last executing test programs: 40.87714006s ago: executing program 0 (id=1252): socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x60000000}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x60480) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="fdedeacf99ad71", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, 0x0, 0x20000000, 0x4}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) 40.750251419s ago: executing program 0 (id=1254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x10001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900efff72797a30000000000900020073797a3200000000380000001c0a05000000000000000000020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) close(0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/100, 0x64, 0x0, &(0x7f0000000200)=""/144, 0x90}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r6, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 39.798480016s ago: executing program 0 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd26, 0x400000, {0x0, 0x0, 0x0, 0x0, 0x31023, 0x2c822}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x20048000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 39.485830329s ago: executing program 0 (id=1272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x776f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x776f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) (async) 39.305767984s ago: executing program 0 (id=1275): r0 = socket(0x23, 0x80002, 0xfffffffc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) listen(r1, 0xfff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004814}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x424, 0x3f3, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x2, 0xa, [0x331, 0x5, 0x4, 0x6, 0x4, 0x6, 0x38000000, 0x0, 0x800, 0x7, 0x400, 0x2, 0x40, 0x3, 0xff, 0x10, 0x0, 0x5, 0x3, 0x1, 0x6, 0x8, 0x3, 0x7fffffff, 0x0, 0x2, 0x4, 0x131c, 0xffffffff, 0x4, 0x2, 0x4, 0x0, 0x9, 0x80, 0x78, 0x6, 0x6, 0x9, 0x8e3b, 0x4, 0x6, 0x6, 0xb, 0x9, 0xa15, 0x1, 0x10000, 0x6, 0x8, 0x5280000, 0x7, 0x7f, 0x6, 0x5, 0x7, 0x430b, 0x4548c221, 0x7, 0x1, 0xe, 0x40, 0x9, 0xa], [0x400, 0x9, 0xb9ed, 0x0, 0x10002, 0x386d, 0x6, 0x800, 0xfffffff9, 0xfa20, 0x1, 0x5b, 0x6, 0x2, 0x7, 0x800, 0x2, 0x81, 0x4, 0xe, 0x4, 0x6, 0x5, 0x5, 0x8, 0xd, 0x3, 0x3, 0x6, 0x2951, 0xcb000000, 0x6, 0x1, 0x81, 0x8001, 0x4, 0x9, 0x6, 0x7, 0x2, 0x7, 0x6, 0x4, 0x8001, 0x20000000, 0x6, 0xb, 0x8, 0x5, 0x6, 0x8000, 0xe4, 0xffffa96a, 0x8000, 0x290, 0x5, 0x8, 0x1000, 0x7, 0x4, 0x80, 0x3fc79db8, 0xffffff81, 0x5], [0x3, 0x3, 0x6, 0x0, 0x7f, 0x6, 0xff, 0x1, 0x0, 0x0, 0xc9, 0x5, 0x7, 0x6, 0x2000, 0x6, 0xa2a, 0x54ad, 0xeb, 0x3400000, 0x0, 0x1, 0x2, 0x2b34154d, 0xb, 0x1, 0xffffff01, 0x5, 0x6, 0xc5, 0x7fffffff, 0x9, 0xffff, 0x4, 0x45, 0x2, 0xfff, 0x7f, 0x80000000, 0xa3d, 0x2a30, 0x8, 0x3, 0x3, 0x2, 0x1, 0x3, 0x4, 0x4ee, 0x92, 0x6, 0x0, 0x6, 0x5d, 0x8001, 0x9, 0x0, 0x7f, 0xfffffffc, 0x6, 0x1, 0x9, 0x82d2, 0x5], [0x4, 0x3, 0x4, 0xffff, 0x6, 0x3, 0x81, 0x8, 0x2, 0x0, 0x0, 0xfffffff9, 0x3, 0xffffffff, 0x0, 0x8, 0x7, 0x7, 0x29c, 0x7, 0x565f, 0x81, 0x8, 0x8, 0xbf2a, 0xfffffffb, 0xbab, 0x2, 0xf4, 0x6, 0x5, 0x7, 0x12d80000, 0x7f, 0xc, 0x40, 0x8, 0x10, 0x5, 0xfffffffa, 0x3, 0x3, 0xa6a4, 0x4, 0x8, 0x4, 0x7, 0x101, 0xffff, 0x3, 0x5, 0x4, 0x8001, 0x7, 0x7, 0x5, 0xc10, 0x8a9, 0x9, 0x1, 0x7, 0xffff1904, 0x1, 0x10001], 0x4, ['GPL\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0401342a8e1fc22d99260fb52598a394ca9dce91b347094c624b2426c6e79c33044e2562203a7bf01c6d8fd1ee6690f32f9fa915b65912172c8775709d637598e0c81aac7b8ff39c01c8060746db5fd88ecd4ede9800000000000000000097140707ac911795d628665842bdd2558acf64fbfc0d41588bf623d56fe05a7cf6a1b2ac34cd4e2445a332ecedea297c8121f7ebf42bc5663682173f02c6a98c4ba4861092c1367f9edb20e9475ce1a047eec2c9b6065e572179c42c3e9040b4e98b3cbbce85eaf8"], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x18001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x7, 0x9}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d80)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="6188ac060452d60a4479cbb5f9099c217c5ff0a78e4794996c41672f2d23018cf53a2fc1aeaf0bed9e06df8c577c9a1b5bdd8359aa3639f1afd3184542b582cb368ab7937b6dd8e3d76b33354d44dda2b0af8672c99b8171d599fe570ae58133d5e433b9802bb983d9310b8c0c7545f7fbf19e432d3814b85c1f2e48a360104451e91fb2a7eeeed6e1bfe25205090c778bc128c0a1e33feb4db48ec9d096c7113e79a5c2b1bb5f17b35bca60c435c6", @ANYRES32=r5, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0x2400c041}, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000b40)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @bcast, @bcast]}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=@newlink={0x80, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4920}, [@IFLA_VFINFO_LIST={0x60, 0x16, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x82f, 0x9b, 0x5}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd1d, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x43, 0xfffff756}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xdb6, 0x5}}]}]}]}, 0x80}}, 0x8051) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100010000000000000000008000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x44) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 39.076305146s ago: executing program 0 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r6, 0x25, 0x2, @void}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x0, r6, 0x29229, 0x48808}}, 0x20}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000240)) (async) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000180)=""/85, 0x0, 0x4000000, 0x0, 0x44, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x50) 23.959891427s ago: executing program 32 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r6, 0x25, 0x2, @void}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x0, r6, 0x29229, 0x48808}}, 0x20}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000240)) (async) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000180)=""/85, 0x0, 0x4000000, 0x0, 0x44, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x50) 3.954006153s ago: executing program 3 (id=1626): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r3, 0x0, 0x6) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000f900"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r7 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) (async) ppoll(&(0x7f0000000280)=[{r4}, {r3, 0x530}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) 3.756959347s ago: executing program 3 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) recvmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r4, 0x3}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6], 0xd4}}, 0x0) 2.788887279s ago: executing program 3 (id=1639): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41101}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x1800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="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", 0xff0, 0x4000090, &(0x7f0000001080)={0x11, 0xd, r12, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) 2.550383889s ago: executing program 5 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x13, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x1, 0x0, 0x1, 0x5, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @exit], &(0x7f0000000180)='GPL\x00', 0x5, 0x8f, &(0x7f0000000340)=""/143, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x200001c2, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}}, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0xdc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000540)="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", 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.427373025s ago: executing program 5 (id=1644): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000edffffff0300680000000000000089e30000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000700003c002289c41e23f7000000b5c25f98371f610c6503935dae8c95e5494eaed5da84174d5cc760e4e5eb8dece6ac"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000500), 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) mmap(&(0x7f0000f88000/0x5000)=nil, 0x5000, 0x2000008, 0x30, 0xffffffffffffffff, 0xc5861000) 2.034766871s ago: executing program 2 (id=1647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080100001600010072cc7000fbdbdf25fe9f00000000000000000000000000aae00000020000000000000000000000004e23000f4e23000e020020005e000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000004d66c0000000a010100000000000000000000000000080000000000000000010000000000000500000000000000070000000000000000100000000000000100000000000000000000000000000000000100000000000200000000000000090000000000000003000000000000005d19000000000000090000000600000000f8ffff25bd7000013500000a0001daec00000000000000030000002b03000008001d"], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @ldst={0x3, 0x1, 0x4, 0xf, 0x6, 0x2, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x3, 0x8, 0x3, 0x50, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x15, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x9, 0x2, 0x3ebe}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x4, 0x5, 0x5, 0x6}, {0x3, 0x4, 0xd, 0x9}, {0x3, 0xfffffffd, 0x9, 0x5}, {0x4, 0x1, 0xe, 0x5}, {0x5, 0x5, 0x9, 0x6}], 0x10, 0x55}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='svcsock_tcp_state\x00', r5, 0x0, 0x9}, 0x18) 1.866919478s ago: executing program 2 (id=1650): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="012027bd60000400000005000000080009020200000008000c00a80a0000060001000700000008000b0020000000050012007f000000"], 0x3c}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff06000000000000209500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x9, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000003c0)="8e252f33", 0x4}], 0x2}}], 0x1, 0x24000054) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4d, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="012027bd60000400000005000000080009020200000008000c00a80a0000060001000700000008000b0020000000050012007f000000"], 0x3c}}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff06000000000000209500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x9, 0x5, 0x0) (async) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000003c0)="8e252f33", 0x4}], 0x2}}], 0x1, 0x24000054) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4d, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) (async) 1.770683744s ago: executing program 2 (id=1652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.617768601s ago: executing program 2 (id=1653): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000580), &(0x7f00000002c0)=""/168}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x1, 0x2}, {0x10, 0xf, 0x8}], 0x20}, 0x4054) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, 0xffffffffffffffff, 0x1001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x6000004, 0x4010, r6, 0x2d73b000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0xfffffff9}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000003000000850000001100000018110000", @ANYRES32=r7, @ANYRES16=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000180)=0x7a4, 0x4) 1.50197337s ago: executing program 3 (id=1654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x12, 0x0, &(0x7f0000001a00)="2000cb3c0000000022385ba988a88dc288a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0xfffffffffffffdfd, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x12, 0x0, &(0x7f0000001a00)="2000cb3c0000000022385ba988a88dc288a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0xfffffffffffffdfd, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) (async) 1.500919638s ago: executing program 4 (id=1655): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000012c0)="8eca2a8848d15d1ffbb6de2b1e5fc932d6f5041d84edb80efcc6f3089c8cb5c5e84ed0428280c531f6a267498ad442991090837237da597ae9", 0x39}, {&(0x7f0000001400)="472420d6c331e13a8701947600546d397c7acbfde476ef2e5fb0038a19a340e9e8916976439c146d5dcee3581b500e8f6d402fbf082f555c3068ca9c21cd766892f3f98cec4698a65a5ceff50332e462e4aa4a4fefc7b3bf64b897849142c7409396d41ce97ef21f9b2ee747a2918d2053c08acd43d9c140e7fa820a66c64cd88f2c84aa7630b4e0b61be0", 0x8b}, {&(0x7f00000014c0)="46f8ee5335a58b71077f8a59864e8ba0c7b844ce15045a99e1eec1fc17985d34365e33329f8f82ad8072b123fc8f5bf934e1e050505c9a8266d10793f6e47412aaa9f5c1c37a4d21374972163057980dd8e97aab919f8202ace088d834", 0x5d}, {&(0x7f0000001540)="82c3d57e0d8112baa3b1e624a3edf9f1826865008eb5f17864cb68e6096c9bcebaa43302bf5ddb522ebcb092632769ded255d911dba62468bc1dc5abd14361e6ed4b50ecdaf83bc72f03a2c35af120de5fea5bbe0a46f0ae5c172caefb764a7e8e4fe62ad4318157f9b3f49dfae9f9df77b84655761db05bc291f440", 0x7c}], 0x4, &(0x7f00000015c0)=[{0x20, 0x111, 0x400, "363a88c8a2096aaca27c"}, {0x90, 0x119, 0x3, "0cc4343c95a825dd96f5c6610a3cba74af5497c1b039668b53d31351bbf27173d3b304900865159c5dbe7d5b536c0d5944a8e3756103bf861752b7ba880d46cf394e1ed089507841822bbde9da72294ee39ac13157657f5c55653ff45d72a9a728dc9dac2fdee7a01b44146ae230ec9e52bf91cce86bbaba632b"}], 0xb0}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000040000003900000008000300", @ANYRES32=r6, @ANYBLOB="88613700000000f3ff005b78508fcec5c2b4335500994267"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x47}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040080) 1.499804504s ago: executing program 3 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf2504", @ANYRES64=r0, @ANYBLOB="6e5c7bcb5f8a24c7a85a60b72adc2a615be021452d59ebb397f685a9d921cecad2b601ea4cdeb8a95aa770eaae97c3173ab25d1fbda1624300122c734b220f1a5b4d3121437960e9eebe9bf34dae40a283ed7064987bccc14f3c8214ca545db5202654e706669a5cd339343e82932eff5de2d117e09aee4693463ae1edeac034117aa139b81a6d69735d34c96af55834689c881d809da750292372e9b6285101e89cf6bcb913bdfb23f76db4c0db9e55ff4cd3b50a11cf2be022694ac30c2565d637e2b4d597b5540d4381fb1c3a7b46797b32ab9081b66dff566603315d85d71cbab83d4b76070feb875f6aca83ff6f04878633c27a12a1281b8c13b9a5e56c0e4109f9a08df38733e376da3acf52cd3828bfba7029c806d1ef22c35e73135c39c8bac11e49d6e8cc4965a00bdbefdb0b7558e80aeecc7ded119914263657c3c13020907494d321d143729bc6d9a743722afb31252c624c5b1e133d67c1f2ba227e108fae6e5b078722eac1b589d4348a8ec50407b588f908e20c9d541ef4fcf973085a4c181f1671f6b3bc153564d271915977a47c32922c7851a759f371fd49f835c24cb6fdaa40f7e24671568556cc67b2f9a81aee8493ea6c190b38b9f24e2b3550e75ba2f7b0ca7c26dde436f2a7c2bcfa085cf9a28f2050df06e5298f8182c3d94016a61b34a620dc33bc10edf03f9411127aec9961dbd2a63163e0cd9410cbf76c4741d2f9a4d45f8f7bf213b0162907dc20f6348a4943dd2a475c08d0048c0ab474c027a2f2036b66ee8225867b3f0484dbb57c9a1407d8acdefd4cfe132f18eeb97543d28a8086398ee0f3056f7143885b0070972ef68b7c638f169feef55abb4af30aa6bbd53d1991234d9b44c33ee89922f3fe0dccc3e28453a7ea8c7812e3bf5ee3a079ccba3418352fae5693c5fbae5b20289e69ffdf254fc01fa2b39cf005652050c76c9f559a95f4ebba5cce3e18784ce6c20cad9bcf0ca67d214eb8604277c2bec829eead393817d5204216ebd6a1353eeaac6a119d19486d49fb751576c56c00c4e9bad55e1a912b09a04376e866d03ea68fd60485bdf989e6fb4d24d0750f91ce909382cfb9df1a67c6d5093c7222f462ef986cb5e0c84a93cbff9f927503780c455f17a58ed58302af1d8c6ae2bf7e08f634c8ebc69edf3eb88b7a8beba004f97fd15cac4e01d38547f192005b9d5e5f9d392b1ffbef340f6812d17be234540e08315bcf30c73e5ea866848450c5fac97f34b12ced5c165506e288be82ef3c64add89ed2605e1c42758300af3c4cf5398ef3f18cdbf660cfe7075aced02c639b3a30d98668c2eb1ad3d8c95351c13e6304d3614754b873fc4a0a3c9920ff6fd183c2366f0397344226556ee83c7fa4ca657e0da235328bdd7a8e2e0aec132cf2a6c29f756f8adac6c1a0f14708f1e5526b42ad465c648960cbedf97392a6c721ed002d8adc8a603ce0a468135409fafde89bcc3cc2080a50b8ae31ab3422ec7189cc7da3a7878b078ed35b98340423c8ec4c4441350f5847dbf034328516669fe42af0d8d9b6de744fca0566244c7cd6a0b0353c7ae2129f7cb438d4d3544233bf2db41e32ab055e164432c7b06d7e97eb3379b7d701cbcb695ddb44acf2b7fd34e623335274d856598abe3d3b1c03433c5ab69c1e5f724b5a633d75f30fd676bfc781d27fe166d1136f625a3f685a5a27b693689c07b0e0758f22bd5ef87d14a11e648495f0fd373a33a45f8d1f0c3b9466468a16ee24ad550a14cdccdcf87184999643d1e4891ea3753d8a2b15b296f285e7ef368f2c8e63b2a6576859b952f1c1dd433b471ee62e090671c07968d3ce88d03a3159acaff540e6dfd512d124ec95d5055397284d67a384d3e1720c99db9a6a96ec14d1877ca34a210535c80c83c1ab5fd26019f98a51d99a02c4bdf575e9afaed1629ddac2749a7b76b61a0d6a227fef1c944ad87586f0abf6c7b731cb2ce295e77d3ed15db6d6a7cb2879c3f603d8078d5b037be9f5c8bd042bfbae32fcd1e9d231b390e1d416a9de3f1682159807049df1e4b93ded649812526f74afebe77dc1b4f0cfe4e4eb448f9376638c8286c42fdb665947f913738258c2fc49524a52e1ac45031ac2f2274ec983ba133339a6e83230993055b95119c11686657626713a31b47025fd440eb78eb0ecc6cb0c4fb221aa00662c06f718a7bdbe25530932fbae4369f16ba326712f4aec9505f7d4d1659cd2056429225f7add36a3f9380a37de75a3dc96ae71e60d65b35b7b10da21c7db93276eeb5313eb87344f310707c35cc1e4e684c56b41cae6aaf6a3748c39329f7e7e2a88ef8471b303a9375e42f727e50286a63125cde33840fd49cf8a1d7284cca4b84f0baceff065103b440d17e6a2df6c1d284ed36acae0d822d5aaa0b0a6035be73a3bf55a16b7324ad582e7af91616d76c137ec55852ea2640a1a28c712071416ac9bb20d2a6297053a5dc6fba7d0b6223ebf663a56f6e26c859dc7b9029f8dd8002d44510dc015cad057065b7e8bfc6ecaad61f037d64ee748a552a003c7e08858837612e9d7a25a34a85763021f8f89e965f096bb5edc8ad79e22f9e57e9c96ca30467d6adf53dc8f0dc2f513f1dc1a31f6ff57ec62d0393c09efc0fc19181a20da8699a35839426b46694e553e45cec553accc3d78f62d74434fe243f0eeecf685e5aa9eb433c7dda5e5e5e295be65095d0256969f997e3cb2d920744ca60b791298da7c14da68e0bb9feefa0170efda544075fc7426bb9a176e30df2d3045b82b12916040c988d1a70d3e8a6878f663b1f1106780dab239f117318806e75e21b8fea486515a84f9f19767986fbdeabe77c32bd021656f0dc8b9c97790c57fdf42ea61e888f3b45657cf7a4ae473a381de6c5bd422591cce6e49ea15bc796106ddffd065e7c236640a59436fe7accbcde717ed76755a281f6484bebc4919a3fd6bbeb29304b027ddb94b68fcff408ebd18faca377e138c837840f28e4446966c4bb716de51d8f6ab773ba33122175d28d8683785692345921d67134ebc6b4cc6defa698b63ccff5f70f1924b345b921367b52f9634b92a9bae0b82b8e7f9e88869d8df8d3999d18973904ec351e2557c601ffd8dd88fea4201827a8222705b42ed40c8a94ca52ec25e742f15c5b1f6b1f9f6f93b56e33d140bd9adbc089200e6e722a41311b839f53119fc340eac1983ee9b36e4849a2a0e16641c333d280cf66a67b490e05caa7d24af5ba9e4aeeecdb3acb541c0abc85ff608757da5cbaede76398212076d2e9fb61dda4b82323b98f33285fe074ccc508cd16c4a83fe59667ff5414f0d7a9586e5602b8e736c576263a614a9757136c4a4724d0789d841bb016a078a4d48e3e389d3bf7e8bb21143cd3cefec2d38219cfe173f6b11aa6fe19eeb520e28c357eeea806a33de4555b1b675b6c767eea39e8269d711e8ca25c259e41f0fe91049385da41e7394022bde87c1c4425e73d5db78348d67dc6b032f03f9c355c61bfb31ab4fd8b9c7f036aeeeba7e419f7919711240b71f04b2a77b96a394ad6e1ec1e2faf1bc437b6e9c5ee83eb944ac8ff4ebce518e48db19262b1bc8174bbeec7ae5ad055e1ea32c026137df6328b79cf7c2ec558e88da296719e0440cf50b487d6f6d3593ddf59c2f60d086a103ecbaa720b6e8a6e032e153f39697b9d6598c46bde8f369db086ebcd12aaac562b57d885d3fafd7bc54f24c994dc58e9d9d2ac78e931ebd317b2d5920285c3e2ae46a17512d74e87bf7ecb8ef439da1d7ae639c2cf641872618dc7757f88c61c76951e3bc72a83db44d8143c1706908bb788fcb5de9ea65d75276873ebc241c9d237594c179503362ba2b6e77969e9f161a541e4d171b66af7e3a94db983a7f2c790cad1899bf9e942414b615a95845e20d9ed98a63a58ceb7b96c50e31c63ac86799b96fed7ca9a33d64f60536c8cbf2dd7e18687c1d15df2b3196874b1956f0daa92e7c682887808efe6eefa1ff88afcde65f56371b6a543ad0db610fd98063d9495d88491bf29b70f6821783759ab2bc25afd839b21db58d4c65428ecd7b3d71839a5d220527a70314652638df3aa6bf60fbac0c9b58bb6b42bfff4602074f49658abe96089c63fd290cd059ab6f46971309cd6f08bf6bae3385ac21c89ca9237bb429fd628c0b257143f64c3adb6f42fed7c81c9e37b120a4e4a66784127d2cae536fd036f2efaf933289a9c4af69e607591e9539cfbf15cc6f3bb3868acd4e3cf11c645686775aee1b32c7ea49a7f0d1fa989903f27cda79c66d8a5f1fadd0b03d5bf33ab674b6a0581ff350d623d9b1d216140cf03ea568437dc6fb0b2965b35a919d0985f14b2e6199810e6f1d0bd6dbdacc41e14f71c5ad5daa20412828e7577197ee3b6f06e24c7105a486ef819a2b577a055e6d090c546b553cb94742b0117d2ac7fbf9cfb377810ba6193a2aec6948628023cad306769d069b08f242b723e7029b2432e5d25c9f4452f81298c6d5f7f429e692ff2c89dc56faaf5c003e33bfb516e9f24d01261c43da9ef5356a389c1d673e947ae1426ea0129d91ecca5c1777f35b8ba46d3e316bf522afa8f43ce78e8d686d1d08b35ae6e7ee93d3fd5987927db5c6accebbb2d8555e3931eb68e85eec7d9f54d14614be28b2b2f8d38d6c40d7b83ffe1d3a36d6921a983c9b0e2645591208eb3edf154310eef9996e724b67476fab6914e0d91c6611257e840071ac03b9042bdf0afad3003be829b8ef74996ad5056427da56b5ef024ec70171bb1623dab605ccf17d383f6dee883a0a19d323a99bd200128b34202e97c55a198d9b3fa7272a653bc39a6196f4e45968d270ea01b2c942f5189d8e4ad5d8a10d5a036df05e02c0336c78c4b6d15bf54f1f12e6c5568982430d51f1ad6b81af176d72d3cb763eb243b5eabf181079d0c75aa1440e42a9df087a4ddbb95df1e87769b2d0afc6ce636d853472446c1532b3d3f02bf0659729d80c05552e86a6dccac98f52e963fa317add7a75ff82b4e514664beaf8a21097c8934f9a98f4b0d09ca90a7788d9e4e2c3a2bbe9104746900bde5c3749c19c1dc888daf379d501f38c078536068477d84f9460a6345f626fa065c7337b13f34712d2e51ca72cb9235088788ce7af7f2a9464b6d59dd2ff045d65f5cc9891575eebe4ce0e63469f5a511e26c3614f04157dd9863f49944a1fecb6972031f2568cfebcd2097fa2cabf333413513a727877a0a038deb773bd3013a5483fdcf7414e323910ffb3376c874cc9257154cf63dded98490b38ef1b932d41356ecc9a2ab6334e5c03fa42fce2182adbc50fe248207d0e1655cefc1414d07905d60294992a03b1d72d85dd33eb2aa7fdd6bef09121062f07b5b12ec5da9c80df78443665204dbeb8196a34eced8231ce897f7284520568a6ec2b85bf0de7149d65032c4623142f97dd99b83c83779a6bc4a566ca4f78ae70c8864dd25a7a1f853afdb252338b28e9bee0654bcb58ff5144d2cfe53a5cd1fa97cfa0ff4790916030cbe5ccba606bf6d16dda6e0d2aa3bf07d583cf36742ff4bc08fcb512a6b966956ecb63e4ef99409765c8184a9198ba51255dd26187d2bd0ef1a85ab934cd9fe8579e9952ce55903b2c7e752feb29c823f5e1c332cc6a787dee3c7276a120edcf0c26cf756821b978a2fe4a3420c881dc96f700657aceb0f3f7de9c65b48814dc78d8253e381a9d612ba69e226fd4e6f5350555cd977c768dffe0d2820b3d8ec22c4772d52e5721b42033dedc480f53abee"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec9700019811"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) close(0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000000)=0x4f1b, 0x4) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.494699257s ago: executing program 2 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0x0, {0x1}, [@typed={0x8, 0x145, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8083}, 0x4000) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e21, @multicast2}, {0x6, @random="f08240f614c1"}, 0x6a, {0x2, 0x4e22, @multicast1}, 'macvlan0\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}, {0x0}], 0x2}}], 0x1, 0x4044010) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES64=r1], 0x38}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x98) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r8) (async) close(r8) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r7) 1.36376672s ago: executing program 4 (id=1659): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000dd0afeff0000000073013b0000000000958b000000000000", @ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000dd0afeff0000000073013b0000000000958b000000000000", @ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000000240)) (async) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000000240)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xfe, 0x4}, 0x2}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000340003"], 0xf0}}, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000700)=0xffffffff, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000", @ANYRES16=r9], 0x18}, 0x40c0) (async) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000", @ANYRES16=r9], 0x18}, 0x40c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="183100000200000000000000000000009501fcfff0fffffff754f8ff10000000184000000600000000000000000000003fa0fcff0100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850091580c000000b700000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, 0x1a, r4, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x5, 0x4}, 0x10, 0xd72d, r0, 0x3, &(0x7f00000005c0)=[r6], &(0x7f0000000600)=[{0x2, 0x1, 0x8, 0x7}, {0x2, 0x3, 0x1}, {0x5, 0x2, 0x9, 0xb}], 0x10, 0x6}, 0x94) 1.360327698s ago: executing program 1 (id=1660): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_delrule={0x4c, 0x21, 0x200, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x80, 0x3, 0xee, 0x0, 0x0, 0x0, 0xa6040614ca3dc0d6}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}}, @FRA_SRC={0x14, 0x2, @local}]}, 0x4c}}, 0x4008040) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) close(r1) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_delrule={0x4c, 0x21, 0x200, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x80, 0x3, 0xee, 0x0, 0x0, 0x0, 0xa6040614ca3dc0d6}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}}, @FRA_SRC={0x14, 0x2, @local}]}, 0x4c}}, 0x4008040) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) (async) close(r1) (async) 1.286360521s ago: executing program 2 (id=1661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000002fc0)=""/4096, &(0x7f0000000040)=0x1000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 1.283902897s ago: executing program 5 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'tunl0\x00', {0xffffff81}, 0xff}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x400d}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/261, 0x105}, {&(0x7f0000002e00)=""/4113, 0x1011}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xc846}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0) 1.116584911s ago: executing program 4 (id=1663): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe9c4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001800290200000089362ae9c883eefe8457710000000000020000000800000080", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r13 = getuid() r14 = getgid() sendmsg$netlink(r7, &(0x7f0000000dc0)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000700)={0x1e0, 0x28, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x11d, 0x0, 0x0, @fd}, @nested={0x1c8, 0x149, 0x0, 0x1, [@nested={0x4, 0xfd}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x39c55a94}, @generic="77b0eb536e6d9320b86c2fdedac3f9f64c0aa3a1ad0a280ec3e0e3000fdfec2daa0167ae434b725ebb414b4dab1a0ce95eb26fe17f802983bd33295db47c21e1980090c942394d730c546cb93ef52de6eebc5c07a09bee221128b3cddeb9fb5e7d94dccd7e78d0b207e9af67c98007a7969132ffd778a68c9e6f8fc01920b4d04ddd8f5cddcbff690fb8c27ce35a4010e9ea2f03cf608a733400cf0d7ae1f52d6fa8aa31b5e3ba88410318714e4c79186c23f5b18bbfb6c99bb31235d53b1742efff3149044a15a4fbc089782243f6036c14a3e5a8ca03498538f32e0bc0d8cb0233f5283ad65caf948be98d9ae65ac6dccdde3c67bd", @nested={0x4, 0x6}, @typed={0x8, 0x106, 0x0, 0x0, @fd=r7}, @generic="a4c0505ff456b4d8d82eee9f5d063e2f2810e232ac9e8ee14a4a7a37cc7bd4f057f1b2edfa235927e7d147d98fe25450f9ec42d2c4fffaa31e85c2dac1033dc350cccae47e97f306b6b8c016e7c039e57f12476c051a9c011ed2276322881900ecb07dc98644e3e62cc574ec6c5c1e039a02e21150ca8929d4aba0be35fc350ccf99393191a5b2dc0bc054d5f21db58227fbf014f8413f98167cb860905f3e7e11c569dc40004409709d9865e9cb7f48515e"]}]}, 0x1e0}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r9, r6, r6, r7, r2, r0, r5, r8]}}, @rights={{0x18, 0x1, 0x1, [r8, r4]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r9, r8]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}], 0xe0, 0x4000000}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x60, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xb4, 0x6}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4007965}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x60}}, 0x0) 1.02510193s ago: executing program 5 (id=1664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000063cacf0c020000000a00009ed3"], 0x50) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000140)={0x6, 'syz_tun\x00', {0x7cc}, 0xa}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x9, 0x3, 0x5, 0x3ff}, &(0x7f0000000380)=0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}, 0x5}) 751.138569ms ago: executing program 1 (id=1665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff00008200"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fa69d000000000000000000", 0x11) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) (async, rerun: 64) r7 = accept4(r6, 0x0, 0x0, 0x80000) (rerun: 64) write(r7, &(0x7f0000000040), 0x0) (async) setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xf00) 602.114036ms ago: executing program 4 (id=1666): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000040)={@remote, @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "c18c26d3c45db938"}}}}, &(0x7f00000000c0)={0x0, 0x3, [0xf89, 0x213, 0xd96, 0x21d]}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0xb0000010}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x180, 0x17, 0x4, 0x0, 0x0, {{@in6=@private1}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4}, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xb}, {}, 0x0, 0x800}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0xffffffff, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40890}, 0x0) socket$kcm(0x2, 0xa, 0x73) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) 601.304642ms ago: executing program 5 (id=1667): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="0300fcbb3700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000300"/28], 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="789daf9e", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r4, 0x0, 0x0, &(0x7f0000000880)=[r2, r2, r2, r5], 0x0, 0x10, 0x80}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x4, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x86}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 64) shutdown(r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r9, 0x1, 0x70bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20044080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x5, 0x1ff}) 569.805487ms ago: executing program 1 (id=1668): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000a4000000660000000000000016000000000000009500000000010000ac393a1e5ade17eddbcf186c1956617340ec8f546a8dd8a840c42124120af2c95171c6a063"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x6e) 455.771706ms ago: executing program 1 (id=1669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000010000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x4810) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000010000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x4810) 298.194549ms ago: executing program 1 (id=1670): connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_cake={{}, {0x0, 0x2, [@TCA_CAKE_RAW, @TCA_CAKE_ATM={0x0, 0x4, 0x1}, @TCA_CAKE_NAT={0x0, 0xb, 0x1}, @TCA_CAKE_MEMORY={0x0, 0xa, 0xffff}, @TCA_CAKE_NAT, @TCA_CAKE_MPU={0x0, 0xe, 0x96}, @TCA_CAKE_RAW, @TCA_CAKE_OVERHEAD={0x0, 0x6, 0xaf}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x68}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047437, 0x0) 209.161468ms ago: executing program 5 (id=1671): r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x400, 0x4) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="da0a5089695a7f3fe0ef5a1116fb02b8d95d08fa2886d7845247979c1109c08d8094f5cd624426d219d4c6852c", 0x2d) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x4, {0x20, 0x56a0, 0x7ff, 0x6, 0xffff}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r3, r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x8, 0x5, 0xa563, 0x40, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000740)={r0, 0xc0, 0x2493, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xb, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}], &(0x7f00000004c0)='GPL\x00', 0x401, 0xc4, &(0x7f0000000500)=""/196, 0x1e00, 0x21, '\x00', r2, @fallback=0x3, r7, 0x8, &(0x7f0000000640)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x4, 0x4, 0x433d0000}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)=[r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x2, 0x3, 0xe, 0x7}, {0x0, 0x5, 0x4, 0xa}, {0x5, 0x4, 0x10, 0x4}, {0x3, 0x3, 0x6, 0x6}, {0x0, 0x2, 0x8, 0xa}, {0x5, 0x1, 0xe, 0xc}, {0x2, 0x1, 0xa, 0x8}, {0x3, 0x5, 0x3, 0x5}], 0x10, 0x9}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000900), &(0x7f0000000940)=0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x4010, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xa, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x242, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @generic={0x0, 0xe, 0xf, 0xb38, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000a00)='GPL\x00', 0x2, 0xe6, &(0x7f0000000a40)=""/230, 0x41100, 0x54, '\x00', r2, @fallback=0x3d, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x0, 0xfffffe01, 0x7}, 0x10, 0x0, r9, 0x2, &(0x7f0000000c00)=[r8, r6, 0x1, r11], &(0x7f0000000c40)=[{0x1, 0x3, 0x6, 0x6}, {0x5, 0x2, 0x3, 0xb}], 0x10, 0x5}, 0x94) connect$caif(r9, &(0x7f0000000d40)=@dgm={0x25, 0x5, 0x6}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@fallback=r6, 0x7, 0x1, 0xfffffffd, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000dc0)=[0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ec0)={@map=r9, r9, 0xc, 0x0, r9, @void, @value=r9, @void, @void, r13}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000f00)={'lo\x00', 0x100}) getsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) sendto$rxrpc(r9, &(0x7f0000000fc0)="5d06d94f94f50816bcb204e61d0e480a21844773c296d8e1f3283f208fad5bc8a624da4913d2a4b8b8fdd8f308d1761ddd6f864b77929c1fb01a6002b4f7c2f9a554b1e39fc2bad8b1d5cbcdd4e1e692ebb951ea7c59845053f35eeff833da41335b9f2280a180c3e54b75e6a006adad886d769a34e86df7ade057c2d6b126fd6bec194eb50b8f56919a8422f3fc994cbbee9e6155786ab2da2fcfc3ff2522b2ef97a9243f99313ddffa42c8c0a64613b24e3b20b9e246362d6e93df243e0621b877193c86a1e6dc7790063b4c26408e88b808821c192e77ad1925a60797", 0xde, 0x810, &(0x7f00000010c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00'}}, 0x24) socket$inet6_udp(0xa, 0x2, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r9) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xb4, r14, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0x12, 0x34, @random="6c5c6dd270571d7ae21f89d9dfcd"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3ff}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x40801}, 0x2000800) ioctl$sock_bt_bnep_BNEPCONNADD(r12, 0x400442c8, &(0x7f0000001300)={r9, 0x6, 0x1ff, "1425fef143ca789a12822c34cde04a4756644b14d3620f0528e65673f4e1d8c4c4f8238240911f2aaf6233f412ea7c66c6c747a2462b049ebf20754acffa5cc2d875be9073ad9ea56633d31de0270bb68dd256e9b2a997cc58aaabae9670822284000c511070359250a49e21877b5514016da3eec1a74a60ba5dcaa3325eae3ebfac5a804d5ce763fd54f5922c1fe70d2c0a7329c314a174913199e8d0964190b8bbbaab48c9489caf1392f9c0117aad93a9153c"}) 161.774812ms ago: executing program 4 (id=1672): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 114.131124ms ago: executing program 1 (id=1673): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c1}, 0x4000004) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000500)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x1000402, 0x9, 0x5, 0x5, 0xbc, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x5}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0x4000000}, 0x18) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r10, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x78, r10, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) 101.952827ms ago: executing program 3 (id=1674): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x2, 0x4e21, 0x0, 0xa}, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x3, 0x3}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000040)={{0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}, {0x306, @broadcast}, 0x12, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_to_bond\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 4 (id=1675): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x9, 0x7, 0xfff, 0xffffffffffffffc0, 0x51c4, 0x7}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e1}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x25, 0x0, &(0x7f0000000900)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000010180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80000) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x1}) kernel console output (not intermixed with test programs): o: [ 108.077255][ T6670] netlink: 'syz.0.134': attribute type 4 has an invalid length. [ 108.087701][ T6663] active_anon:5841 inactive_anon:0 isolated_anon:0 [ 108.087701][ T6663] active_file:2632 inactive_file:39870 isolated_file:0 [ 108.087701][ T6663] unevictable:768 dirty:256 writeback:0 [ 108.087701][ T6663] slab_reclaimable:10910 slab_unreclaimable:112444 [ 108.087701][ T6663] mapped:30365 shmem:1361 pagetables:1107 [ 108.087701][ T6663] sec_pagetables:0 bounce:0 [ 108.087701][ T6663] kernel_misc_reclaimable:0 [ 108.087701][ T6663] free:1311532 free_pcp:17754 free_cma:0 [ 108.254279][ T6663] Node 0 active_anon:23364kB inactive_anon:0kB active_file:10528kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121460kB dirty:1016kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11816kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.287751][ T6663] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.319531][ T6663] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.409849][ T6663] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 108.452207][ T6663] Node 0 DMA32 free:1349192kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23216kB inactive_anon:0kB active_file:10528kB inactive_file:157708kB unevictable:1536kB writepending:1016kB present:3129332kB managed:2557384kB mlocked:0kB bounce:0kB free_pcp:50712kB local_pcp:22708kB free_cma:0kB [ 108.553791][ T6663] lowmem_reserve[]: 0 0 1 1 1 [ 108.574269][ T6676] dummy0: entered promiscuous mode [ 108.589370][ T6663] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 108.637581][ T6676] batadv_slave_0: entered promiscuous mode [ 108.655039][ T6676] batadv_slave_0: left promiscuous mode [ 108.667778][ T6676] dummy0: left promiscuous mode [ 108.676646][ T6663] lowmem_reserve[]: 0 0 0 0 0 [ 108.681410][ T6663] Node 1 Normal free:3882476kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18528kB local_pcp:11744kB free_cma:0kB [ 108.721250][ T6683] netlink: 'syz.4.136': attribute type 13 has an invalid length. [ 108.764826][ T6663] lowmem_reserve[]: 0 0 0 0 0 [ 108.793485][ T6663] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.886796][ T6663] Node 0 DMA32: 160*4kB (UM) 96*8kB (UME) 67*16kB (UME) 132*32kB (UME) 18*64kB (UME) 11*128kB (UM) 7*256kB (UM) 6*512kB (UM) 4*1024kB (UME) 4*2048kB (UM) 324*4096kB (M) = 1353520kB [ 108.958624][ T1209] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.028950][ T6663] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 109.053958][ T6447] Set syz1 is full, maxelem 65536 reached [ 109.073480][ T6663] Node 1 Normal: 177*4kB (UME) 35*8kB (UME) 25*16kB (UME) 82*32kB (UME) 29*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3882476kB [ 109.094202][ T6663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.105733][ T1209] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.124963][ T6663] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.150551][ T6663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.183209][ T6663] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.193042][ T6663] 43858 total pagecache pages [ 109.202054][ T6663] 0 pages in swap cache [ 109.208461][ T6663] Free swap = 124996kB [ 109.214632][ T6663] Total swap = 124996kB [ 109.224310][ T6663] 2097051 pages RAM [ 109.233225][ T6663] 0 pages HighMem/MovableOnly [ 109.278466][ T6663] 425679 pages reserved [ 109.284358][ T6663] 0 pages cma reserved [ 109.305678][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.476780][ T6703] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 109.507376][ T6703] netlink: 'syz.4.140': attribute type 2 has an invalid length. [ 109.530331][ T6707] netlink: 72 bytes leftover after parsing attributes in process `syz.0.142'. [ 109.537535][ T6709] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 109.725484][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.898795][ T6703] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 109.919799][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 109.941806][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.984304][ T6719] veth3: entered promiscuous mode [ 109.999251][ T6719] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 110.067939][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 110.333997][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'. [ 110.420695][ T6742] netlink: 60 bytes leftover after parsing attributes in process `syz.3.149'. [ 110.451489][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.482201][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.512055][ T6742] netlink: 60 bytes leftover after parsing attributes in process `syz.3.149'. [ 110.673342][ T6742] geneve2: entered promiscuous mode [ 110.707686][ T6742] geneve2: entered allmulticast mode [ 110.874917][ T1209] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 111.583226][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.591506][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.026253][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.061063][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.425412][ T6761] gtp0: left promiscuous mode [ 112.430156][ T6761] gtp0: left allmulticast mode [ 112.492328][ T149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.508019][ T149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.570094][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.594603][ T6793] gretap0: entered promiscuous mode [ 112.604182][ T6793] gretap0: left promiscuous mode [ 112.659012][ T149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.670381][ T149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.701452][ T149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.712740][ T149] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.777496][ T149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.791013][ T149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.992544][ T6811] syz_tun: entered allmulticast mode [ 113.078606][ T6815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.164'. [ 113.122955][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.138023][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.160880][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.186210][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.507904][ T6835] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 113.563583][ T6835] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 113.673772][ T149] syzkaller0: tun_net_xmit 76 [ 113.679583][ T149] syzkaller0: tun_net_xmit 48 [ 114.323563][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 114.504481][ T6857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 114.854868][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 115.059363][ T6845] tipc: Started in network mode [ 115.066072][ T6845] tipc: Node identity ac14140f, cluster identity 4711 [ 115.073250][ T6845] tipc: New replicast peer: 255.255.255.255 [ 115.080204][ T6845] tipc: Enabled bearer , priority 10 [ 115.760102][ T6895] batman_adv: batadv0: Adding interface: dummy0 [ 115.769324][ T6895] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.820150][ T6895] batman_adv: batadv0: Interface activated: dummy0 [ 115.880630][ T6897] batadv0: mtu less than device minimum [ 115.898548][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.910619][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.922560][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.934461][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.946403][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.958327][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.970236][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.982165][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 115.994118][ T6897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 116.156277][ T6783] tipc: Node number set to 2886997007 [ 116.368503][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 116.683906][ T6928] : entered promiscuous mode [ 116.756017][ T6928] ip6tnl0: Caught tx_queue_len zero misconfig [ 117.141580][ T6948] netlink: 108 bytes leftover after parsing attributes in process `syz.4.191'. [ 117.172563][ T6957] pim6reg1: entered promiscuous mode [ 117.183029][ T6957] pim6reg1: entered allmulticast mode [ 117.568396][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 117.601287][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 117.641319][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 117.652169][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 118.571397][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'. [ 118.602007][ T7005] syzkaller0: entered promiscuous mode [ 118.611189][ T7005] syzkaller0: entered allmulticast mode [ 118.647797][ T7005] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 118.854469][ T7014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.219612][ T7014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.382764][ T7014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.410671][ T7040] netlink: 'syz.3.214': attribute type 30 has an invalid length. [ 119.578225][ T7014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.833121][ T1133] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.243929][ T1133] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.314070][ T1133] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.637101][ T149] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.835741][ T7084] raw_sendmsg: syz.2.221 forgot to set AF_INET. Fix it! [ 121.452666][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 121.496350][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 121.522804][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 122.013506][ T7140] IPVS: length: 129 != 8 [ 122.647915][ T7155] netlink: 'syz.4.233': attribute type 9 has an invalid length. [ 122.684344][ T7154] netlink: 165 bytes leftover after parsing attributes in process `syz.3.232'. [ 122.687425][ T7155] netlink: 184 bytes leftover after parsing attributes in process `syz.4.233'. [ 122.774037][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 122.815727][ T7160] IPVS: stopping backup sync thread 7163 ... [ 122.843217][ T7162] net_ratelimit: 10 callbacks suppressed [ 122.843238][ T7162] netlink: zone id is out of range [ 122.876540][ T7162] netlink: zone id is out of range [ 122.895749][ T7162] netlink: zone id is out of range [ 122.947003][ T7162] netlink: zone id is out of range [ 122.983515][ T7162] netlink: zone id is out of range [ 123.039168][ T7162] netlink: zone id is out of range [ 123.089177][ T7162] netlink: zone id is out of range [ 123.114939][ T7162] netlink: zone id is out of range [ 123.122386][ T7162] netlink: zone id is out of range [ 123.143325][ T7162] netlink: zone id is out of range [ 123.638729][ T7203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 123.902724][ T7208] bridge2: entered promiscuous mode [ 123.968335][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.334931][ T7221] netlink: 'syz.2.251': attribute type 16 has an invalid length. [ 124.379431][ T7221] netlink: 'syz.2.251': attribute type 17 has an invalid length. [ 124.403664][ T7224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.251'. [ 124.551553][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 124.987773][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 125.710829][ T7262] netlink: 'syz.2.264': attribute type 11 has an invalid length. [ 125.746006][ T7264] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 125.769514][ T7264] netlink: 224 bytes leftover after parsing attributes in process `syz.3.265'. [ 125.793115][ T7267] netlink: 'syz.0.266': attribute type 30 has an invalid length. [ 125.835462][ T7267] syzkaller1: entered promiscuous mode [ 125.845020][ T7267] syzkaller1: entered allmulticast mode [ 125.856634][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 125.867020][ T7267] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 125.972727][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 126.349120][ T7280] netlink: 'syz.0.270': attribute type 2 has an invalid length. [ 126.357266][ T7280] netlink: 'syz.0.270': attribute type 8 has an invalid length. [ 126.365541][ T7280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.270'. [ 126.628928][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 126.852795][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.275'. [ 126.880768][ T7296] netlink: 'syz.0.275': attribute type 29 has an invalid length. [ 126.961474][ T7298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.984475][ T7298] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 127.047917][ T7298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.058188][ T7298] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 127.083110][ T7298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.089273][ T7298] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 127.109378][ T7298] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.119422][ T7298] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 127.148277][ T7298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.154295][ T7298] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 127.944608][ T7326] block nbd0: not configured, cannot reconfigure [ 128.021194][ T7328] net_ratelimit: 5 callbacks suppressed [ 128.021210][ T7328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.214080][ T7366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.482780][ T7387] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 129.629124][ T7366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.866892][ T7366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.013246][ T7366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.236335][ T7094] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.321605][ T7097] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.337282][ T7419] __nla_validate_parse: 3 callbacks suppressed [ 130.337300][ T7419] netlink: 76 bytes leftover after parsing attributes in process `syz.2.305'. [ 130.362755][ T7097] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.406950][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 130.434953][ T7097] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.532258][ T7423] netlink: 76 bytes leftover after parsing attributes in process `syz.0.304'. [ 130.576760][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.307'. [ 130.589525][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.307'. [ 130.596098][ T7424] macsec1: entered promiscuous mode [ 130.604058][ T7424] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 130.621354][ T7424] macsec1: entered allmulticast mode [ 130.628164][ T7424] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 131.055133][ T7441] netlink: 'syz.4.311': attribute type 15 has an invalid length. [ 131.162108][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 131.179056][ T7444] netlink: 'syz.4.313': attribute type 1 has an invalid length. [ 131.323020][ T7450] netlink: 'syz.3.314': attribute type 12 has an invalid length. [ 132.525909][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.533632][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.593117][ T7478] wg0: left allmulticast mode [ 132.669921][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.688189][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.784042][ T7490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.324'. [ 132.933281][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940255][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.049982][ T7486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.322'. [ 133.091823][ T7094] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.119569][ T7094] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.246824][ T7094] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.467642][ T7097] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.963176][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 133.982987][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 134.342030][ T7536] netlink: 'syz.4.333': attribute type 1 has an invalid length. [ 134.393997][ T7536] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 134.408054][ T7536] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 134.418965][ T7536] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 134.471375][ T7541] bridge_slave_1: left allmulticast mode [ 134.484416][ T7541] bridge_slave_1: left promiscuous mode [ 134.492013][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.541373][ T7540] Bluetooth: MGMT ver 1.23 [ 134.582794][ T7541] bridge_slave_0: left allmulticast mode [ 134.625593][ T7541] bridge_slave_0: left promiscuous mode [ 134.631428][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.855655][ T7548] netlink: 'syz.4.336': attribute type 13 has an invalid length. [ 134.873803][ T7548] netlink: 'syz.4.336': attribute type 17 has an invalid length. [ 135.017346][ T7549] xfrm0: entered promiscuous mode [ 135.022710][ T7549] xfrm0: entered allmulticast mode [ 135.228528][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.235853][ T7548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.243463][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.250742][ T7548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.313163][ T7548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.495659][ T7592] __nla_validate_parse: 3 callbacks suppressed [ 136.495677][ T7592] netlink: 13 bytes leftover after parsing attributes in process `syz.4.347'. [ 136.528347][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 136.686700][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 136.993488][ T7607] netlink: 84 bytes leftover after parsing attributes in process `syz.4.352'. [ 137.092743][ T7609] Driver unsupported XDP return value 0 on prog (id 149) dev N/A, expect packet loss! [ 137.527064][ T7620] tipc: Enabling of bearer rejected, failed to enable media [ 137.551436][ T7623] netlink: 80 bytes leftover after parsing attributes in process `syz.2.358'. [ 137.826703][ T7632] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 137.935975][ T7643] netlink: 240 bytes leftover after parsing attributes in process `syz.4.360'. [ 138.455172][ T7655] netlink: 'syz.2.366': attribute type 10 has an invalid length. [ 138.523012][ T7655] veth0_vlan: left promiscuous mode [ 138.548261][ T7655] veth0_vlan: entered promiscuous mode [ 138.562504][ T7655] team0: Device veth0_vlan failed to register rx_handler [ 139.618259][ T5878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.632269][ T5878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.640473][ T5878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.656046][ T5878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.665176][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.687325][ T5874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.702894][ T5874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.713715][ T5874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.723023][ T5874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.731956][ T5874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.934826][ T149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.960027][ T7678] netlink: 156 bytes leftover after parsing attributes in process `syz.2.371'. [ 140.037285][ T149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.178328][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 140.215194][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 140.226041][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 140.327587][ T149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.369865][ T7715] tipc: Started in network mode [ 140.380639][ T7715] tipc: Node identity , cluster identity 4711 [ 140.388773][ T7715] tipc: Failed to set node id, please configure manually [ 140.404741][ T7715] tipc: Enabling of bearer rejected, failed to enable media [ 140.413423][ T7717] netlink: 'syz.4.379': attribute type 11 has an invalid length. [ 140.436000][ T7717] netlink: 'syz.4.379': attribute type 11 has an invalid length. [ 140.489547][ T149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.576450][ T7726] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 140.605869][ T7728] netlink: 'syz.3.382': attribute type 13 has an invalid length. [ 140.632407][ T7728] netlink: 'syz.3.382': attribute type 17 has an invalid length. [ 140.642535][ T7726] netlink: 'syz.4.383': attribute type 2 has an invalid length. [ 140.659192][ T7726] ave_0: entered promiscuous mode [ 140.760793][ T7731] tipc: Started in network mode [ 140.813869][ T7731] tipc: Node identity 76329ced7f97, cluster identity 4711 [ 140.829194][ T7731] tipc: Enabled bearer , priority 0 [ 140.899949][ T7741] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 140.940412][ T7744] syzkaller0: entered promiscuous mode [ 140.946163][ T7744] syzkaller0: entered allmulticast mode [ 141.042263][ T7731] tipc: Resetting bearer [ 141.120665][ T7729] tipc: Resetting bearer [ 141.142408][ T7729] tipc: Disabling bearer [ 141.180441][ T149] bridge_slave_1: left allmulticast mode [ 141.199184][ T149] bridge_slave_1: left promiscuous mode [ 141.213356][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.270332][ T149] bridge_slave_0: left allmulticast mode [ 141.287794][ T149] bridge_slave_0: left promiscuous mode [ 141.300748][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.784219][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.798093][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.807016][ T5874] Bluetooth: hci5: command tx timeout [ 141.814572][ T149] bond0 (unregistering): Released all slaves [ 141.841178][ T7774] wg0: entered allmulticast mode [ 141.852124][ T7777] wg1 speed is unknown, defaulting to 1000 [ 141.853036][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 141.872330][ T7777] wg1 speed is unknown, defaulting to 1000 [ 141.992558][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.057657][ T7777] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.095560][ T7777] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 142.233109][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.279404][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.337828][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.345114][ T7791] __nla_validate_parse: 4 callbacks suppressed [ 142.345134][ T7791] netlink: 200 bytes leftover after parsing attributes in process `syz.2.398'. [ 142.376320][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 142.401630][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.520947][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.524935][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.530434][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.543182][ T7700] bridge_slave_0: entered allmulticast mode [ 142.556149][ T7700] bridge_slave_0: entered promiscuous mode [ 142.571376][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.582634][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.592647][ T7777] wg1 speed is unknown, defaulting to 1000 [ 142.593956][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.635338][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.642621][ T7700] bridge_slave_1: entered allmulticast mode [ 142.657764][ T7700] bridge_slave_1: entered promiscuous mode [ 142.697766][ T149] hsr_slave_0: left promiscuous mode [ 142.707318][ T149] hsr_slave_1: left promiscuous mode [ 142.713705][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.724504][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.790734][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.798512][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.850383][ T149] veth1_macvtap: left promiscuous mode [ 142.870950][ T149] veth0_macvtap: left promiscuous mode [ 142.883203][ T149] veth1_vlan: left promiscuous mode [ 142.893624][ T149] veth0_vlan: left promiscuous mode [ 143.405781][ T149] team0 (unregistering): Port device team_slave_1 removed [ 143.464526][ T149] team0 (unregistering): Port device team_slave_0 removed [ 143.832301][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.400'. [ 143.888671][ T5874] Bluetooth: hci5: command tx timeout [ 143.977764][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.077576][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.222865][ T7700] team0: Port device team_slave_0 added [ 144.240362][ T7818] wg1 speed is unknown, defaulting to 1000 [ 144.248373][ T7700] team0: Port device team_slave_1 added [ 144.466668][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.487534][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.514572][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.540812][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.548026][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.578383][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.622357][ T7834] wg1 speed is unknown, defaulting to 1000 [ 144.778737][ T7700] hsr_slave_0: entered promiscuous mode [ 144.785772][ T7700] hsr_slave_1: entered promiscuous mode [ 144.791939][ T7700] debugfs: 'hsr0' already exists in 'hsr' [ 144.797822][ T7700] Cannot create hsr debugfs directory [ 144.803423][ T7854] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 145.097783][ T7875] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.418'. [ 145.097783][ T7877] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.418'. [ 145.335871][ T7882] netlink: 104 bytes leftover after parsing attributes in process `syz.0.419'. [ 145.509786][ T7882] veth3: entered promiscuous mode [ 145.965581][ T5874] Bluetooth: hci5: command tx timeout [ 146.125337][ T7892] macvtap1: entered allmulticast mode [ 146.144801][ T7892] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 146.157164][ T7892] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 146.174017][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 146.539164][ T7700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.583073][ T7700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.613567][ T7700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.650397][ T7700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.782316][ T7939] tipc: Started in network mode [ 146.793755][ T7939] tipc: Node identity 9e95e7682b79, cluster identity 4711 [ 146.839514][ T7939] tipc: Enabled bearer , priority 0 [ 146.881104][ T7939] tipc: Resetting bearer [ 146.914121][ T7945] syzkaller0: entered promiscuous mode [ 146.934895][ T7945] syzkaller0: entered allmulticast mode [ 146.956079][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 146.959076][ T7951] IPVS: Error connecting to the multicast addr [ 147.016130][ T7937] tipc: Resetting bearer [ 147.084287][ T7937] tipc: Disabling bearer [ 147.124955][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 147.301074][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'. [ 147.438772][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 147.462493][ T7960] team0 (unregistering): Port device team_slave_0 removed [ 147.477779][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 147.490721][ T7960] team0 (unregistering): Port device team_slave_1 removed [ 147.514063][ T7983] netlink: 'syz.2.444': attribute type 2 has an invalid length. [ 147.552369][ T7968] wg1 speed is unknown, defaulting to 1000 [ 147.749922][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.774291][ T7995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.806581][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.830667][ T7990] sctp: [Deprecated]: syz.0.447 (pid 7990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.830667][ T7990] Use struct sctp_sack_info instead [ 147.849275][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.856448][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.884700][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.891891][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.039415][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.449'. [ 148.046229][ T5874] Bluetooth: hci5: command tx timeout [ 148.106556][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.449'. [ 148.272776][ T8015] netlink: 87 bytes leftover after parsing attributes in process `syz.4.452'. [ 148.367748][ T8020] syzkaller0: entered promiscuous mode [ 148.373259][ T8020] syzkaller0: entered allmulticast mode [ 148.502869][ T8024] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 148.511293][ T8024] netlink: 184 bytes leftover after parsing attributes in process `syz.0.455'. [ 148.561161][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.625315][ T7700] veth0_vlan: entered promiscuous mode [ 148.644208][ T7700] veth1_vlan: entered promiscuous mode [ 148.683417][ T7700] veth0_macvtap: entered promiscuous mode [ 148.736887][ T7700] veth1_macvtap: entered promiscuous mode [ 148.790154][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.843931][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.868055][ T8043] wg1 speed is unknown, defaulting to 1000 [ 148.879186][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.888618][ T7088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.931630][ T7088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.992615][ T7088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.060941][ T8052] netlink: 'syz.2.462': attribute type 3 has an invalid length. [ 149.173025][ T8054] wg1 speed is unknown, defaulting to 1000 [ 149.347120][ T8069] netlink: 'syz.0.467': attribute type 2 has an invalid length. [ 149.357999][ T7099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.375483][ T7099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.230505][ T7088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.281516][ T7088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.503323][ T8106] wg1 speed is unknown, defaulting to 1000 [ 150.663420][ T8126] netlink: 'syz.3.475': attribute type 13 has an invalid length. [ 150.729803][ T8128] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2'. [ 150.851745][ T8126] wg1 speed is unknown, defaulting to 1000 [ 151.081716][ T8128] pim6reg: entered allmulticast mode [ 151.404934][ T5874] Bluetooth: hci5: command tx timeout [ 151.829710][ T8166] openvswitch: netlink: Duplicate or invalid key (type 0). [ 151.857925][ T8166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.891338][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 151.899573][ T8161] netlink: 71 bytes leftover after parsing attributes in process `syz.1.480'. [ 152.111254][ T8176] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 152.138424][ T8175] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 152.446038][ T8189] netlink: 132 bytes leftover after parsing attributes in process `syz.4.487'. [ 152.655026][ T8201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 152.666088][ T8195] wg1 speed is unknown, defaulting to 1000 [ 152.673240][ T8199] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 152.785145][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 152.809011][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 152.822766][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 152.848490][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 152.860317][ T8199] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 152.896901][ T8208] macvtap1: entered promiscuous mode [ 152.902327][ T8208] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 153.254817][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 153.496807][ T8234] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.498'. [ 153.577139][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 153.594392][ T8242] netlink: 'syz.2.503': attribute type 18 has an invalid length. [ 153.613260][ T8235] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.499'. [ 153.725958][ T8242] netlink: 'syz.2.503': attribute type 18 has an invalid length. [ 153.767026][ T7088] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.776574][ T7088] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.785033][ T7088] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.809433][ T7088] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.822988][ T8254] tipc: Enabled bearer , priority 0 [ 153.865644][ T8254] bridge0: mtu less than device minimum [ 153.889000][ T8251] wg1 speed is unknown, defaulting to 1000 [ 153.919766][ T8253] tipc: Disabling bearer [ 154.109236][ T8263] team0: Device macvtap1 is already an upper device of the team interface [ 154.287598][ T8266] C: renamed from team_slave_0 [ 154.338241][ T8266] netlink: 'syz.0.509': attribute type 3 has an invalid length. [ 154.359908][ T8266] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 154.530214][ T8289] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 154.615804][ T8291] wg1 speed is unknown, defaulting to 1000 [ 154.781594][ T8303] netlink: 'syz.2.519': attribute type 10 has an invalid length. [ 154.887850][ T8303] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.710771][ T8345] wg1 speed is unknown, defaulting to 1000 [ 155.760758][ T8346] wg1 speed is unknown, defaulting to 1000 [ 155.880983][ T8355] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 156.162916][ T8362] x_tables: ip_tables: udp match: only valid for protocol 17 [ 156.375618][ T8358] syzkaller0: entered promiscuous mode [ 156.381156][ T8358] syzkaller0: entered allmulticast mode [ 156.394583][ T8372] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 156.410510][ T8371] IPVS: stopping backup sync thread 8372 ... [ 157.910279][ T8380] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 157.943832][ T8386] pim6reg: entered allmulticast mode [ 158.043147][ T8388] netlink: 'syz.2.542': attribute type 29 has an invalid length. [ 158.077998][ T8388] netlink: 'syz.2.542': attribute type 29 has an invalid length. [ 158.091629][ T8395] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 158.104010][ T8391] __nla_validate_parse: 8 callbacks suppressed [ 158.104028][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'. [ 158.110709][ T8396] tipc: Started in network mode [ 158.110740][ T8396] tipc: Node identity ac14140f, cluster identity 4711 [ 158.110949][ T8396] tipc: New replicast peer: 255.255.255.255 [ 158.156301][ T8396] tipc: Enabled bearer , priority 10 [ 158.162957][ T8388] netlink: 500 bytes leftover after parsing attributes in process `syz.2.542'. [ 158.357181][ T8409] ip6erspan0: entered allmulticast mode [ 158.401803][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 158.590545][ T8412] veth3: entered promiscuous mode [ 158.674042][ T8428] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.551'. [ 158.699001][ T8427] tipc: Enabled bearer , priority 0 [ 158.712489][ T8427] syzkaller0: entered promiscuous mode [ 158.729556][ T8427] syzkaller0: entered allmulticast mode [ 158.794932][ T8427] tipc: Resetting bearer [ 158.841947][ T8427] syzkaller1: entered promiscuous mode [ 158.854770][ T8427] syzkaller1: entered allmulticast mode [ 158.872081][ T8436] netlink: 52 bytes leftover after parsing attributes in process `syz.2.555'. [ 158.909921][ T8426] tipc: Resetting bearer [ 158.978520][ T8426] tipc: Disabling bearer [ 159.094461][ T8440] wg1 speed is unknown, defaulting to 1000 [ 159.285703][ T6779] tipc: Node number set to 2886997007 [ 159.484114][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 159.569929][ T8473] netlink: 'syz.3.564': attribute type 2 has an invalid length. [ 159.581562][ T8472] tipc: Enabling of bearer rejected, failed to enable media [ 159.779475][ T30] audit: type=1800 audit(1757715403.329:3): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.565" name="memory.events" dev="tmpfs" ino=97 res=0 errno=0 [ 159.932302][ T8486] netlink: 'syz.0.567': attribute type 16 has an invalid length. [ 159.942967][ T8486] netlink: 'syz.0.567': attribute type 17 has an invalid length. [ 160.014932][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 160.062863][ T8486] IPv6: NLM_F_REPLACE set, but no existing node found! [ 160.102089][ T8489] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 160.117386][ T8489] netlink: 224 bytes leftover after parsing attributes in process `syz.4.570'. [ 160.473570][ T8509] netlink: 'syz.3.573': attribute type 39 has an invalid length. [ 160.516930][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 160.893234][ T8533] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 161.172936][ T8538] netlink: 80 bytes leftover after parsing attributes in process `syz.2.581'. [ 161.804506][ T8573] tipc: Enabled bearer , priority 0 [ 161.812598][ T8573] syzkaller0: entered promiscuous mode [ 161.854818][ T8573] syzkaller0: entered allmulticast mode [ 161.909726][ T8573] tipc: Resetting bearer [ 161.925711][ T8572] tipc: Resetting bearer [ 161.944364][ T8572] tipc: Disabling bearer [ 162.552121][ T8598] smc: net device bond0 applied user defined pnetid SYZ [ 162.617926][ T8601] wg1 speed is unknown, defaulting to 1000 [ 162.623085][ T8602] tap0: tun_chr_ioctl cmd 1074812118 [ 162.656106][ T8604] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 162.807207][ T8610] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 162.877688][ T8610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.927339][ T8612] netlink: 'syz.2.605': attribute type 10 has an invalid length. [ 162.960762][ T8610] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 162.997557][ T8612] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.110017][ T8618] __nla_validate_parse: 11 callbacks suppressed [ 163.110036][ T8618] netlink: 1 bytes leftover after parsing attributes in process `syz.3.607'. [ 163.141881][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 163.159475][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 163.178008][ T8621] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 163.207963][ T8623] !: renamed from dummy0 (while UP) [ 163.456307][ T8629] wg1 speed is unknown, defaulting to 1000 [ 163.523338][ T8637] netlink: 'syz.3.612': attribute type 13 has an invalid length. [ 163.543068][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 164.316098][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 164.856167][ T8702] xt_socket: unknown flags 0xd0 [ 164.893525][ T8687] wg1 speed is unknown, defaulting to 1000 [ 164.906788][ T8703] tipc: Enabled bearer , priority 0 [ 164.914259][ T8703] syzkaller0: entered promiscuous mode [ 164.934822][ T8703] syzkaller0: entered allmulticast mode [ 165.096692][ T8713] sit0: entered promiscuous mode [ 165.098537][ T8716] netlink: 96 bytes leftover after parsing attributes in process `syz.3.627'. [ 165.126722][ T8713] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 165.188936][ T8713] netlink: 1 bytes leftover after parsing attributes in process `syz.2.628'. [ 165.234768][ T8714] tipc: Resetting bearer [ 165.256467][ T8714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.277845][ T8701] tipc: Resetting bearer [ 165.357413][ T8701] tipc: Disabling bearer [ 165.464928][ T8693] wg1 speed is unknown, defaulting to 1000 [ 165.564777][ T5878] Bluetooth: hci5: command 0x0405 tx timeout [ 166.035858][ T8747] wg1 speed is unknown, defaulting to 1000 [ 166.407163][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 166.473249][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 166.663077][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 166.689075][ T8786] bridge_slave_1: left allmulticast mode [ 166.707955][ T8786] bridge_slave_1: left promiscuous mode [ 166.719411][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.773381][ T8786] bridge_slave_0: left allmulticast mode [ 166.798136][ T8786] bridge_slave_0: left promiscuous mode [ 166.807114][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.136210][ T8811] mac80211_hwsim hwsim18 ªªªªª6: renamed from wlan0 (while UP) [ 167.439926][ T8831] wg1 speed is unknown, defaulting to 1000 [ 167.952681][ T8852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.054625][ T8852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.089071][ T8861] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 168.352364][ T8863] wg1 speed is unknown, defaulting to 1000 [ 168.577919][ T8873] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 168.810664][ T8886] tun0: tun_chr_ioctl cmd 1074025677 [ 168.827923][ T8886] tun0: linktype set to 804 [ 169.502515][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 169.516866][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 169.532427][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 169.846286][ T8914] __nla_validate_parse: 7 callbacks suppressed [ 169.846305][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 169.908208][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 170.009425][ T8918] wg1 speed is unknown, defaulting to 1000 [ 170.059268][ T8938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.687'. [ 170.464531][ T8917] infiniband syz2: set down [ 170.473938][ T8917] infiniband syz2: added vxcan1 [ 170.483785][ T8917] syz2: rxe_create_cq: returned err = -12 [ 170.494567][ T5991] vxcan1 speed is unknown, defaulting to 1000 [ 170.503847][ T8917] infiniband syz2: Couldn't create ib_mad CQ [ 170.545048][ T8917] infiniband syz2: Couldn't open port 1 [ 170.560932][ T8948] vxcan3: entered allmulticast mode [ 170.708631][ T8917] RDS/IB: syz2: added [ 170.725922][ T8917] smc: adding ib device syz2 with port count 1 [ 170.732357][ T8917] smc: ib device syz2 port 1 has no pnetid [ 170.760107][ T8955] netlink: 308 bytes leftover after parsing attributes in process `syz.2.692'. [ 170.783040][ T6770] vxcan1 speed is unknown, defaulting to 1000 [ 170.809630][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 171.155698][ T8971] netlink: 156 bytes leftover after parsing attributes in process `syz.2.697'. [ 171.589921][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 171.975706][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 172.049656][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 172.081667][ T8996] netlink: 'syz.2.707': attribute type 5 has an invalid length. [ 172.196986][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 172.259374][ T9008] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 172.340468][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 172.372616][ T9011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.711'. [ 172.402406][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.711'. [ 172.686797][ T9025] wg1 speed is unknown, defaulting to 1000 [ 172.919042][ T9025] vxcan1 speed is unknown, defaulting to 1000 [ 173.649102][ T9069] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 173.689856][ T9068] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.729402][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 173.762337][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.890801][ T9084] tipc: Enabled bearer , priority 0 [ 174.167748][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 174.170799][ T9091] syzkaller1: entered promiscuous mode [ 174.181990][ T9091] syzkaller1: entered allmulticast mode [ 174.414069][ T9099] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 174.586627][ T9109] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 174.616157][ T9109] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 174.827962][ T9099] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 175.006094][ T6770] tipc: Node number set to 3052201832 [ 175.010675][ T9123] syz_tun: entered allmulticast mode [ 175.325933][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.333755][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.358940][ T9134] batman_adv: batadv0: Interface deactivated: dummy0 [ 175.430341][ T9134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.450517][ T9134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.470011][ T9134] xfrm0: left promiscuous mode [ 175.478612][ T9134] xfrm0: left allmulticast mode [ 175.558287][ T9154] __nla_validate_parse: 12 callbacks suppressed [ 175.558311][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'. [ 175.615061][ T9134] veth3: left promiscuous mode [ 175.641210][ T9134] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 175.648555][ T9134] macvtap1: left promiscuous mode [ 175.803362][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.918922][ T9146] veth3: left promiscuous mode [ 175.933043][ T149] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.961923][ T149] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.024492][ T149] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.062314][ T149] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.107401][ T9141] wg1 speed is unknown, defaulting to 1000 [ 176.117540][ T149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.139926][ T149] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.159884][ T9138] wg1 speed is unknown, defaulting to 1000 [ 176.166053][ T9141] vxcan1 speed is unknown, defaulting to 1000 [ 176.173053][ T149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.196128][ T149] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.207347][ T7094] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.228759][ T9167] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 176.245068][ T7094] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.305263][ T9171] netlink: 32 bytes leftover after parsing attributes in process `syz.4.752'. [ 176.317635][ T9167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.335914][ T7094] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.374784][ T7094] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.391772][ T9163] wg1 speed is unknown, defaulting to 1000 [ 176.486357][ T9167] veth5: entered promiscuous mode [ 176.487455][ T9183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.753'. [ 176.534558][ T9178] IPVS: rr: FWM 3 0x00000003 - no destination available [ 176.570754][ T6779] IPVS: starting estimator thread 0... [ 176.697495][ T9185] IPVS: using max 29 ests per chain, 69600 per kthread [ 176.718393][ T9189] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 176.735461][ T9189] netlink: 'syz.2.755': attribute type 11 has an invalid length. [ 176.743600][ T9189] netlink: 220 bytes leftover after parsing attributes in process `syz.2.755'. [ 176.762280][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 176.785969][ T9189] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 176.857759][ T9191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.922126][ T9138] vxcan1 speed is unknown, defaulting to 1000 [ 177.007457][ T9191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.082583][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.756'. [ 177.189207][ T9191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.321792][ T9191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.365795][ T9163] vxcan1 speed is unknown, defaulting to 1000 [ 177.410134][ T9217] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.763'. [ 177.508491][ T149] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.548655][ T7104] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.637459][ T7094] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.694801][ T7094] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.771432][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'. [ 177.896175][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 178.124482][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 179.084475][ T9271] wg1 speed is unknown, defaulting to 1000 [ 179.092276][ T9271] vxcan1 speed is unknown, defaulting to 1000 [ 179.820177][ T9311] wg1 speed is unknown, defaulting to 1000 [ 179.828112][ T9311] vxcan1 speed is unknown, defaulting to 1000 [ 180.863466][ T9351] __nla_validate_parse: 4 callbacks suppressed [ 180.863485][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 180.886864][ T9351] netlink: 26 bytes leftover after parsing attributes in process `syz.2.800'. [ 180.992771][ T9358] tipc: Enabled bearer , priority 0 [ 181.060090][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 181.090226][ T9371] netlink: 96 bytes leftover after parsing attributes in process `syz.3.804'. [ 181.135252][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.804'. [ 181.454598][ T9384] wg1 speed is unknown, defaulting to 1000 [ 181.490005][ T9384] vxcan1 speed is unknown, defaulting to 1000 [ 181.525891][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 181.546120][ T9392] nbd2: detected capacity change from 0 to 63 [ 181.553894][ T9395] tipc: Enabling of bearer rejected, failed to enable media [ 181.611790][ T5874] block nbd2: Receive control failed (result -32) [ 181.696662][ T9395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.810'. [ 182.118612][ T5991] tipc: Node number set to 3750706790 [ 182.465771][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 182.574594][ T9431] netlink: 88 bytes leftover after parsing attributes in process `syz.4.819'. [ 182.872954][ T9446] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 182.887967][ T9435] geneve2: entered promiscuous mode [ 182.908576][ T9437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 182.963337][ T9447] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 182.996140][ T9447] batadv0: entered promiscuous mode [ 183.013570][ T9447] batadv0: entered allmulticast mode [ 183.042156][ T9447] bridge0: port 3(batadv0) entered blocking state [ 183.099776][ T9447] bridge0: port 3(batadv0) entered disabled state [ 183.159371][ T9446] batadv0: left allmulticast mode [ 183.165437][ T9446] batadv0: left promiscuous mode [ 183.170632][ T9446] bridge0: port 3(batadv0) entered disabled state [ 183.198558][ T9446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.212006][ T9446] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.233432][ T9421] wg1 speed is unknown, defaulting to 1000 [ 183.254918][ T9421] vxcan1 speed is unknown, defaulting to 1000 [ 183.309850][ T9442] wg1 speed is unknown, defaulting to 1000 [ 183.620639][ T9442] vxcan1 speed is unknown, defaulting to 1000 [ 183.785422][ T9474] wg1 speed is unknown, defaulting to 1000 [ 183.834938][ T9480] openvswitch: netlink: Message has 4 unknown bytes. [ 184.178530][ T9474] vxcan1 speed is unknown, defaulting to 1000 [ 184.488606][ T9496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.499090][ T9488] wg1 speed is unknown, defaulting to 1000 [ 184.542505][ T9495] wg1 speed is unknown, defaulting to 1000 [ 184.568563][ T9495] vxcan1 speed is unknown, defaulting to 1000 [ 184.865261][ T9488] vxcan1 speed is unknown, defaulting to 1000 [ 185.128191][ T9506] netlink: 'syz.3.833': attribute type 13 has an invalid length. [ 185.136713][ T9506] netlink: 'syz.3.833': attribute type 17 has an invalid length. [ 185.347360][ T9506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.359669][ T9506] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.386093][ T9506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.248498][ T9521] wg1 speed is unknown, defaulting to 1000 [ 186.272099][ T9521] vxcan1 speed is unknown, defaulting to 1000 [ 186.630552][ T9549] __nla_validate_parse: 3 callbacks suppressed [ 186.630570][ T9549] netlink: 96 bytes leftover after parsing attributes in process `syz.0.847'. [ 186.742016][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.849'. [ 186.966098][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 187.042847][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 187.042968][ T6785] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.066018][ T6785] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.193197][ T6785] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.212727][ T6785] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.432832][ T9585] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 187.662591][ T9579] wg1 speed is unknown, defaulting to 1000 [ 187.670366][ T9599] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 187.682551][ T9599] netlink: 2 bytes leftover after parsing attributes in process `syz.1.859'. [ 187.706686][ T9579] vxcan1 speed is unknown, defaulting to 1000 [ 187.733228][ T9599] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 187.776755][ T9600] wg1 speed is unknown, defaulting to 1000 [ 187.795026][ T9599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'. [ 187.926063][ T9599] team0: Port device geneve0 added [ 187.948690][ T7104] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.957206][ T7104] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.974386][ T9600] vxcan1 speed is unknown, defaulting to 1000 [ 188.034229][ T7104] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.067033][ T7104] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.385897][ T9616] siw: device registration error -23 [ 188.483459][ T9619] netlink: 'syz.1.863': attribute type 4 has an invalid length. [ 189.311897][ T9651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.871'. [ 189.379717][ T9655] netlink: 'syz.4.873': attribute type 8 has an invalid length. [ 189.425342][ T9655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.873'. [ 189.434455][ T9655] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 189.669663][ T9668] bridge3: entered promiscuous mode [ 189.698572][ T9671] tipc: Enabled bearer , priority 0 [ 189.730152][ T9672] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 189.779136][ T9672] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 189.944137][ T9685] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 189.969906][ T9683] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 190.227922][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 190.248801][ T9705] tipc: Enabled bearer , priority 0 [ 190.259889][ T9705] syzkaller0: entered promiscuous mode [ 190.265762][ T9705] syzkaller0: entered allmulticast mode [ 190.304078][ T9705] tipc: Resetting bearer [ 190.318111][ T9703] tipc: Resetting bearer [ 190.333560][ T9710] netlink: 16128 bytes leftover after parsing attributes in process `syz.2.885'. [ 190.363823][ T9703] tipc: Disabling bearer [ 190.366608][ T9710] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.394100][ T7094] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.402620][ T7094] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.411856][ T7094] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.425346][ T7094] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.536218][ T9715] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 190.824850][ T5991] tipc: Node number set to 161848557 [ 191.340363][ T30] audit: type=1800 audit(1757715434.899:4): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.898" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1082 res=0 errno=0 [ 191.512319][ T9766] vxcan1 speed is unknown, defaulting to 1000 [ 191.912805][ T9785] tipc: Enabling of bearer rejected, already enabled [ 191.966420][ T9785] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 192.001062][ T9785] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 192.020053][ T9785] tipc: Resetting bearer [ 192.261958][ T9800] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 192.423030][ T9808] vxcan1 speed is unknown, defaulting to 1000 [ 192.559475][ T9816] __nla_validate_parse: 10 callbacks suppressed [ 192.559494][ T9816] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.918'. [ 192.667020][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 192.712588][ T30] audit: type=1800 audit(1757715436.269:5): pid=9816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.918" name="memory.events" dev="tmpfs" ino=1114 res=0 errno=0 [ 192.855261][ T13] tipc: Resetting bearer [ 192.925840][ T6785] wlan0: Trigger new scan to find an IBSS to join [ 193.410054][ T9839] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 193.427017][ T9839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.923'. [ 193.513493][ T9836] vxcan1 speed is unknown, defaulting to 1000 [ 193.662993][ T9851] netlink: 'syz.3.925': attribute type 1 has an invalid length. [ 193.671475][ T5931] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 193.688125][ T9851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.718040][ T5931] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 193.831709][ T5931] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 193.926110][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.927'. [ 194.370988][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.380520][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.841334][ T9881] vxcan1 speed is unknown, defaulting to 1000 [ 194.924909][ T9889] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 194.932611][ T9889] netlink: 224 bytes leftover after parsing attributes in process `syz.1.933'. [ 195.185076][ T9885] vxcan1 speed is unknown, defaulting to 1000 [ 195.685708][ T9916] netlink: 14 bytes leftover after parsing attributes in process `syz.1.937'. [ 195.965217][ T7094] wlan0: Trigger new scan to find an IBSS to join [ 196.574355][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 196.608795][ T9930] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 196.622236][ T9930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.939'. [ 196.791854][ T9939] netlink: 19 bytes leftover after parsing attributes in process `syz.1.941'. [ 196.997483][ T9960] netlink: 460 bytes leftover after parsing attributes in process `syz.4.945'. [ 197.204350][ T9965] tipc: Resetting bearer [ 197.280213][ T9965] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 197.287807][ T9965] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 197.301406][ T9944] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.341350][ T9974] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 197.381109][ T9944] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.410509][ T9944] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.460794][ T9944] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.485051][ T9966] vxcan1 speed is unknown, defaulting to 1000 [ 198.013509][ T9994] batman_adv: batadv0: Removing interface: dummy0 [ 198.033000][ T9994] bridge_slave_0: left allmulticast mode [ 198.055845][ T9994] bridge_slave_0: left promiscuous mode [ 198.062565][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.078926][ T9994] bridge_slave_1: left allmulticast mode [ 198.095843][ T9994] bridge_slave_1: left promiscuous mode [ 198.102828][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.130348][ T9994] bond0: (slave bond_slave_0): Releasing backup interface [ 198.155599][ T9994] bond0: (slave bond_slave_1): Releasing backup interface [ 198.179800][ T9994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.191004][ T9994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.202749][ T9994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.333092][T10000] vxcan1 speed is unknown, defaulting to 1000 [ 198.536589][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.584913][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.604450][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.620533][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.629826][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.684033][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.734804][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.952'. [ 199.765251][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 199.775513][ T9942] wlan0: Trigger new scan to find an IBSS to join [ 199.827110][T10039] delete_channel: no stack [ 200.105458][T10049] netlink: 2 bytes leftover after parsing attributes in process `syz.4.961'. [ 200.115004][ T6770] IPVS: starting estimator thread 0... [ 200.205342][T10050] IPVS: using max 28 ests per chain, 67200 per kthread [ 200.385552][T10062] netlink: 'syz.4.965': attribute type 3 has an invalid length. [ 200.530094][T10067] syzkaller1: entered promiscuous mode [ 200.547828][T10067] syzkaller1: entered allmulticast mode [ 200.710400][ T9942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.782902][T10081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.971'. [ 200.992402][T10089] vxcan1 speed is unknown, defaulting to 1000 [ 201.729307][T10126] netlink: 'syz.3.983': attribute type 6 has an invalid length. [ 201.963353][T10137] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 202.004201][T10142] netlink: 'syz.2.988': attribute type 11 has an invalid length. [ 202.878859][T10197] ieee802154 phy1 wpan1: encryption failed: -90 [ 203.004051][T10208] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.294037][T10231] vxcan1 speed is unknown, defaulting to 1000 [ 204.001588][T10217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.209634][T10256] __nla_validate_parse: 10 callbacks suppressed [ 204.209651][T10256] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1019'. [ 204.275097][T10258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 204.311365][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 204.385518][T10258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 204.409215][T10258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 204.577699][T10262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.237542][T10282] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 205.469003][T10293] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 205.622421][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 205.832415][T10293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.873498][T10302] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 206.183404][T10327] vlan2: entered promiscuous mode [ 206.223124][T10327] team0: entered promiscuous mode [ 206.250998][T10327] team_slave_0: entered promiscuous mode [ 206.258178][T10327] team_slave_1: entered promiscuous mode [ 206.391680][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 206.452652][T10349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1042'. [ 206.466595][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'. [ 206.480470][T10349] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 206.653528][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 207.215145][T10358] hsr_slave_1 (unregistering): left promiscuous mode [ 207.646322][T10391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.791725][T10394] bridge4: entered promiscuous mode [ 207.840479][T10394] bridge4: entered allmulticast mode [ 208.132614][T10410] netlink: 'syz.3.1057': attribute type 5 has an invalid length. [ 208.178794][T10410] netlink: 'syz.3.1057': attribute type 7 has an invalid length. [ 208.206903][T10410] : entered promiscuous mode [ 208.741799][T10433] vxcan1 speed is unknown, defaulting to 1000 [ 208.817004][T10432] IPVS: persistence engine module ip_vs_pe_ not found [ 208.864590][ T5991] IPVS: starting estimator thread 0... [ 208.974961][T10446] IPVS: using max 33 ests per chain, 79200 per kthread [ 209.146937][T10452] lo: entered allmulticast mode [ 209.154990][ T30] audit: type=1800 audit(1757715452.709:6): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="cgroup.controllers" dev="tmpfs" ino=544 res=0 errno=0 [ 209.184450][T10452] tunl0: entered allmulticast mode [ 209.226797][T10452] gre0: entered allmulticast mode [ 209.333000][T10452] gretap0: entered allmulticast mode [ 209.349304][T10452] erspan0: entered allmulticast mode [ 209.368749][T10452] ip_vti0: entered allmulticast mode [ 209.387446][T10452] ip6_vti0: entered allmulticast mode [ 209.489282][T10452] sit0: left promiscuous mode [ 209.494264][T10452] sit0: entered allmulticast mode [ 209.500780][T10452] ip6tnl0: entered allmulticast mode [ 209.524149][T10452] ip6gre0: entered allmulticast mode [ 209.550239][T10452] syz_tun: entered allmulticast mode [ 209.580111][T10452] ip6gretap0: entered allmulticast mode [ 209.601850][T10452] vcan0: entered allmulticast mode [ 209.618894][T10452] bond0: entered allmulticast mode [ 209.624161][T10452] bond_slave_0: entered allmulticast mode [ 209.634402][T10452] bond_slave_1: entered allmulticast mode [ 209.641139][T10452] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 209.659978][T10452] team0: entered allmulticast mode [ 209.677118][T10452] team_slave_0: entered allmulticast mode [ 209.706674][T10452] team_slave_1: entered allmulticast mode [ 209.713101][T10452] dummy0: entered allmulticast mode [ 209.756356][T10452] nlmon0: entered allmulticast mode [ 209.800481][T10452] caif0: entered allmulticast mode [ 209.818996][T10452] batadv0: entered allmulticast mode [ 209.843311][T10452] vxcan0: entered allmulticast mode [ 209.857634][T10452] vxcan1: entered allmulticast mode [ 209.868732][T10452] veth0: entered allmulticast mode [ 209.881558][T10452] veth1: entered allmulticast mode [ 209.915251][T10452] wg0: entered allmulticast mode [ 209.933726][T10452] wg1: entered allmulticast mode [ 209.936013][T10460] netlink: 'syz.4.1069': attribute type 4 has an invalid length. [ 209.950044][T10452] ªªªªªª: entered allmulticast mode [ 209.962386][T10452] veth0_to_bridge: entered allmulticast mode [ 209.983976][T10452] bridge_slave_0: entered allmulticast mode [ 209.997043][T10452] veth1_to_bridge: entered allmulticast mode [ 210.007360][T10452] bridge_slave_1: entered allmulticast mode [ 210.016379][T10452] veth0_to_bond: entered allmulticast mode [ 210.030159][T10452] veth1_to_bond: entered allmulticast mode [ 210.040802][T10452] veth0_to_team: entered allmulticast mode [ 210.062637][T10452] veth1_to_team: entered allmulticast mode [ 210.082009][T10452] veth0_to_batadv: entered allmulticast mode [ 210.100882][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.116169][T10452] batadv_slave_0: entered allmulticast mode [ 210.128562][T10452] veth1_to_batadv: entered allmulticast mode [ 210.141435][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.150088][T10452] batadv_slave_1: entered allmulticast mode [ 210.169020][T10452] xfrm0: entered allmulticast mode [ 210.184203][T10452] veth0_to_hsr: entered allmulticast mode [ 210.195322][T10452] hsr_slave_0: entered allmulticast mode [ 210.204068][T10452] veth1_to_hsr: entered allmulticast mode [ 210.219615][T10452] hsr_slave_1: entered allmulticast mode [ 210.230611][T10452] hsr0: entered allmulticast mode [ 210.240940][T10452] veth1_virt_wifi: entered allmulticast mode [ 210.251906][T10452] veth0_virt_wifi: entered allmulticast mode [ 210.262341][T10452] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 210.272366][T10452] veth1_macvtap: entered allmulticast mode [ 210.295306][T10452] veth0_macvtap: entered allmulticast mode [ 210.309714][T10452] macvtap0: entered allmulticast mode [ 210.331540][T10452] macsec0: entered allmulticast mode [ 210.341982][T10452] geneve0: entered allmulticast mode [ 210.355775][T10452] geneve1: entered allmulticast mode [ 210.369509][T10452] bridge1: entered allmulticast mode [ 210.375383][T10452] bridge2: entered allmulticast mode [ 210.380853][T10452] netdevsim netdevsim2 eth0: entered allmulticast mode [ 210.390796][T10452] netdevsim netdevsim2 eth1: entered allmulticast mode [ 210.398262][T10452] netdevsim netdevsim2 eth2: entered allmulticast mode [ 210.409683][T10452] netdevsim netdevsim2 eth3: entered allmulticast mode [ 210.418064][T10452] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 210.426317][T10452] sit1: entered allmulticast mode [ 210.471272][T10452] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 210.478784][T10452] macsec1: left promiscuous mode [ 210.485267][T10452] gre1: entered allmulticast mode [ 210.490791][T10452] ip6tnl1: entered allmulticast mode [ 210.496581][T10452] veth2: entered allmulticast mode [ 210.502240][T10452] veth3: entered allmulticast mode [ 210.509123][T10452] @: entered allmulticast mode [ 210.527872][T10452] tipc: Resetting bearer [ 210.550581][T10452] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 210.568840][T10452] gtp0: entered allmulticast mode [ 210.585613][T10452] ip6gre1: entered allmulticast mode [ 210.599189][T10452] ipip0: entered allmulticast mode [ 210.615386][T10452] syztnl0: entered allmulticast mode [ 210.647359][T10444] vxcan1 speed is unknown, defaulting to 1000 [ 210.691320][ T9934] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.720125][ T9934] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.830243][ T9934] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.859134][ T9934] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.884750][ T9934] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.906455][ T9934] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.939691][ T9934] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.955120][ T9934] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.156666][T10470] tipc: Enabled bearer , priority 0 [ 211.172840][T10473] syzkaller0: entered promiscuous mode [ 211.182923][T10473] syzkaller0: entered allmulticast mode [ 211.204590][T10465] __nla_validate_parse: 3 callbacks suppressed [ 211.212287][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1070'. [ 211.215811][T10482] netlink: 'syz.2.1073': attribute type 7 has an invalid length. [ 211.246988][T10470] sch_fq: defrate 257 ignored. [ 211.324193][T10482] : entered promiscuous mode [ 211.342241][T10464] tipc: Resetting bearer [ 211.450292][T10462] tipc: Resetting bearer [ 211.481894][T10462] tipc: Disabling bearer [ 211.650142][T10486] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 211.658200][T10486] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1074'. [ 211.675736][T10486] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 211.690847][T10486] netlink: 'syz.1.1074': attribute type 2 has an invalid length. [ 211.808880][T10491] vxcan1 speed is unknown, defaulting to 1000 [ 212.617739][T10523] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1085'. [ 212.659355][T10523] netlink: 'syz.2.1085': attribute type 15 has an invalid length. [ 212.773803][T10525] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 212.848697][T10525] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 213.081159][T10536] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 213.198189][T10532] can: request_module (can-proto-0) failed. [ 213.234362][T10541] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 213.958042][T10557] syzkaller1: entered promiscuous mode [ 213.965019][T10557] syzkaller1: entered allmulticast mode [ 214.159492][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 214.192185][T10571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.254773][T10576] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1098'. [ 214.263769][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1098'. [ 214.311614][T10568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.344008][T10576] validate_nla: 1 callbacks suppressed [ 214.344026][T10576] netlink: 'syz.3.1098': attribute type 2 has an invalid length. [ 214.369610][T10565] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1098'. [ 214.403616][T10573] vxcan1 speed is unknown, defaulting to 1000 [ 215.265726][T10607] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 215.478488][T10607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.539334][T10610] netlink: 'syz.0.1100': attribute type 28 has an invalid length. [ 215.548400][T10610] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 215.556454][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 215.571873][T10610] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 215.609098][T10608] bond1: (slave veth5): Enslaving as an active interface with a down link [ 215.734490][T10577] vxcan1 speed is unknown, defaulting to 1000 [ 215.978879][T10628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 216.495375][T10622] vxcan1 speed is unknown, defaulting to 1000 [ 216.698921][T10650] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1121'. [ 216.911724][T10660] tipc: Enabling of bearer rejected, already enabled [ 216.925017][T10660] tipc: Resetting bearer [ 216.990241][T10662] netlink: 'syz.3.1124': attribute type 4 has an invalid length. [ 217.016474][T10662] netlink: 'syz.3.1124': attribute type 4 has an invalid length. [ 217.282679][T10662] vxcan1 speed is unknown, defaulting to 1000 [ 217.868851][T10674] lo speed is unknown, defaulting to 1000 [ 217.879103][T10674] lo speed is unknown, defaulting to 1000 [ 217.926481][T10674] lo speed is unknown, defaulting to 1000 [ 217.966107][T10686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1131'. [ 218.034910][T10688] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1132'. [ 218.040909][T10674] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 218.130350][T10674] lo speed is unknown, defaulting to 1000 [ 218.282520][T10674] lo speed is unknown, defaulting to 1000 [ 218.293645][T10674] lo speed is unknown, defaulting to 1000 [ 218.303225][T10695] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1133'. [ 218.351126][T10695] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 218.386093][T10674] lo speed is unknown, defaulting to 1000 [ 218.410639][T10674] lo speed is unknown, defaulting to 1000 [ 218.470085][T10674] lo speed is unknown, defaulting to 1000 [ 218.484759][T10674] lo speed is unknown, defaulting to 1000 [ 218.514497][T10674] lo speed is unknown, defaulting to 1000 [ 218.613108][T10701] IPv6: Can't replace route, no match found [ 218.958376][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1137'. [ 219.015305][T10718] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 219.023081][T10718] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1138'. [ 219.093792][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 219.388208][T10711] vxcan1 speed is unknown, defaulting to 1000 [ 219.441889][ T6767] IPVS: starting estimator thread 0... [ 219.465685][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 219.545152][T10730] IPVS: using max 25 ests per chain, 60000 per kthread [ 220.238540][T10711] lo speed is unknown, defaulting to 1000 [ 220.332994][T10757] sctp: [Deprecated]: syz.2.1145 (pid 10757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.332994][T10757] Use struct sctp_sack_info instead [ 220.441797][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 221.309850][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 221.377514][ T7104] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.389246][ T7104] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.413110][ T7104] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.495173][ T8533] IPVS: ip_vs_send_async error -101 [ 221.503784][ T7104] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.553996][T10779] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 221.608844][T10779] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 221.770109][T10793] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 221.912380][T10801] netlink: 'syz.0.1160': attribute type 32 has an invalid length. [ 221.953229][T10801] __nla_validate_parse: 1 callbacks suppressed [ 221.953249][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 221.990915][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 221.995270][T10801] (unnamed net_device) (uninitialized): option coupled_control: invalid value (24) [ 222.023171][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 222.033800][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 222.098549][T10804] netlink: 23932 bytes leftover after parsing attributes in process `syz.2.1159'. [ 222.281177][T10814] vxcan1 speed is unknown, defaulting to 1000 [ 222.545224][T10814] lo speed is unknown, defaulting to 1000 [ 223.141198][T10838] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1169'. [ 223.195336][T10838] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1169'. [ 223.385098][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 223.715578][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 223.948702][T10890] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 224.002217][T10890] netlink: 'syz.4.1184': attribute type 4 has an invalid length. [ 224.018954][T10890] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1184'. [ 224.714470][T10918] vxcan1 speed is unknown, defaulting to 1000 [ 224.851131][T10925] netlink: 'syz.1.1193': attribute type 4 has an invalid length. [ 224.877102][T10921] block nbd0: server does not support multiple connections per device. [ 224.890097][T10921] block nbd0: shutting down sockets [ 225.069252][T10931] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 225.077290][ T9934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.097379][ T9934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.122394][T10939] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 225.342308][T10945] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 225.413913][T10945] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.550552][T10951] bond5: (slave ip6gretap1): making interface the new active one [ 225.560788][T10951] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.583030][T10957] veth9: entered promiscuous mode [ 225.590206][T10956] netlink: 'syz.2.1202': attribute type 4 has an invalid length. [ 225.593119][T10957] bond5: (slave veth9): Enslaving as an active interface with a down link [ 225.610678][T10918] lo speed is unknown, defaulting to 1000 [ 225.643525][T10956] netlink: 'syz.2.1202': attribute type 4 has an invalid length. [ 225.652130][ T8533] IPVS: ip_vs_send_async error -101 [ 225.688058][T10959] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 225.700296][T10959] geneve0: left allmulticast mode [ 225.719273][T10959] geneve0: entered allmulticast mode [ 225.748913][T10959] team0: Port device geneve0 added [ 225.817173][ T9942] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.826432][ T9942] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.880692][T10960] vxcan1 speed is unknown, defaulting to 1000 [ 225.893633][ T9942] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.910525][ T9942] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.011369][T10977] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 226.043487][T10977] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 226.170979][T10983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.372597][T10993] 8021q: VLANs not supported on wg1 [ 226.477740][T10960] lo speed is unknown, defaulting to 1000 [ 227.811052][T11041] __nla_validate_parse: 6 callbacks suppressed [ 227.811072][T11041] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1223'. [ 227.921976][T11047] nbd: must specify a size in bytes for the device [ 228.158219][T11059] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1228'. [ 228.331298][T11071] vxcan1 speed is unknown, defaulting to 1000 [ 228.485467][T11086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.887777][T11071] lo speed is unknown, defaulting to 1000 [ 228.912486][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'. [ 228.990003][ T9934] smc: removing ib device syz2 [ 229.112742][T11112] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1240'. [ 229.214446][T11111] netlink: 'syz.4.1240': attribute type 21 has an invalid length. [ 229.426543][T11114] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1242'. [ 229.440313][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'. [ 229.672654][T11127] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 229.764211][ T9936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.787339][ T9936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.133045][T11141] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 230.999483][T11168] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 231.012715][T11172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1257'. [ 231.014596][T11168] tipc: Resetting bearer [ 231.030109][T11167] tipc: Enabling of bearer rejected, already enabled [ 231.065476][T11168] tipc: Resetting bearer [ 231.154377][T11179] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 231.224435][T11179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.289856][T11179] netlink: 'syz.3.1258': attribute type 6 has an invalid length. [ 231.353769][T11184] bond2: (slave veth7): Enslaving as an active interface with a down link [ 231.401107][T11187] gretap1: entered promiscuous mode [ 231.412964][T11187] bond2: (slave gretap1): making interface the new active one [ 231.423455][T11187] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 231.503990][T11179] macvlan2: entered promiscuous mode [ 231.510605][T11179] macvlan2: entered allmulticast mode [ 231.517078][T11179] bond2: entered promiscuous mode [ 231.523348][T11179] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.531301][T11179] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 231.554099][T11179] bond2: left promiscuous mode [ 231.586292][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1261'. [ 231.596091][T11192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1261'. [ 231.613373][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 231.628361][T11198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.733109][T11201] macsec1: entered promiscuous mode [ 231.740153][T11201] macsec0: entered promiscuous mode [ 231.765234][T11201] macsec1: entered allmulticast mode [ 231.774345][T11201] macsec0: entered allmulticast mode [ 231.850997][T11210] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 231.921591][T11210] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.938756][T11210] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 231.993049][T11223] macvlan2: entered promiscuous mode [ 232.012020][T11223] macvlan2: entered allmulticast mode [ 232.047124][T11223] bond3: entered promiscuous mode [ 232.056649][T11223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.068795][T11223] bond3: left promiscuous mode [ 232.200003][T11233] batadv1: entered promiscuous mode [ 232.206353][T11233] batadv1: entered allmulticast mode [ 232.277589][T11242] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 232.314468][T11242] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.326835][T11242] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 232.486274][T11246] wg0: left allmulticast mode [ 232.501186][T11246] bridge2: left promiscuous mode [ 232.508041][T11246] veth3: left promiscuous mode [ 232.513220][T11246] bridge3: left promiscuous mode [ 232.524846][ T9938] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.538414][ T9938] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.547861][ T9938] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.556779][ T9938] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.586763][T11253] tipc: Enabling of bearer rejected, already enabled [ 232.605711][T11253] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 232.613179][T11253] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 232.643438][T11253] tipc: Resetting bearer [ 232.677580][T11257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.123339][T11274] __nla_validate_parse: 6 callbacks suppressed [ 233.123360][T11274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1283'. [ 234.199614][T11281] lo speed is unknown, defaulting to 1000 [ 234.271880][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 234.294486][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 234.311620][T11289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1288'. [ 234.323315][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 234.407819][T11294] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1289'. [ 234.437389][T11300] netlink: 592 bytes leftover after parsing attributes in process `syz.4.1292'. [ 234.843706][T11318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1295'. [ 235.430654][T11331] pim6reg1: entered promiscuous mode [ 235.444679][T11331] pim6reg1: entered allmulticast mode [ 235.469643][T11341] ksmbd: Unknown IPC event: 3, ignore. [ 236.570599][T11369] lo speed is unknown, defaulting to 1000 [ 236.834071][T11379] netlink: 'syz.3.1314': attribute type 14 has an invalid length. [ 237.551015][ T30] audit: type=1800 audit(1757715481.109:7): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1318" name="memory.events" dev="tmpfs" ino=1513 res=0 errno=0 [ 237.950511][T11411] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1324'. [ 237.963935][T11412] tipc: Resetting bearer [ 237.982759][T11412] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 238.577697][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.590932][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.603000][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.615586][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.627295][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.638667][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.649330][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.663772][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.674540][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.685294][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 238.707298][T11443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.717362][T11443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.299329][T11475] netlink: 'syz.4.1341': attribute type 3 has an invalid length. [ 239.999984][T11500] macsec0: left allmulticast mode [ 240.005654][T11500] macsec0: left promiscuous mode [ 240.015442][T11500] macsec1: left promiscuous mode [ 240.025058][T11500] macsec1: left allmulticast mode [ 240.043487][ T7104] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.053583][ T7104] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.088429][ T7104] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.098662][ T7104] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.139417][T11509] xt_limit: Overflow, try lower: 271964/0 [ 240.139514][T11508] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 240.226741][T11513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.388548][T11524] tipc: Enabling of bearer rejected, already enabled [ 240.451126][T11526] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 240.459491][T11526] tipc: Resetting bearer [ 240.470567][T11526] tipc: Resetting bearer [ 240.996445][T11539] lo speed is unknown, defaulting to 1000 [ 241.298936][T11549] team0: Port device team_slave_0 removed [ 242.086131][T11586] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 242.128543][T11586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.148921][T11623] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 243.162226][T11623] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 244.699340][T11691] __nla_validate_parse: 15 callbacks suppressed [ 244.699360][T11691] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1397'. [ 244.736263][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1397'. [ 244.746043][T11691] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1397'. [ 244.755378][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1397'. [ 244.787822][T11697] lo speed is unknown, defaulting to 1000 [ 245.202175][T11717] lo speed is unknown, defaulting to 1000 [ 245.353663][T11717] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1402'. [ 245.515397][T11714] syz_tun: entered allmulticast mode [ 245.551997][T11714] dvmrp8: entered allmulticast mode [ 245.581290][T11712] syz_tun: left allmulticast mode [ 245.603863][T11712] dvmrp8: left allmulticast mode [ 245.844994][T11735] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1408'. [ 246.196372][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1413'. [ 246.306501][T11764] tun0: tun_chr_ioctl cmd 1074025675 [ 246.311845][T11764] tun0: persist enabled [ 246.316693][T11764] tun0: tun_chr_ioctl cmd 1074025675 [ 246.322005][T11764] tun0: persist enabled [ 246.359857][T11768] netlink: 'syz.3.1418': attribute type 1 has an invalid length. [ 246.389055][T11764] netlink: 'syz.4.1416': attribute type 33 has an invalid length. [ 246.399373][T11764] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1416'. [ 246.425661][T11771] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 246.451695][T11771] dummy0: left allmulticast mode [ 246.471179][T11771] dummy0: entered allmulticast mode [ 246.497899][T11766] can: request_module (can-proto-0) failed. [ 246.502146][T11771] team0: Port device dummy0 added [ 246.509153][T11777] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 246.551728][T11777] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.615102][T11777] dummy0: left allmulticast mode [ 246.630543][T11777] team0: Failed to send options change via netlink (err -105) [ 246.639720][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 246.641807][T11777] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.663607][T11777] team0: Port device dummy0 removed [ 246.678276][T11777] dummy0: entered allmulticast mode [ 246.698810][T11777] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 246.771011][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 246.903174][T11798] netlink: 'syz.3.1426': attribute type 10 has an invalid length. [ 246.911753][T11798] team0: Cannot enslave team device to itself [ 247.017039][T11803] syz_tun: entered allmulticast mode [ 247.111905][T11803] veth5: left promiscuous mode [ 247.135649][T11803] veth9: left promiscuous mode [ 247.151137][ T9944] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.159926][ T9944] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.163290][T11811] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.172679][ T9944] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.204495][ T9944] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.218349][ T9944] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.234129][ T9944] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.250133][ T9944] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.273749][ T9944] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.304457][T11815] tipc: Enabling of bearer rejected, already enabled [ 247.441258][T11826] bridge_slave_0: left allmulticast mode [ 247.447618][T11826] bridge_slave_0: left promiscuous mode [ 247.453963][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.471420][T11826] bridge_slave_1: left allmulticast mode [ 247.478575][T11826] bridge_slave_1: left promiscuous mode [ 247.484538][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.518052][T11826] bond0: (slave bond_slave_0): Releasing backup interface [ 247.557242][T11826] bond0: (slave bond_slave_1): Releasing backup interface [ 247.598591][T11826] team_slave_0: left promiscuous mode [ 247.632701][T11826] team0: Port device team_slave_0 removed [ 247.639446][T11826] team_slave_1: left promiscuous mode [ 247.689685][T11826] team0: Port device team_slave_1 removed [ 247.696888][T11826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.765118][T11826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.775208][T11826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.941536][T11832] tipc: Resetting bearer [ 247.966156][T11832] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 248.143931][T11836] lo speed is unknown, defaulting to 1000 [ 248.412524][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.423692][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.433218][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.445266][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.462595][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.641941][T11858] lo speed is unknown, defaulting to 1000 [ 249.106513][T11878] bridge0: port 1(veth11) entered blocking state [ 249.114556][T11878] bridge0: port 1(veth11) entered disabled state [ 249.121749][T11878] veth11: entered allmulticast mode [ 249.133709][T11878] veth11: entered promiscuous mode [ 249.169929][T11882] bridge0: port 2(veth0_to_bond) entered blocking state [ 249.197076][T11882] bridge0: port 2(veth0_to_bond) entered disabled state [ 249.204269][T11882] veth0_to_bond: entered allmulticast mode [ 249.226121][T11882] veth0_to_bond: entered promiscuous mode [ 249.287537][T11858] chnl_net:caif_netlink_parms(): no params data found [ 249.662757][T11858] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.673255][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.680890][T11858] bridge_slave_0: entered allmulticast mode [ 249.689508][T11858] bridge_slave_0: entered promiscuous mode [ 249.706593][T11858] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.725520][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.745980][T11858] bridge_slave_1: entered allmulticast mode [ 249.778519][T11858] bridge_slave_1: entered promiscuous mode [ 249.837966][T11920] netlink: 'syz.2.1459': attribute type 3 has an invalid length. [ 249.859671][T11924] __nla_validate_parse: 8 callbacks suppressed [ 249.859690][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 249.887292][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 249.901002][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.910302][T11924] netlink: 'syz.1.1461': attribute type 13 has an invalid length. [ 249.922688][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.961669][T11920] macsec0 speed is unknown, defaulting to 1000 [ 249.999219][T11920] macsec0 speed is unknown, defaulting to 1000 [ 249.999563][T11925] lo: left allmulticast mode [ 250.014573][T11925] tunl0: left allmulticast mode [ 250.028367][T11925] gre0: left allmulticast mode [ 250.040900][T11925] gretap0: left allmulticast mode [ 250.050083][T11925] erspan0: left allmulticast mode [ 250.057390][T11925] ip_vti0: left allmulticast mode [ 250.064169][T11925] ip6_vti0: left allmulticast mode [ 250.072775][T11925] sit0: left allmulticast mode [ 250.094536][T11925] ip6tnl0: left allmulticast mode [ 250.102487][T11925] ip6gre0: left allmulticast mode [ 250.109646][T11925] syz_tun: left allmulticast mode [ 250.118010][T11925] ip6gretap0: left allmulticast mode [ 250.131532][T11925] vcan0: left allmulticast mode [ 250.138789][T11925] bond0: left allmulticast mode [ 250.146372][T11925] dummy0: left allmulticast mode [ 250.155675][T11925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.164789][T11925] team0: left allmulticast mode [ 250.169672][T11925] geneve0: left allmulticast mode [ 250.176898][T11925] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.186869][T11925] nlmon0: left allmulticast mode [ 250.193373][T11925] caif0: left allmulticast mode [ 250.198693][T11925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.222466][T11858] team0: Port device team_slave_0 added [ 250.231821][T11858] team0: Port device team_slave_1 added [ 250.248898][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.282753][T11920] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 250.419639][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.420643][T11930] lo speed is unknown, defaulting to 1000 [ 250.448916][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.457475][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.516240][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.527815][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.537351][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.558656][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.566298][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.592757][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.604421][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.605215][ T5874] Bluetooth: hci1: command tx timeout [ 250.668771][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.700904][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.739782][T11920] macsec0 speed is unknown, defaulting to 1000 [ 250.746312][T11858] hsr_slave_0: entered promiscuous mode [ 250.761677][T11858] hsr_slave_1: entered promiscuous mode [ 250.769890][T11858] debugfs: 'hsr0' already exists in 'hsr' [ 250.780350][T11858] Cannot create hsr debugfs directory [ 250.908481][T11950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1467'. [ 250.919904][T11926] mpoa:mpoad_close: () going down [ 251.552502][T11964] netlink: 'syz.2.1471': attribute type 1 has an invalid length. [ 251.570649][T11965] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 251.580518][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 251.612478][T11964] netlink: 628 bytes leftover after parsing attributes in process `syz.2.1471'. [ 251.748658][T11858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.786297][T11858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.893371][T11858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.989278][T11858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.312236][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 252.321107][T11987] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 252.418144][T11858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.465289][T11997] nbd4: detected capacity change from 0 to 63 [ 252.481673][T11858] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.489363][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 252.518054][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.526344][ T9938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.592173][ T9946] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.599408][ T9946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.684814][ T5878] Bluetooth: hci1: command tx timeout [ 252.803258][ T5874] block nbd4: Receive control failed (result -32) [ 253.139305][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.230188][T12037] tipc: Enabling of bearer rejected, failed to enable media [ 253.438948][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'. [ 253.521207][T12049] tipc: Resetting bearer [ 253.580159][T12043] lo speed is unknown, defaulting to 1000 [ 253.637572][ T9938] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.661113][T12058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1493'. [ 253.675027][ T9938] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.739671][T12062] veth0: entered promiscuous mode [ 253.775676][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 253.788276][T12043] macsec0 speed is unknown, defaulting to 1000 [ 253.882068][ T9938] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.960931][T12062] veth0 (unregistering): left promiscuous mode [ 254.044489][ T9938] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.232145][T11858] veth0_vlan: entered promiscuous mode [ 254.295705][T11858] veth1_vlan: entered promiscuous mode [ 254.417896][T11858] veth0_macvtap: entered promiscuous mode [ 254.444485][T11858] veth1_macvtap: entered promiscuous mode [ 254.514547][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.552619][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.587426][ T9942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.608364][ T9942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.630898][ T9942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.660965][ T9942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.681384][T12098] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 254.690387][T12098] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 254.765430][ T5878] Bluetooth: hci1: command tx timeout [ 254.775662][ T9944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.793013][ T9944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.841051][ T9942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.856758][ T9942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.890698][T12105] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 254.901645][T12106] Unsupported ieee802154 address type: 0 [ 254.985391][T12110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.002011][T12110] __nla_validate_parse: 1 callbacks suppressed [ 255.002031][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 255.109712][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1508'. [ 255.231858][T12121] pim6reg: entered allmulticast mode [ 255.393049][T12124] syzkaller0: entered promiscuous mode [ 255.398962][T12124] syzkaller0: entered allmulticast mode [ 255.407281][T12126] pim6reg: left allmulticast mode [ 255.821086][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.830303][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.869261][T12148] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 256.854842][ T5878] Bluetooth: hci1: command 0x0419 tx timeout [ 257.382197][T12153] bond0: (slave erspan0): Error: Device type is different from other slaves [ 257.416824][T12131] lo speed is unknown, defaulting to 1000 [ 257.440983][T12131] macsec0 speed is unknown, defaulting to 1000 [ 257.450869][T12151] lo speed is unknown, defaulting to 1000 [ 257.497144][T12151] macsec0 speed is unknown, defaulting to 1000 [ 257.513420][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1517'. [ 257.676140][ T7104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.684001][ T7104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.694192][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 257.862168][T12172] lo speed is unknown, defaulting to 1000 [ 257.883096][T12172] macsec0 speed is unknown, defaulting to 1000 [ 258.034137][T12182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1523'. [ 258.046391][T12182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1523'. [ 258.093433][T12184] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1524'. [ 258.935187][ T5878] Bluetooth: hci1: command 0x0419 tx timeout [ 258.940760][T12207] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 259.204317][T12209] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1530'. [ 259.649581][T12224] openvswitch: netlink: IP tunnel TTL not specified. [ 259.932076][T12235] tipc: Enabling of bearer rejected, already enabled [ 259.966378][T12234] tipc: Enabling of bearer rejected, already enabled [ 260.011269][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 260.035512][T12242] netlink: 'syz.5.1541': attribute type 2 has an invalid length. [ 260.052340][T12239] dvmrp8: entered allmulticast mode [ 260.131530][T12242] : entered promiscuous mode [ 260.173815][T12238] dvmrp8: left allmulticast mode [ 260.223721][T12248] netlink: 'syz.5.1541': attribute type 9 has an invalid length. [ 260.240390][T12248] netlink: 212260 bytes leftover after parsing attributes in process `syz.5.1541'. [ 260.391287][T12264] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.1544'. [ 260.579328][T12278] geneve0: entered allmulticast mode [ 260.731028][T12270] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.738900][T12270] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.929733][T12270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.970788][T12270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.342898][ T7104] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.393122][ T7104] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.433003][ T7104] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.469241][T12291] lo speed is unknown, defaulting to 1000 [ 261.478687][ T7104] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.527577][T12291] macsec0 speed is unknown, defaulting to 1000 [ 261.655984][T12301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 261.711887][T12305] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 261.963881][T12316] lo speed is unknown, defaulting to 1000 [ 261.982659][T12319] gretap1: entered allmulticast mode [ 262.006713][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1558'. [ 262.026809][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1558'. [ 262.046961][T12316] macsec0 speed is unknown, defaulting to 1000 [ 262.050802][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1561'. [ 262.191955][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 262.219186][T12327] hsr_slave_1: entered allmulticast mode [ 262.251889][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 262.512221][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 262.642852][T12343] lo speed is unknown, defaulting to 1000 [ 262.658982][T12343] macsec0 speed is unknown, defaulting to 1000 [ 262.707977][T12348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 262.812070][T12352] openvswitch: netlink: IP tunnel attribute has 62 unknown bytes. [ 263.700488][T12392] lo: entered promiscuous mode [ 263.717511][T12392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.832969][T12408] netlink: 'syz.3.1583': attribute type 83 has an invalid length. [ 263.851153][T12408] netlink: 'syz.3.1583': attribute type 1 has an invalid length. [ 263.887463][T12408] netlink: 'syz.3.1583': attribute type 1 has an invalid length. [ 264.527100][T12445] lo speed is unknown, defaulting to 1000 [ 264.702058][T12445] macsec0 speed is unknown, defaulting to 1000 [ 265.122325][T12459] netlink: 'syz.2.1591': attribute type 6 has an invalid length. [ 265.134342][T12468] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 265.255315][T12468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.273438][T12471] bond4: (slave gretap1): making interface the new active one [ 265.282391][T12471] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 265.625814][T12486] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 265.767524][T12486] __nla_validate_parse: 1 callbacks suppressed [ 265.767545][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1603'. [ 266.264043][T12506] netlink: 'syz.3.1610': attribute type 14 has an invalid length. [ 266.302988][T12509] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 266.344116][T12509] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1611'. [ 266.817908][T12509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.842529][T12509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.853971][T12509] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 266.867543][T12509] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 266.877559][T12509] bond0 (unregistering): Released all slaves [ 267.051033][T12520] lo speed is unknown, defaulting to 1000 [ 267.072440][T12520] macsec0 speed is unknown, defaulting to 1000 [ 267.099074][T12530] netlink: 184628 bytes leftover after parsing attributes in process `syz.3.1617'. [ 267.182377][T12541] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1618'. [ 267.390466][T12549] netem: change failed [ 267.716231][T12567] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1625'. [ 268.125337][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 268.287529][T12593] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1633'. [ 268.361274][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 268.408015][T12599] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 268.442806][T12582] lo speed is unknown, defaulting to 1000 [ 268.456166][T12599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1634'. [ 268.516936][T12582] macsec0 speed is unknown, defaulting to 1000 [ 268.556833][T12606] openvswitch: netlink: IPv4 tun info is not correct [ 268.787332][T12607] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 268.805265][T12607] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1635'. [ 268.995020][T12619] hsr_slave_1: left allmulticast mode [ 269.016949][T12619] gretap1: left allmulticast mode [ 269.476403][T12637] lo speed is unknown, defaulting to 1000 [ 269.483935][T12637] macsec0 speed is unknown, defaulting to 1000 [ 269.831034][T12649] sctp: [Deprecated]: syz.4.1649 (pid 12649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.831034][T12649] Use struct sctp_sack_info instead [ 269.923117][T12656] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 270.255142][T12675] tipc: Resetting bearer [ 270.872433][T12703] __nla_validate_parse: 5 callbacks suppressed [ 270.872453][T12703] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1663'. [ 270.901673][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 271.270076][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 271.282668][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 271.409017][T12727] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1670'. [ 271.660466][T12743] unknown channel width for channel at 909000KHz? [ 271.742194][T12743] BUG: unable to handle page fault for address: ffffffff8958a7cf [ 271.749961][T12743] #PF: supervisor write access in kernel mode [ 271.756037][T12743] #PF: error_code(0x0003) - permissions violation [ 271.762464][T12743] PGD df3b067 P4D df3b067 PUD df3c063 PMD 94001a1 [ 271.769020][T12743] Oops: Oops: 0003 [#1] SMP KASAN PTI [ 271.774509][T12743] CPU: 0 UID: 0 PID: 12743 Comm: syz.3.1674 Not tainted syzkaller #0 PREEMPT(full) [ 271.783924][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.793991][T12743] RIP: 0010:xfrm_state_find+0x4ca9/0x5400 [ 271.799723][T12743] Code: 4c 89 ff e8 79 63 01 f8 49 8b 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 47 64 01 f8 <4c> 89 23 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 80 3c 01 00 [ 271.819332][T12743] RSP: 0018:ffffc900051bf3a0 EFLAGS: 00010246 [ 271.825404][T12743] RAX: 1ffffffff12b14f9 RBX: ffffffff8958a7cf RCX: dffffc0000000000 [ 271.833371][T12743] RDX: ffffc9000d11b000 RSI: 0000000000000676 RDI: 0000000000000677 [ 271.841340][T12743] RBP: ffffc900051bf5c0 R08: dffffc0000000000 R09: 0000000000000002 [ 271.849303][T12743] R10: 000000000000000a R11: 0000000000000002 R12: ffff888057000028 [ 271.857263][T12743] R13: ffff888057000000 R14: ffff888057e9c8a8 R15: ffff888057000030 [ 271.865226][T12743] FS: 00007fda5cfa36c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 271.874145][T12743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.880717][T12743] CR2: ffffffff8958a7cf CR3: 000000002f3ae000 CR4: 00000000003526f0 [ 271.888684][T12743] Call Trace: [ 271.892045][T12743] [ 271.894969][T12743] ? ___sys_sendmsg+0x21f/0x2a0 [ 271.899831][T12743] ? __pfx___find_rr_leaf+0x10/0x10 [ 271.905033][T12743] ? __pfx_fib6_node_lookup+0x10/0x10 [ 271.910418][T12743] ? xfrm_state_find+0x1da/0x5400 [ 271.915462][T12743] ? __pfx_xfrm_state_find+0x10/0x10 [ 271.920751][T12743] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 271.926474][T12743] ? __lock_acquire+0xab9/0xd20 [ 271.931330][T12743] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 271.937394][T12743] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 271.943562][T12743] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 271.950155][T12743] ? __lock_acquire+0xab9/0xd20 [ 271.955022][T12743] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 271.960406][T12743] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 271.965783][T12743] ? xfrm_expand_policies+0x41f/0x6a0 [ 271.971159][T12743] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 271.976533][T12743] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 271.982159][T12743] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 271.987971][T12743] xfrm_lookup_route+0x3c/0x1c0 [ 271.992812][T12743] ? ip6_datagram_dst_update+0x511/0xcb0 [ 271.998469][T12743] ip6_datagram_dst_update+0x75c/0xcb0 [ 272.003926][T12743] ? __pfx_ip6_datagram_dst_update+0x10/0x10 [ 272.009902][T12743] ? futex_private_hash_put+0x4b/0x280 [ 272.015373][T12743] ? __lock_acquire+0xab9/0xd20 [ 272.020229][T12743] ? __ip6_datagram_connect+0xb92/0x1150 [ 272.025854][T12743] __ip6_datagram_connect+0xbd1/0x1150 [ 272.031309][T12743] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 272.037281][T12743] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.042644][T12743] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 272.048359][T12743] ip6_datagram_connect_v6_only+0x63/0xa0 [ 272.054075][T12743] __sys_connect+0x313/0x440 [ 272.058661][T12743] ? __pfx___sys_connect+0x10/0x10 [ 272.063777][T12743] ? rcu_is_watching+0x15/0xb0 [ 272.068537][T12743] __x64_sys_connect+0x7a/0x90 [ 272.073299][T12743] do_syscall_64+0xfa/0x3b0 [ 272.077800][T12743] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.082992][T12743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.089053][T12743] ? clear_bhb_loop+0x60/0xb0 [ 272.093720][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.099603][T12743] RIP: 0033:0x7fda5c18eba9 [ 272.104008][T12743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.123606][T12743] RSP: 002b:00007fda5cfa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 272.132099][T12743] RAX: ffffffffffffffda RBX: 00007fda5c3d5fa0 RCX: 00007fda5c18eba9 [ 272.140080][T12743] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 272.148050][T12743] RBP: 00007fda5c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 272.156009][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.164141][T12743] R13: 00007fda5c3d6038 R14: 00007fda5c3d5fa0 R15: 00007ffd58652948 [ 272.172112][T12743] [ 272.175120][T12743] Modules linked in: [ 272.179018][T12743] CR2: ffffffff8958a7cf [ 272.183160][T12743] ---[ end trace 0000000000000000 ]--- [ 272.188602][T12743] RIP: 0010:xfrm_state_find+0x4ca9/0x5400 [ 272.194320][T12743] Code: 4c 89 ff e8 79 63 01 f8 49 8b 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 47 64 01 f8 <4c> 89 23 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 80 3c 01 00 [ 272.213919][T12743] RSP: 0018:ffffc900051bf3a0 EFLAGS: 00010246 [ 272.219982][T12743] RAX: 1ffffffff12b14f9 RBX: ffffffff8958a7cf RCX: dffffc0000000000 [ 272.227945][T12743] RDX: ffffc9000d11b000 RSI: 0000000000000676 RDI: 0000000000000677 [ 272.235907][T12743] RBP: ffffc900051bf5c0 R08: dffffc0000000000 R09: 0000000000000002 [ 272.243868][T12743] R10: 000000000000000a R11: 0000000000000002 R12: ffff888057000028 [ 272.251827][T12743] R13: ffff888057000000 R14: ffff888057e9c8a8 R15: ffff888057000030 [ 272.259797][T12743] FS: 00007fda5cfa36c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 272.268716][T12743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.275290][T12743] CR2: ffffffff8958a7cf CR3: 000000002f3ae000 CR4: 00000000003526f0 [ 272.283255][T12743] Kernel panic - not syncing: Fatal exception in interrupt [ 272.290737][T12743] Kernel Offset: disabled [ 272.295047][T12743] Rebooting in 86400 seconds..