104][T14711] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.745802][T14711] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.754054][T14711] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.787158][T14711] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.818939][T16536] netlink: 'syz.3.2749': attribute type 1 has an invalid length. [ 457.040532][T14714] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.051201][T14714] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.093543][T14714] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.488577][T16550] netlink: 'syz.3.2751': attribute type 6 has an invalid length. [ 457.689495][T16565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 457.709837][T16563] syzkaller1: entered promiscuous mode [ 457.717030][T16563] syzkaller1: entered allmulticast mode [ 457.747046][T16564] netlink: 'syz.1.2756': attribute type 13 has an invalid length. [ 457.784495][T16563] netlink: 'syz.1.2756': attribute type 13 has an invalid length. [ 457.801932][T16564] netlink: 'syz.1.2756': attribute type 17 has an invalid length. [ 457.802762][T16563] netlink: 'syz.1.2756': attribute type 17 has an invalid length. [ 458.022321][T16564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.063638][T16563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.088061][T16580] syzkaller0: left promiscuous mode [ 458.093685][T16580] syzkaller0: left allmulticast mode [ 458.139657][T16574] __nla_validate_parse: 6 callbacks suppressed [ 458.139675][T16574] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2758'. [ 458.539626][T16593] wg1 speed is unknown, defaulting to 1000 [ 458.674250][T16610] netlink: 'syz.1.2766': attribute type 1 has an invalid length. [ 458.717452][T16615] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2767'. [ 458.916644][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 458.958998][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 459.232879][T16640] macvtap1: entered promiscuous mode [ 459.239378][T16640] macvtap1: entered allmulticast mode [ 459.244797][T16640] team0: entered allmulticast mode [ 459.260179][T16640] team_slave_1: entered allmulticast mode [ 459.267930][T16640] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 459.286452][T16640] team0: left allmulticast mode [ 459.292335][T16640] team_slave_1: left allmulticast mode [ 459.444026][T16654] syzkaller1: entered promiscuous mode [ 459.462054][T16654] syzkaller1: entered allmulticast mode [ 459.507484][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2781'. [ 459.609443][T16672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2783'. [ 459.697973][T16676] wg1 speed is unknown, defaulting to 1000 [ 459.820263][T16680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2784'. [ 460.200519][T16707] lo speed is unknown, defaulting to 1000 [ 460.209627][T16707] lo speed is unknown, defaulting to 1000 [ 460.216899][T16707] lo speed is unknown, defaulting to 1000 [ 460.239356][T16707] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 460.280933][T16707] lo speed is unknown, defaulting to 1000 [ 460.289746][T16715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2793'. [ 460.298511][T16707] lo speed is unknown, defaulting to 1000 [ 460.309311][T16707] lo speed is unknown, defaulting to 1000 [ 460.317427][T16707] lo speed is unknown, defaulting to 1000 [ 460.324582][T16707] lo speed is unknown, defaulting to 1000 [ 460.488706][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2795'. [ 460.831597][T16724] netlink: 'syz.1.2796': attribute type 1 has an invalid length. [ 460.983101][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 461.103285][T16742] syzkaller0: entered promiscuous mode [ 461.109740][T16742] syzkaller0: entered allmulticast mode [ 461.227060][T16748] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 461.569789][T16771] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 461.634757][T16778] netlink: 'syz.0.2813': attribute type 50 has an invalid length. [ 461.677523][T16778] tipc: Enabled bearer , priority 0 [ 461.704653][T16778] syzkaller0: entered promiscuous mode [ 461.725144][T16778] syzkaller0: entered allmulticast mode [ 461.883571][T16776] tipc: Resetting bearer [ 461.907282][T16776] tipc: Disabling bearer [ 461.968299][T16790] wg1 speed is unknown, defaulting to 1000 [ 461.970122][T16795] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 462.025844][T16790] lo speed is unknown, defaulting to 1000 [ 462.901640][T16835] wg1 speed is unknown, defaulting to 1000 [ 462.909473][T16835] lo speed is unknown, defaulting to 1000 [ 463.251264][T16842] __nla_validate_parse: 13 callbacks suppressed [ 463.251284][T16842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2828'. [ 463.320011][T16844] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2829'. [ 463.424440][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 463.509200][T16854] netlink: 'syz.4.2831': attribute type 1 has an invalid length. [ 463.518955][T16854] netlink: 'syz.4.2831': attribute type 6 has an invalid length. [ 463.550618][T16854] netlink: 'syz.4.2831': attribute type 3 has an invalid length. [ 463.771246][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 463.944850][T16878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2837'. [ 464.158760][T16884] wg1 speed is unknown, defaulting to 1000 [ 464.160103][T16891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2842'. [ 464.217058][T16884] lo speed is unknown, defaulting to 1000 [ 464.262201][T16891] ip6gretap0: entered promiscuous mode [ 464.278178][T16894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2842'. [ 464.288355][T16891] macsec2: entered promiscuous mode [ 464.403926][T16893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2843'. [ 464.746349][T16906] bond0: (slave gretap0): Error: Device type is different from other slaves [ 464.753533][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 464.784885][T16913] vxcan1 (unregistering): left allmulticast mode [ 465.084024][T16928] dvmrp1: entered allmulticast mode [ 465.100720][T16925] vlan5: entered promiscuous mode [ 465.110186][T16925] !: entered promiscuous mode [ 465.196926][T16934] dvmrp1: left allmulticast mode [ 465.316868][T16935] wg1 speed is unknown, defaulting to 1000 [ 465.324588][T16935] lo speed is unknown, defaulting to 1000 [ 465.500211][T16948] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 465.510933][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2858'. [ 465.704556][T16960] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 465.788671][T16958] wg1 speed is unknown, defaulting to 1000 [ 465.797957][T16958] lo speed is unknown, defaulting to 1000 [ 465.989978][T16973] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 467.104449][T17002] tipc: Enabling of bearer rejected, already enabled [ 467.334413][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.350667][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.368911][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.388948][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.417907][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.558532][T17006] wg1 speed is unknown, defaulting to 1000 [ 467.567563][T17006] lo speed is unknown, defaulting to 1000 [ 467.621230][T17014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.633918][T17014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.882243][T17023] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 467.894846][T17023] bond7 (unregistering): Released all slaves [ 468.037002][ T9085] bond4: left allmulticast mode [ 468.042102][ T9085] bond4: left promiscuous mode [ 468.069523][ T9085] bridge0: port 4(bond4) entered disabled state [ 468.139227][ T9085] tipc: Resetting bearer [ 468.418710][ T9085] bond3 (unregistering): (slave gretap1): Releasing active interface [ 468.746995][ T9085] tipc: Disabling bearer [ 468.907849][ T9085] bond0 (unregistering): Released all slaves [ 468.923034][ T9085] bond1 (unregistering): Released all slaves [ 469.018724][ T9085] bond2 (unregistering): Released all slaves [ 469.033200][ T9085] bond3 (unregistering): Released all slaves [ 469.129524][ T9085] bond4 (unregistering): Released all slaves [ 469.220208][ T9085] bond5 (unregistering): Released all slaves [ 469.234512][ T9085] bond6 (unregistering): Released all slaves [ 469.326634][ T9085] bond7 (unregistering): Released all slaves [ 469.341473][ T9085] bond8 (unregistering): Released all slaves [ 469.356553][ T9085] bond9 (unregistering): Released all slaves [ 469.371238][ T9085] bond10 (unregistering): Released all slaves [ 469.473324][T17046] __nla_validate_parse: 7 callbacks suppressed [ 469.473345][T17046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2885'. [ 469.489784][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2885'. [ 469.515401][ T5843] Bluetooth: hci1: command tx timeout [ 469.562973][ T9085] tipc: Disabling bearer [ 469.588516][ T9085] tipc: Left network mode [ 469.699023][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2896'. [ 469.710280][T17006] chnl_net:caif_netlink_parms(): no params data found [ 469.735508][ T9085] IPVS: stopping backup sync thread 11890 ... [ 469.751536][T17055] macvlan0: entered promiscuous mode [ 469.758723][T17055] batadv0: entered promiscuous mode [ 469.766346][T17055] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 469.776810][T17055] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 469.787992][T17055] hsr1: entered allmulticast mode [ 469.793067][T17055] macvlan0: entered allmulticast mode [ 469.799090][T17055] batadv0: entered allmulticast mode [ 469.806949][T17055] macvlan0: left promiscuous mode [ 469.813421][T17055] batadv0: left promiscuous mode [ 469.840859][T17060] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.2888'. [ 469.873728][T17058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2888'. [ 469.897025][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 470.011128][T17058] bond11 (unregistering): Released all slaves [ 470.030206][T17060] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2888'. [ 470.045205][T17060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2888'. [ 470.107604][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2892'. [ 470.121665][T17062] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 470.178166][T17006] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.186649][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.193954][T17006] bridge_slave_0: entered allmulticast mode [ 470.206204][T17006] bridge_slave_0: entered promiscuous mode [ 470.266753][T17006] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.277345][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.284628][T17006] bridge_slave_1: entered allmulticast mode [ 470.326323][T17006] bridge_slave_1: entered promiscuous mode [ 470.344830][T17078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2893'. [ 470.417592][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.482387][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.709522][T17006] team0: Port device team_slave_0 added [ 470.783264][T17006] team0: Port device team_slave_1 added [ 470.936974][T17102] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 471.129212][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.150239][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.178731][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.194178][ T9085] hsr_slave_0: left promiscuous mode [ 471.312455][T17129] sctp: [Deprecated]: syz.0.2908 (pid 17129) Use of int in maxseg socket option. [ 471.312455][T17129] Use struct sctp_assoc_value instead [ 471.596444][ T5841] Bluetooth: hci1: command tx timeout [ 471.911733][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.920093][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.946606][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.064392][T17006] hsr_slave_0: entered promiscuous mode [ 472.095337][T17006] hsr_slave_1: entered promiscuous mode [ 472.250982][T17140] netlink: 'syz.3.2910': attribute type 3 has an invalid length. [ 472.274430][T17140] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 472.285845][T17140] netlink: 'syz.3.2910': attribute type 3 has an invalid length. [ 472.410660][ T9085] IPVS: stop unused estimator thread 0... [ 472.447581][T17149] block nbd3: Unsupported socket: should be TCP or UNIX. [ 472.971593][T17006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.989383][T17006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.018369][T17006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.041539][T17006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.258071][T17006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.287193][T17006] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.301422][T14715] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.308668][T14715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.327909][T14715] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.335157][T14715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.344330][T17195] tipc: Enabling of bearer rejected, already enabled [ 473.354602][T17195] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 473.373837][T17195] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 473.662682][T17006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.685602][ T5841] Bluetooth: hci1: command tx timeout [ 473.724907][T17006] veth0_vlan: entered promiscuous mode [ 473.746021][T17006] veth1_vlan: entered promiscuous mode [ 473.789588][T17006] veth0_macvtap: entered promiscuous mode [ 473.801180][T17006] veth1_macvtap: entered promiscuous mode [ 473.851636][T17211] bond15: (slave bond_slave_1): Device is not bonding slave [ 473.859547][T17211] bond15: option active_slave: invalid value (bond_slave_1) [ 473.869190][T17211] bond15 (unregistering): Released all slaves [ 473.897173][T17006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.912175][T17006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.946998][T14712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.958022][T14712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.980643][T14712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.991329][T14712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.116091][T14715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.123968][T14715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.162810][T14715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.174182][T14715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.382030][T17233] batadv2: entered promiscuous mode [ 474.395614][T17233] batadv2: entered allmulticast mode [ 474.411168][T17238] IPVS: length: 24 != 26904 [ 474.515681][T17228] wg1 speed is unknown, defaulting to 1000 [ 474.532697][T17228] lo speed is unknown, defaulting to 1000 [ 475.274415][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.298408][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.316949][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.333407][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.342134][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 475.520741][T17267] __nla_validate_parse: 6 callbacks suppressed [ 475.520762][T17267] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2941'. [ 475.569161][T17261] wg1 speed is unknown, defaulting to 1000 [ 475.577124][T17261] lo speed is unknown, defaulting to 1000 [ 475.766671][ T5841] Bluetooth: hci1: command tx timeout [ 476.074143][T17278] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 476.097691][T17269] wg1 speed is unknown, defaulting to 1000 [ 476.116924][T17269] lo speed is unknown, defaulting to 1000 [ 476.621607][T17261] chnl_net:caif_netlink_parms(): no params data found [ 476.721628][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.729621][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.737003][T17261] bridge_slave_0: entered allmulticast mode [ 476.745506][T17261] bridge_slave_0: entered promiscuous mode [ 476.754628][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.762097][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.770240][T17261] bridge_slave_1: entered allmulticast mode [ 476.778094][T17261] bridge_slave_1: entered promiscuous mode [ 476.826849][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.840414][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.890157][T17261] team0: Port device team_slave_0 added [ 476.899657][T17261] team0: Port device team_slave_1 added [ 476.940175][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.947715][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.975374][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.988838][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.996259][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.022907][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.081942][T17261] hsr_slave_0: entered promiscuous mode [ 477.088815][T17261] hsr_slave_1: entered promiscuous mode [ 477.095666][T17261] debugfs: 'hsr0' already exists in 'hsr' [ 477.101419][T17261] Cannot create hsr debugfs directory [ 477.248532][T17261] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.314645][T17261] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.399727][T17261] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.446485][ T5841] Bluetooth: hci5: command tx timeout [ 477.518097][T17261] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.584556][T17309] IPVS: fo: FWM 3 0x00000003 - no destination available [ 477.657277][T17309] wg1 speed is unknown, defaulting to 1000 [ 477.677652][T17309] lo speed is unknown, defaulting to 1000 [ 477.808503][T17261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.830239][T17261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.852676][T17326] wg1 speed is unknown, defaulting to 1000 [ 477.853466][T17261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.871002][T17326] lo speed is unknown, defaulting to 1000 [ 477.972763][T17333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2956'. [ 478.015186][T17261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.113231][T17336] netlink: 'syz.2.2957': attribute type 1 has an invalid length. [ 478.159930][T17336] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.231754][T17336] bond7: (slave geneve2): making interface the new active one [ 478.243337][T17336] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 478.256996][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.266715][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.275726][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.286590][ T1105] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.337166][T17350] bond7: entered promiscuous mode [ 478.342372][T17350] geneve2: entered promiscuous mode [ 478.475842][T17261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.514719][T17261] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.548960][T14712] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.556188][T14712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.599748][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.607184][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.007794][T17261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.026972][T17261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.331912][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.347357][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.360682][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.370457][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.379003][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.423303][T17261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.494436][T17261] veth0_vlan: entered promiscuous mode [ 479.521024][ T5841] Bluetooth: hci5: command tx timeout [ 479.530127][T17261] veth1_vlan: entered promiscuous mode [ 479.548537][T17383] wg1 speed is unknown, defaulting to 1000 [ 479.571092][T17383] lo speed is unknown, defaulting to 1000 [ 479.670255][T17261] veth0_macvtap: entered promiscuous mode [ 479.767810][T17261] veth1_macvtap: entered promiscuous mode [ 479.943536][T17261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.965125][T17261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.979740][T14715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.029354][T14715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.039815][T14715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.140521][T14715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.167485][T17417] netlink: 'syz.3.2975': attribute type 1 has an invalid length. [ 480.177365][T17417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2975'. [ 480.211826][T17417] netlink: 'syz.3.2975': attribute type 4 has an invalid length. [ 480.247692][T17417] netlink: 'syz.3.2975': attribute type 4 has an invalid length. [ 480.268893][T10762] lo speed is unknown, defaulting to 1000 [ 480.278619][T10762] syz1: Port: 1 Link ACTIVE [ 480.353989][T17383] chnl_net:caif_netlink_parms(): no params data found [ 480.388409][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.406536][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.503823][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.511899][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.577389][T17383] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.594757][T17383] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.612495][T17383] bridge_slave_0: entered allmulticast mode [ 480.613817][T17432] SET target dimension over the limit! [ 480.621277][T17383] bridge_slave_0: entered promiscuous mode [ 480.639144][T17383] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.647573][T17383] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.657430][T17383] bridge_slave_1: entered allmulticast mode [ 480.668286][T17383] bridge_slave_1: entered promiscuous mode [ 480.734853][T17383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.751469][T17383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.774215][T17436] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.2980'. [ 480.840444][T17383] team0: Port device team_slave_0 added [ 480.852485][T17383] team0: Port device team_slave_1 added [ 480.952040][T17383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.973389][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.025954][T17383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.069644][T17383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.109910][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.175097][T17383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.354385][T17383] hsr_slave_0: entered promiscuous mode [ 481.385655][T17383] hsr_slave_1: entered promiscuous mode [ 481.393670][T17383] debugfs: 'hsr0' already exists in 'hsr' [ 481.414336][T17383] Cannot create hsr debugfs directory [ 481.446350][ T5841] Bluetooth: hci2: command tx timeout [ 481.502166][T17469] SET target dimension over the limit! [ 481.595238][ T5841] Bluetooth: hci5: command tx timeout [ 481.613131][T14714] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 481.634243][T14714] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 481.642892][T10763] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 481.721472][T10763] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 481.811617][T17477] netlink: 'syz.3.2991': attribute type 11 has an invalid length. [ 481.999852][T17383] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.020842][T17383] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 482.081087][T17383] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.107423][T17383] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.314822][T17504] SET target dimension over the limit! [ 482.316000][T17501] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2998'. [ 482.490423][T17383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.536957][T17383] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.556133][ T5904] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 482.563413][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.570984][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.582611][T17512] Cannot find add_set index 0 as target [ 482.607878][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.615107][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.167940][T17537] SET target dimension over the limit! [ 483.319679][T17543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3013'. [ 483.329799][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 483.426270][T17551] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20002 [ 483.515421][ T5841] Bluetooth: hci2: command tx timeout [ 483.522304][T17543] bond15: entered promiscuous mode [ 483.541610][T17543] bond15: entered allmulticast mode [ 483.547672][T17543] 8021q: adding VLAN 0 to HW filter on device bond15 [ 483.636699][T17547] wg1 speed is unknown, defaulting to 1000 [ 483.646777][T17547] lo speed is unknown, defaulting to 1000 [ 483.675568][ T5841] Bluetooth: hci5: command tx timeout [ 483.683650][T17383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.463949][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3020'. [ 485.597451][ T5841] Bluetooth: hci2: command tx timeout [ 485.638899][T17599] Cannot find add_set index 0 as target [ 485.835241][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 485.849735][T17383] veth0_vlan: entered promiscuous mode [ 485.890674][T17383] veth1_vlan: entered promiscuous mode [ 485.981764][T17383] veth0_macvtap: entered promiscuous mode [ 486.020752][T17383] veth1_macvtap: entered promiscuous mode [ 486.068874][T17620] netlink: 'syz.2.3030': attribute type 10 has an invalid length. [ 486.069365][T17383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.107212][T17383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.117454][T17623] netlink: 'syz.1.3032': attribute type 5 has an invalid length. [ 486.129867][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 486.155236][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 486.212835][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.240624][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.285991][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.288862][T17630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3034'. [ 486.300547][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.393171][T17637] Cannot find add_set index 0 as target [ 486.516028][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.530904][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.552295][T17643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3039'. [ 486.563083][T17643] sch_fq: defrate 0 ignored. [ 486.624595][T14712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.638044][T14712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.720538][T17652] netlink: 'syz.1.3042': attribute type 3 has an invalid length. [ 486.771594][T17658] netlink: 'syz.1.3042': attribute type 3 has an invalid length. [ 486.858428][T17664] x_tables: duplicate underflow at hook 2 [ 487.046514][T17679] SET target dimension over the limit! [ 487.686471][ T5841] Bluetooth: hci2: command tx timeout [ 488.219755][T17708] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 488.251131][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.261541][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.273052][T17715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3055'. [ 488.291343][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.306441][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.319941][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.343678][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 488.397345][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 488.398052][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3055'. [ 488.462451][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 488.719411][T17710] wg1 speed is unknown, defaulting to 1000 [ 488.733174][T17710] lo speed is unknown, defaulting to 1000 [ 488.881347][T17738] Cannot find add_set index 0 as target [ 489.073451][T17710] chnl_net:caif_netlink_parms(): no params data found [ 489.211467][T17755] netlink: 14577 bytes leftover after parsing attributes in process `syz.0.3065'. [ 489.388926][T17710] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.406722][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.418858][T17710] bridge_slave_0: entered allmulticast mode [ 489.437660][T17710] bridge_slave_0: entered promiscuous mode [ 489.457461][T17710] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.464726][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.486857][T17710] bridge_slave_1: entered allmulticast mode [ 489.517963][T17710] bridge_slave_1: entered promiscuous mode [ 489.552179][T17775] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.3069'. [ 489.564733][T17775] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 489.620991][T17773] bridge_slave_0: left allmulticast mode [ 489.627674][T17773] bridge_slave_0: left promiscuous mode [ 489.633557][T17773] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.651075][T17773] bridge_slave_1: left allmulticast mode [ 489.658726][T17773] bridge_slave_1: left promiscuous mode [ 489.664635][T17773] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.666278][T17784] Cannot find add_set index 0 as target [ 489.683687][T17773] bond0: (slave bond_slave_0): Releasing backup interface [ 489.699408][T17773] bond0: (slave bond_slave_1): Releasing backup interface [ 489.724117][T17773] team0: Port device team_slave_0 removed [ 489.742632][T17773] team0: Port device team_slave_1 removed [ 489.750164][T17773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.758394][T17773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.768639][T17773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.777083][T17773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.787981][T17773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 489.930469][T17710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.953658][T17710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.182848][T17710] team0: Port device team_slave_0 added [ 490.207159][T17710] team0: Port device team_slave_1 added [ 490.344051][T17710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.366610][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.396730][ T5841] Bluetooth: hci0: command tx timeout [ 490.397995][T17710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.420567][T17814] Cannot find add_set index 0 as target [ 490.466852][T17710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.473860][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.531333][T17710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.630565][T17710] hsr_slave_0: entered promiscuous mode [ 490.663378][T17710] hsr_slave_1: entered promiscuous mode [ 490.683365][T17710] debugfs: 'hsr0' already exists in 'hsr' [ 490.692548][T17710] Cannot create hsr debugfs directory [ 491.208218][T17844] Cannot find add_set index 0 as target [ 491.256468][T17710] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.282980][T17710] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.379790][T17846] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 491.404796][T17710] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.535598][T17710] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.649204][T17710] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.677635][T17710] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.778514][T17710] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.790801][T17710] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.809610][T17853] xt_cgroup: xt_cgroup: no path or classid specified [ 492.030431][T17857] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.038272][T17857] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.290272][T17857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.324620][T17857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.486236][ T5841] Bluetooth: hci0: command tx timeout [ 492.523431][T17866] tipc: Enabling of bearer rejected, failed to enable media [ 492.533475][T14715] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.559000][T14715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.596941][T14715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.620076][T14715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.735243][T17886] Cannot find add_set index 0 as target [ 492.807081][T17710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.828991][T17710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.829023][T17891] __nla_validate_parse: 4 callbacks suppressed [ 492.829038][T17891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3108'. [ 492.891205][T17710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.918179][T17710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.039645][T17908] netlink: 'syz.2.3111': attribute type 1 has an invalid length. [ 493.049376][T17908] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3111'. [ 493.148142][T17710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.189131][T17710] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.213889][T14715] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.221171][T14715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.240181][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.247390][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.318605][T17710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.593708][T17710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.718158][T17710] veth0_vlan: entered promiscuous mode [ 493.761758][T17710] veth1_vlan: entered promiscuous mode [ 493.810965][T17710] veth0_macvtap: entered promiscuous mode [ 493.823490][T17710] veth1_macvtap: entered promiscuous mode [ 493.861289][T17944] Cannot find add_set index 0 as target [ 493.871688][T17710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.899962][T17710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.932669][ T1105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.975538][ T1105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.977134][T17946] sctp: [Deprecated]: syz.0.3120 (pid 17946) Use of int in max_burst socket option deprecated. [ 493.977134][T17946] Use struct sctp_assoc_value instead [ 493.996938][ T1105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.041062][ T1105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.217740][T17954] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3123'. [ 494.237507][T17954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3123'. [ 494.269374][T17954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3123'. [ 494.309515][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3120'. [ 494.344734][T14712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.378090][T14712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.475376][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 494.553784][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3127'. [ 494.563870][ T5841] Bluetooth: hci0: command tx timeout [ 494.572066][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3127'. [ 494.698073][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.735019][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.998768][T17985] Cannot find add_set index 0 as target [ 495.023219][T17982] tipc: Started in network mode [ 495.045880][T17982] tipc: Node identity 1665e77b841, cluster identity 4711 [ 495.055766][T17982] tipc: Enabled bearer , priority 0 [ 495.160903][T17990] tipc: Resetting bearer [ 495.214376][T17991] veth3: entered promiscuous mode [ 495.221878][T17988] netlink: 'syz.3.3133': attribute type 12 has an invalid length. [ 495.247122][T17988] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3133'. [ 495.462880][T17981] tipc: Disabling bearer [ 496.118662][T18009] xt_bpf: check failed: parse error [ 496.228275][T18013] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3139'. [ 496.539426][ T49] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.637068][ T5841] Bluetooth: hci0: command tx timeout [ 496.718397][ T49] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.736488][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.758792][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.767377][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 496.779984][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 496.789729][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 497.042739][T18027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.109671][ T49] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.134763][T18046] SET target dimension over the limit! [ 497.249572][T18027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.309737][ T49] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.387182][T18028] wg1 speed is unknown, defaulting to 1000 [ 497.494354][T18027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.546554][T18028] lo speed is unknown, defaulting to 1000 [ 497.720886][T18027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.168673][ T60] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.306050][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3149'. [ 498.447245][T18067] nbd: socks must be embedded in a SOCK_ITEM attr [ 498.538291][ T49] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 498.877146][ T5841] Bluetooth: hci3: command tx timeout [ 498.960148][ T49] bond7 (unregistering): (slave geneve2): Releasing active interface [ 498.974377][ T49] geneve2 (unregistering): left promiscuous mode [ 499.012178][ T49] team0: Port device geneve0 removed [ 499.127503][ T49] tipc: Disabling bearer [ 499.228832][ T49] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 499.485117][ T49] bond0 (unregistering): Released all slaves [ 499.614179][ T49] bond1 (unregistering): Released all slaves [ 499.680998][T18077] xt_bpf: check failed: parse error [ 499.745589][ T49] bond2 (unregistering): Released all slaves [ 499.762958][ T49] bond3 (unregistering): Released all slaves [ 499.860105][ T49] bond4 (unregistering): Released all slaves [ 499.952846][ T49] bond5 (unregistering): Released all slaves [ 500.041764][ T49] bond6 (unregistering): Released all slaves [ 500.130467][ T49] bond7 (unregistering): Released all slaves [ 500.144833][ T49] bond8 (unregistering): Released all slaves [ 500.164459][T18066] gtp0: entered promiscuous mode [ 500.174469][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.346129][T14711] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.354386][T14711] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.598286][T18097] Cannot find add_set index 0 as target [ 500.687661][T18028] chnl_net:caif_netlink_parms(): no params data found [ 500.745701][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 500.898374][T18099] tipc: Enabling of bearer rejected, failed to enable media [ 500.965519][ T5841] Bluetooth: hci3: command tx timeout [ 501.017924][T18105] bond1: entered promiscuous mode [ 501.023027][T18105] bond1: entered allmulticast mode [ 501.036259][T18105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.225811][T18123] xt_bpf: check failed: parse error [ 501.231185][T18109] wg1 speed is unknown, defaulting to 1000 [ 501.240642][T18109] lo speed is unknown, defaulting to 1000 [ 501.289789][T18028] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.310841][T18028] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.328328][T18028] bridge_slave_0: entered allmulticast mode [ 501.338365][T18028] bridge_slave_0: entered promiscuous mode [ 501.399896][T18028] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.409705][T18028] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.417628][T18028] bridge_slave_1: entered allmulticast mode [ 501.426029][T18028] bridge_slave_1: entered promiscuous mode [ 501.505266][T18127] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 501.516839][T18100] lec:lec_atm_close: lec0: Shut down! [ 501.549608][T18028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.593613][T18028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.697845][T18133] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 501.893633][T18028] team0: Port device team_slave_0 added [ 501.912397][ T49] tipc: Left network mode [ 501.960105][ T49] IPVS: stopping backup sync thread 17278 ... [ 501.973050][T18028] team0: Port device team_slave_1 added [ 502.129999][T18149] Cannot find add_set index 0 as target [ 502.152623][T18150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3170'. [ 502.208438][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 502.233547][T18028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.241340][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.243011][T18155] xt_bpf: check failed: parse error [ 502.267361][T18028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.390142][T18028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.397827][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.424860][T18028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.593965][T18028] hsr_slave_0: entered promiscuous mode [ 502.607191][T18028] hsr_slave_1: entered promiscuous mode [ 502.621762][T18028] debugfs: 'hsr0' already exists in 'hsr' [ 502.634344][T18028] Cannot create hsr debugfs directory [ 502.911483][T18177] netlink: 'syz.0.3179': attribute type 1 has an invalid length. [ 502.921944][T18180] netlink: 'syz.0.3179': attribute type 1 has an invalid length. [ 502.925332][T18182] netlink: 'syz.1.3180': attribute type 1 has an invalid length. [ 503.035110][ T5841] Bluetooth: hci3: command tx timeout [ 503.088277][T18182] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 503.124240][T18188] Cannot find add_set index 0 as target [ 503.260339][ T49] hsr_slave_0: left promiscuous mode [ 503.795625][T18216] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.3189'. [ 503.810293][T18216] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 503.834734][T18216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3189'. [ 504.878777][T18224] Cannot find add_set index 0 as target [ 505.125408][ T5841] Bluetooth: hci3: command tx timeout [ 505.154504][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3195'. [ 505.233867][T18232] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3195'. [ 505.451772][ T49] IPVS: stop unused estimator thread 0... [ 505.533737][T18251] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3201'. [ 505.860105][T18028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 505.875612][T18028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 505.887636][T18028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 505.898467][T18028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 506.190882][T18267] Cannot find add_set index 0 as target [ 506.296856][T18028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.335950][T18028] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.360833][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.368088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.423708][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.431033][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.493574][T18276] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3206'. [ 506.503962][T18276] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3206'. [ 506.516950][T18276] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3206'. [ 506.540247][T18274] bridge1: entered allmulticast mode [ 506.672408][T18282] gre1: entered promiscuous mode [ 506.684747][T18282] gre1: entered allmulticast mode [ 506.692820][T18284] netlink: 'syz.0.3209': attribute type 5 has an invalid length. [ 506.705667][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3209'. [ 506.830943][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3211'. [ 506.875036][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 506.883210][ C1] lec:lec_tx_timeout: lec0 [ 506.888750][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.952045][T18296] SET target dimension over the limit! [ 506.976364][T18297] bridge0: entered promiscuous mode [ 506.990194][T18297] vlan2: entered promiscuous mode [ 507.166511][T18028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.301811][T18028] veth0_vlan: entered promiscuous mode [ 507.333092][T18028] veth1_vlan: entered promiscuous mode [ 507.408653][T18028] veth0_macvtap: entered promiscuous mode [ 507.439789][T18028] veth1_macvtap: entered promiscuous mode [ 507.480319][T18028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.557307][T18028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.580686][T18324] wg1 speed is unknown, defaulting to 1000 [ 507.596782][T14715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.626081][T14715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.640022][T18324] lo speed is unknown, defaulting to 1000 [ 507.646377][T14715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.646424][T14715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.991132][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.011788][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.061703][T14715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.084822][T14715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.548938][T18347] netlink: 'syz.0.3225': attribute type 10 has an invalid length. [ 508.614340][T18347] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 508.749515][T18351] Cannot find add_set index 0 as target [ 508.839255][T18357] __nla_validate_parse: 4 callbacks suppressed [ 508.839276][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 508.912077][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3224'. [ 508.923489][T18355] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3228'. [ 508.941787][T18362] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3231'. [ 508.956946][T18363] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3231'. [ 509.084199][T18372] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 509.147184][T18371] batman_adv: batadv0: Adding interface: macvtap1 [ 509.153975][T18371] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.229980][T18371] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 509.266185][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 509.417007][T18392] Cannot find add_set index 0 as target [ 509.561328][T18399] geneve0: entered promiscuous mode [ 509.598596][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 510.020834][T18415] netlink: 'syz.5.3247': attribute type 1 has an invalid length. [ 510.036179][T18415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.181548][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3248'. [ 510.231262][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3248'. [ 510.450982][T18436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3254'. [ 510.518267][T18436] netlink: 'syz.1.3254': attribute type 10 has an invalid length. [ 510.519809][T18440] Cannot find add_set index 0 as target [ 510.594819][T18442] Unsupported Adiantum instantiation: (ecb(blowfish),xeta,nhpoly1305) [ 510.857670][T18446] netlink: 'syz.1.3257': attribute type 6 has an invalid length. [ 510.909320][T18459] netlink: 'syz.5.3258': attribute type 5 has an invalid length. [ 511.252784][T18482] SET target dimension over the limit! [ 511.755368][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 511.807645][T18507] hsr_slave_0: left promiscuous mode [ 511.814663][T18507] hsr_slave_1: left promiscuous mode [ 511.911330][T18510] netlink: 'syz.1.3276': attribute type 4 has an invalid length. [ 511.920192][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 511.920225][ C1] lec:lec_tx_timeout: lec0 [ 512.256990][T18530] Cannot find add_set index 768 as target [ 512.296129][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 512.877331][T18574] Cannot find add_set index 1536 as target [ 513.060012][T18579] --map-set only usable from mangle table [ 513.116287][T18586] netlink: 'syz.2.3299': attribute type 12 has an invalid length. [ 513.343451][T18593] bridge2: entered promiscuous mode [ 513.374663][T18593] bridge2: entered allmulticast mode [ 513.752566][T18619] Cannot find add_set index 16384 as target [ 514.187298][T18648] __nla_validate_parse: 7 callbacks suppressed [ 514.187349][T18648] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3316'. [ 514.205032][T18648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3316'. [ 514.216804][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3316'. [ 514.220568][T18650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3318'. [ 514.289163][T18648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3316'. [ 514.516260][T18656] vlan0: entered allmulticast mode [ 514.521558][T18656] bond0: entered allmulticast mode [ 514.530306][T18656] batadv_slave_0: entered allmulticast mode [ 514.538561][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'. [ 514.555929][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 514.568872][T18656] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3321'. [ 514.637919][T18662] Cannot find add_set index 0 as target [ 514.639632][T18658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3322'. [ 514.766151][T18670] netlink: 'syz.5.3327': attribute type 3 has an invalid length. [ 514.776788][T18670] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3327'. [ 514.823353][T18668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3325'. [ 515.124555][T18696] Cannot find del_set index 1536 as target [ 515.234679][T18699] netlink: 'syz.5.3336': attribute type 4 has an invalid length. [ 515.353633][T18712] x_tables: duplicate underflow at hook 1 [ 515.390231][T18712] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 515.399022][T18713] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 515.606827][T18729] xt_bpf: check failed: parse error [ 515.624149][T18722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.761845][T18738] syzkaller0: entered promiscuous mode [ 515.777597][T18738] syzkaller0: entered allmulticast mode [ 515.828342][T18742] Cannot find add_set index 0 as target [ 515.995243][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.138846][T18759] netlink: 'syz.1.3354': attribute type 10 has an invalid length. [ 516.151124][T18759] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 516.204258][T18759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.550020][T18779] Cannot find add_set index 0 as target [ 516.871663][T18793] IPVS: Unknown mcast interface: macvlan1 [ 517.076270][T18804] ipt_ECN: cannot use operation on non-tcp rule [ 517.124767][T18794] syzkaller0: entered promiscuous mode [ 517.145003][T18794] syzkaller0: entered allmulticast mode [ 517.291867][T18806] bond2: entered promiscuous mode [ 517.325801][T18806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.546713][T18806] bond2 (unregistering): Released all slaves [ 517.604253][T18804] team1: entered promiscuous mode [ 517.609548][T18804] team1: entered allmulticast mode [ 517.669928][T18806] bond2: entered promiscuous mode [ 517.678044][T18806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.703483][T18828] Cannot find add_set index 0 as target [ 517.829453][T18806] bond2 (unregistering): Released all slaves [ 518.270455][T18839] netlink: 'syz.2.3377': attribute type 6 has an invalid length. [ 519.325891][T18806] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 519.980190][T18872] Cannot find map_set index 16384 as target [ 520.024793][T18874] __nla_validate_parse: 90 callbacks suppressed [ 520.024815][T18874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3386'. [ 520.184629][T18878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.229647][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3389'. [ 520.349838][T18878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.489297][T18893] netlink: 'syz.0.3394': attribute type 3 has an invalid length. [ 520.527082][T18895] batadv1: entered promiscuous mode [ 520.668395][T18909] SET target dimension over the limit! [ 520.784490][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 520.804746][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 520.944395][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3400'. [ 520.971037][T18918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3400'. [ 521.261729][T18927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3403'. [ 521.349660][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3405'. [ 521.365967][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3405'. [ 521.417849][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3408'. [ 521.489700][T18941] bond2: entered promiscuous mode [ 521.496457][T18941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.527811][T18937] tipc: Started in network mode [ 521.536529][T18937] tipc: Node identity ee3bbc9bfa1e, cluster identity 4711 [ 521.543861][T18937] tipc: Enabled bearer , priority 0 [ 521.677677][T18938] syzkaller0: entered promiscuous mode [ 521.683778][T18938] syzkaller0: entered allmulticast mode [ 521.690754][T18938] tipc: Resetting bearer [ 521.697879][T18954] Cannot find add_set index 0 as target [ 521.758459][T18948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.841945][T18961] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002 [ 521.864492][T18940] tipc: Resetting bearer [ 522.575191][T10767] tipc: Node number set to 338017435 [ 523.287182][T18940] tipc: Disabling bearer [ 523.309652][T18948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.342336][T18957] syzkaller1: entered promiscuous mode [ 523.348124][T18957] syzkaller1: entered allmulticast mode [ 523.419122][T18974] netlink: 'syz.5.3415': attribute type 3 has an invalid length. [ 523.428334][T18963] wg1 speed is unknown, defaulting to 1000 [ 523.464103][T18948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.497112][T18963] lo speed is unknown, defaulting to 1000 [ 523.573681][T18948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.710688][T14711] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.741619][T14711] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.772868][T14711] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.800416][T14711] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.915180][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 524.349314][T18993] geneve2: entered promiscuous mode [ 524.415152][T19004] 0ªX¹¦À: renamed from caif0 [ 524.469793][T19008] SET target dimension over the limit! [ 524.479277][T19004] 0ªX¹¦À: entered allmulticast mode [ 524.484521][T19004] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 524.720476][T19021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.729597][T19021] bridge0: port 3(bond2) entered blocking state [ 524.736841][T19021] bridge0: port 3(bond2) entered disabled state [ 524.743390][T19021] bond2: entered allmulticast mode [ 524.751053][T19021] bond2: entered promiscuous mode [ 524.764223][T19023] ip6gre1: entered allmulticast mode [ 525.732833][T19081] __nla_validate_parse: 10 callbacks suppressed [ 525.732854][T19081] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3440'. [ 526.002470][T19088] netlink: 'syz.0.3442': attribute type 7 has an invalid length. [ 526.012740][T19087] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 526.269414][T19072] SET target dimension over the limit! [ 526.279639][T19074] Cannot find add_set index 0 as target [ 526.315676][T18994] Bluetooth: hci3: command 0x0405 tx timeout [ 526.480467][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3449'. [ 526.527725][T19110] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3450'. [ 526.637209][T19115] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3451'. [ 526.661184][T19115] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 526.983250][T19129] wg1 speed is unknown, defaulting to 1000 [ 527.011710][T19129] lo speed is unknown, defaulting to 1000 [ 527.372481][T19141] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 527.531738][T19151] Cannot find add_set index 0 as target [ 527.536096][T19152] netlink: 'syz.0.3458': attribute type 1 has an invalid length. [ 527.699529][T19160] sctp: [Deprecated]: syz.3.3456 (pid 19160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.699529][T19160] Use struct sctp_sack_info instead [ 527.724209][T19161] Cannot find add_set index 0 as target [ 527.889587][T19167] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 527.933532][T19167] macsec1: entered promiscuous mode [ 527.965544][T19167] macsec1: entered allmulticast mode [ 527.987298][T19167] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 528.014780][T19171] wg1 speed is unknown, defaulting to 1000 [ 528.030533][T19171] lo speed is unknown, defaulting to 1000 [ 528.120209][T19174] netlink: 'syz.2.3467': attribute type 10 has an invalid length. [ 528.172728][T19174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3467'. [ 528.200824][T19174] dummy0: entered promiscuous mode [ 528.207363][T19174] bridge0: port 3(dummy0) entered blocking state [ 528.214296][T19174] bridge0: port 3(dummy0) entered disabled state [ 528.221136][T19174] dummy0: entered allmulticast mode [ 528.229751][T19174] bridge0: port 3(dummy0) entered blocking state [ 528.236351][T19174] bridge0: port 3(dummy0) entered forwarding state [ 528.408463][T19188] wg1 speed is unknown, defaulting to 1000 [ 528.494814][T19192] Cannot find add_set index 0 as target [ 528.550006][T19188] lo speed is unknown, defaulting to 1000 [ 528.654253][T19196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3470'. [ 528.920898][T19213] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 528.947124][T19213] netlink: 'syz.2.3475': attribute type 4 has an invalid length. [ 528.979842][T19213] netlink: 15586 bytes leftover after parsing attributes in process `syz.2.3475'. [ 529.174237][T19228] netlink: 'syz.5.3483': attribute type 49 has an invalid length. [ 529.184415][T19230] netlink: 'syz.5.3483': attribute type 49 has an invalid length. [ 529.279357][T19223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3479'. [ 529.299051][T19236] SET target dimension over the limit! [ 529.302836][T19238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3485'. [ 529.634429][T19260] netlink: 'syz.3.3490': attribute type 11 has an invalid length. [ 529.669075][T19261] syzkaller0: entered promiscuous mode [ 529.675687][T19261] syzkaller0: entered allmulticast mode [ 529.858155][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3492'. [ 530.015872][T19278] SET target dimension over the limit! [ 530.853492][T19285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.061309][T19295] __nla_validate_parse: 5 callbacks suppressed [ 531.061327][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 531.089304][T19285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.123452][T19295] batadv0: entered promiscuous mode [ 531.130363][T19295] macvtap2: entered promiscuous mode [ 531.137507][T19295] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 531.169352][T10767] IPVS: starting estimator thread 0... [ 531.221619][T19285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.259174][T19298] syzkaller1: entered promiscuous mode [ 531.264779][T19298] syzkaller1: entered allmulticast mode [ 531.273444][T19299] syzkaller1: left promiscuous mode [ 531.279206][T19300] IPVS: using max 24 ests per chain, 57600 per kthread [ 531.286206][T19299] syzkaller1: left allmulticast mode [ 531.394667][T19285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.443558][T19314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'. [ 531.444448][T19308] wg1 speed is unknown, defaulting to 1000 [ 531.477013][T19308] lo speed is unknown, defaulting to 1000 [ 531.487248][T19316] SET target dimension over the limit! [ 531.686994][ T1105] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.741419][ T1105] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.773670][T14714] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.965675][T14714] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.119553][T19338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3515'. [ 532.120433][T19331] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3513'. [ 532.503782][T19365] SET target dimension over the limit! [ 532.782500][T19377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3524'. [ 533.124092][T19393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3526'. [ 533.399670][T19405] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3530'. [ 534.434600][T19406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3530'. [ 534.446029][T19406] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3530'. [ 534.463535][T19359] wg1 speed is unknown, defaulting to 1000 [ 534.498346][T19359] lo speed is unknown, defaulting to 1000 [ 534.588192][T19410] SET target dimension over the limit! [ 534.706968][T19417] netlink: 'syz.5.3533': attribute type 1 has an invalid length. [ 534.714749][T19417] netlink: 'syz.5.3533': attribute type 2 has an invalid length. [ 535.029529][T19443] netlink: 'syz.5.3539': attribute type 12 has an invalid length. [ 535.046035][T19443] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.3539'. [ 535.657523][T19475] SET target dimension over the limit! [ 536.003488][T19495] x_tables: duplicate underflow at hook 3 [ 536.142697][T19513] xt_TCPMSS: Only works on TCP SYN packets [ 536.163910][T19513] netlink: 'syz.5.3558': attribute type 9 has an invalid length. [ 536.176490][T19513] __nla_validate_parse: 3 callbacks suppressed [ 536.176518][T19513] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3558'. [ 536.306690][T19519] Cannot find add_set index 0 as target [ 536.374836][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3563'. [ 536.610785][T19539] netlink: 'syz.1.3569': attribute type 43 has an invalid length. [ 536.622725][T19540] wg1: entered promiscuous mode [ 536.629550][T19540] wg1: entered allmulticast mode [ 537.344852][T19562] SET target dimension over the limit! [ 537.492398][T19566] bond0: (slave syz_tun): Releasing backup interface [ 537.517027][T19566] bridge_slave_0: left allmulticast mode [ 537.522927][T19566] bridge_slave_0: left promiscuous mode [ 537.553874][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.585767][T19566] bridge_slave_1: left allmulticast mode [ 537.596041][T19566] bridge_slave_1: left promiscuous mode [ 537.602122][T19566] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.634807][T19566] bond0: (slave bond_slave_0): Releasing backup interface [ 537.657976][T19566] bond0: (slave bond_slave_1): Releasing backup interface [ 537.995235][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 538.030599][T19566] team0: Port device team_slave_0 removed [ 538.040083][T19566] team0: Port device team_slave_1 removed [ 538.046683][T19566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.054606][T19566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.064094][T19566] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 538.083018][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 538.129825][T19579] wg1 speed is unknown, defaulting to 1000 [ 538.141090][T19579] lo speed is unknown, defaulting to 1000 [ 538.237375][T19569] wg1 speed is unknown, defaulting to 1000 [ 538.301567][T19605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3586'. [ 538.348480][T19569] lo speed is unknown, defaulting to 1000 [ 538.469723][T19615] tipc: Started in network mode [ 538.474658][T19615] tipc: Node identity 26f7e522ce7a, cluster identity 4711 [ 538.504040][T19615] tipc: Enabled bearer , priority 0 [ 538.618418][T19615] syzkaller0: entered promiscuous mode [ 538.624187][T19615] syzkaller0: entered allmulticast mode [ 538.631770][T19615] tipc: Resetting bearer [ 538.677600][T19608] tipc: Resetting bearer [ 538.737044][T19624] Cannot find add_set index 0 as target [ 538.811829][T19626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3592'. [ 539.523532][T10763] tipc: Node number set to 3901613346 [ 540.760715][T19608] tipc: Disabling bearer [ 540.873626][T19644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3597'. [ 540.949700][T19636] wg1 speed is unknown, defaulting to 1000 [ 540.973262][T19636] lo speed is unknown, defaulting to 1000 [ 541.138120][T19657] dvmrp8: entered allmulticast mode [ 541.153515][T19661] SET target dimension over the limit! [ 541.297202][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'. [ 541.307958][T19665] netlink: 'syz.1.3604': attribute type 5 has an invalid length. [ 541.326307][T19665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3604'. [ 541.349383][T19665] geneve2: entered promiscuous mode [ 541.370011][T19665] geneve2: entered allmulticast mode [ 541.387979][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 541.406003][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 541.449054][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 541.467659][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 541.481932][T19675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3607'. [ 541.914092][T19700] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3611'. [ 542.291663][T19710] Cannot find add_set index 0 as target [ 542.319293][T19708] veth0_to_bridge: entered promiscuous mode [ 542.335876][T19708] veth0_to_bridge: left promiscuous mode [ 542.447871][T19717] wg1 speed is unknown, defaulting to 1000 [ 542.457604][T19717] lo speed is unknown, defaulting to 1000 [ 542.470496][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3617'. [ 542.513503][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3617'. [ 542.649713][T19724] wg1 speed is unknown, defaulting to 1000 [ 542.655147][T19731] netlink: 'syz.5.3621': attribute type 322 has an invalid length. [ 542.695696][T19724] lo speed is unknown, defaulting to 1000 [ 542.849171][T19740] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 543.024820][T19745] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3623'. [ 543.383829][T19757] SET target dimension over the limit! [ 543.603386][T19764] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 543.644229][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3630'. [ 543.706424][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 544.105735][T19786] IPv6: Can't replace route, no match found [ 544.232246][T19804] SET target dimension over the limit! [ 544.405424][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 544.421430][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3646'. [ 544.458110][T19812] syz_tun: entered allmulticast mode [ 544.596901][T19812] syz_tun (unregistering): left allmulticast mode [ 545.101135][T19847] netlink: 'syz.3.3654': attribute type 13 has an invalid length. [ 545.110805][T19847] netlink: 'syz.3.3654': attribute type 17 has an invalid length. [ 545.210672][T19828] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 545.227230][T19828] bond1 (unregistering): Released all slaves [ 545.369081][T19847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.494234][T19857] SET target dimension over the limit! [ 546.003856][T19887] wg1 speed is unknown, defaulting to 1000 [ 546.013305][T19887] lo speed is unknown, defaulting to 1000 [ 546.075531][T19893] SET target dimension over the limit! [ 546.097571][T19894] netlink: 'syz.5.3669': attribute type 3 has an invalid length. [ 546.114027][T19894] netlink: 'syz.5.3669': attribute type 1 has an invalid length. [ 546.637082][T19922] SET target dimension over the limit! [ 546.682528][T19925] __nla_validate_parse: 6 callbacks suppressed [ 546.682546][T19925] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.3682'. [ 546.710947][T19914] virt_wifi0: mtu less than device minimum [ 546.720559][T19914] netlink: 'syz.3.3676': attribute type 3 has an invalid length. [ 546.729056][T19914] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3676'. [ 546.741842][T19914] netlink: 37691 bytes leftover after parsing attributes in process `syz.3.3676'. [ 546.780113][T19926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3680'. [ 547.179836][T19947] wg1 speed is unknown, defaulting to 1000 [ 547.187744][T19947] lo speed is unknown, defaulting to 1000 [ 547.220420][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3686'. [ 547.532816][T19954] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3687'. [ 547.559853][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3687'. [ 547.760625][T19957] syzkaller0: entered promiscuous mode [ 547.769154][T19957] syzkaller0: entered allmulticast mode [ 548.191411][T19970] wg1 speed is unknown, defaulting to 1000 [ 548.223959][T19970] lo speed is unknown, defaulting to 1000 [ 548.360970][T19978] SET target dimension over the limit! [ 548.573903][T19985] wg1 speed is unknown, defaulting to 1000 [ 548.633017][T19985] lo speed is unknown, defaulting to 1000 [ 548.759491][T19970] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3693'. [ 548.883005][T20007] netlink: 'syz.2.3704': attribute type 1 has an invalid length. [ 548.892004][T20007] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3704'. [ 548.966064][T20011] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3705'. [ 549.170972][T20024] SET target dimension over the limit! [ 549.613586][T20037] netlink: 'syz.1.3713': attribute type 1 has an invalid length. [ 549.695383][T20037] netlink: 'syz.1.3713': attribute type 3 has an invalid length. [ 549.944679][T20050] pimreg: entered allmulticast mode [ 549.977637][T20046] pimreg: left allmulticast mode [ 550.223228][T20055] SET target dimension over the limit! [ 550.581178][T20081] tipc: Enabled bearer , priority 0 [ 550.651781][T20081] tipc: Disabling bearer [ 550.686214][T20086] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 550.708536][T20086] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 550.747700][T20091] block nbd3: Unsupported socket: should be TCP or UNIX. [ 550.839249][T20098] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 550.992495][T20089] wg1 speed is unknown, defaulting to 1000 [ 551.039610][T20102] netlink: 'syz.5.3731': attribute type 1 has an invalid length. [ 551.039936][T20089] lo speed is unknown, defaulting to 1000 [ 551.155757][T20107] SET target dimension over the limit! [ 551.183764][T20110] netlink: 'syz.5.3734': attribute type 1 has an invalid length. [ 551.230564][T20110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.277210][T20110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.289960][T20110] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 551.303551][T20110] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 551.411861][T20114] veth7: entered promiscuous mode [ 551.442479][T20114] bond1: (slave veth7): Enslaving as an active interface with a down link [ 551.673244][T20126] sctp: [Deprecated]: syz.0.3739 (pid 20126) Use of int in max_burst socket option. [ 551.673244][T20126] Use struct sctp_assoc_value instead [ 551.739775][T20130] gtp0: entered promiscuous mode [ 551.765706][T20130] gtp0: entered allmulticast mode [ 551.778300][T20130] __nla_validate_parse: 7 callbacks suppressed [ 551.778320][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 551.903409][T20135] wg1 speed is unknown, defaulting to 1000 [ 551.953395][T20135] lo speed is unknown, defaulting to 1000 [ 551.954623][T20133] wg1 speed is unknown, defaulting to 1000 [ 551.986796][T20133] lo speed is unknown, defaulting to 1000 [ 552.172061][T20150] SET target dimension over the limit! [ 552.458149][T20164] wg1 speed is unknown, defaulting to 1000 [ 552.481174][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3751'. [ 552.508434][T20164] lo speed is unknown, defaulting to 1000 [ 552.574718][T20171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3753'. [ 552.602187][T20160] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.3751'. [ 552.771501][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 553.011077][T20200] Cannot find add_set index 0 as target [ 553.162959][T20206] netlink: 'syz.1.3763': attribute type 6 has an invalid length. [ 553.546108][T20225] netlink: 'syz.0.3768': attribute type 4 has an invalid length. [ 553.554069][T20225] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3768'. [ 553.718772][T20239] SET target dimension over the limit! [ 554.337641][T20255] tipc: Enabled bearer , priority 0 [ 554.352346][T20255] tipc: Resetting bearer [ 554.453333][T20263] : option downdelay: invalid value (18446744073709551615) [ 554.461191][T20263] : option downdelay: allowed values 0 - 2147483647 [ 554.470569][T20263]  (unregistering): Released all slaves [ 554.479998][T20236] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 554.804864][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'. [ 554.881487][T20282] veth9: entered promiscuous mode [ 554.914227][T20278] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3784'. [ 555.041260][T20273] wg1 speed is unknown, defaulting to 1000 [ 555.082087][T20273] lo speed is unknown, defaulting to 1000 [ 555.207289][T20290] tipc: Enabling of bearer rejected, already enabled [ 555.441408][T20299] netlink: 'syz.0.3789': attribute type 1 has an invalid length. [ 555.450669][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 555.692790][T20314] syzkaller1: entered promiscuous mode [ 555.699186][T20314] syzkaller1: entered allmulticast mode [ 555.907533][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 555.942677][T20320] netlink: 'syz.1.3793': attribute type 13 has an invalid length. [ 556.947631][T20345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3800'. [ 557.094676][T20345] wg1 speed is unknown, defaulting to 1000 [ 557.190901][T20345] lo speed is unknown, defaulting to 1000 [ 557.293245][T20348] netlink: 'syz.0.3800': attribute type 12 has an invalid length. [ 557.362551][T20348] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3800'. [ 557.450686][T20361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3804'. [ 557.488178][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3804'. [ 557.535846][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'. [ 557.570321][T20364] netlink: 'syz.1.3805': attribute type 58 has an invalid length. [ 557.570352][T20370] netlink: 'syz.1.3805': attribute type 58 has an invalid length. [ 557.586595][T20364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3805'. [ 557.589917][T20370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3805'. [ 557.630743][T20361] bond2: entered promiscuous mode [ 557.636607][T20361] bond2: entered allmulticast mode [ 557.642224][T20361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.735332][T20368] wg1 speed is unknown, defaulting to 1000 [ 557.853631][ T6024] hid-generic 0005:0007:0008.0001: item fetching failed at offset 0/1 [ 557.876712][ T6024] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 557.896468][T20368] lo speed is unknown, defaulting to 1000 [ 557.902661][T20379] netlink: 'syz.1.3810': attribute type 1 has an invalid length. [ 557.910630][T20379] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3810'. [ 557.928667][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'. [ 557.964290][T20381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3809'. [ 559.084245][T20423] netlink: 'syz.1.3820': attribute type 1 has an invalid length. [ 559.369080][T20432] netlink: 'syz.1.3824': attribute type 10 has an invalid length. [ 559.377856][T20432] team0: Cannot enslave team device to itself [ 559.513239][T20436] netlink: 'syz.2.3825': attribute type 1 has an invalid length. [ 559.568047][T20438] netlink: 'syz.1.3826': attribute type 83 has an invalid length. [ 559.603520][T20438] wg1 speed is unknown, defaulting to 1000 [ 559.619810][T20438] lo speed is unknown, defaulting to 1000 [ 559.666823][T20445] netlink: 'syz.2.3828': attribute type 4 has an invalid length. [ 559.693916][T20445] netlink: 'syz.2.3828': attribute type 4 has an invalid length. [ 560.176665][T20477] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.296383][T20477] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.376586][T20477] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.433389][T20477] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.552305][ T9085] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.587585][ T9085] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.618801][ T1105] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.653291][ T1105] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.232828][T20526] xt_CONNSECMARK: invalid mode: 0 [ 561.354548][T20532] netlink: 'syz.0.3854': attribute type 1 has an invalid length. [ 561.572301][T20551] netlink: 'syz.0.3859': attribute type 2 has an invalid length. [ 561.892102][T20568] netlink: 'syz.5.3864': attribute type 1 has an invalid length. [ 561.954828][T20568] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 561.966790][T20568] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 562.023950][T20574] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 562.031376][T20566] __nla_validate_parse: 14 callbacks suppressed [ 562.031396][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3863'. [ 562.051423][T20568] macvlan2: entered promiscuous mode [ 562.057242][T20568] macvlan2: entered allmulticast mode [ 562.064448][T20568] bond3: entered promiscuous mode [ 562.070816][T20568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.082684][T20568] bond3: left promiscuous mode [ 562.460499][T20583] wg1 speed is unknown, defaulting to 1000 [ 562.469508][T20583] lo speed is unknown, defaulting to 1000 [ 563.001213][T20613] tipc: Cannot configure node identity twice [ 563.306814][T20627] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3881'. [ 563.587523][T20640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3885'. [ 563.922371][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 563.936146][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3888'. [ 564.917360][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3895'. [ 567.435125][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 568.078375][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 568.078879][ C1] ------------[ cut here ]------------ [ 568.089964][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 568.092814][ C1] ODEBUG: free active (active state 0) object: ffff8880597ffc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 568.112098][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 568.121360][ C1] Modules linked in: [ 568.125560][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 568.134506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.144584][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 568.150419][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 568.170043][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 568.176142][ C1] RAX: 860cf022a478ab00 RBX: dffffc0000000000 RCX: ffff88801c2d5ac0 [ 568.184139][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 568.192128][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 568.200118][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 568.208112][ C1] R13: ffffffff8bc08000 R14: ffff8880597ffc90 R15: ffffffff8b6cf600 [ 568.216105][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 568.225071][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.231685][ C1] CR2: 00007fe79d50b73c CR3: 000000000df38000 CR4: 00000000003526f0 [ 568.239687][ C1] Call Trace: [ 568.243308][ C1] [ 568.246195][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 568.251766][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 568.256917][ C1] kfree+0x115/0x6d0 [ 568.260842][ C1] rose_timer_expiry+0x4cb/0x600 [ 568.265804][ C1] ? call_timer_fn+0x155/0x5f0 [ 568.270571][ C1] call_timer_fn+0x17e/0x5f0 [ 568.275190][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.280668][ C1] ? call_timer_fn+0xbe/0x5f0 [ 568.285360][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 568.290472][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.295698][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.300918][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.306426][ C1] __run_timer_base+0x61a/0x860 [ 568.311360][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 568.316756][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 568.323015][ C1] run_timer_softirq+0xb7/0x180 [ 568.327918][ C1] handle_softirqs+0x283/0x870 [ 568.332712][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 568.337503][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 568.342794][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 568.348025][ C1] __irq_exit_rcu+0xca/0x1f0 [ 568.352619][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 568.357836][ C1] irq_exit_rcu+0x9/0x30 [ 568.362078][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.367740][ C1] [ 568.370671][ C1] [ 568.373611][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.379613][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 568.385372][ C1] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 568.405019][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 568.411087][ C1] RAX: 860cf022a478ab00 RBX: ffffffff81960c17 RCX: 860cf022a478ab00 [ 568.419081][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e8769 RDI: ffffffff8bc074e0 [ 568.427073][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 568.435102][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0f70 [ 568.443091][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 [ 568.451085][ C1] ? do_idle+0x1e7/0x510 [ 568.455353][ C1] default_idle+0x13/0x20 [ 568.459688][ C1] default_idle_call+0x73/0xb0 [ 568.464509][ C1] do_idle+0x1e7/0x510 [ 568.468609][ C1] ? __pfx_do_idle+0x10/0x10 [ 568.473222][ C1] cpu_startup_entry+0x44/0x60 [ 568.478009][ C1] start_secondary+0x101/0x110 [ 568.482781][ C1] common_startup_64+0x13e/0x147 [ 568.487765][ C1] [ 568.490783][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.498058][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 568.507002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.517057][ C1] Call Trace: [ 568.520344][ C1] [ 568.523184][ C1] dump_stack_lvl+0x99/0x250 [ 568.527776][ C1] ? __asan_memcpy+0x40/0x70 [ 568.532389][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.537629][ C1] ? __pfx__printk+0x10/0x10 [ 568.542243][ C1] vpanic+0x237/0x6d0 [ 568.546252][ C1] ? __pfx_vpanic+0x10/0x10 [ 568.550793][ C1] panic+0xb9/0xc0 [ 568.554520][ C1] ? __pfx_panic+0x10/0x10 [ 568.558952][ C1] __warn+0x31b/0x4b0 [ 568.562935][ C1] ? debug_print_object+0x16b/0x1e0 [ 568.568136][ C1] ? debug_print_object+0x16b/0x1e0 [ 568.573344][ C1] report_bug+0x2be/0x4f0 [ 568.577694][ C1] ? debug_print_object+0x16b/0x1e0 [ 568.582896][ C1] ? debug_print_object+0x16b/0x1e0 [ 568.588108][ C1] ? debug_print_object+0x16d/0x1e0 [ 568.593308][ C1] handle_bug+0x84/0x160 [ 568.597578][ C1] exc_invalid_op+0x1a/0x50 [ 568.602105][ C1] asm_exc_invalid_op+0x1a/0x20 [ 568.606957][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 568.612764][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 568.632367][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 568.638434][ C1] RAX: 860cf022a478ab00 RBX: dffffc0000000000 RCX: ffff88801c2d5ac0 [ 568.646408][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 568.654377][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 568.662342][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 568.670311][ C1] R13: ffffffff8bc08000 R14: ffff8880597ffc90 R15: ffffffff8b6cf600 [ 568.678284][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 568.683934][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 568.689490][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 568.694599][ C1] kfree+0x115/0x6d0 [ 568.698502][ C1] rose_timer_expiry+0x4cb/0x600 [ 568.703446][ C1] ? call_timer_fn+0x155/0x5f0 [ 568.708225][ C1] call_timer_fn+0x17e/0x5f0 [ 568.712811][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.718267][ C1] ? call_timer_fn+0xbe/0x5f0 [ 568.722964][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 568.728098][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.733296][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.738501][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.744312][ C1] __run_timer_base+0x61a/0x860 [ 568.749219][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 568.754600][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 568.760877][ C1] run_timer_softirq+0xb7/0x180 [ 568.765746][ C1] handle_softirqs+0x283/0x870 [ 568.770514][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 568.775296][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 568.780582][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 568.785787][ C1] __irq_exit_rcu+0xca/0x1f0 [ 568.790378][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 568.795596][ C1] irq_exit_rcu+0x9/0x30 [ 568.799928][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.805579][ C1] [ 568.808512][ C1] [ 568.811443][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.817429][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 568.823153][ C1] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 568.843051][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 568.849129][ C1] RAX: 860cf022a478ab00 RBX: ffffffff81960c17 RCX: 860cf022a478ab00 [ 568.857106][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e8769 RDI: ffffffff8bc074e0 [ 568.865119][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 568.873115][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0f70 [ 568.881091][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 [ 568.889117][ C1] ? do_idle+0x1e7/0x510 [ 568.893372][ C1] default_idle+0x13/0x20 [ 568.897712][ C1] default_idle_call+0x73/0xb0 [ 568.902489][ C1] do_idle+0x1e7/0x510 [ 568.906563][ C1] ? __pfx_do_idle+0x10/0x10 [ 568.911164][ C1] cpu_startup_entry+0x44/0x60 [ 568.915931][ C1] start_secondary+0x101/0x110 [ 568.920711][ C1] common_startup_64+0x13e/0x147 [ 568.925684][ C1] [ 568.929111][ C1] Kernel Offset: disabled [ 568.933442][ C1] Rebooting in 86400 seconds..