last executing test programs: 5.317263614s ago: executing program 3 (id=1914): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0x400, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4.95107312s ago: executing program 3 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 3.881416526s ago: executing program 0 (id=1933): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="c96cae8b33b3e0d11e1bede3f06bd5e78ab39f58d542a60a7c688a151f9f77d722e174a40b2bbcaaf5524fdd36f95ef4957424bc3fce6d8b820e59a3052739e66a5679d916cd747d09ab6adbc1c58fcb5c9a3aafa1dc4c03f3ef49776197f0aacbb0ff51cbefae63b85907072e87e654131227c76a0e0cdca22d52116d788f88ce676fc975d50bb9e94d2dbbd09246734ff47bdff63593d5f777ed36c317914601a4156b2aba10cd962d75659cc05653c8847bfe3d5054cf661be0abbb690f2bd868507ff69c72", 0xc7}, {&(0x7f0000000ac0)="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", 0xb10}], 0x2}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.962561569s ago: executing program 0 (id=1942): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x400, [0x56, 0x1, 0x7, 0x400, 0x2, 0x6]}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2}, 0xfffffff1}, {{0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001a00)=""/165, 0xa5}, 0x7b7}], 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x1, 0x9, 0x40, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x5b}, @generic={0x5, 0x3, 0x5, 0x2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x0, 0x1, 0x4, 0x80, 0xfffffffffffffffc}]}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{}, 0x3}}, 0x10, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000900)="76a4fc4eee8326ec604a1f0c1ebeaa2af267eb822d32b41c3a019c596af97cc03b4947b55b91ae766ac4f1aff38724bb429887c43a60be6f2266532c7208809c12300f752735476614bbf2790c8e76532b69aec5f4ca809e7847cd6a4391855d37057107ade94e58cc1178045bdb7eceaffbb20d52cada39f2aed1557157a5cb52ec2e192dddd3301bc34c0a52a94b10cdd5a09b76b2935abdb491", 0x9b, 0x4000001}, 0xc0880) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffff7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x48}}, 0x2000000) 2.918501898s ago: executing program 1 (id=1944): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20048054) close(0x3) 2.513649317s ago: executing program 1 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[], 0x0) 2.497719618s ago: executing program 0 (id=1948): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r2, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, 0x8) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x64}, 0x2c) 2.098734963s ago: executing program 1 (id=1952): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 1.754601591s ago: executing program 4 (id=1955): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x64}, 0x2c) 1.75410616s ago: executing program 1 (id=1956): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) close(r0) 1.577076227s ago: executing program 0 (id=1957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.541806441s ago: executing program 2 (id=1958): r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$llc(r1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.533711447s ago: executing program 0 (id=1959): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x7, 0x5) close(r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="6e657464657673696d30323100876f06d3284cfaef0ff5594d9153419fba08293d0f86ac89c0f745a606ca7c511c3167ca0aba5cc6e29ffb06c878303a0e4188b16bb198b138eab813ba8fc8e22ece148a808abd06b24eef9cfdb6de3237db8860bf6a40e3a47b1aad3c9598e2aa1d6853e355d66d02536d70770bf4e94dedf139fbc302bbd28a2f87a6ded682c9c417f82c9a3dd72c5cd8c2b113e0da34b479155d69812bc588af244799ca9c1277697f41b722f59498d6e93d8a7ddfab0d90c39ab2705020cb3bf44474d1c8e12793d5872233309f046aec0761f2837123539dea7839ca6a59c1b0a8c3beb23e29b160c1a8eb1704aa2e38c3485c13c308a7dda6c1144981c4c1a78901698a8714792102f0f28017765708932f1a7ecdc4593c0b8b2c45477b208933c8c07cea1b7ee03f4d524c37a2dfb767e07747e03de4f43bb8f64a78c698480321c9b0495976306e137c0e3df7a7d8d29b044baa136ca4f332fe0ead3acbc2f0426fd01c6003e705179ce44d1b4b148dc71d9c1d2fd4f3bd"], 0xd) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x3ff, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xce}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0xa0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) write$cgroup_int(r6, 0x0, 0x0) writev(r1, 0x0, 0x0) 1.42721436s ago: executing program 2 (id=1960): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x11, r0, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) 1.324337139s ago: executing program 1 (id=1961): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x200080c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1.203208852s ago: executing program 1 (id=1962): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x40, 0xff9, 0x1}, 0x28) shutdown(r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1.02114223s ago: executing program 2 (id=1963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6566c8bd20f39915734b4a24e9b596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6861cd700b4f8c0f594861c0296", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb1aeeb70c4294fb9be03e73d06a9", 0x3a}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xd7a}, {&(0x7f00000001c0)="aba1501aab68c98b25f2a20fd588ccbb9eb6a11a63c2af70c8d13d17203fcea6070b6cef7d3590e1fdb152e02a", 0x2d}], 0x6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 973.555584ms ago: executing program 2 (id=1964): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400461f1, 0x0) 933.143901ms ago: executing program 4 (id=1965): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) shutdown(r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 785.099538ms ago: executing program 3 (id=1966): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xafbeec54da1e82f}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$kcm(0x21, 0x2, 0x2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='memory.low\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x44, r4, 0xc01, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 731.219485ms ago: executing program 4 (id=1967): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x4004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000001) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 626.626533ms ago: executing program 0 (id=1968): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x64}, 0x2c) 528.542374ms ago: executing program 4 (id=1969): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="f90506000a000200aaaaaaaaaa1c0000f801d3ffa73788cc55e0f65f20668ab8b2c50c29ae834457bf0fd32dd23199e5c78582f72c5c6e3fd73f5068e1130835ef12fd816be9dc31c02e5df970c0fd539c251eb5"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x7, 0x5) close(r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x3ff, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xce}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0xa0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) write$cgroup_int(r6, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)="b5", 0x1}], 0x1) 513.094369ms ago: executing program 3 (id=1970): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x60000000, 0x0, 0xffffffffffffff1f, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 434.383885ms ago: executing program 3 (id=1971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000d40)="eee7ee2cffff62a3b47380c988ca", 0xe}], 0x1) 161.668135ms ago: executing program 2 (id=1972): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000) 114.440569ms ago: executing program 3 (id=1973): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="f90506000a000200aaaaaaaaaa1c0000f801d3ffa73788cc55e0f65f20668ab8b2c50c29ae834457bf0fd32dd23199e5c78582f72c5c6e3fd73f5068e1130835ef12fd816be9dc31c02e5df970c0fd539c251eb5"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x7, 0x5) close(r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x3ff, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xce}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0xa0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) write$cgroup_int(r6, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)="b5", 0x1}], 0x1) 58.462523ms ago: executing program 4 (id=1974): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 673.908µs ago: executing program 4 (id=1975): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x64}, 0x2c) 0s ago: executing program 2 (id=1976): openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x40, 0xff9, 0x1}, 0x28) shutdown(r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) kernel console output (not intermixed with test programs): 49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.038474][ T6844] wg1 speed is unknown, defaulting to 1000 [ 88.662108][ T6865] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 88.697225][ T6878] netlink: 48 bytes leftover after parsing attributes in process `syz.1.177'. [ 89.412632][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 89.470213][ T6898] batadv_slave_1: entered promiscuous mode [ 89.492437][ T6902] bridge_slave_1: left allmulticast mode [ 89.499529][ T6902] bridge_slave_1: left promiscuous mode [ 89.508073][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.519407][ T6902] bridge_slave_0: left allmulticast mode [ 89.526259][ T6902] bridge_slave_0: left promiscuous mode [ 89.532029][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.610499][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.180'. [ 89.631062][ T6895] wg1 speed is unknown, defaulting to 1000 [ 89.675541][ T6893] batadv_slave_1: left promiscuous mode [ 89.859164][ T6922] netlink: 'syz.1.185': attribute type 4 has an invalid length. [ 90.895544][ T6957] netlink: 'syz.3.196': attribute type 12 has an invalid length. [ 91.088005][ T6962] bridge_slave_0: left allmulticast mode [ 91.096116][ T6962] bridge_slave_0: left promiscuous mode [ 91.107024][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.149341][ T6963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.198'. [ 91.166304][ T6962] bridge_slave_1: left allmulticast mode [ 91.241876][ T6962] bridge_slave_1: left promiscuous mode [ 91.275243][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.313438][ T6962] team0: Port device team_slave_0 removed [ 91.329412][ T6962] team0: Port device team_slave_1 removed [ 91.355953][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.437939][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.477491][ T6963] team0: Mode changed to "broadcast" [ 91.496277][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'. [ 91.501194][ T6965] vlan0: entered promiscuous mode [ 91.520627][ T6967] tipc: Started in network mode [ 91.544405][ T6967] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 91.582094][ T6967] tipc: Enabled bearer , priority 0 [ 91.599800][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.626481][ T6972] batadv_slave_0: entered promiscuous mode [ 91.698207][ T6977] Bluetooth: MGMT ver 1.23 [ 91.699889][ T6976] netlink: 'syz.0.201': attribute type 12 has an invalid length. [ 91.788868][ T6981] netlink: 'syz.1.202': attribute type 12 has an invalid length. [ 91.888169][ T6987] batadv_slave_1: entered promiscuous mode [ 91.933073][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 91.948473][ T6986] batadv_slave_1: left promiscuous mode [ 92.071145][ T6989] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 92.120447][ T7003] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.222205][ T7003] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.260314][ T7014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.345361][ T7003] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.416907][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 92.428199][ T7022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.213'. [ 92.440207][ T7003] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.695165][ T10] tipc: Node number set to 11578026 [ 92.736761][ T167] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.768694][ T167] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.793995][ T7028] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 92.851206][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.869842][ T7028] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.902589][ T167] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911437][ T167] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.139085][ T7046] batadv_slave_1: entered promiscuous mode [ 93.161041][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 93.180862][ T7044] batadv_slave_1: left promiscuous mode [ 93.327587][ T7052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.377454][ T7058] netlink: 'syz.2.221': attribute type 4 has an invalid length. [ 93.412096][ T7058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.221'. [ 93.525180][ T7058] Ã: renamed from bond0 (while UP) [ 94.351760][ T7082] syzkaller0: entered promiscuous mode [ 94.388032][ T7082] syzkaller0: entered allmulticast mode [ 94.470363][ T7080] wg1 speed is unknown, defaulting to 1000 [ 95.166895][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'. [ 95.238451][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 95.651119][ T7126] syzkaller1: entered promiscuous mode [ 95.682759][ T7126] syzkaller1: entered allmulticast mode [ 95.752193][ T7129] wg1 speed is unknown, defaulting to 1000 [ 95.974447][ T7137] batadv_slave_1: entered promiscuous mode [ 95.986590][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.238'. [ 96.021331][ T7136] batadv_slave_1: left promiscuous mode [ 96.138719][ T7141] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 96.387308][ T7152] wg1 speed is unknown, defaulting to 1000 [ 96.497919][ T7158] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 96.498119][ T7157] IPVS: stopping backup sync thread 7158 ... [ 96.521864][ T7157] __nla_validate_parse: 1 callbacks suppressed [ 96.521876][ T7157] netlink: 260 bytes leftover after parsing attributes in process `syz.1.246'. [ 96.542783][ T7157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'. [ 96.553144][ T7157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.246'. [ 96.719355][ T7163] wg1 speed is unknown, defaulting to 1000 [ 96.731053][ T7166] batadv_slave_1: entered promiscuous mode [ 96.764090][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.249'. [ 96.771771][ T7167] wg1 speed is unknown, defaulting to 1000 [ 96.792823][ T7165] batadv_slave_1: left promiscuous mode [ 96.880056][ T7170] tipc: Started in network mode [ 96.904364][ T7170] tipc: Node identity 2e3ec6a2480b, cluster identity 4711 [ 96.922023][ T7170] tipc: Enabled bearer , priority 0 [ 96.940467][ T7170] tipc: Resetting bearer [ 96.992829][ T7169] tipc: Disabling bearer [ 97.212793][ T7188] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 97.220554][ T7188] netlink: 224 bytes leftover after parsing attributes in process `syz.3.257'. [ 97.503136][ T7197] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 97.555776][ T7199] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 97.560236][ T7197] team0: Port device dummy0 added [ 97.634774][ T7199] team0: Port device dummy0 removed [ 97.702811][ T7199] Ã: (slave dummy0): Enslaving as an active interface with an up link [ 97.789000][ T7203] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 97.852737][ T7203] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 97.912179][ T7203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.259'. [ 97.986479][ T7206] netlink: 'syz.4.261': attribute type 12 has an invalid length. [ 98.120500][ T7212] syz_tun: entered allmulticast mode [ 98.141166][ T7212] dvmrp8: entered allmulticast mode [ 98.182585][ T7212] wg1 speed is unknown, defaulting to 1000 [ 98.281100][ T7210] syz_tun: left allmulticast mode [ 98.286721][ T7210] dvmrp8: left allmulticast mode [ 98.608899][ T7223] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 99.466819][ T7261] netlink: 'syz.4.270': attribute type 10 has an invalid length. [ 99.606653][ T7247] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 99.677702][ T7258] veth0_to_bond: left allmulticast mode [ 99.698798][ T7258] veth0_to_bond: left promiscuous mode [ 99.726589][ T7258] bridge1: port 2(veth0_to_bond) entered disabled state [ 99.762237][ T7258] bond0: (slave bond_slave_0): Releasing backup interface [ 99.777088][ T7258] bond0: (slave bond_slave_1): Releasing backup interface [ 99.812236][ T7258] team0: Port device team_slave_0 removed [ 99.833703][ T7258] team0: Port device team_slave_1 removed [ 99.840597][ T7258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.848969][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.857221][ T7258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.873691][ T7258] veth3: left allmulticast mode [ 99.879683][ T7269] netlink: 136 bytes leftover after parsing attributes in process `syz.0.273'. [ 99.888992][ T7258] veth3: left promiscuous mode [ 99.894007][ T7258] bridge1: port 1(veth3) entered disabled state [ 99.906137][ T7258] vlan2: left promiscuous mode [ 99.910972][ T7258] veth0_to_hsr: left promiscuous mode [ 99.917036][ T7258] bridge1: port 3(vlan2) entered disabled state [ 99.929189][ T7261] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 99.943897][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.954805][ T7261] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.969985][ T7255] wg1 speed is unknown, defaulting to 1000 [ 100.933210][ T7289] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 100.945138][ T7289] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 100.966384][ T7289] netlink: 224 bytes leftover after parsing attributes in process `syz.2.274'. [ 101.161394][ T7293] ipvlan2: entered promiscuous mode [ 103.085592][ T7334] bond1: left promiscuous mode [ 103.090404][ T7334] bond1: left allmulticast mode [ 103.185991][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 103.199535][ T7340] syzkaller1: entered allmulticast mode [ 103.217442][ T7334] hsr_slave_0: left promiscuous mode [ 103.236233][ T7334] hsr_slave_1: left promiscuous mode [ 103.399516][ T7343] Bluetooth: MGMT ver 1.23 [ 103.509053][ T7331] wg1 speed is unknown, defaulting to 1000 [ 103.746632][ T7348] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 103.847125][ T7348] bond2: (slave gretap1): making interface the new active one [ 103.871224][ T7348] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 103.924338][ T7350] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 104.129419][ T7365] wg1 speed is unknown, defaulting to 1000 [ 104.144285][ T7366] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 104.777173][ T7382] wg1 speed is unknown, defaulting to 1000 [ 105.301468][ T7394] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 105.406455][ T7398] netlink: 'syz.1.300': attribute type 12 has an invalid length. [ 105.663921][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 105.750245][ T7404] netlink: 'syz.1.301': attribute type 12 has an invalid length. [ 105.914381][ T7410] wg1 speed is unknown, defaulting to 1000 [ 105.922600][ T7415] wg1 speed is unknown, defaulting to 1000 [ 106.236541][ T7428] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 106.560742][ T7435] Bluetooth: MGMT ver 1.23 [ 106.830471][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 106.992252][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 107.144714][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.204620][ T7453] wg1 speed is unknown, defaulting to 1000 [ 107.230368][ T7455] netlink: 'syz.0.315': attribute type 12 has an invalid length. [ 107.239903][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 107.680214][ T7463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 108.717347][ T7488] wg1 speed is unknown, defaulting to 1000 [ 108.852576][ T7497] gtp0: entered promiscuous mode [ 108.892750][ T7497] gtp0: entered allmulticast mode [ 108.951263][ T7495] netlink: 'syz.1.327': attribute type 12 has an invalid length. [ 109.072053][ T7504] netlink: 'syz.3.328': attribute type 10 has an invalid length. [ 109.097866][ T7504] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.110080][ T7507] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 109.132086][ T7507] netlink: 224 bytes leftover after parsing attributes in process `syz.1.329'. [ 109.386175][ T7509] batadv_slave_0: left promiscuous mode [ 109.630043][ T7509] vlan2: left allmulticast mode [ 109.635990][ T7509] veth0_to_hsr: left allmulticast mode [ 109.665859][ T7523] Ã: (slave dummy0): Releasing backup interface [ 109.720422][ T7523] bridge_slave_0: left allmulticast mode [ 109.728970][ T7523] bridge_slave_0: left promiscuous mode [ 109.750626][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.781126][ T7523] bridge_slave_1: left allmulticast mode [ 109.804940][ T7523] bridge_slave_1: left promiscuous mode [ 109.810867][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.860194][ T7523] Ã: (slave bond_slave_0): Releasing backup interface [ 109.887094][ T7523] Ã: (slave bond_slave_1): Releasing backup interface [ 109.922853][ T7523] team0: Failed to send options change via netlink (err -105) [ 109.931060][ T7523] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 109.942348][ T7523] team0: Port device team_slave_0 removed [ 109.951524][ T7523] team0: Failed to send options change via netlink (err -105) [ 109.960567][ T7523] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 109.970154][ T7523] team0: Port device team_slave_1 removed [ 109.985820][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.993237][ T7523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.003098][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.011179][ T7523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.025953][ T7523] bond1: (slave gretap1): Releasing active interface [ 110.034567][ T1119] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.057883][ T1119] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.079843][ T7518] wg1 speed is unknown, defaulting to 1000 [ 110.132248][ T7532] team0: Failed to send options change via netlink (err -105) [ 110.147789][ T7532] team0: Mode changed to "activebackup" [ 110.203688][ T1119] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.226215][ T1119] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.304717][ T7540] Unsupported ieee802154 address type: 0 [ 111.242071][ T7570] batman_adv: batadv0: Adding interface: ip6gretap1 [ 111.251134][ T7570] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.277482][ T7570] batman_adv: batadv0: Interface activated: ip6gretap1 [ 111.681414][ T7588] syzkaller1: entered allmulticast mode [ 111.968603][ T7592] batadv_slave_1: entered promiscuous mode [ 111.994226][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 112.034535][ T7591] batadv_slave_1: left promiscuous mode [ 112.664077][ T7606] batadv_slave_1: entered promiscuous mode [ 112.686317][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'. [ 112.710699][ T7604] batadv_slave_1: left promiscuous mode [ 113.180216][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 113.403995][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'. [ 113.604756][ T7638] !: renamed from dummy0 [ 113.684935][ T7643] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.743681][ T7645] wireguard0: entered promiscuous mode [ 113.753129][ T7645] wireguard0: entered allmulticast mode [ 113.820609][ T7643] wg1 speed is unknown, defaulting to 1000 [ 113.945115][ T7656] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 113.961186][ T7656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.370'. [ 114.114517][ T7664] ip6gre1: entered allmulticast mode [ 114.200099][ T7670] team0: entered promiscuous mode [ 114.220752][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 114.250441][ T7670] team0 (unregistering): left promiscuous mode [ 114.262066][ T7670] tipc: Disabling bearer [ 114.339929][ T7682] syzkaller0: entered promiscuous mode [ 114.359066][ T7682] syzkaller0: entered allmulticast mode [ 114.497021][ T7686] syzkaller0: entered promiscuous mode [ 114.551770][ T7686] syzkaller0: entered allmulticast mode [ 114.828315][ T7700] wg1 speed is unknown, defaulting to 1000 [ 115.063845][ T7721] netlink: 256 bytes leftover after parsing attributes in process `syz.2.382'. [ 115.096677][ T7721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.382'. [ 115.173700][ T7727] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 115.196559][ T7727] netlink: 224 bytes leftover after parsing attributes in process `syz.1.384'. [ 115.201786][ T7729] wg1 speed is unknown, defaulting to 1000 [ 115.232599][ T7721] rdma_rxe: rxe_newlink: failed to add lo [ 115.416814][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.688071][ T7721] 8021q: adding VLAN 0 to HW filter on device à [ 115.709134][ T7721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.754070][ T7743] wg1 speed is unknown, defaulting to 1000 [ 115.933711][ T7760] netlink: 'syz.2.390': attribute type 12 has an invalid length. [ 116.090112][ T7765] netlink: 'syz.0.392': attribute type 2 has an invalid length. [ 116.193322][ T7767] wg1 speed is unknown, defaulting to 1000 [ 116.218631][ T7771] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 116.779052][ T7793] wg1 speed is unknown, defaulting to 1000 [ 116.991299][ T7799] wg1 speed is unknown, defaulting to 1000 [ 117.171339][ T7809] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 117.262082][ T7809] bond2: (slave gretap2): making interface the new active one [ 117.309246][ T7809] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 117.444262][ T7815] netlink: 'syz.3.404': attribute type 12 has an invalid length. [ 117.490531][ T7817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.405'. [ 118.256668][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 118.285043][ T5871] Bluetooth: hci0: command tx timeout [ 118.300624][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 118.619498][ T7848] wg1 speed is unknown, defaulting to 1000 [ 119.229094][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 119.368623][ T7862] veth5: entered promiscuous mode [ 119.469082][ T7862] netlink: 'syz.4.414': attribute type 9 has an invalid length. [ 119.488550][ T7871] netlink: 'syz.0.415': attribute type 12 has an invalid length. [ 119.642525][ T7862] netlink: 200 bytes leftover after parsing attributes in process `syz.4.414'. [ 119.699848][ T7879] netlink: 'syz.1.419': attribute type 12 has an invalid length. [ 119.709019][ T7881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.725918][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 119.778929][ T7880] geneve2: entered promiscuous mode [ 119.841693][ T7880] geneve2: entered allmulticast mode [ 119.880785][ T7873] wg1 speed is unknown, defaulting to 1000 [ 119.891354][ T7888] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 119.899257][ T7888] netlink: 224 bytes leftover after parsing attributes in process `syz.4.420'. [ 120.389425][ T7904] wg1 speed is unknown, defaulting to 1000 [ 120.599565][ T7920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.686994][ T5871] Bluetooth: hci4: link tx timeout [ 120.692202][ T5871] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 120.703912][ T5871] Bluetooth: hci4: link tx timeout [ 120.710201][ T5871] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.738259][ T7920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.764399][ T7926] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 120.868776][ T7920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.038766][ T7926] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 121.158415][ T7926] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 121.229765][ T7920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.386958][ T7956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.431'. [ 121.422426][ T7952] wg1 speed is unknown, defaulting to 1000 [ 121.616544][ T1119] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.679105][ T1119] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.774709][ T7968] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 121.782776][ T7968] netlink: 140 bytes leftover after parsing attributes in process `syz.0.432'. [ 121.792795][ T7968] netlink: 96 bytes leftover after parsing attributes in process `syz.0.432'. [ 121.872473][ T7698] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.904262][ T7698] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.293644][ T7981] wg1 speed is unknown, defaulting to 1000 [ 122.452718][ T7989] wg1 speed is unknown, defaulting to 1000 [ 122.479297][ T7991] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 122.508594][ T7991] netlink: 232 bytes leftover after parsing attributes in process `syz.2.436'. [ 122.565329][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 122.765411][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 122.777073][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 123.056917][ T8015] wg1 speed is unknown, defaulting to 1000 [ 123.115106][ T8019] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 123.565856][ T8018] wg1 speed is unknown, defaulting to 1000 [ 123.970482][ T8042] netlink: 'syz.4.444': attribute type 12 has an invalid length. [ 124.590677][ T8068] __nla_validate_parse: 1 callbacks suppressed [ 124.590695][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 124.847267][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 124.917179][ T8082] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 124.925776][ T8082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.452'. [ 125.072557][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 125.187293][ T8092] bridge1: port 1(veth3) entered blocking state [ 125.199510][ T8092] bridge1: port 1(veth3) entered disabled state [ 125.207312][ T8092] veth3: entered allmulticast mode [ 125.213418][ T8092] veth3: entered promiscuous mode [ 125.227102][ T8101] bridge1: port 2(veth0_to_bond) entered blocking state [ 125.244571][ T8101] bridge1: port 2(veth0_to_bond) entered disabled state [ 125.259486][ T8101] veth0_to_bond: entered allmulticast mode [ 125.268684][ T8101] veth0_to_bond: entered promiscuous mode [ 125.276228][ T8102] netlink: 'syz.0.456': attribute type 3 has an invalid length. [ 125.318422][ T8102] syz_tun: entered allmulticast mode [ 125.330984][ T8092] vlan2: entered allmulticast mode [ 125.336409][ T8092] veth1: entered allmulticast mode [ 125.341894][ T8092] bridge1: port 3(vlan2) entered blocking state [ 125.348589][ T8092] bridge1: port 3(vlan2) entered disabled state [ 125.356270][ T8092] vlan2: entered promiscuous mode [ 125.361337][ T8092] veth1: entered promiscuous mode [ 125.370860][ T8098] wg1 speed is unknown, defaulting to 1000 [ 125.389421][ T8102] siw: device registration error -23 [ 125.421181][ T8107] dummy0: left promiscuous mode [ 125.427268][ T8107] dummy0: left allmulticast mode [ 125.434756][ T8107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.475698][ T8094] wg1 speed is unknown, defaulting to 1000 [ 125.506967][ T8100] syz_tun: left allmulticast mode [ 125.531972][ T8111] wg1 speed is unknown, defaulting to 1000 [ 125.998981][ T8135] syzkaller0: entered promiscuous mode [ 126.004482][ T8135] syzkaller0: entered allmulticast mode [ 126.093602][ T8147] rdma_rxe: rxe_newlink: failed to add lo [ 126.110416][ T8153] batadv_slave_1: entered promiscuous mode [ 126.127100][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 126.160366][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.466'. [ 126.183244][ T8146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.207537][ T8150] batadv_slave_1: left promiscuous mode [ 126.391121][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 126.433031][ T8167] wg1 speed is unknown, defaulting to 1000 [ 126.523032][ T8169] netlink: 52 bytes leftover after parsing attributes in process `syz.2.470'. [ 126.690765][ T8175] wg1 speed is unknown, defaulting to 1000 [ 127.131752][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 127.247856][ T8201] syzkaller1: entered allmulticast mode [ 127.464922][ T8219] syzkaller0: entered promiscuous mode [ 127.520369][ T8219] syzkaller0: entered allmulticast mode [ 127.737128][ T8230] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 127.773408][ T8230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.479'. [ 128.308474][ T8247] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 128.524712][ T8269] netlink: 'syz.0.485': attribute type 16 has an invalid length. [ 128.533437][ T8269] netlink: 'syz.0.485': attribute type 17 has an invalid length. [ 128.561743][ T8269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.081531][ T8273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.147098][ T8273] bond0: (slave bond3): Enslaving as an active interface with an up link [ 129.484339][ T8287] vlan0: left promiscuous mode [ 129.510163][ T8287] gtp0: left promiscuous mode [ 129.514877][ T8287] gtp0: left allmulticast mode [ 129.521716][ T8294] bridge0: entered allmulticast mode [ 129.553959][ T8291] pim6reg: entered allmulticast mode [ 129.787076][ T8310] ipvlan2: entered promiscuous mode [ 129.798423][ T8314] netlink: 168 bytes leftover after parsing attributes in process `syz.2.497'. [ 129.941591][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.498'. [ 130.244718][ T8321] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 130.607859][ T8327] netlink: 'syz.3.500': attribute type 1 has an invalid length. [ 130.637844][ T8327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.659993][ T8327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.668469][ T8327] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.680586][ T8327] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 130.707659][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.724482][ T8336] netlink: 10 bytes leftover after parsing attributes in process `syz.2.501'. [ 130.726411][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.883586][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'. [ 131.015408][ T8341] nbd: socks must be embedded in a SOCK_ITEM attr [ 131.030049][ T5875] block nbd64: NBD_DISCONNECT [ 131.276047][ T5875] udevd[5875]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 131.546536][ T8360] wg1 speed is unknown, defaulting to 1000 [ 131.995561][ T8374] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 132.056378][ T8374] team0: Port device dummy0 added [ 132.098452][ T8374] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 132.177776][ T8374] team0: Port device dummy0 removed [ 132.219697][ T8374] Ã: (slave dummy0): Enslaving as an active interface with an up link [ 132.304966][ T8390] wg1 speed is unknown, defaulting to 1000 [ 132.477711][ T8392] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 132.485686][ T8392] netlink: 140 bytes leftover after parsing attributes in process `syz.4.510'. [ 132.497946][ T8392] netlink: 96 bytes leftover after parsing attributes in process `syz.4.510'. [ 132.838738][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.980283][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 133.165959][ T8406] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.512'. [ 133.328724][ T8416] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 133.559691][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.577924][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.620382][ T8428] netlink: 19 bytes leftover after parsing attributes in process `syz.4.516'. [ 133.826812][ T8433] Ã: (slave dummy0): Releasing backup interface [ 133.868622][ T8433] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 133.889745][ T8433] batman_adv: batadv0: Removing interface: ip6gretap1 [ 133.935543][ T8434] team0: Mode changed to "broadcast" [ 134.019986][ T8440] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.052851][ T8441] netlink: 'syz.1.519': attribute type 12 has an invalid length. [ 134.106178][ T8433] tipc: Enabled bearer , priority 0 [ 134.223938][ T8448] wg1 speed is unknown, defaulting to 1000 [ 134.490042][ T8461] pim6reg: entered allmulticast mode [ 134.787112][ T8470] netlink: 84 bytes leftover after parsing attributes in process `syz.0.526'. [ 135.133911][ T8491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.532'. [ 135.149366][ T8491] netlink: 'syz.1.532': attribute type 11 has an invalid length. [ 135.213235][ T8491] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.532'. [ 135.235147][ T5861] tipc: Node number set to 1714800290 [ 135.866608][ T8509] bridge0: entered allmulticast mode [ 135.889624][ T8509] pim6reg: entered allmulticast mode [ 136.003909][ T8512] !: renamed from dummy0 [ 136.092332][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 136.392634][ T8515] bridge_slave_1: left allmulticast mode [ 136.433208][ T8515] bridge_slave_1: left promiscuous mode [ 136.493904][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.643522][ T8515] bridge_slave_0: left allmulticast mode [ 136.687138][ T8515] bridge_slave_0: left promiscuous mode [ 136.692883][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.821483][ T8515] bond0: (slave bridge0): Releasing backup interface [ 136.838520][ T8515] bridge0 (unregistering): left allmulticast mode [ 136.942833][ T8538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 136.982802][ T8527] wg1 speed is unknown, defaulting to 1000 [ 136.991661][ T8531] netlink: 'syz.1.539': attribute type 13 has an invalid length. [ 137.004997][ T8531] netlink: 'syz.1.539': attribute type 17 has an invalid length. [ 137.154030][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.165624][ T8531] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.176517][ T8531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.287618][ T8548] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.385294][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.412339][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 137.447989][ T8548] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.511013][ T8548] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.584812][ T8567] netlink: 'syz.4.542': attribute type 12 has an invalid length. [ 137.600965][ T8548] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.710150][ T7709] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.728911][ T7709] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.745394][ T7709] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.757845][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.543'. [ 137.762760][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.830692][ T8572] syzkaller0: left promiscuous mode [ 137.836146][ T8572] syzkaller0: left allmulticast mode [ 137.842108][ T8572] ip6gre1: left allmulticast mode [ 137.848812][ T8572] veth5: left promiscuous mode [ 137.930854][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 138.158637][ T8582] bridge0: entered allmulticast mode [ 138.324055][ T8594] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 138.344197][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 138.360502][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'. [ 138.425969][ T8599] netlink: 'syz.1.554': attribute type 12 has an invalid length. [ 138.482894][ T8601] lo speed is unknown, defaulting to 1000 [ 138.489042][ T8601] lo speed is unknown, defaulting to 1000 [ 138.499555][ T8601] lo speed is unknown, defaulting to 1000 [ 138.513481][ T8601] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 138.538420][ T8601] lo speed is unknown, defaulting to 1000 [ 138.553117][ T8601] lo speed is unknown, defaulting to 1000 [ 138.562467][ T8601] lo speed is unknown, defaulting to 1000 [ 138.577906][ T8601] lo speed is unknown, defaulting to 1000 [ 138.584670][ T8601] lo speed is unknown, defaulting to 1000 [ 138.624245][ T8605] wg1 speed is unknown, defaulting to 1000 [ 138.631419][ T8605] lo speed is unknown, defaulting to 1000 [ 138.763781][ T8609] wg1 speed is unknown, defaulting to 1000 [ 138.776011][ T8609] lo speed is unknown, defaulting to 1000 [ 138.844112][ T8614] wg1 speed is unknown, defaulting to 1000 [ 138.919586][ T8614] lo speed is unknown, defaulting to 1000 [ 138.952030][ T8623] wg1 speed is unknown, defaulting to 1000 [ 139.268259][ T8623] lo speed is unknown, defaulting to 1000 [ 139.598613][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 139.769524][ T8656] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 139.820444][ T8656] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 140.249977][ T8672] wg1 speed is unknown, defaulting to 1000 [ 140.258922][ T8672] lo speed is unknown, defaulting to 1000 [ 140.463162][ T8681] geneve2: entered promiscuous mode [ 140.500613][ T8684] __nla_validate_parse: 2 callbacks suppressed [ 140.500629][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 140.522729][ T8681] geneve2: entered allmulticast mode [ 140.538443][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 48794 - 0 [ 140.560220][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 36961 - 0 [ 140.606928][ T8684] macvtap1: entered promiscuous mode [ 140.612260][ T8684] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 140.650995][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 140.713815][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 48794 - 0 [ 140.731676][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 36961 - 0 [ 140.773343][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 48794 - 0 [ 140.812311][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 36961 - 0 [ 140.831018][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 48794 - 0 [ 140.862984][ T8701] netlink: 'syz.3.570': attribute type 13 has an invalid length. [ 140.880430][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 36961 - 0 [ 140.901998][ T8701] netlink: 'syz.3.570': attribute type 17 has an invalid length. [ 141.044298][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 141.124863][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.151406][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.164138][ T8701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.213492][ T8703] vlan2: entered promiscuous mode [ 141.243650][ T8703] hsr_slave_1: entered promiscuous mode [ 141.258523][ T8703] vlan2: entered allmulticast mode [ 141.277896][ T8703] hsr_slave_1: entered allmulticast mode [ 141.281822][ T8721] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 141.353845][ T8709] wg1 speed is unknown, defaulting to 1000 [ 141.723054][ T8716] tipc: Resetting bearer [ 141.941924][ T5866] Bluetooth: hci0: command tx timeout [ 142.020856][ T8755] svc: failed to register nfsdv3 RPC service (errno 111). [ 142.048256][ T8716] geneve2: left promiscuous mode [ 142.053360][ T8716] geneve2: left allmulticast mode [ 142.073677][ T8716] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 142.088167][ T8755] svc: failed to register nfsaclv3 RPC service (errno 111). [ 142.096055][ T8716] macvtap1: left promiscuous mode [ 142.121643][ T8721] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 142.132229][ T5976] lo speed is unknown, defaulting to 1000 [ 142.145319][ T8709] lo speed is unknown, defaulting to 1000 [ 142.149869][ T8725] gretap1: entered promiscuous mode [ 142.165058][ T5976] syz1: Port: 1 Link DOWN [ 142.220865][ T752] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.247966][ T752] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.276242][ T752] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.293413][ T752] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.339251][ T8761] netlink: 'syz.2.577': attribute type 12 has an invalid length. [ 142.533175][ T8767] wg1 speed is unknown, defaulting to 1000 [ 142.542764][ T8767] lo speed is unknown, defaulting to 1000 [ 142.657225][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 142.878820][ T8781] wg1 speed is unknown, defaulting to 1000 [ 142.899330][ T8781] lo speed is unknown, defaulting to 1000 [ 143.321152][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 143.549050][ T8803] wg1 speed is unknown, defaulting to 1000 [ 143.555879][ T8803] lo speed is unknown, defaulting to 1000 [ 143.831144][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 144.273588][ T8811] wg1 speed is unknown, defaulting to 1000 [ 144.292622][ T8811] lo speed is unknown, defaulting to 1000 [ 144.473738][ T8811] netlink: 128 bytes leftover after parsing attributes in process `syz.0.590'. [ 144.616458][ T8822] wg1 speed is unknown, defaulting to 1000 [ 144.624308][ T8822] lo speed is unknown, defaulting to 1000 [ 144.730836][ T8820] wg1 speed is unknown, defaulting to 1000 [ 144.834273][ T8820] lo speed is unknown, defaulting to 1000 [ 144.948359][ T8832] netlink: 'syz.2.596': attribute type 12 has an invalid length. [ 145.164530][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.597'. [ 145.250062][ T8839] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 145.260430][ T8839] netlink: 172 bytes leftover after parsing attributes in process `syz.0.598'. [ 145.331290][ T8841] wg1 speed is unknown, defaulting to 1000 [ 145.347056][ T8841] lo speed is unknown, defaulting to 1000 [ 145.451637][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 145.557627][ T8845] wg1 speed is unknown, defaulting to 1000 [ 145.564303][ T8845] lo speed is unknown, defaulting to 1000 [ 145.706417][ T8848] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 145.877983][ T8860] tipc: Can't bind to reserved service type 2 [ 146.091512][ T8867] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 146.220926][ T8867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.249874][ T8867] veth5: entered promiscuous mode [ 146.323392][ T8867] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 146.411140][ T8871] veth0_to_bond: left allmulticast mode [ 146.424412][ T8871] veth0_to_bond: left promiscuous mode [ 146.431774][ T8871] bridge1: port 2(veth0_to_bond) entered disabled state [ 146.514884][ T8871] bond0: (slave bond_slave_0): Releasing backup interface [ 146.559426][ T8871] bond0: (slave bond_slave_1): Releasing backup interface [ 146.607768][ T8871] team0: Port device team_slave_0 removed [ 146.654219][ T8871] team0: Port device team_slave_1 removed [ 146.695363][ T8871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.802082][ T8871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.963391][ T8871] bond1: (slave gretap1): Releasing active interface [ 147.024513][ T8871] bond2: (slave gretap2): Releasing active interface [ 147.063908][ T8871] veth3: left allmulticast mode [ 147.094813][ T8871] veth3: left promiscuous mode [ 147.119104][ T8871] bridge1: port 1(veth3) entered disabled state [ 147.137090][ T8871] vlan2: left promiscuous mode [ 147.148401][ T8871] veth1: left promiscuous mode [ 147.165699][ T8871] bridge1: port 3(vlan2) entered disabled state [ 147.207610][ T8871] bond4: (slave veth5): Releasing backup interface [ 147.267647][ T7709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.279017][ T7709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.357064][ T8899] pim6reg: entered allmulticast mode [ 147.548378][ T8901] wg1 speed is unknown, defaulting to 1000 [ 147.583293][ T8908] wg1 speed is unknown, defaulting to 1000 [ 147.591586][ T8908] lo speed is unknown, defaulting to 1000 [ 147.730229][ T8901] lo speed is unknown, defaulting to 1000 [ 147.782208][ T8919] wg1 speed is unknown, defaulting to 1000 [ 148.079348][ T8919] lo speed is unknown, defaulting to 1000 [ 149.187390][ T8970] netlink: 192 bytes leftover after parsing attributes in process `syz.1.622'. [ 149.202299][ T8970] netlink: zone id is out of range [ 149.209183][ T8970] netlink: zone id is out of range [ 149.215007][ T8970] netlink: zone id is out of range [ 149.230336][ T8970] netlink: zone id is out of range [ 149.315690][ T8970] netlink: zone id is out of range [ 149.320836][ T8970] netlink: zone id is out of range [ 149.334977][ T8970] netlink: zone id is out of range [ 149.372287][ T8970] netlink: zone id is out of range [ 149.398187][ T8970] netlink: zone id is out of range [ 149.788338][ T8986] netlink: 'syz.2.625': attribute type 13 has an invalid length. [ 149.809571][ T8986] netlink: 'syz.2.625': attribute type 17 has an invalid length. [ 149.878505][ T8986] 8021q: adding VLAN 0 to HW filter on device à [ 149.887146][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.894137][ T8986] tipc: Resetting bearer [ 149.902916][ T8986] tipc: Resetting bearer [ 149.925431][ T8983] wg1 speed is unknown, defaulting to 1000 [ 149.931354][ T8746] lo speed is unknown, defaulting to 1000 [ 149.950122][ T8746] syz1: Port: 1 Link ACTIVE [ 150.005258][ T8983] lo speed is unknown, defaulting to 1000 [ 150.030580][ T8996] syzkaller1: entered allmulticast mode [ 150.201272][ T9000] wg1 speed is unknown, defaulting to 1000 [ 150.216671][ T8993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.217754][ T9000] lo speed is unknown, defaulting to 1000 [ 150.306238][ T8986] wg1 speed is unknown, defaulting to 1000 [ 150.313759][ T8986] lo speed is unknown, defaulting to 1000 [ 150.480739][ T9015] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.493290][ T9015] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 150.507298][ T9015] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 150.627469][ T9019] wg1 speed is unknown, defaulting to 1000 [ 150.648406][ T9019] lo speed is unknown, defaulting to 1000 [ 150.871549][ T30] audit: type=1800 audit(1755932119.184:2): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.631" name="memory.events" dev="tmpfs" ino=756 res=0 errno=0 [ 150.969305][ T9031] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 151.016484][ T9031] bond1 (unregistering): Released all slaves [ 151.265422][ T9041] wg1 speed is unknown, defaulting to 1000 [ 151.272376][ T9041] lo speed is unknown, defaulting to 1000 [ 152.224487][ T9080] netlink: 'syz.4.645': attribute type 10 has an invalid length. [ 152.361631][ T9084] wg1 speed is unknown, defaulting to 1000 [ 152.436501][ T9084] lo speed is unknown, defaulting to 1000 [ 152.442506][ T9087] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 152.449762][ T9073] wg1 speed is unknown, defaulting to 1000 [ 152.484381][ T9073] lo speed is unknown, defaulting to 1000 [ 152.497225][ T9093] netlink: 3 bytes leftover after parsing attributes in process `syz.1.647'. [ 152.511398][ T9087] bond4: entered promiscuous mode [ 152.526078][ T9087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.560546][ T9093] batadv2: entered promiscuous mode [ 152.569661][ T9093] batadv2: entered allmulticast mode [ 152.622813][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 152.661888][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'. [ 152.686605][ T9093] bond4: (slave batadv2): making interface the new active one [ 152.704153][ T9093] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 152.754502][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 152.818817][ T9093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.647'. [ 153.201900][ T9121] wg1 speed is unknown, defaulting to 1000 [ 153.390523][ T9121] lo speed is unknown, defaulting to 1000 [ 153.416772][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.653'. [ 154.351093][ T9156] trusted_key: syz.4.659 sent an empty control message without MSG_MORE. [ 154.408655][ T9159] syzkaller0: entered allmulticast mode [ 154.432620][ T9157] syzkaller0 (unregistering): left allmulticast mode [ 154.544293][ T9152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.657'. [ 154.628613][ T9163] geneve2: left promiscuous mode [ 154.633670][ T9163] geneve2: left allmulticast mode [ 154.659631][ T752] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 48794 - 0 [ 154.685234][ T752] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 36961 - 0 [ 154.700172][ T752] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 48794 - 0 [ 154.710748][ T752] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 36961 - 0 [ 154.741072][ T752] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 48794 - 0 [ 154.761279][ T752] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 36961 - 0 [ 154.781796][ T752] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 48794 - 0 [ 154.801419][ T752] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 36961 - 0 [ 154.988056][ T9172] wg1 speed is unknown, defaulting to 1000 [ 155.034697][ T9176] syzkaller0: entered promiscuous mode [ 155.062334][ T9176] syzkaller0: entered allmulticast mode [ 155.106581][ T9172] lo speed is unknown, defaulting to 1000 [ 155.133549][ T9181] net_ratelimit: 30 callbacks suppressed [ 155.133566][ T9181] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 155.795794][ T9189] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 155.923585][ T9195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.668'. [ 155.937210][ T9195] tipc: Invalid UDP bearer configuration [ 155.937250][ T9195] tipc: Enabling of bearer rejected, failed to enable media [ 156.122851][ T9202] batadv_slave_1: entered promiscuous mode [ 156.158210][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 156.183645][ T9201] batadv_slave_1: left promiscuous mode [ 156.418976][ T9225] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.444772][ T30] audit: type=1800 audit(1755932124.754:3): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.670" name="memory.events" dev="tmpfs" ino=797 res=0 errno=0 [ 156.882812][ T9237] netlink: 'syz.1.678': attribute type 12 has an invalid length. [ 157.539536][ T9254] syzkaller0: entered promiscuous mode [ 157.545462][ T9254] syzkaller0: entered allmulticast mode [ 157.574435][ T9255] wg1 speed is unknown, defaulting to 1000 [ 157.582323][ T9255] lo speed is unknown, defaulting to 1000 [ 157.890479][ T9267] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 158.154102][ T9272] wg1 speed is unknown, defaulting to 1000 [ 158.229814][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 158.385622][ T9284] bridge0 (unregistering): left allmulticast mode [ 158.507868][ T9272] lo speed is unknown, defaulting to 1000 [ 158.652807][ T9293] wg1 speed is unknown, defaulting to 1000 [ 158.715609][ T9293] lo speed is unknown, defaulting to 1000 [ 159.076923][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.096736][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.749739][ T9329] wg1 speed is unknown, defaulting to 1000 [ 159.758867][ T9329] lo speed is unknown, defaulting to 1000 [ 160.437135][ T9348] tipc: Enabling of bearer rejected, failed to enable media [ 160.859910][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.699'. [ 161.730321][ T9385] netlink: 168 bytes leftover after parsing attributes in process `syz.3.703'. [ 161.767015][ T30] audit: type=1800 audit(1755932130.064:4): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.699" name="cgroup.controllers" dev="tmpfs" ino=829 res=0 errno=0 [ 161.973043][ T9401] wg1 speed is unknown, defaulting to 1000 [ 162.000314][ T9401] lo speed is unknown, defaulting to 1000 [ 162.715878][ T9417] netlink: 'syz.3.710': attribute type 12 has an invalid length. [ 162.903209][ T9420] tipc: Started in network mode [ 162.916257][ T9420] tipc: Node identity 16a56c985dc1, cluster identity 4711 [ 162.933726][ T9420] tipc: Enabled bearer , priority 0 [ 162.957314][ T9421] syzkaller0: entered promiscuous mode [ 162.997577][ T9421] syzkaller0: entered allmulticast mode [ 163.192165][ T9419] tipc: Resetting bearer [ 163.256146][ T9419] tipc: Disabling bearer [ 163.715284][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 164.179049][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 164.651091][ T9455] wg1 speed is unknown, defaulting to 1000 [ 164.684143][ T9455] lo speed is unknown, defaulting to 1000 [ 164.693149][ T9458] netlink: 'syz.2.723': attribute type 12 has an invalid length. [ 165.412890][ T9477] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 166.018330][ T9498] wg1 speed is unknown, defaulting to 1000 [ 166.042671][ T9498] lo speed is unknown, defaulting to 1000 [ 166.636868][ T9518] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 166.683229][ T9518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.921621][ T7698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.948880][ T7698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.192568][ T9543] syzkaller0: entered promiscuous mode [ 167.203441][ T9543] syzkaller0: entered allmulticast mode [ 167.416039][ T9548] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.436229][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 167.541326][ T9555] netlink: 3 bytes leftover after parsing attributes in process `syz.3.742'. [ 167.780546][ T9564] tipc: Enabling of bearer rejected, failed to enable media [ 167.927442][ T30] audit: type=1800 audit(1755932136.244:5): pid=9562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.743" name="memory.events" dev="tmpfs" ino=781 res=0 errno=0 [ 168.205394][ T9584] wg1 speed is unknown, defaulting to 1000 [ 168.212174][ T9584] lo speed is unknown, defaulting to 1000 [ 168.284150][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.750'. [ 168.327150][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 168.399604][ T9585] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 168.601572][ T9601] tipc: Started in network mode [ 168.635432][ T9601] tipc: Node identity 22ffead86556, cluster identity 4711 [ 168.655850][ T9601] tipc: Enabled bearer , priority 0 [ 168.729839][ T9601] tipc: Resetting bearer [ 168.806319][ T9599] tipc: Disabling bearer [ 168.998925][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.751'. [ 169.387442][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'. [ 169.415037][ T9618] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 169.431306][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 169.433830][ T30] audit: type=1800 audit(1755932137.744:6): pid=9597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.751" name="cgroup.controllers" dev="tmpfs" ino=764 res=0 errno=0 [ 169.536589][ T9622] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 169.554535][ T9622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.758'. [ 169.603221][ T9616] bond6: entered promiscuous mode [ 169.628846][ T9616] bond6: entered allmulticast mode [ 169.634378][ T9616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.709785][ T9625] netlink: 'syz.0.759': attribute type 12 has an invalid length. [ 169.773316][ T9623] wg1 speed is unknown, defaulting to 1000 [ 169.780255][ T9630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.761'. [ 169.840187][ T9623] lo speed is unknown, defaulting to 1000 [ 170.054672][ T9638] wg1 speed is unknown, defaulting to 1000 [ 170.079316][ T9638] lo speed is unknown, defaulting to 1000 [ 170.708759][ T9667] syzkaller0: entered promiscuous mode [ 170.724541][ T9667] syzkaller0: entered allmulticast mode [ 170.793039][ T9638] netlink: 248 bytes leftover after parsing attributes in process `syz.4.763'. [ 170.978832][ T9669] wg1 speed is unknown, defaulting to 1000 [ 171.009819][ T9669] lo speed is unknown, defaulting to 1000 [ 171.536018][ T9688] wg1 speed is unknown, defaulting to 1000 [ 171.546987][ T9696] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 171.562065][ T9688] lo speed is unknown, defaulting to 1000 [ 171.781716][ T9705] netlink: 'syz.4.775': attribute type 12 has an invalid length. [ 171.888795][ T9708] tipc: Enabled bearer , priority 0 [ 171.904727][ T9708] syzkaller0: entered promiscuous mode [ 171.910693][ T9708] syzkaller0: entered allmulticast mode [ 171.927974][ T9708] tipc: Resetting bearer [ 171.938225][ T9707] tipc: Resetting bearer [ 171.983907][ T9707] tipc: Disabling bearer [ 172.017430][ T9711] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 172.120681][ T9716] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 172.490844][ T9723] wg1 speed is unknown, defaulting to 1000 [ 172.589547][ T9723] lo speed is unknown, defaulting to 1000 [ 172.609178][ T9743] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 172.723537][ T9747] netlink: 'syz.1.784': attribute type 13 has an invalid length. [ 172.733258][ T9747] netlink: 'syz.1.784': attribute type 17 has an invalid length. [ 172.886202][ T9747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.018915][ T9759] wg1 speed is unknown, defaulting to 1000 [ 173.057769][ T9759] lo speed is unknown, defaulting to 1000 [ 173.300995][ T9747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.329796][ T9749] wg1 speed is unknown, defaulting to 1000 [ 173.372345][ T9749] lo speed is unknown, defaulting to 1000 [ 173.382249][ T9769] wg1 speed is unknown, defaulting to 1000 [ 173.480223][ T9769] lo speed is unknown, defaulting to 1000 [ 173.883835][ T9782] tipc: Enabled bearer , priority 0 [ 173.924109][ T9787] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.936794][ T9782] syzkaller0: entered promiscuous mode [ 173.952499][ T9782] syzkaller0: entered allmulticast mode [ 173.965848][ T9781] __nla_validate_parse: 4 callbacks suppressed [ 173.965863][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 174.004666][ T9792] tipc: Resetting bearer [ 174.038740][ T5866] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 174.045778][ T5866] Bluetooth: hci2: command 0x0401 tx timeout [ 174.145168][ T9780] tipc: Resetting bearer [ 174.187829][ T9780] tipc: Disabling bearer [ 174.219492][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.791'. [ 174.228819][ T9805] openvswitch: netlink: Flow actions attr not present in new flow. [ 174.493271][ T9814] netlink: 256 bytes leftover after parsing attributes in process `syz.0.794'. [ 174.509418][ T9811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.793'. [ 174.861560][ T9832] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 174.889508][ T9832] netlink: 224 bytes leftover after parsing attributes in process `syz.2.797'. [ 175.062454][ T9840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.798'. [ 175.173984][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.799'. [ 175.207189][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 175.214311][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 175.220511][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 176.042701][ T9873] siw: device registration error -23 [ 176.316449][ T9885] netlink: 'syz.0.808': attribute type 5 has an invalid length. [ 176.443151][ T9894] wg1 speed is unknown, defaulting to 1000 [ 176.466017][ T9894] lo speed is unknown, defaulting to 1000 [ 176.817120][ T9906] nbd: must specify at least one socket [ 176.839680][ T9907] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 177.071440][ T9923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.130094][ T9925] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.342216][ T9929] netlink: 'syz.3.816': attribute type 4 has an invalid length. [ 177.379049][ T9929] netlink: 'syz.3.816': attribute type 4 has an invalid length. [ 177.826822][ T9952] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.960294][ T9959] netlink: 'syz.4.823': attribute type 12 has an invalid length. [ 178.203651][ T9967] wg1 speed is unknown, defaulting to 1000 [ 178.230122][ T9967] lo speed is unknown, defaulting to 1000 [ 178.857954][ T9983] veth1_to_bond: entered allmulticast mode [ 178.900115][ T9983] bond_slave_1: entered promiscuous mode [ 178.940003][ T9983] bond_slave_1: left promiscuous mode [ 178.950925][ T9983] veth1_to_bond: left allmulticast mode [ 179.269187][T10004] __nla_validate_parse: 12 callbacks suppressed [ 179.269204][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'. [ 179.350698][ T9999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.833'. [ 180.113728][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 180.174910][T10038] wg1 speed is unknown, defaulting to 1000 [ 180.182335][T10038] lo speed is unknown, defaulting to 1000 [ 180.787596][T10056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.868560][T10056] tipc: Failed to remove unknown binding: 66,1,1/0:1018615049/1018615051 [ 180.976191][T10061] netlink: 'syz.0.845': attribute type 12 has an invalid length. [ 180.998415][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 181.006254][T10056] tipc: Failed to remove unknown binding: 66,1,1/0:1018615049/1018615051 [ 181.006320][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 181.018646][ T5869] Bluetooth: hci2: command 0x0401 tx timeout [ 181.167679][T10056] tipc: Failed to remove unknown binding: 66,1,1/0:1018615049/1018615051 [ 181.192351][T10056] netlink: 788 bytes leftover after parsing attributes in process `syz.1.843'. [ 181.453821][T10074] netlink: 80 bytes leftover after parsing attributes in process `syz.2.846'. [ 181.566232][T10078] wg1 speed is unknown, defaulting to 1000 [ 181.573694][T10078] lo speed is unknown, defaulting to 1000 [ 181.637833][T10079] syzkaller1: entered allmulticast mode [ 182.663624][T10101] batadv_slave_1: entered promiscuous mode [ 182.690475][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 182.700634][T10100] batadv_slave_1: left promiscuous mode [ 182.853435][T10108] netlink: 'syz.2.857': attribute type 12 has an invalid length. [ 183.147020][T10122] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.213362][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 183.244445][T10123] netlink: 452 bytes leftover after parsing attributes in process `syz.3.861'. [ 183.407481][T10132] batadv_slave_1: entered promiscuous mode [ 183.430683][T10131] netlink: 'syz.2.864': attribute type 13 has an invalid length. [ 183.438112][T10132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 183.461804][T10129] batadv_slave_1: left promiscuous mode [ 183.467682][T10131] netlink: 'syz.2.864': attribute type 17 has an invalid length. [ 183.511154][T10131] tipc: Resetting bearer [ 183.553266][T10131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.702655][T10131] wg1 speed is unknown, defaulting to 1000 [ 183.751087][T10131] lo speed is unknown, defaulting to 1000 [ 183.841364][T10140] wg1 speed is unknown, defaulting to 1000 [ 183.912674][T10140] lo speed is unknown, defaulting to 1000 [ 184.135609][ T12] nci: nci_rx_work: unknown MT 0x1 [ 184.232710][T10145] bond4: left promiscuous mode [ 184.251312][T10145] batadv2: left promiscuous mode [ 184.279690][T10145] batadv2: left allmulticast mode [ 184.551150][T10157] batadv_slave_1: entered promiscuous mode [ 184.613406][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.869'. [ 184.673987][T10156] batadv_slave_1: left promiscuous mode [ 184.854631][T10163] wg1 speed is unknown, defaulting to 1000 [ 184.868037][T10163] lo speed is unknown, defaulting to 1000 [ 185.325906][T10185] netlink: 'syz.2.875': attribute type 12 has an invalid length. [ 185.394876][T10189] wg1 speed is unknown, defaulting to 1000 [ 185.443782][T10189] lo speed is unknown, defaulting to 1000 [ 185.831875][T10206] Unsupported ieee802154 address type: 0 [ 185.915531][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 186.196044][T10221] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.233540][T10221] tipc: Enabled bearer , priority 10 [ 186.335171][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.359864][T10224] wg1 speed is unknown, defaulting to 1000 [ 186.383878][T10224] lo speed is unknown, defaulting to 1000 [ 186.475144][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.497637][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 186.507797][T10231] tipc: Enabled bearer , priority 0 [ 186.525519][T10231] syzkaller0: entered promiscuous mode [ 186.531449][T10231] syzkaller0: entered allmulticast mode [ 186.557857][T10230] tipc: Resetting bearer [ 186.579709][T10230] tipc: Disabling bearer [ 186.615250][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.755029][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.895053][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.931587][T10224] netlink: 248 bytes leftover after parsing attributes in process `syz.4.881'. [ 187.035290][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.044196][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.886'. [ 187.088558][T10249] netlink: 668 bytes leftover after parsing attributes in process `syz.3.886'. [ 187.174982][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.315492][ T8746] tipc: Node number set to 1264872600 [ 187.455321][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.484586][T10268] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 187.497993][T10270] syzkaller1: entered promiscuous mode [ 187.512472][T10270] syzkaller1: entered allmulticast mode [ 187.529373][T10268] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.550340][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 187.669320][T10279] wg1 speed is unknown, defaulting to 1000 [ 187.710169][T10279] lo speed is unknown, defaulting to 1000 [ 187.725305][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.745837][T10287] !: renamed from dummy0 (while UP) [ 187.837790][T10291] netlink: 'syz.1.893': attribute type 12 has an invalid length. [ 187.913043][T10293] wg1 speed is unknown, defaulting to 1000 [ 187.986229][T10293] lo speed is unknown, defaulting to 1000 [ 188.893432][T10352] wg1 speed is unknown, defaulting to 1000 [ 188.900696][T10352] lo speed is unknown, defaulting to 1000 [ 189.292736][T10352] netlink: 248 bytes leftover after parsing attributes in process `syz.1.900'. [ 189.474138][T10384] netlink: 92 bytes leftover after parsing attributes in process `syz.2.903'. [ 189.501983][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 189.611220][T10382] syzkaller0: Caught tx_queue_len zero misconfig [ 189.626513][T10382] netem: change failed [ 189.640224][T10382] vlan3: entered allmulticast mode [ 189.655077][T10382] bridge0: entered allmulticast mode [ 189.667867][T10382] bridge2: port 1(vlan3) entered blocking state [ 189.686214][T10382] bridge2: port 1(vlan3) entered disabled state [ 189.708026][T10382] vlan3: entered promiscuous mode [ 189.765392][T10382] bridge0: entered promiscuous mode [ 189.881031][T10382] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 190.101279][T10401] __nla_validate_parse: 1 callbacks suppressed [ 190.101296][T10401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.906'. [ 190.229374][T10401] IPVS: Unknown mcast interface: bridGe_slave0 [ 190.350640][T10410] wg1 speed is unknown, defaulting to 1000 [ 190.357904][T10410] lo speed is unknown, defaulting to 1000 [ 190.529907][T10418] geneve3: entered promiscuous mode [ 190.547795][T10418] geneve3: entered allmulticast mode [ 191.182097][T10413] : entered promiscuous mode [ 191.287395][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 191.387723][T10438] bridge1: port 1(veth3) entered blocking state [ 191.395032][ C1] net_ratelimit: 4 callbacks suppressed [ 191.395050][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 191.436324][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 191.437341][T10438] bridge1: port 1(veth3) entered disabled state [ 191.451822][T10438] veth3: entered allmulticast mode [ 191.459130][T10438] veth3: entered promiscuous mode [ 191.511049][T10435] bridge1: port 2(veth0_to_bond) entered blocking state [ 191.555084][T10435] bridge1: port 2(veth0_to_bond) entered disabled state [ 191.578358][T10435] veth0_to_bond: entered allmulticast mode [ 191.588877][T10449] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 191.616228][T10435] veth0_to_bond: entered promiscuous mode [ 191.683202][T10435] vlan2: entered allmulticast mode [ 191.698759][T10435] veth1: entered allmulticast mode [ 191.711989][T10435] bridge1: port 3(vlan2) entered blocking state [ 191.739099][T10435] bridge1: port 3(vlan2) entered disabled state [ 191.762339][T10435] vlan2: entered promiscuous mode [ 191.774244][T10435] veth1: entered promiscuous mode [ 191.883746][T10455] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.903462][T10455] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 191.939858][T10459] gretap4: entered promiscuous mode [ 191.959685][T10472] netlink: 'syz.4.917': attribute type 4 has an invalid length. [ 191.983166][T10473] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 191.988278][T10459] bond7: (slave gretap4): making interface the new active one [ 192.002949][T10459] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 192.026711][T10445] wg1 speed is unknown, defaulting to 1000 [ 192.030827][T10469] netlink: 152 bytes leftover after parsing attributes in process `syz.4.917'. [ 192.033720][T10473] netlink: 3 bytes leftover after parsing attributes in process `syz.1.918'. [ 192.057971][T10469] block nbd0: not configured, cannot reconfigure [ 192.060677][T10445] lo speed is unknown, defaulting to 1000 [ 192.079246][T10473] batadv3: entered promiscuous mode [ 192.086714][T10473] batadv3: entered allmulticast mode [ 192.136765][T10476] tipc: Enabled bearer , priority 0 [ 192.144265][T10476] syzkaller0: entered promiscuous mode [ 192.151952][T10476] syzkaller0: entered allmulticast mode [ 192.196045][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'. [ 192.268954][T10480] bridge0: entered allmulticast mode [ 192.287066][T10476] tipc: Resetting bearer [ 192.316081][T10475] tipc: Resetting bearer [ 192.331552][T10475] tipc: Disabling bearer [ 192.359981][T10477] netlink: 48 bytes leftover after parsing attributes in process `syz.1.918'. [ 192.435100][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.561581][T10495] netlink: 6940 bytes leftover after parsing attributes in process `syz.1.922'. [ 192.582616][T10490] wg1 speed is unknown, defaulting to 1000 [ 192.589797][T10490] lo speed is unknown, defaulting to 1000 [ 192.828482][T10515] netlink: 'syz.3.926': attribute type 13 has an invalid length. [ 192.861448][T10515] netlink: 'syz.3.926': attribute type 17 has an invalid length. [ 193.004331][T10515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.017877][T10515] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.028219][T10515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.173389][T10512] wg1 speed is unknown, defaulting to 1000 [ 193.203209][T10512] lo speed is unknown, defaulting to 1000 [ 193.230260][T10524] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 193.239385][T10524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.928'. [ 193.448634][T10518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.474990][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 193.577092][T10539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.932'. [ 193.602443][T10536] wg1 speed is unknown, defaulting to 1000 [ 193.676082][T10536] lo speed is unknown, defaulting to 1000 [ 194.135754][T10554] lo: entered allmulticast mode [ 194.175814][T10554] dvmrp1: entered allmulticast mode [ 194.381125][T10571] wg1 speed is unknown, defaulting to 1000 [ 194.404687][T10571] lo speed is unknown, defaulting to 1000 [ 194.483795][T10537] lo: left allmulticast mode [ 194.514991][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.704262][T10585] wg1 speed is unknown, defaulting to 1000 [ 194.749042][T10585] lo speed is unknown, defaulting to 1000 [ 194.777320][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 194.902493][T10599] Unsupported ieee802154 address type: 0 [ 195.339637][T10585] __nla_validate_parse: 1 callbacks suppressed [ 195.339656][T10585] netlink: 248 bytes leftover after parsing attributes in process `syz.3.940'. [ 195.555033][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.757774][T10631] netlink: 'syz.2.947': attribute type 9 has an invalid length. [ 195.832021][T10631] netlink: 'syz.2.947': attribute type 6 has an invalid length. [ 196.179258][T10660] netlink: 'syz.4.951': attribute type 13 has an invalid length. [ 196.187796][T10660] netlink: 'syz.4.951': attribute type 17 has an invalid length. [ 196.220396][T10662] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 196.243826][T10662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.950'. [ 196.595041][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 196.661836][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.720641][T10670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.782672][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.870673][T10660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.152338][T10663] wg1 speed is unknown, defaulting to 1000 [ 197.181845][T10663] lo speed is unknown, defaulting to 1000 [ 197.272387][T10683] wg1 speed is unknown, defaulting to 1000 [ 197.468520][T10683] lo speed is unknown, defaulting to 1000 [ 197.597841][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 197.635045][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.645624][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 198.020257][T10683] netlink: 'syz.0.953': attribute type 6 has an invalid length. [ 198.170761][T10711] macvlan2: entered allmulticast mode [ 198.176306][T10711] veth1_vlan: entered allmulticast mode [ 198.203505][T10711] veth1_vlan: left allmulticast mode [ 198.674994][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 198.803587][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.961'. [ 198.836122][T10731] netlink: 64 bytes leftover after parsing attributes in process `syz.3.961'. [ 198.903352][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.961'. [ 198.973739][T10731] bond0: (slave wlan1): Releasing backup interface [ 199.000018][T10731] bond7: (slave gretap4): Releasing active interface [ 199.024505][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 199.175347][T10751] pim6reg: left allmulticast mode [ 199.180480][T10751] bridge0: left allmulticast mode [ 199.251962][T10756] netlink: 68 bytes leftover after parsing attributes in process `syz.4.964'. [ 199.715041][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.821440][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 199.880706][T10782] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 200.044807][T10788] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 200.083596][T10788] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 200.568689][T10803] __nla_validate_parse: 2 callbacks suppressed [ 200.568707][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 200.737729][T10809] wg1 speed is unknown, defaulting to 1000 [ 200.755026][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.771234][T10809] lo speed is unknown, defaulting to 1000 [ 201.087234][T10822] netlink: 'syz.1.976': attribute type 1 has an invalid length. [ 201.108278][T10822] netlink: 244 bytes leftover after parsing attributes in process `syz.1.976'. [ 201.292696][T10826] wg1 speed is unknown, defaulting to 1000 [ 201.307015][T10826] lo speed is unknown, defaulting to 1000 [ 201.332883][T10816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.974'. [ 201.521760][T10835] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.522302][T10838] wg1 speed is unknown, defaulting to 1000 [ 201.531813][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 201.554416][T10838] lo speed is unknown, defaulting to 1000 [ 201.663091][T10843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.981'. [ 201.795084][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.821647][T10846] wg1 speed is unknown, defaulting to 1000 [ 201.830015][T10846] lo speed is unknown, defaulting to 1000 [ 201.940503][T10852] netlink: 'syz.4.979': attribute type 6 has an invalid length. [ 202.047577][T10858] wg1 speed is unknown, defaulting to 1000 [ 202.066799][T10858] lo speed is unknown, defaulting to 1000 [ 202.100035][T10864] wg1 speed is unknown, defaulting to 1000 [ 202.102537][T10863] @ÿþ€: renamed from veth0_vlan [ 202.211477][T10846] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 202.219386][T10864] lo speed is unknown, defaulting to 1000 [ 202.278569][T10846] netlink: 232 bytes leftover after parsing attributes in process `syz.0.983'. [ 202.305488][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 202.633647][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 202.835060][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 203.029143][T10907] wg1 speed is unknown, defaulting to 1000 [ 203.048470][T10907] lo speed is unknown, defaulting to 1000 [ 203.246730][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 203.367090][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 203.542699][T10915] vlan2: left allmulticast mode [ 203.562887][T10915] veth1: left allmulticast mode [ 203.576847][T10915] veth5: left promiscuous mode [ 203.586657][T10915] bond6: left promiscuous mode [ 203.591623][T10915] bond6: left allmulticast mode [ 203.598317][T10915] gretap4: left promiscuous mode [ 203.875039][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.199084][T10966] bridge2: port 1(veth5) entered blocking state [ 204.205812][T10966] bridge2: port 1(veth5) entered disabled state [ 204.212333][T10966] veth5: entered allmulticast mode [ 204.218591][T10966] veth5: entered promiscuous mode [ 204.232958][T10966] bridge2: port 2(veth0_to_bond) entered blocking state [ 204.240212][T10966] bridge2: port 2(veth0_to_bond) entered disabled state [ 204.247471][T10966] veth0_to_bond: entered allmulticast mode [ 204.254059][T10966] veth0_to_bond: entered promiscuous mode [ 204.351899][T10966] vlan2: entered allmulticast mode [ 204.357255][T10966] veth1: entered allmulticast mode [ 204.363014][T10966] bridge2: port 3(vlan2) entered blocking state [ 204.372624][T10966] bridge2: port 3(vlan2) entered disabled state [ 204.380022][T10966] vlan2: entered promiscuous mode [ 204.385485][T10966] veth1: entered promiscuous mode [ 204.423368][T10970] netlink: 'syz.0.1001': attribute type 12 has an invalid length. [ 204.604469][T10976] batadv_slave_1: entered promiscuous mode [ 204.658429][T10975] batadv_slave_1: left promiscuous mode [ 204.756916][T10982] batadv2: entered promiscuous mode [ 204.762249][T10982] batadv2: entered allmulticast mode [ 204.794796][T10987] tipc: Enabled bearer , priority 0 [ 204.809917][T10987] syzkaller0: entered promiscuous mode [ 204.815690][T10987] syzkaller0: entered allmulticast mode [ 204.829250][T10987] tipc: Resetting bearer [ 204.837431][T10986] tipc: Resetting bearer [ 204.848659][T10986] tipc: Disabling bearer [ 204.915041][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.920975][T10988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.070544][T11000] netlink: 'syz.1.1012': attribute type 12 has an invalid length. [ 205.407601][T11011] batadv_slave_1: entered promiscuous mode [ 205.444234][T11009] batadv_slave_1: left promiscuous mode [ 205.955047][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.701319][T11045] __nla_validate_parse: 8 callbacks suppressed [ 206.701364][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 206.730845][T11046] tipc: Enabled bearer , priority 0 [ 206.749285][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 206.791007][T11049] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 206.817893][T11049] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1025'. [ 206.851518][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 206.851590][T11051] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.906652][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1025'. [ 206.929077][T11057] netlink: 'syz.4.1029': attribute type 13 has an invalid length. [ 206.941095][T11057] netlink: 'syz.4.1029': attribute type 17 has an invalid length. [ 206.995074][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 207.024362][T11057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.129266][T11057] wg1 speed is unknown, defaulting to 1000 [ 207.136975][T11057] lo speed is unknown, defaulting to 1000 [ 207.334508][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 207.845239][ T8746] tipc: Node number set to 87036427 [ 207.943917][T11089] netlink: 'syz.1.1035': attribute type 13 has an invalid length. [ 207.987274][T11089] netlink: 'syz.1.1035': attribute type 17 has an invalid length. [ 208.035122][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 208.056561][T11089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.102460][T11089] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.108781][T11095] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 208.117035][T11095] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1037'. [ 208.132611][T11089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.235090][T11096] tipc: Enabled bearer , priority 0 [ 208.254216][T11093] wg1 speed is unknown, defaulting to 1000 [ 208.261098][T11102] syzkaller0: entered promiscuous mode [ 208.271164][T11102] syzkaller0: entered allmulticast mode [ 208.299755][T11093] lo speed is unknown, defaulting to 1000 [ 208.314632][T11101] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 208.327262][T11096] tipc: Resetting bearer [ 208.352249][T11094] tipc: Resetting bearer [ 208.363243][T11094] tipc: Disabling bearer [ 208.373770][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 208.612281][T11119] wg1 speed is unknown, defaulting to 1000 [ 208.621517][T11119] lo speed is unknown, defaulting to 1000 [ 208.792644][T11129] wg1 speed is unknown, defaulting to 1000 [ 208.802015][T11129] lo speed is unknown, defaulting to 1000 [ 209.075046][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 209.119550][T11136] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1050'. [ 209.294235][T11141] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 209.311569][T11141] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1052'. [ 209.433008][T11148] tipc: Enabling of bearer rejected, already enabled [ 209.587937][T11150] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 210.087337][T11185] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 210.115041][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 210.362048][T11204] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 211.155090][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 211.284893][T11251] tipc: Enabled bearer , priority 0 [ 211.337845][T11251] syzkaller0: entered promiscuous mode [ 211.343347][T11251] syzkaller0: entered allmulticast mode [ 211.423389][T11251] tipc: Resetting bearer [ 211.433161][T11250] tipc: Resetting bearer [ 211.505410][T11250] tipc: Disabling bearer [ 211.570311][T11255] wg1 speed is unknown, defaulting to 1000 [ 211.589410][T11255] lo speed is unknown, defaulting to 1000 [ 212.114697][T11289] wg1 speed is unknown, defaulting to 1000 [ 212.142554][T11294] wg1 speed is unknown, defaulting to 1000 [ 212.194999][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 212.237528][T11294] lo speed is unknown, defaulting to 1000 [ 212.336396][T11289] lo speed is unknown, defaulting to 1000 [ 212.580422][T11311] __nla_validate_parse: 10 callbacks suppressed [ 212.580441][T11311] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1097'. [ 213.183555][T11343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1110'. [ 213.234989][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.125496][T11396] wg1 speed is unknown, defaulting to 1000 [ 214.154773][T11396] lo speed is unknown, defaulting to 1000 [ 214.275131][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.764008][T11393] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1126'. [ 215.180933][T11451] netlink: 'syz.3.1141': attribute type 13 has an invalid length. [ 215.185501][T11450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.216047][T11451] netlink: 'syz.3.1141': attribute type 17 has an invalid length. [ 215.279378][T11451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.304034][T11451] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.315067][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 215.334817][T11451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.453958][T11461] wg1 speed is unknown, defaulting to 1000 [ 215.478085][T11461] lo speed is unknown, defaulting to 1000 [ 215.625765][T11478] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 215.633519][T11478] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1147'. [ 215.780095][T11485] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 215.790653][T11485] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1146'. [ 215.816972][T11485] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1146'. [ 216.355035][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 216.454613][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 216.683050][T11517] wg1 speed is unknown, defaulting to 1000 [ 216.721479][T11517] lo speed is unknown, defaulting to 1000 [ 216.871163][T11526] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 216.882382][T11526] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1160'. [ 217.069430][T11543] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 217.309136][T11557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.394978][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.617651][T11569] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 217.628556][T11569] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1172'. [ 217.850806][T11581] IPv6: Can't replace route, no match found [ 218.049108][T11586] wg1 speed is unknown, defaulting to 1000 [ 218.071665][T11586] lo speed is unknown, defaulting to 1000 [ 218.434987][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.982867][T11653] netlink: 'syz.4.1194': attribute type 13 has an invalid length. [ 219.024631][T11651] wg1 speed is unknown, defaulting to 1000 [ 219.030719][T11653] netlink: 'syz.4.1194': attribute type 17 has an invalid length. [ 219.088815][T11653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.109611][T11651] lo speed is unknown, defaulting to 1000 [ 219.231415][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 219.271467][T11656] wg1 speed is unknown, defaulting to 1000 [ 219.291924][T11656] lo speed is unknown, defaulting to 1000 [ 219.328238][T11662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.424162][T11665] wg1 speed is unknown, defaulting to 1000 [ 219.464696][T11665] lo speed is unknown, defaulting to 1000 [ 219.475028][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.515063][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.553861][T11731] wg1 speed is unknown, defaulting to 1000 [ 220.560773][T11731] lo speed is unknown, defaulting to 1000 [ 220.629156][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 220.914567][T11744] wg1 speed is unknown, defaulting to 1000 [ 220.932837][T11744] lo speed is unknown, defaulting to 1000 [ 221.222354][T11744] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1215'. [ 221.461221][T11774] wg1 speed is unknown, defaulting to 1000 [ 221.484758][T11774] lo speed is unknown, defaulting to 1000 [ 221.552788][T11781] wg1 speed is unknown, defaulting to 1000 [ 221.558788][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 221.601802][T11788] batadv_slave_1: entered promiscuous mode [ 221.611755][T11787] batadv_slave_1: left promiscuous mode [ 221.639874][T11781] lo speed is unknown, defaulting to 1000 [ 221.900609][T11785] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1225'. [ 222.108265][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 222.332018][T11824] batadv_slave_1: entered promiscuous mode [ 222.355889][T11823] batadv_slave_1: left promiscuous mode [ 222.595059][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 222.672415][T11835] wg1 speed is unknown, defaulting to 1000 [ 222.696747][T11835] lo speed is unknown, defaulting to 1000 [ 222.974035][T11862] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1248'. [ 223.176659][T11875] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 223.212632][T11875] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1252'. [ 223.306605][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 223.634991][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 224.675007][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 224.915401][ T5858] Bluetooth: hci2: command 0x0401 tx timeout [ 225.380352][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 225.466290][T12005] batadv_slave_1: entered promiscuous mode [ 225.486897][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1284'. [ 225.546056][T12004] batadv_slave_1: left promiscuous mode [ 225.714981][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.927998][T12033] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 225.935934][T12033] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1292'. [ 226.336280][T12058] block nbd1: not configured, cannot reconfigure [ 226.349226][T12059] block nbd4: not configured, cannot reconfigure [ 226.628691][T12074] wg1 speed is unknown, defaulting to 1000 [ 226.654661][T12074] lo speed is unknown, defaulting to 1000 [ 226.755038][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.895402][T12085] wg1 speed is unknown, defaulting to 1000 [ 226.902254][T12085] lo speed is unknown, defaulting to 1000 [ 227.710305][T12114] bridge0: entered allmulticast mode [ 227.795046][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 227.941429][T12126] batadv_slave_1: entered promiscuous mode [ 228.000275][T12124] batadv_slave_1: left promiscuous mode [ 228.582875][T12151] wg1 speed is unknown, defaulting to 1000 [ 228.592553][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 228.595855][T12151] lo speed is unknown, defaulting to 1000 [ 228.835139][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 229.014123][T12172] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 229.434847][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1329'. [ 229.798715][T12203] wg1 speed is unknown, defaulting to 1000 [ 229.808585][T12203] lo speed is unknown, defaulting to 1000 [ 229.874984][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.324235][T12238] wg1 speed is unknown, defaulting to 1000 [ 230.331952][T12241] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 230.352792][T12238] lo speed is unknown, defaulting to 1000 [ 230.358086][T12243] wg1 speed is unknown, defaulting to 1000 [ 230.365284][T12241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1342'. [ 230.407327][T12243] lo speed is unknown, defaulting to 1000 [ 230.684180][T12253] wg1 speed is unknown, defaulting to 1000 [ 230.686357][T12238] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1341'. [ 230.709575][T12253] lo speed is unknown, defaulting to 1000 [ 230.779446][T12257] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.838069][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 230.915034][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 231.156267][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 231.538059][T12317] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1361'. [ 231.803792][T12331] wg1 speed is unknown, defaulting to 1000 [ 231.826601][T12331] lo speed is unknown, defaulting to 1000 [ 231.955012][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 232.437559][T12357] netlink: 'syz.4.1371': attribute type 12 has an invalid length. [ 232.962265][T12388] sit0: entered promiscuous mode [ 232.988934][T12388] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 232.994983][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 233.026814][T12388] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1377'. [ 233.045267][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1379'. [ 233.297374][T12407] batadv_slave_1: entered promiscuous mode [ 233.363836][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1383'. [ 233.387891][T12405] batadv_slave_1: left promiscuous mode [ 233.634882][T12421] wg1 speed is unknown, defaulting to 1000 [ 233.659324][T12421] lo speed is unknown, defaulting to 1000 [ 233.912161][T12446] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 233.920271][T12446] __nla_validate_parse: 1 callbacks suppressed [ 233.920286][T12446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1395'. [ 234.035014][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 234.181205][T12462] netlink: 'syz.3.1399': attribute type 13 has an invalid length. [ 234.200208][T12462] netlink: 'syz.3.1399': attribute type 17 has an invalid length. [ 234.214845][T12462] sit0: left promiscuous mode [ 234.249369][T12462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.319090][T12467] wg1 speed is unknown, defaulting to 1000 [ 234.400441][T12467] lo speed is unknown, defaulting to 1000 [ 234.569884][T12459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.835897][T12493] batadv_slave_1: entered promiscuous mode [ 234.856593][T12492] batadv_slave_1: left promiscuous mode [ 234.984024][T12498] wg1 speed is unknown, defaulting to 1000 [ 234.997176][T12498] lo speed is unknown, defaulting to 1000 [ 235.075013][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 235.495808][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1418'. [ 235.539124][T12520] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 235.560291][T12520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1417'. [ 235.836458][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 236.115047][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.342206][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 236.779733][T12570] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 236.787969][T12570] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1432'. [ 237.027810][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 237.138094][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 237.155216][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 237.914311][T12610] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1445'. [ 238.037563][ T5858] block nbd0: Receive control failed (result -32) [ 238.195042][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 238.329278][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1457'. [ 238.645836][T12653] tipc: Resetting bearer [ 239.235035][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 239.807366][T12706] batadv_slave_1: entered promiscuous mode [ 239.848187][T12706] __nla_validate_parse: 1 callbacks suppressed [ 239.848205][T12706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1472'. [ 239.865116][T12705] batadv_slave_1: left promiscuous mode [ 240.275005][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 240.481623][T12742] wg1 speed is unknown, defaulting to 1000 [ 240.501261][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 240.540608][T12742] lo speed is unknown, defaulting to 1000 [ 240.986523][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 241.107648][T12742] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1484'. [ 241.315108][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.354996][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.378156][T12840] wg1 speed is unknown, defaulting to 1000 [ 242.427393][T12840] lo speed is unknown, defaulting to 1000 [ 242.881012][T12870] batadv_slave_1: entered promiscuous mode [ 242.918484][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 242.962625][T12869] batadv_slave_1: left promiscuous mode [ 243.361768][T12900] netlink: 'syz.0.1520': attribute type 12 has an invalid length. [ 243.395058][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 243.402011][T12899] wg1 speed is unknown, defaulting to 1000 [ 243.435999][T12899] lo speed is unknown, defaulting to 1000 [ 243.478048][T12908] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1523'. [ 243.517812][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'. [ 243.558281][T12908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1523'. [ 243.853105][T12924] batadv_slave_1: entered promiscuous mode [ 243.906693][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1526'. [ 243.936681][T12923] batadv_slave_1: left promiscuous mode [ 244.208124][T12941] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.217653][T12941] bridge0: port 3(bond5) entered blocking state [ 244.230284][T12899] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1522'. [ 244.255408][T12941] bridge0: port 3(bond5) entered disabled state [ 244.280495][T12941] bond5: entered allmulticast mode [ 244.312538][T12941] bond5: entered promiscuous mode [ 244.326909][T12941] bridge0: port 3(bond5) entered blocking state [ 244.333293][T12941] bridge0: port 3(bond5) entered forwarding state [ 244.388938][ T7698] bridge0: port 3(bond5) entered disabled state [ 244.435048][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.702153][T12959] netlink: 'syz.1.1534': attribute type 12 has an invalid length. [ 245.008405][T12982] __nla_validate_parse: 1 callbacks suppressed [ 245.008423][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'. [ 245.438833][T13011] netlink: 'syz.0.1545': attribute type 13 has an invalid length. [ 245.446830][T13011] netlink: 'syz.0.1545': attribute type 17 has an invalid length. [ 245.475171][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 245.708496][T13011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.738925][T13025] tipc: Resetting bearer [ 245.791866][T13008] wg1 speed is unknown, defaulting to 1000 [ 245.819324][T13008] lo speed is unknown, defaulting to 1000 [ 245.830540][T13014] wg1 speed is unknown, defaulting to 1000 [ 245.852051][T13014] lo speed is unknown, defaulting to 1000 [ 245.871177][T13012] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1548'. [ 245.993840][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 246.268107][T13059] block nbd0: NBD_DISCONNECT [ 246.272827][T13059] block nbd0: Send disconnect failed -32 [ 246.282716][T13059] block nbd0: shutting down sockets [ 246.478343][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 246.494577][T13068] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 246.502558][T13068] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1557'. [ 246.505538][T13063] wg1 speed is unknown, defaulting to 1000 [ 246.517521][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 246.536712][T13063] lo speed is unknown, defaulting to 1000 [ 246.658550][T13074] netlink: 'syz.4.1559': attribute type 12 has an invalid length. [ 246.753915][T13078] wg1 speed is unknown, defaulting to 1000 [ 246.799354][T13078] lo speed is unknown, defaulting to 1000 [ 247.278544][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 247.505661][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 247.514695][T13114] netlink: 'syz.2.1567': attribute type 2 has an invalid length. [ 247.555443][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.692054][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 247.921352][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 247.994163][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 248.288075][T13149] netlink: 'syz.3.1576': attribute type 12 has an invalid length. [ 248.379778][T13160] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.595080][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.814516][T13185] wg1 speed is unknown, defaulting to 1000 [ 248.857938][T13185] lo speed is unknown, defaulting to 1000 [ 249.411660][T13219] netlink: 'syz.0.1591': attribute type 12 has an invalid length. [ 249.444684][T13217] wg1 speed is unknown, defaulting to 1000 [ 249.473101][T13217] lo speed is unknown, defaulting to 1000 [ 249.634965][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.675017][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.683272][T13285] netlink: 'syz.1.1608': attribute type 12 has an invalid length. [ 251.098541][T13301] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 251.182833][T13309] netlink: 'syz.3.1614': attribute type 13 has an invalid length. [ 251.208005][T13309] netlink: 'syz.3.1614': attribute type 17 has an invalid length. [ 251.216557][T13307] bond0: (slave gretap1): making interface the new active one [ 251.249061][T13307] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 251.352192][T13309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.417978][T13301] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 251.467001][T13311] wg1 speed is unknown, defaulting to 1000 [ 251.489898][T13311] lo speed is unknown, defaulting to 1000 [ 251.507011][ T752] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 251.715042][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 251.795078][T13329] __nla_validate_parse: 2 callbacks suppressed [ 251.795096][T13329] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1620'. [ 251.965334][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 252.643102][T13367] netlink: 'syz.1.1630': attribute type 19 has an invalid length. [ 252.651447][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 252.669375][ T752] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.669467][T13367] netlink: 'syz.1.1630': attribute type 19 has an invalid length. [ 252.699554][ T752] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.720307][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 252.755109][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 252.755495][ T752] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.791302][ T752] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.290211][T13380] wg1 speed is unknown, defaulting to 1000 [ 253.333121][T13380] lo speed is unknown, defaulting to 1000 [ 253.519825][T13397] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.564087][T13396] syzkaller1: entered promiscuous mode [ 253.590076][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 253.603788][T13396] syzkaller1: entered allmulticast mode [ 253.794969][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.829297][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 253.857395][T13408] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 253.872093][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 253.953224][T13413] wg1 speed is unknown, defaulting to 1000 [ 253.994634][T13413] lo speed is unknown, defaulting to 1000 [ 254.175259][T13428] batadv_slave_1: entered promiscuous mode [ 254.244262][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 254.280786][T13426] batadv_slave_1: left promiscuous mode [ 254.839922][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 255.104347][ T5858] block nbd0: Receive control failed (result -32) [ 255.184770][T13437] nbd0: detected capacity change from 0 to 549764202496 [ 255.192565][T13413] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1645'. [ 255.209723][ T5875] block nbd0: Dead connection, failed to find a fallback [ 255.238038][ T5875] block nbd0: shutting down sockets [ 255.261426][ T5875] blk_print_req_error: 286 callbacks suppressed [ 255.261442][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.318815][ T5875] buffer_io_error: 286 callbacks suppressed [ 255.318832][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.392828][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.444445][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.482667][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.492037][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.500161][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.530526][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.568120][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.615211][ T752] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 255.620044][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.634260][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.644226][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.655687][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.664754][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.677942][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.689212][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.707244][ T5875] ldm_validate_partition_table(): Disk read failed. [ 255.727148][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.743291][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.761684][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.781803][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.832489][ T5875] Dev nbd0: unable to read RDB block 0 [ 255.851621][ T5875] nbd0: unable to read partition table [ 255.853302][T13480] batadv_slave_1: entered promiscuous mode [ 255.870138][ T5875] ldm_validate_partition_table(): Disk read failed. [ 255.875042][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 255.895309][ T5875] Dev nbd0: unable to read RDB block 0 [ 255.911211][ T5875] nbd0: unable to read partition table [ 255.936516][T13485] batadv_slave_1: entered promiscuous mode [ 256.160087][T13499] wg1 speed is unknown, defaulting to 1000 [ 256.172671][T13499] lo speed is unknown, defaulting to 1000 [ 256.265790][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 256.277197][T13484] batadv_slave_1: left promiscuous mode [ 256.285609][T13479] batadv_slave_1: left promiscuous mode [ 256.711432][T13526] wg1 speed is unknown, defaulting to 1000 [ 256.804213][T13526] lo speed is unknown, defaulting to 1000 [ 256.914972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.136530][T13550] __nla_validate_parse: 1 callbacks suppressed [ 257.136549][T13550] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1670'. [ 257.280665][T13554] batadv_slave_1: entered promiscuous mode [ 257.288105][T13561] batadv_slave_1: entered promiscuous mode [ 257.329904][T13554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1676'. [ 257.352132][T13551] batadv_slave_1: left promiscuous mode [ 257.363136][T13556] batadv_slave_1: left promiscuous mode [ 257.899690][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 257.961972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.014385][T13588] wg1 speed is unknown, defaulting to 1000 [ 258.030797][T13588] lo speed is unknown, defaulting to 1000 [ 258.722118][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.752864][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.879996][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.922119][T13659] batadv_slave_1: entered promiscuous mode [ 258.933906][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.965703][T13656] batadv_slave_1: left promiscuous mode [ 258.995032][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.635485][T13703] syzkaller1: entered promiscuous mode [ 259.649155][T13703] syzkaller1: entered allmulticast mode [ 259.903901][T13714] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 259.927684][T13714] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1712'. [ 260.034975][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.195098][ T8739] page_pool_release_retry() stalled pool shutdown: id 40, 1 inflight 60 sec [ 260.217934][T13731] netlink: 'syz.3.1716': attribute type 21 has an invalid length. [ 260.240312][T13729] wg1 speed is unknown, defaulting to 1000 [ 260.275989][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 260.290343][T13729] lo speed is unknown, defaulting to 1000 [ 260.348906][T13731] netlink: 'syz.3.1716': attribute type 21 has an invalid length. [ 260.368305][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 260.398520][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.416796][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 260.440911][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.469421][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 260.478723][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.498693][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.783140][T13762] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 260.805038][T13762] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1725'. [ 261.075085][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 261.605855][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.747643][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.884868][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 261.982778][ T7698] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.015690][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.024113][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.082221][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.114977][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.126763][T13808] batadv_slave_1: entered promiscuous mode [ 262.134149][T13806] batadv_slave_1: left promiscuous mode [ 262.343623][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 262.448116][T13837] netlink: 'syz.0.1745': attribute type 11 has an invalid length. [ 262.457123][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 262.550000][T13837] netlink: 'syz.0.1745': attribute type 11 has an invalid length. [ 262.558247][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 262.618123][T13842] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 262.644135][T13842] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1746'. [ 262.891095][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 263.086498][T13872] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 263.094363][T13872] netlink: 'syz.4.1754': attribute type 6 has an invalid length. [ 263.103676][T13872] netlink: 'syz.4.1754': attribute type 3 has an invalid length. [ 263.154976][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.990587][T13920] pimreg: entered allmulticast mode [ 264.119520][T13927] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 264.178640][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 264.194968][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 265.234975][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 265.347108][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 265.447295][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 265.475180][T13988] netlink: 'syz.4.1780': attribute type 20 has an invalid length. [ 265.488471][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 265.498529][ T1119] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.515223][ T1119] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.523473][T13988] netlink: 'syz.4.1780': attribute type 20 has an invalid length. [ 265.544977][ T1119] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.553193][ T1119] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.055819][T13997] infiniband syz2: set down [ 266.065272][T13997] infiniband syz2: added batadv_slave_1 [ 266.191236][T13997] RDS/IB: syz2: added [ 266.209586][T13997] smc: adding ib device syz2 with port count 1 [ 266.216910][T13997] smc: ib device syz2 port 1 has pnetid [ 266.260408][T14006] netlink: 'syz.1.1788': attribute type 1 has an invalid length. [ 266.274976][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 266.282804][T14006] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1788'. [ 267.315057][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.532080][T14054] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.592456][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1803'. [ 267.938757][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 267.972695][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 268.011071][T14077] wg1 speed is unknown, defaulting to 1000 [ 268.046131][T14077] lo speed is unknown, defaulting to 1000 [ 268.123220][ T8739] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec [ 268.355134][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.363065][T14093] netlink: 'syz.1.1811': attribute type 13 has an invalid length. [ 268.371409][T14093] netlink: 'syz.1.1811': attribute type 17 has an invalid length. [ 268.459059][T14093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.689999][T14096] wg1 speed is unknown, defaulting to 1000 [ 268.757940][T14111] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1819'. [ 268.792201][T14111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.813655][T14096] lo speed is unknown, defaulting to 1000 [ 268.951797][T14116] wg1 speed is unknown, defaulting to 1000 [ 268.973777][T14116] lo speed is unknown, defaulting to 1000 [ 269.034184][T14084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.229770][T14128] wg1 speed is unknown, defaulting to 1000 [ 269.240720][T14128] lo speed is unknown, defaulting to 1000 [ 269.395028][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 269.419254][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 269.527684][T14132] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1824'. [ 270.054819][T14172] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 270.365729][T14191] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.435025][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.859471][ T30] audit: type=1800 audit(1755932239.174:7): pid=14215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1849" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1817 res=0 errno=0 [ 270.935630][ T30] audit: type=1804 audit(1755932239.204:8): pid=14215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1849" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1817 res=1 errno=0 [ 271.020036][T14207] syzkaller1: entered promiscuous mode [ 271.035353][T14207] syzkaller1: entered allmulticast mode [ 271.474982][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.801983][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 272.090434][T14282] netlink: 'syz.1.1867': attribute type 3 has an invalid length. [ 272.098885][T14282] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 272.107172][T14282] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1867'. [ 272.209559][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1868'. [ 272.231373][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1868'. [ 272.515008][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.815328][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 273.126155][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 273.139265][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 273.318558][T14360] wg1 speed is unknown, defaulting to 1000 [ 273.343776][T14360] lo speed is unknown, defaulting to 1000 [ 273.554972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 274.311231][T14402] wg1 speed is unknown, defaulting to 1000 [ 274.384065][T14402] lo speed is unknown, defaulting to 1000 [ 274.595015][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.401175][T14459] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.485339][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 275.523279][T14459] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.616769][T14459] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.634998][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.766340][T14459] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.917973][ T7698] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.939273][ T7698] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.018040][ T7698] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.035868][T14478] wg1 speed is unknown, defaulting to 1000 [ 276.041906][ T7698] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.054387][T14478] lo speed is unknown, defaulting to 1000 [ 276.674932][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 276.681738][T14509] wg1 speed is unknown, defaulting to 1000 [ 276.703808][T14509] lo speed is unknown, defaulting to 1000 [ 276.820155][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 276.854012][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 277.715407][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 278.135336][T14556] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1940'. [ 278.314451][T14560] wg1 speed is unknown, defaulting to 1000 [ 278.334462][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 278.361281][T14568] vlan2 (unregistering): left allmulticast mode [ 278.408512][T14568] veth1 (unregistering): left allmulticast mode [ 278.438492][T14568] vlan2 (unregistering): left promiscuous mode [ 278.444692][T14568] veth1 (unregistering): left promiscuous mode [ 278.470193][T14568] bridge1: port 3(vlan2) entered disabled state [ 278.504563][T14560] lo speed is unknown, defaulting to 1000 [ 278.755010][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 279.124100][T14599] bond0: (slave wlan1): Releasing backup interface [ 279.167646][T14599] vlan3: left promiscuous mode [ 279.172695][T14599] bridge0: left promiscuous mode [ 279.178692][T14599] bridge2: port 1(vlan3) entered disabled state [ 279.482530][T14619] wg1 speed is unknown, defaulting to 1000 [ 279.497166][T14619] lo speed is unknown, defaulting to 1000 [ 279.667865][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1959'. [ 279.795003][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.348581][T14498] Set syz1 is full, maxelem 65536 reached [ 280.391707][T14647] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.1964:14647 [ 280.811362][T14671] tipc: Enabled bearer , priority 0 [ 280.834989][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.849238][T14671] syzkaller0: entered promiscuous mode [ 280.854840][T14671] syzkaller0: entered allmulticast mode [ 280.867302][T14671] tipc: Resetting bearer [ 280.909695][T14670] tipc: Resetting bearer [ 281.012721][T14670] tipc: Disabling bearer [ 281.315080][ C0] ================================================================== [ 281.323186][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x471/0x4b0 [ 281.330654][ C0] Read of size 2 at addr ffff888054e3d82a by task syz.2.1976/14692 [ 281.338531][ C0] [ 281.340860][ C0] CPU: 0 UID: 0 PID: 14692 Comm: syz.2.1976 Not tainted syzkaller #0 PREEMPT(full) [ 281.340878][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.340893][ C0] Call Trace: [ 281.340900][ C0] [ 281.340907][ C0] dump_stack_lvl+0x189/0x250 [ 281.340928][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.340944][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.340960][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.340974][ C0] ? lock_release+0x4b/0x3e0 [ 281.340997][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 281.341017][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 281.341036][ C0] print_report+0xca/0x240 [ 281.341051][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 281.341072][ C0] kasan_report+0x118/0x150 [ 281.341094][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 281.341116][ C0] rose_timer_expiry+0x471/0x4b0 [ 281.341138][ C0] call_timer_fn+0x17e/0x5f0 [ 281.341159][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 281.341178][ C0] ? call_timer_fn+0xbe/0x5f0 [ 281.341199][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 281.341222][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.341237][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 281.341258][ C0] __run_timer_base+0x61a/0x860 [ 281.341277][ C0] ? ktime_get+0x3e/0x1f0 [ 281.341297][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 281.341315][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 281.341338][ C0] run_timer_softirq+0xb7/0x180 [ 281.341359][ C0] handle_softirqs+0x283/0x870 [ 281.341376][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 281.341391][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 281.341408][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 281.341427][ C0] __irq_exit_rcu+0xca/0x1f0 [ 281.341441][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 281.341459][ C0] irq_exit_rcu+0x9/0x30 [ 281.341472][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 281.341494][ C0] [ 281.341500][ C0] [ 281.341505][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.341522][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 281.341546][ C0] Code: 74 05 e8 cb e6 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 43 8f 13 f6 65 8b 05 0c 12 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 281.341560][ C0] RSP: 0018:ffffc9001c9f7440 EFLAGS: 00000206 [ 281.341579][ C0] RAX: 62c74b9fa77aa600 RBX: 0000000000000a06 RCX: 62c74b9fa77aa600 [ 281.341590][ C0] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: 0000000000000001 [ 281.341600][ C0] RBP: ffffc9001c9f74d8 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 281.341617][ C0] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: dffffc0000000000 [ 281.341629][ C0] R13: 1ffff9200393eeb7 R14: ffff88807c7c2a40 R15: 1ffff9200393ee88 [ 281.341648][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.341671][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.341686][ C0] ? prepare_to_wait_exclusive+0x8d/0x240 [ 281.341704][ C0] prepare_to_wait_exclusive+0xe7/0x240 [ 281.341725][ C0] __skb_wait_for_more_packets+0x139/0x580 [ 281.341747][ C0] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 281.341765][ C0] ? __pfx_receiver_wake_function+0x10/0x10 [ 281.341782][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 281.341806][ C0] skb_recv_datagram+0x119/0x190 [ 281.341826][ C0] rawv6_recvmsg+0x25e/0xca0 [ 281.341852][ C0] ? __pfx_rawv6_recvmsg+0x10/0x10 [ 281.341876][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.341891][ C0] sock_common_recvmsg+0x106/0x1b0 [ 281.341911][ C0] ? irqentry_exit+0x74/0x90 [ 281.341931][ C0] ? exc_page_fault+0x9f/0xf0 [ 281.341952][ C0] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 281.341974][ C0] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 281.341995][ C0] sock_recvmsg_nosec+0x183/0x1c0 [ 281.342018][ C0] ____sys_recvmsg+0x3aa/0x460 [ 281.342037][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 281.342058][ C0] ? import_iovec+0x74/0xa0 [ 281.342076][ C0] ___sys_recvmsg+0x1b5/0x510 [ 281.342094][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 281.342109][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 281.342131][ C0] ? __fget_files+0x2a/0x420 [ 281.342150][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.342165][ C0] ? lock_release+0x4b/0x3e0 [ 281.342185][ C0] ? __might_fault+0xcc/0x130 [ 281.342206][ C0] do_recvmmsg+0x307/0x770 [ 281.342226][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 281.342246][ C0] ? __pfx_do_futex+0x10/0x10 [ 281.342269][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 281.342287][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 281.342305][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.342321][ C0] do_syscall_64+0xfa/0x3b0 [ 281.342334][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.342349][ C0] ? clear_bhb_loop+0x60/0xb0 [ 281.342366][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.342381][ C0] RIP: 0033:0x7f411f98ebe9 [ 281.342398][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.342412][ C0] RSP: 002b:00007f4120780038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 281.342426][ C0] RAX: ffffffffffffffda RBX: 00007f411fbb6090 RCX: 00007f411f98ebe9 [ 281.342438][ C0] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 281.342448][ C0] RBP: 00007f411fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.342458][ C0] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 281.342467][ C0] R13: 00007f411fbb6128 R14: 00007f411fbb6090 R15: 00007ffc853a1648 [ 281.342484][ C0] [ 281.342490][ C0] [ 281.874933][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 281.875568][ C0] The buggy address belongs to the physical page: [ 281.888894][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x54e3d [ 281.898955][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 281.906064][ C0] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 281.914636][ C0] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 281.923203][ C0] page dumped because: kasan: bad access detected [ 281.929606][ C0] page_owner tracks the page as freed [ 281.934956][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12531, tgid 12529 (syz.2.1421), ts 235943621704, free_ts 266499109411 [ 281.956476][ C0] post_alloc_hook+0x240/0x2a0 [ 281.961241][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 281.966778][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 281.972571][ C0] alloc_pages_mpol+0x232/0x4a0 [ 281.977414][ C0] allocate_slab+0x8a/0x370 [ 281.981906][ C0] ___slab_alloc+0xbeb/0x1410 [ 281.986575][ C0] __kmalloc_noprof+0x305/0x4f0 [ 281.991416][ C0] copy_splice_read+0x143/0xa50 [ 281.996259][ C0] splice_direct_to_actor+0x4d0/0xcc0 [ 282.001623][ C0] do_splice_direct+0x181/0x270 [ 282.006466][ C0] do_sendfile+0x4da/0x7e0 [ 282.010868][ C0] __se_sys_sendfile64+0x13e/0x190 [ 282.015974][ C0] do_syscall_64+0xfa/0x3b0 [ 282.020463][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.026340][ C0] page last free pid 5875 tgid 5875 stack trace: [ 282.032647][ C0] __free_frozen_pages+0xbc4/0xd30 [ 282.037759][ C0] __slab_free+0x303/0x3c0 [ 282.042162][ C0] qlist_free_all+0x97/0x140 [ 282.046749][ C0] kasan_quarantine_reduce+0x148/0x160 [ 282.052197][ C0] __kasan_slab_alloc+0x22/0x80 [ 282.057048][ C0] __kmalloc_noprof+0x224/0x4f0 [ 282.061906][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.067446][ C0] tomoyo_path_perm+0x213/0x4b0 [ 282.072295][ C0] security_inode_getattr+0x12f/0x330 [ 282.077658][ C0] __x64_sys_newfstat+0xfc/0x200 [ 282.082583][ C0] do_syscall_64+0xfa/0x3b0 [ 282.087071][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.092954][ C0] [ 282.095264][ C0] Memory state around the buggy address: [ 282.100878][ C0] ffff888054e3d700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.108922][ C0] ffff888054e3d780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.116968][ C0] >ffff888054e3d800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.125023][ C0] ^ [ 282.130395][ C0] ffff888054e3d880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.138445][ C0] ffff888054e3d900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.146489][ C0] ================================================================== [ 282.154737][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 282.161941][ C0] CPU: 0 UID: 0 PID: 14692 Comm: syz.2.1976 Not tainted syzkaller #0 PREEMPT(full) [ 282.171329][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.181387][ C0] Call Trace: [ 282.184676][ C0] [ 282.187526][ C0] dump_stack_lvl+0x99/0x250 [ 282.192122][ C0] ? __asan_memcpy+0x40/0x70 [ 282.196711][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.201918][ C0] ? __pfx__printk+0x10/0x10 [ 282.206508][ C0] vpanic+0x281/0x750 [ 282.210483][ C0] ? __pfx_vpanic+0x10/0x10 [ 282.214979][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.219745][ C0] panic+0xb9/0xc0 [ 282.223461][ C0] ? __pfx_panic+0x10/0x10 [ 282.227869][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 282.233757][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 282.239648][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 282.244755][ C0] check_panic_on_warn+0x89/0xb0 [ 282.249688][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 282.254885][ C0] end_report+0x78/0x160 [ 282.259131][ C0] kasan_report+0x129/0x150 [ 282.263628][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 282.268737][ C0] rose_timer_expiry+0x471/0x4b0 [ 282.273670][ C0] call_timer_fn+0x17e/0x5f0 [ 282.278258][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 282.283713][ C0] ? call_timer_fn+0xbe/0x5f0 [ 282.288400][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 282.293511][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.298263][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 282.303719][ C0] __run_timer_base+0x61a/0x860 [ 282.308565][ C0] ? ktime_get+0x3e/0x1f0 [ 282.312886][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 282.318254][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 282.324496][ C0] run_timer_softirq+0xb7/0x180 [ 282.329342][ C0] handle_softirqs+0x283/0x870 [ 282.334103][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 282.338854][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 282.344129][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 282.349320][ C0] __irq_exit_rcu+0xca/0x1f0 [ 282.353898][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 282.359086][ C0] irq_exit_rcu+0x9/0x30 [ 282.363318][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 282.368945][ C0] [ 282.371867][ C0] [ 282.374783][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.380756][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 282.387253][ C0] Code: 74 05 e8 cb e6 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 43 8f 13 f6 65 8b 05 0c 12 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 282.406848][ C0] RSP: 0018:ffffc9001c9f7440 EFLAGS: 00000206 [ 282.412910][ C0] RAX: 62c74b9fa77aa600 RBX: 0000000000000a06 RCX: 62c74b9fa77aa600 [ 282.420870][ C0] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: 0000000000000001 [ 282.428833][ C0] RBP: ffffc9001c9f74d8 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 282.436798][ C0] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: dffffc0000000000 [ 282.444760][ C0] R13: 1ffff9200393eeb7 R14: ffff88807c7c2a40 R15: 1ffff9200393ee88 [ 282.452732][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.459061][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.463819][ C0] ? prepare_to_wait_exclusive+0x8d/0x240 [ 282.469531][ C0] prepare_to_wait_exclusive+0xe7/0x240 [ 282.475101][ C0] __skb_wait_for_more_packets+0x139/0x580 [ 282.480903][ C0] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 282.487225][ C0] ? __pfx_receiver_wake_function+0x10/0x10 [ 282.493106][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 282.498476][ C0] skb_recv_datagram+0x119/0x190 [ 282.503408][ C0] rawv6_recvmsg+0x25e/0xca0 [ 282.508002][ C0] ? __pfx_rawv6_recvmsg+0x10/0x10 [ 282.513114][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.517867][ C0] sock_common_recvmsg+0x106/0x1b0 [ 282.522973][ C0] ? irqentry_exit+0x74/0x90 [ 282.527557][ C0] ? exc_page_fault+0x9f/0xf0 [ 282.532229][ C0] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 282.537860][ C0] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 282.543491][ C0] sock_recvmsg_nosec+0x183/0x1c0 [ 282.548513][ C0] ____sys_recvmsg+0x3aa/0x460 [ 282.553271][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 282.558553][ C0] ? import_iovec+0x74/0xa0 [ 282.563049][ C0] ___sys_recvmsg+0x1b5/0x510 [ 282.567717][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 282.572906][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 282.578794][ C0] ? __fget_files+0x2a/0x420 [ 282.583379][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.588131][ C0] ? lock_release+0x4b/0x3e0 [ 282.592717][ C0] ? __might_fault+0xcc/0x130 [ 282.597387][ C0] do_recvmmsg+0x307/0x770 [ 282.601800][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 282.606734][ C0] ? __pfx_do_futex+0x10/0x10 [ 282.611414][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 282.616432][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 282.621968][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.626727][ C0] do_syscall_64+0xfa/0x3b0 [ 282.631222][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.637294][ C0] ? clear_bhb_loop+0x60/0xb0 [ 282.641963][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.647847][ C0] RIP: 0033:0x7f411f98ebe9 [ 282.652252][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.671847][ C0] RSP: 002b:00007f4120780038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 282.680259][ C0] RAX: ffffffffffffffda RBX: 00007f411fbb6090 RCX: 00007f411f98ebe9 [ 282.688223][ C0] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 282.696185][ C0] RBP: 00007f411fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 282.704146][ C0] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 282.712105][ C0] R13: 00007f411fbb6128 R14: 00007f411fbb6090 R15: 00007ffc853a1648 [ 282.720076][ C0] [ 282.723241][ C0] Kernel Offset: disabled [ 282.727552][ C0] Rebooting in 86400 seconds..