last executing test programs: 4.761097153s ago: executing program 0 (id=3990): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001780)="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", 0x35b}, {&(0x7f0000000d80)="e0e99ce86197666ec528ba68c0defd06062fba4b3c06992749fa10311cfb4326d701289490b6d9e2402cb2e38f51a4c9b11351c03d4764844edd60cce0c6b66ccdc22b44365e9091e2be3f62db0e06f5436130f3c5034bdb98af372086a09e6658eb634eb6cb7802d0f7a5083fae12b69f1a36a8a8a02f09fa7c27281f3e168b1c845d88b897576641d4f94cd0", 0x8d}, {&(0x7f0000000540)="16f0552ef6a84aebe40f9dcb437a8bc22f8c5fe9398b9f5d2b65218cf898f05e89ae02ab4f16de08671f04db60d8189bdefdc3189b8f1ecece7b1bc5d8fece2e7cc168fdffb56ac79f67a0da40e8a501fc0a85036d43189cdff284e772a2c4cf453370c81295dfd53227b7662b4b4c78108db2", 0x73}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a80)="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", 0x1c9}, {&(0x7f0000000980)="bbac16fcc4d7f544650412d99d848131e90c3ddb46328254d612a7137dc0fef685c549edea047466f98e315c404278f30041195c9258323be608bc4f", 0x3c}], 0x2}}], 0x3, 0x24008844) (async, rerun: 32) r2 = socket$kcm(0x21, 0x2, 0xa) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) (async) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x2c) (async) sendto$inet(r1, 0x0, 0x0, 0x32000800, 0x0, 0x0) 4.337142189s ago: executing program 0 (id=3994): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114e00000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x2, 0x6, 0x9, 0x9, 0x5, 0x4, 0x9, 0x3, 0x3, 0xc6, 0x5, 0xc, 0x9, 0x400, 0x3]}, &(0x7f0000000600)=0x100) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 3.47487717s ago: executing program 2 (id=4002): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="980000d7610000000000000000000000000000004a0f1160c31a287e1692a016308b308e24c4ccdec114192df31ef75df07e00045d1d768f303a65", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800080000020000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) pselect6(0x40, &(0x7f0000000180)={0x7cfe, 0xffff, 0x4, 0x2, 0x2, 0x0, 0x2, 0x1}, &(0x7f00000001c0)={0xfffffffffffff001, 0x5, 0xdc95, 0x6, 0x9, 0x0, 0x9, 0x40}, &(0x7f0000000200)={0x3ff, 0x1, 0xebe1, 0x7fff, 0x5, 0x8, 0x3ff}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x9]}, 0x8}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) 3.320062206s ago: executing program 0 (id=4003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000120005ff"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4001000) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast2}, "0018"}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000100)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x6008081}, 0x10) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000009b4c33c5f9538db70061120800000000006b13000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) read(r0, &(0x7f0000000300)=""/167, 0xa7) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x8, @multicast1}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="78000000100003"], 0x78}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e20, 0x4000, @remote, 0x1}}, [0x400, 0x31, 0xcb05, 0x1, 0x4, 0x6, 0x0, 0x9, 0xfffffffffffff506, 0x0, 0x0, 0x2, 0xb29, 0x0, 0x4]}, &(0x7f0000000780)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000007c0)={r9, @in={{0x2, 0x4e23, @multicast2}}, 0x3ff, 0x40}, 0x90) 3.277672156s ago: executing program 2 (id=4005): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {0x0}], 0x3}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0xffffffff000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060080350000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x14a8, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x1474, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x141c, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xea4, 0x5, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0x7, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x1, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x3, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x70e, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x3, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x7ff, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x10, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x26e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x2, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0xa}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0x8, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x130, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 2.875432061s ago: executing program 4 (id=4008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x400, 0x70bd25, 0xfdffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xb, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x4, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0x1, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x8, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0xffff, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x2, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x2, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x0, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x1, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x0, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x0, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0x2ed, 0x7ff, 0xd83, 0x1, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000007f00000000800c0014400009"], 0x30}}, 0x4000) (async) r6 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) 2.04261158s ago: executing program 4 (id=4012): r0 = socket(0x28, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x917ba7244aaaf568, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x321, 0x89, 0x6, 0x2, 0x7}, 0x10) 2.020241563s ago: executing program 0 (id=4013): socket(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r3, &(0x7f0000000c80)=[{{&(0x7f0000000080)=@isdn={0x22, 0x3, 0x81, 0x6, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="bab9df354cc8401e894ba0d56eaf52aeb22499b2c3a06117a487aaf8afdba9b6e47e4fa36ffbe76d7f21354a075cd179bf4f6615fc2638579a3f0d9cbb93120bfa7abebabee22163", 0x48}, {&(0x7f0000000400)="ab60d9e018d7d9726e1f3accb6f87ab0e501d92cae499f0c8daf37b98db7b0ef2139bc254db16980c483eebc588520b277b434d60eaa41333497195e332bb09d5da2241ac8897455b591acccc132add57a68cd31e6cdc0c15da230150d5c7d2a82c531a25dd4ed2751dd1d7f", 0x6c}, {&(0x7f0000000480)="36e9b7f4c507041b6e7844d9a123b82ceea708cb4e3e74a8e2aee582f6a94d80e3e219030e738821a8e6ed6fadaa786e9341502284942d38f112fcceeac2e56ba2a1cbcb9386f6c77ba86b78e5b1cb72cb528aa33eeaa3ebb8b543c596b97ab667bac3694229553f955b914fe92932f8e18c86107a45baed78c54c91", 0x7c}], 0x3, &(0x7f0000000980)=[{0x80, 0xff, 0xfffffffc, "0812224afacd66b4360bb177edf494f482687c3a27abf3c9034c3f1288c543ba804f0e46bebe98e5918145c897a80c01bd28b004645169ce2df81de6ce51622d2b9cb8c819429b5c57e4747978a6e60352ec3de21a42e1059e61c6c5add04c44d0961f04133da29dbbad9529d52ad664"}, {0xa8, 0x1, 0xf0, "b1364601bf1c65b40c9c767afee4434338b7f02fdf6dae60cc555832d7c3574d223c380fed7abc9a1bbcdecf2773bcc7eff90592f608381880f1b622d917a5ad5e182431b4833ccaaaddc4fcac78c244ebddcda1453d6ac60b02c8f74401a9da4bb36c5fd12f0e79ca7582df6e46d18ac0cda90462539c50171fba7a85c2c9d4f543dccd4ed77888fda21728b1fa02902e5564b7"}, {0x80, 0x88, 0xd, "30cd2ae0bdc3870586c880617955faf2362178075ae166b3ce68b747c13a372946e74c7bfda5962f26999b712afe71dc3635665e5464f3530727df57ef69ef6ff33760a5e67350b3c686ee42df7f7a9e9e203e6c7e9c4c187fc323a377e75cdec9e1b8859bb1552f001ee9d7"}, {0x100, 0x110, 0x6, "d4be142baed4f3ee856cec87483da0da1069b2fa56f18be1c278f2cabbba3bef48f137479d58598a88b057a8c20b159496aa737b547c747a9b866a024f341d6947e0c67cf1717fc75f5955117ae76023f3faa9d1c392401e822d6152e1c8d95bfaae589be27cb95aab69b3967310fd15bfab610b9c0956f70de756d99c38995ef39f43e3f34581f957a9fed0308fcef8873fc03dde72cdf757e9826da5537c01bced8244cbbb7f5031cc7d0957440a99abaff43d583b80f116bfac980c3df00ed131f003e24fbbc75d53a56f7176aeee206edc1662a1e0dd64882be20d62ae775eba50f18f1e910263e2da"}, {0x38, 0x101, 0x0, "bcaff487d5e375ae4bb5b9806aec16cfd4315295605f2666a9448e2e6f1b6b10234d6c94"}], 0x2e0}}], 0x1, 0x20000080) 1.787147717s ago: executing program 4 (id=4015): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r0, &(0x7f0000000740)="605511a04273e925437138111c", 0xd, 0x8001, &(0x7f0000000780)=@hci={0x1d, 0x2, 0x1}, 0x80) (async) sendto(r0, &(0x7f0000000740)="605511a04273e925437138111c", 0xd, 0x8001, &(0x7f0000000780)=@hci={0x1d, 0x2, 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000000008500000018000000180100002020702500000900002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500"/89], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000000008500000018000000180100002020702500000900002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500"/89], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0x5}], 0x3, 0x0) mmap(&(0x7f0000540000/0x4000)=nil, 0x4000, 0x1000000, 0x200000005c831, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x4010}, 0x50) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x4010}, 0x50) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000280)={@loopback, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f0000002a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f0000000980)=@delchain={0x209c, 0x65, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xffff}, {0x9, 0xf}, {0xfff1, 0xfffd}}, [@f_rsvp={{0x9}, {0x1bd8, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2, 0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9}}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x7c1d87bd, 0xfffffff9, 0x0, {0xc, 0x1, 0xe, 0x0, 0x800, 0xaf50}, {0x7, 0x1, 0x5, 0x2, 0x10, 0xc4e}, 0x4, 0xffff, 0x1}}]}, @TCA_RSVP_ACT={0x1740, 0x6, [@m_ctinfo={0x84, 0x8, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x7, 0x0, 0xafb5, 0x7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}]}, {0xf, 0x6, "5507cf28f46dbd14ec4d14"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_gact={0x150, 0xf, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa20, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x20, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x8e9, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x377, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x868}}]}, {0xd9, 0x6, "ef0eb8492b58e0fcc7e01a541dfd32b39b20f048f727751964e0c00536ae8366f55218c2b052639784ce0de53eedbb7ceedd6ea0cb4f34b1d3751be7b452be6f3f51186c9a06816ad0a9fcd8ec2780c776408d4b995aed8624f2f9d0475e9de3767491a87998e17f0d5c8b4752e09e1dceb7fc67ec284d030ed6f5357a1d6b1216583d67d9a2fa22c9131d5d2effd3501ad456a9f1a97ba7d2a0c6d5c1389b0a6fcaead88a44f4d0e65f2a203f29ef5307b3f4dddf8517d92d8fde6a587cced65d1109c720e9fbea765e0520e279f1fc39390a59cc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xec, 0xb, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0xb9, 0x3, 0x986, 0xb}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x8d, 0x6, "fa1d16b49bf8ee842accefb100a5c0f8a2734300fcd0a934a77e9161eae56c49d6ba1aeb52b6fa24878e1e270a6f95eb1fd9f537eefa5d56ad5c68418276228b013d781c6c9fcfadb76ed97caec5c3af0a4274e8ac7ac86f86dbc55805e877b6709f8d903657252a5d78199ee865e78c13ea9076dee674290f23c6788aafb7208b3a4b3dd2c2698cab"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xac, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x1, 0x20000000, 0x1, 0x3}, 0xe34}}]}, {0x5e, 0x6, "572517d9c1b3910e08cfc9c478a920b8353ecc385a581673eb61f378bcadac3bb2b7789a4fcad56cecce8e1985951ecb381e17202738e94418ad0e19f00b89f35fff5f8e28cbffc166d4ecce8772a6421baf03378cea2f9b22cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xd4, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0xa6, 0x6, "9820550676e471c4b8669fc3db5fb7d4728774ed53771da3a8054686e73aff736cd9680b89bed179d4c15a4afcb9d31a0cbc2adc676e3fe8f6e4a925514f4cc76d57b64b84c250487aca07de43474fdedc90c1f4bb795f1842952cf148ae9b8a76fd88925b9d6576b090e0e3cf93ed5a2ec9a530a1446b2bed0ec4ef7b957ff3eb02e553edf0e427c41aa27921c6916cf853b955c4d7f32ebdf8bb0eb9608daa6009"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xb8, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x82, 0x6, "40abd19961dc5e6c6de0eec9c4da7e26e0a295eef9ce383b68b8a331101c841fa75efeb5d1323ab49bed471595f8bb0abd84720b009a6c00e2e0700f58c77e91caaa766f4aa925790bea87bda9733b3dec884507db37763f535070200dacc4168ff568a5a5d6f41aae4eea929c08bfeb54fd8d0e71ae20c96118b26cc5d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x107c, 0x0, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xea12}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x20000000, 0xff, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1c8, 0xc, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe8, 0x80000001, 0x2, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x55d, 0x3, 0x101, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xa9a6, 0x7, 0x9, 0xcc}, 0x84}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58, 0x547, 0xffffffffffffffff, 0x61a, 0x7}, 0x5000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3d4, 0x5, 0x0, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x112, 0x7ff, 0x6, 0x5, 0x8}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x10000000, 0x58, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x98d0, 0x5, 0x2, 0x10001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd311, 0x1, 0x5, 0x40b580a3, 0xef2c}, 0xfff}}]}, {0x9b, 0x6, "e30eb80aab772a47412b3820bcb62131fb1d2d0656f7e8b2a6e678b848fbb140d5043237d296cc8ff0c1ffa2c8f9f1e1341bfcfa839d6846c641e89cbce1c22c2ff63ee97297dda3dbb2437e628a3b018001e18d85497732b05fde90d9ab8d645a8fbebf98a7575cc4be20b0d23578c76ebbc6b7e625f8df6a87505e4d3ab226087f7431c87ccbce67b8b447f568ff2d1a6cfc07e76d8f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0xfffffff8, 0xffffffff}, {0x5, 0x100, 0x7ff}, 0x84, 0x6, 0x3}}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xff, 0x200, 0x8, 0x45059775, 0x6, 0x6, 0x7, 0x0, 0x1, 0x8001, 0x2, 0x5, 0x9, 0x1, 0x3, 0x3526748a, 0x1, 0x2, 0x8001, 0x0, 0xb209, 0xffff, 0x2, 0x7f, 0x7, 0x1000, 0x7fff, 0x2, 0xfffffffa, 0xfffff535, 0x40, 0x1c, 0x6f12, 0xf, 0x2, 0x0, 0x1000, 0x7b05, 0x80000001, 0x9a3, 0x5, 0x1, 0x3, 0x8000, 0x401, 0x76f, 0x5, 0x9, 0x9, 0x0, 0x0, 0x8001, 0x80, 0x6, 0x5, 0x7ece, 0x2, 0x7fff, 0x9, 0x6, 0x6, 0x7, 0x2, 0x4, 0x0, 0x5, 0xdc1, 0x0, 0x2, 0x4, 0x80000001, 0xf9, 0x2, 0x60, 0x1, 0x9, 0x2, 0x2, 0x4, 0x1c0000, 0x7, 0x5, 0xffffffff, 0xf8cb, 0x6, 0x5, 0x80000001, 0x8001, 0x68a8, 0x9, 0xc88, 0x0, 0x3a8d, 0x5, 0x31d6, 0x9, 0x486, 0x71, 0x1ff, 0xfff, 0x8, 0x100, 0x6, 0xfffffffe, 0x4, 0x1, 0x9, 0xfffffff9, 0x9, 0x0, 0xd, 0x2, 0x8, 0x9, 0xe1f, 0x5, 0x7fffffff, 0x0, 0x7, 0x7, 0x7, 0x2, 0x8, 0x9, 0xf52, 0x3, 0x4, 0xb77, 0x7, 0x5, 0x81, 0x8, 0x7fffffff, 0x1000, 0x3, 0x48, 0xb9, 0x9, 0x8be6, 0x3, 0x3, 0x1, 0x80000000, 0x0, 0x7, 0x0, 0x2, 0x10, 0x8, 0x7, 0x0, 0x5, 0x3, 0x6, 0x200, 0x7, 0x3, 0xf, 0x51, 0x2, 0x6, 0x7, 0x8124, 0x1, 0x7fff0000, 0x1, 0x7, 0x81, 0x0, 0x9, 0xe, 0xa5, 0xfffffe01, 0x6, 0x5, 0x1, 0x6, 0xb, 0x6, 0x401, 0x4, 0x0, 0x8, 0x1, 0x8, 0x3ff, 0x81, 0x8d22, 0x3, 0x8000, 0xfffffc01, 0x5, 0x3, 0xfffffffa, 0x9, 0x7, 0x5, 0x4, 0x9, 0x9, 0x2e85, 0x100, 0x40, 0x6, 0x7, 0x0, 0x4, 0x7, 0x9, 0x0, 0x1, 0x9b, 0x299, 0x6, 0xee, 0x3, 0x40, 0x5, 0x3, 0x3bf86ff6, 0x200, 0x4, 0x14000000, 0xbbb, 0xf, 0x1, 0x6, 0x4, 0x9, 0x95e5, 0x3, 0x7, 0xd, 0xffffffff, 0x7, 0x4, 0x7, 0xfffffff8, 0xf450, 0x4, 0x0, 0x319, 0x5, 0xfffffc01, 0x8, 0x0, 0x7, 0x3ff, 0x1, 0x0, 0x7ff, 0x0, 0x4, 0x8, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9a}]}]}}, @f_rsvp={{0x9}, {0x3c0, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x4, 0x9}, {0xd, 0x6, 0x483}, 0x62, 0xfe, 0xb}}, @TCA_RSVP_ACT={0x324, 0x6, [@m_ife={0x140, 0x15, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xc}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x66b1a1dc1160900e}}}}, @m_gact={0x118, 0x0, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x900, 0x7}}]}, {0xdf, 0x6, "b35fd6a601db762ee47cdbd35c5363800abef2ae080b0924bb0138cde494fdafd61f32bd56078565610ee8ea666631b64fa0b284cc63966f5f3c2956dc1f5e75eb269f13f46adbadfd2a418c47b5c25ad9cdc5ec129e4ed4c65e019f8bf98c05444d3207036e7ad4582dc152c77052f766f507e752794f9cea8e2fb9c7e2726878e644a74d825e834a9a962789f9715a7ba3d881112bcbe21a18dd5f92f666f299b9a43487c5eb89fc757037567ba8f06e50cfebe3de3c8d6ca892600a94b068af24b2d66615a8787ec975a15f785763698d9ca14598400c94d528"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xef9c6b7741b29065, 0x1}}}}, @m_sample={0xc8, 0x16, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xbf9f}]}, {0x93, 0x6, "578a0e3aa82101d422b5efbd133e28640863e5734abc0c70f6ac691818dff9ec425e49a01ae19b90581b9905bab4a311cff5fd4b7546398f930d66d44c9f807e05c1d73e52050c0f9e5959efc2e92f568d016e2f0ada781d7cedf584e59955128705bb3b2b0a471b403c087a368051eef3c39e2bb93b165ae8eef47a31a2246a951ced8d1e113b3c3d35e329756f34"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x75, 0x4}, {0xfffffe01, 0x10, 0x3}, 0x29, 0x44, 0x10}}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf22, 0x3, 0x0, 0x8000, 0x4, {0x0, 0x2, 0x0, 0x0, 0x200, 0x5}, {0x6, 0x2, 0x3, 0x1, 0x112, 0x9f09}, 0x7ff, 0x2, 0x20000000}}]}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}]}}, @f_tcindex={{0xc}, {0xbc, 0x2, [@TCA_TCINDEX_ACT={0xb8, 0x7, [@m_simple={0xb4, 0x1b, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '-\\-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x1, 0x3, 0xfffffffd}}]}, {0x57, 0x6, "d75120d0a32114740c69a296e82973876321f505fe1e481ed3a10388ec0f8ae9261610283d139d49d82d707775099c6566819313ffc8b11af9c120118dcca5d4a33e11d014826255057f44ad66131ce41343a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x209c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) socket$inet_smc(0x2b, 0x1, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 1.676251052s ago: executing program 2 (id=4016): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f0000100000140001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 1.584294265s ago: executing program 3 (id=4017): syz_emit_ethernet(0xfd, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0xc7, 0x2f, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "93cffa40f626cd95278157d25259340198e4dc4ef079c78bcb434ff039ede9301b7335dc9c843ebc2df0dde5862e7c5d326c78d6ee27b6921ab7553ad9432353f514d5a43faa72a98807e3283f15900a492b0d43cbe76c793f70e576a19e865759b2281860385d2311feba673ce8697a7c117bf31160f5736edb000000000000000000"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x20040600) (async) bind$inet(r2, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0x4}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x9}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xd, 0x0, 0x1a8d3ada32928d0e}}}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, 0x0) (async) unshare(0x22020600) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002880), 0x0, 0x4004895) (async) recvmmsg(r5, &(0x7f0000006440)=[{{&(0x7f0000000280)=@vsock, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/40, 0x28}], 0x3, &(0x7f00000005c0)=""/190, 0xbe}, 0x3}, {{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000840)=""/132, 0x84}], 0x2, &(0x7f00000012c0)=""/4096, 0x1000}, 0x67}, {{&(0x7f00000022c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002340)=""/119, 0x77}, {&(0x7f00000023c0)}, {&(0x7f0000002400)=""/65, 0x41}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/161, 0xa1}, {&(0x7f0000003880)=""/138, 0x8a}, {&(0x7f0000003940)=""/156, 0x9c}], 0x7, &(0x7f0000003a80)=""/101, 0x65}, 0x805}, {{&(0x7f0000003b00)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003b80)}, {&(0x7f0000003bc0)=""/187, 0xbb}, {&(0x7f0000003c80)=""/234, 0xea}], 0x3, &(0x7f0000003dc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000004dc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000006340)=[{&(0x7f0000004e40)=""/247, 0xf7}, {&(0x7f0000004f40)=""/159, 0x9f}, {&(0x7f0000005000)=""/27, 0x1b}, {&(0x7f0000005040)=""/166, 0xa6}, {&(0x7f0000005100)=""/49, 0x31}, {&(0x7f0000005140)=""/164, 0xa4}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/141, 0x8d}, {&(0x7f00000062c0)=""/112, 0x70}], 0x9, &(0x7f0000006400)=""/61, 0x3d}, 0xff}], 0x5, 0x2100, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000140)="010000000980ff", 0x7) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000084) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e23, 0x8a, @dev={0xfe, 0x80, '\x00', 0xb5}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000290000003700000032000000000000002400000000000000290000003200000000000000000000000000ffff0a0101014d24d5d3f6f07d2aaaac7a5860e9ee3714d73abc756ef2676e08a3b728097d7d0864bb7594dc2b997b8abc16ffc9b9348e3a49481da84ed990d0522c07c1c1a3ef7d8bd10d3883e01db5076980412f34caffac027fc92c24c12082e4a26b4b6ed257703d33056c78f272be4866e7784b42ee7a09", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x20000010) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc8, 0x12d5f, 0x3}}, 0x44) (async) socket$inet_smc(0x2b, 0x1, 0x0) 1.380555219s ago: executing program 3 (id=4018): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x33) socket$unix(0x1, 0x5, 0x0) r3 = socket(0x1e, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x4040000) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000562a03d8bc39e5d86cbb15e0eaad54ff5aff23200636684ed11bb471e42aca279b8ff83b4d1a1b802dd9fef1472ee51beb9dab3c5033ce9eeeec4660c86b7b32656a0a940c63e13241d1f2f55da1931a89987288ae8ec5c6ff4440e271de25967bbd9933b650ac8d4d4d7dd7471c0bf5e068d292389fe714451e926b4fd4662921a9aeaa64b0cbd2b0a3fd4f15b9ba883895f2b94f200af044ee3c77860ca980db08e446c918098a68a613adbea326d80e20798cdcd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r4, @ANYBLOB="089805000750050008001300", @ANYRES32=r5, @ANYBLOB="08002c0005000000140003"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) 1.25477526s ago: executing program 1 (id=4019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8f, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1.245391547s ago: executing program 2 (id=4020): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0xfffffffc, 0x4, 0x5, 0x81, 0x85}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x18, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x1, 0x3, 0x7, 0x2, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa6000000}}, @call={0x85, 0x0, 0x0, 0xb4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x6, 0x2, 0x0, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x2, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x1, 0x0, 0x7}, {0x2, 0x3, 0x2, 0x8}, {0x0, 0x1, 0x2, 0xa}, {0x4, 0x5, 0x4, 0xc}], 0x10, 0x81}, 0x94) poll(&(0x7f0000000500)=[{r5, 0x100}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x40050) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.197060563s ago: executing program 0 (id=4021): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="051e000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10}, 0x20) 1.196578672s ago: executing program 3 (id=4022): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0xa0002, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETVNETLE(r1, 0x400454dc, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f00000001c0)=')]\x00', 0x200000, &(0x7f0000000240)={@align=0x3, {0x7, 0x1c0, 0x4, 0x2c0000000000}}, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r4) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x6c}}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f0000000400)}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000820}, 0x20040000) 1.054718618s ago: executing program 1 (id=4023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000073000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000073000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000000)) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (async) 972.055335ms ago: executing program 2 (id=4024): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x148e, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000001100000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x14014) (async) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8085) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket(0xa, 0x1, 0xb1b) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x675}, 0x1150be13d9ca08ee) (async) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000001c0)="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", 0x139}], 0x1}}], 0x1, 0x4001c00) 893.429986ms ago: executing program 1 (id=4025): r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)) mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x40001}, 0x28) (async) r2 = socket(0x10, 0x3, 0xffffffff) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x40}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4d26909a}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x48}}, 0x70170b405cc25fb9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000002e00090027bd700000002100040000002400118031f9e05e2f82591487b094f5cbed0a33ec55488635157213ba426e9c8fe61b5c"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) (async, rerun: 64) r8 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) (async) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCDELDLCI(r4, 0x8981, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, r6}, 0x14) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0xd84, &(0x7f0000001c00)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd76, 0x2, 0x0, 0x0, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4e23, 0xd62, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) (async, rerun: 32) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000300)={0x3, 0x3}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) 826.993761ms ago: executing program 3 (id=4026): r0 = socket(0x10, 0x80002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000040ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d3e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c47365e78c80854b2baf8eb320d8c34cfc81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6afd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d0504f1ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f415f6ac8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2f600000000000000e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83f869fbb866c57567826efc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d58710d1febe7394cf8b02f59dab24d07db3d3c1ebff5244f438b3d6d15a30ec32aadb3cfa1c2f7dac7c5937c14702a3a0702b53115c163eb91275aedd6ad46b49b100208e73bb2c57068664f8ffd34bc8708faadd12d80875d7f1c0d9cd1ddd292e1efe9780c02487a38a688dfc173fac71249cdee0fc53336ede131253606067e3dd22f2e5db2b9d570b1fb3f3add20b3a02caf5721868b642a2e5cf40a03c49b8fe89fa6b7b4a823104f2314d37e7de67b719bf3aba1273a974f38f7c82d4fa14aa12599ad6ae5197c3c0040e5beb587d917992168e412403cf568acf630927e005b9a75"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) socket(0x200000000000011, 0x2, 0x0) (async) r4 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x5}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) close(0x4) (async) close(0x4) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 712.360273ms ago: executing program 2 (id=4027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000300)=0x10000003, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "aeeb13944a8c9e5f", "6b1e248264d2bf3b6f99b1445be58204", "44fd2839", "264092eced6166fb"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="180000001420000000000000", @ANYRESOCT=0x0, @ANYBLOB="66d780eedd8ca51e8c00ce90801b3d3a09248a0c789304e9eee64583", @ANYRESDEC=0x0], 0x20) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x50, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x2, 0x34005}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r13, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r13, &(0x7f0000000100)={0x20000014}) 712.137305ms ago: executing program 4 (id=4028): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x3, {0x1, 0xf0, 0x3}, {0x2, 0x0, 0x3}, 0xff, 0xfd}], 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) socket(0x6, 0x1, 0x5a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x4}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x20000004}]}}]}, 0x40}}, 0x0) 636.823512ms ago: executing program 1 (id=4029): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 474.624428ms ago: executing program 0 (id=4030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500340012800b000100627269646765000024000280050019b85d298cfc033317a769dd7d9b5fd7ed0006000000060027005004000008000400810000000500160001000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r1, &(0x7f0000000240)={0x2, 0x620, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x7) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x4008881) recvmmsg(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r7, 0x105, 0x70bd25, 0x25dbdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40042) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x11, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418) getsockopt$sock_buf(r8, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x701, 0x10000, 0xffdffffc, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044015}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1, 0x1000, 0xfffffffd}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000200)=r10, 0x4) 474.232634ms ago: executing program 1 (id=4031): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) poll(&(0x7f0000000000)=[{r0, 0x8020}, {r0}], 0x2, 0x9) (async) poll(&(0x7f0000000000)=[{r0, 0x8020}, {r0}], 0x2, 0x9) socket$nl_generic(0x11, 0x3, 0x10) (async) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="2769034242b2", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfc, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @local}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 404.413828ms ago: executing program 3 (id=4032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb8, 0x9, 0x0, 0x8, 0x3, 0x6, 0xd57, 0x8]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x2, 0x4, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8c4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0xc08, 0x3, 0x480, 0x350, 0x5002004a, 0xb, 0x350, 0xea13, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x308, 0x350, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x0, 0x0, 0x1}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0xfffd}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {0x0, 0x2}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x52}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x3, 0x2}, {}, {}, {}, {0x0, 0x0, 0x9}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@unspec=@physdev={{0x68}, {'ip6gretap0\x00', {0xff}, 'syzkaller1\x00', {}, 0x19, 0x10}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x401, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0xc}, {0x3, 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) 403.830311ms ago: executing program 4 (id=4033): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x3ffff, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) (async) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[], 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000640)=""/11, 0xb}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x40000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={@remote, 0x54, r7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x400c804) socket$nl_route(0x10, 0x3, 0x0) 319.405126ms ago: executing program 1 (id=4034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000001e000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 235.622108ms ago: executing program 3 (id=4035): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x5d734c165eec4015, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {0xe, 0x2}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x2, 0xa, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3e}]}}]}, 0x3c}}, 0x4814) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x4012, r5, 0x80000000000) r6 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r7) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000018c0)={&(0x7f0000000380), 0xc, &(0x7f0000001880)={&(0x7f0000000440)=ANY=[@ANYBLOB="74140000130001002bbd7000fcdbdf251501080b4e244e230300000000800400050000000700000004000000030000000100000000800000", @ANYRES32=0x0, @ANYRES16=0x0], 0x1474}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000005c0108806800008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c0824000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300020000001400040002004e2464010102000000000000000078000080200004000a004e2100000002fc0200000000000000000000000000010002000008000a00010000002400010000000000000000000000000000000000000000000000000000000000000000001400040002004e21ac1414aa00000000000000001400040002004e207f0000"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) 0s ago: executing program 4 (id=4036): r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80c00) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e20, @remote}, 0x58, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)='bridge_slave_1\x00', 0x9, 0x3, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180)) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010022bd7000fcdbdf252800000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00*'], 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x90) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) 0s ago: executing program 1 (id=4045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r3 = socket(0x18, 0x0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) (async) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) getsockopt$nfc_llcp(r3, 0x111, 0x0, 0x0, 0x90aa62107f0000) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r9, &(0x7f00000002c0)="b9ba48", 0x3) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x8, 0x6, "6ed00268"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfd0e}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x18}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000008e2ff00000015d0262100000d000000850000002f000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100fcf7ffffffb702000008000000b70300000012005a850000007100000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000008e2ff00000015d0262100000d000000850000002f000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100fcf7ffffffb702000008000000b70300000012005a850000007100000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001c00)={{r0, &(0x7f0000000580)='geneve1\x00', 0x280, &(0x7f00000005c0)={@_ha_fsid={[0x0, 0x800]}, {0x7, 0x7, 0x0, 0x3}}, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x9}, 0x7, &(0x7f0000001b00)=[{0x2, 0x10, &(0x7f0000000680)='(\'@:%\x00', &(0x7f00000006c0)="3c258cd171301c000fafd3cca585100c66e7fd4862e6199a7d03843688b7a9293da9a2374f609ca48259bcec7f40027318fb55cb745e65736afbba80", 0x3c, 0x18}, {0x1, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="0055f575d5582f78b1491285e0c0de3383da7525855cf5a113eb21fb4f31f8e5fffa05bfe168f3595904ba25282210962b3f1e963e36ba43b301f5ed9eba80b665d0484e3085828926db90f28f9b3d98fc271377d1851f88f39a2f1bdcf86e75f177bbf1f417875b1980712331bec08d0c18d1b2958645d63abc22", 0x7b, 0xa}, {0x3, 0x0, &(0x7f00000007c0)='TIPCv2\x00', &(0x7f0000000800)="c3b6474d1bde815b464e0df1cdb71b35ec1f583d54feaf81239822cdb78eb2e8d2a6948809db7f59819dabdf2c4d89d995f612022423a5f2ec91caf167acae8ee34cfa38dd7ecbc06c0921d6211ec5a289aba68769d1fbc8878d17fc676f20541465c734865e12ae6aba71057f", 0x6d}, {0x2, 0x7, &(0x7f0000000880)='+\x00', &(0x7f00000008c0)="f99f5668fd447723bde23543ec04f677f6f4522bf279585d7d9c7d0e986d1ce769217fca4e9d5f970fca501222e29daddb4d883713302c8568b926ff160247b9977cdae604dd7a5f1f7cfe3290d6047dc6a14a4a0f5c566484dcc5e7faa8f0afb046066a6eac036b876abf111d449c0104eec280f651f92de94382e21168144782c62339a2264be55ec608a09a5b1c021682dcfc37670699635ea71447074292e9a8c4c0833f21fa0db3f93e388996ff615ff4fe85947c8e75ee47d9f1443469d415cf583aa1b20514ca5b7d55b352109dca2e435753336202a29fc655ce58c30a2c9e9f02ba2489987ffa2951934e451a9a6ded8e16ee22954534d842bbd4d5d2bae93485eb0508540021dd707e7873355b8670027b48fc59469adf6c29ad98af4655efcf75d31549fddc8081b16872b2de7fe53db8991a177ddfa5436a7ca37405706e88f1da31ddad9261cc687e480f8df2b03e34552ba93201dff36e0987573bc7cfa604fe694fa6d81419f28eefa9b605e8d362055c6f428fe8332edbc741238501b7b194ad2edf31219c911f7a17cb1553bf24b072c0efb8983cd8f3192a29f9ae8257effa33937a830db57d340aa49ab8d70b9a3b7a7ed62afdf916a31833118984ca6bb64a9899a59546e13d3f1a86ecd48e6ca304dc599231cd2016c7e5184a21d8af79b10f946c7e700344e36269f39eb13b4822ba4db2b7047c21ecae2377c80d7070c041256025cb9469cce5bc0d572adef2991ef1898a1f0d5cc02f9463eecd3bb4067a1cbbfe32cc374456cdbec0ca3e5ba261fa43efa2067cd77a120543506704d589825e558c6bc45c8b8a4cc4bd7935cda911aaf2425577e865f5f0f4b557130dde76eee3e9e6007caa66b949ff627b05cdb4718235daf8102980538633f91527bf54b2cad1dbb615c95a9831e336fd6655de4823e44bb6f7f2b119303a84d0eebf21486e4156baba7474090ad8bb74d6f87a742cfd652e7a100f0864db7622a53a8ff46f99fa1b92dbb308da7ef755facd7aaa0daa8d6304625428122073cb690c7cf3ed4dcf3698a3e24fb1287112d75824db74c103ededa722ed33c0ab48fb1cf9853b4d04de80e0ada80c459be55f081a16a55a35697f9b3ef7af0a30f2bcf59c473cdc2fab26ee72ebb722303e57a541718956f6d664e3f6cf79e554d6da9d8a4bd73ee820174567a01b3273fc4a0961c41929623e7f45bf0f38cac5ce36ef8781296bb68ad26ed6f76b3db2b159a7bde21891819646d199362f1d14ab79e24d3622eaa88dd6900fbe0c1f4d11920665981d477450bc8638e28a0c1513abf9b7abb0a12c5a43e9a2ef4e86652d02f09e14b678c9adf682441b0d09420a1aaf0d9367bbed0fe57ff8e26b6a38e6643522c3224a613c3f17dc6ab96f2b26342cee163c2c24a52f19b5134dc29234ba21a5b8cbe166f960925164a6a122a5a551dc3191f2f50d91875ffaf8cefb26c7d246f77f52f11c11926a327277fce57ef8adaf5d86987483058813861bad34cf1687cd145df2f7913e3894c4669be24deb12c0e28d9bd939ced69480b52d7791274f41505360d5cf3abc30ae8ba2333d6f6a878fae932e243c53173a17bd5fed287812a137c776ba66d2c4c5a7f2b82c7663bc15e4c8c5ec13905a016d78b70d73253dd928678007e995530f7324229a1565bb25890bd1dc46d3fda00442e2bdbca3aaee061814c039d997a5a69a730b78df82fe9d7845585c3b8e1a6f8448d8ce208fc942b3fe3966d37f16648060a6b9e8ed94fe01770699af0d4ef06d917b137412fb87e31c98e033e64ed19281f3dc6a13f9219c216ed59b5c3d6215f99e20c6092ff721701ea190c4d66ff1a16057c6b6917a6d83f7c49b44b06acdf6b3f8a3ba5aebe99dd6d72e9a33f9e616414b09751ae4948b9a738deabc3579733b72c78681e67a88805cbb0a542cfe29938bad8b8f5431e1b67de2c8764971023b58860fe2c41713ca623302226a097a558970b5eed1e2ee652c5289e7f5e5495e6ee8ec120bbb2da9e2e30a3f5644535598bffd7cc1497ec56f8ab08582706e2cfcda7ee587c88b179c560bc865d278d2453ecd16a490eb82963045d55857f41bc95bf7137f33bf17f2936bab2f1bfe2a2505427a71cf898e4924df9f637513670c510534094ebdfe3e7c3a1a6304188b33be25b427e227053bd0816cb3ff957192f0218bc3cf92a3b2f0a9657f6c2fa8abb42ec41c0706f01784fb2e0f5556d6831ae900f2b6ac9ad32e54b4dc900123a10fdfe77e9119b78beb7b5dc62ea138e604d55781def51eecd8348bdedb1fc517a3587877f40c0fdf56b4d84f52c5fcda822cdd8070437420af5440722feffae908e3957a399b185276b91dcf9fd890dc568413e1c8732c9ec116f082d83334702ecb79aee5f4fb7f7664bf6dcdd67aa4da0f51dc9619b882a0383c28b6aedd96836a2c78b5ecc76ab3902285c5bfa04a57df04dd1b4a52545bf6ecc710846a7e8671dbdc451fd3a74c94d924e729725063de6be2f1d772239c3453c3861028ccc7768f40db2a04d13c1c3f5c46c2d42eddac2bcc3ca360dfd3752806270b0d5014efbe040828efdf400b19eac745fec83b7e70771a406cc3969a5faf6ffb0fbe70afe7016abc464ae17d45216e0c1597b30a67ca9a2af9ea71394df047227da3fafef7f3a24ccaba481596a0d8793f8c21d2509ae712ada0a32d23caf0b21dc29013a64b0468070f6460bf0d69e2e79da462cf7f170f7247edaab304e6e12499527169a76d62e7ba887d4c69f613a5fbf7b0b1f4366550b78acb90bd976161272f6a6383be4c969b4b1682ad2af20663a5662f448c7f4ffb6dd6fb2cff1a48100046b0e6cc8177a4de42ecd2106ff2526a987d9609ee02b6b18bea1d773cc2314ddfa0b460b746fdd422b6c331b20c024aacfd57cbf2c75adc048211d4180712fbf351bcb8be3a9124a8cd80fa42d56948286ff2c31f1a824aec3a35e8f26a030ab6f04001a88991a335fed5c2d60760c4a5b936bf68fbc285fbe04939f940d3bd67324af2a065c96cdeed4c85b9b46ec486c1c68545feba64ae9503cf8024f4bbe5ef57a0d829319bd23c7820c73638ac91065df79e3c3664193c4f0f8c84f77d8be16198ce9b5ec34b70e2a51fc8296fa9f2479c8c4ec0ef135c2788bc2b49546f27a5004645a76b631be283933be4540debd4c6326d46f08c89b29c25db0f473be068dfa4d2c5b48aa59b058ff79f951328785af91f38bbcec5c40545df211de446628a056e791a71f8b8f4f2e19d419ebc37cd193ae735104b6d710e48906d7725b343935d7aebff8947d175635ff200d16d060a139587116fde0465c05bda2305b51296c766162310225f5a42cde27598e21774cc26c5f7f984e6eaa3cfd753e59461c33a37dfc457270b0e281d80e8346eed527f393f94e51458930ac95d838acaef74253fc57d985d48ce4860722b5d09970d9cc0ccfb81ab742f86a6e7949371193ee91db4a93aab5c24243702e4567b8b92b90d98103bb70423c2c327669c9593664697d586b334a0c8484c1ba4090fb7aee6e9d48e2d0c95a056ccf7fb58ef3cce41d1a7af9af29484c37f7116bbf87852ecbf70688f8c7d2a294910ffbb96db41b3a7b60837bcd7ab41d6d1cfd87dc7dbbcf944ab2e901956191007a4217a8464b485feb8be76607872eef69cbcb132938eca50e72b88621a8663a6a2e69dee7eaff2d873e3804df7b82af457ba0fa3144d79f20141885e218c90ad822af9995e71a0487cba2a37f2edee7bd4abb187281e163b61d62c3f13212411d2a5ec2d27e3a4e10d14df562dfc52f2cc754eea09f76f2b00b3814fb3d15316636c5eb2219e3ff6cad143827c904b4ba0ca52d915016e1994f374a49cf8e19f342e481cf15c26eb855dc170b9918749e92d21db9221aa456b8983b4c5bc03310afbaae7e1e082bb10074dd3cbd9025efe58508e7905a6ebe4ffa97f197c400b527754c713b1af0ae04a35ac455398f2034657222a02a3ba1330c07802f49646f974d9c40c82275c5f8db223553a6e1ef379e8adf1aba411876a5b9b3b87b92ad6049b5605594355f68231185ab91c77ce1b41960db76bc09e38e9c62d18d50f3bba4414128d68eaebb9357a3fbecd2e69b9f812d346a7b193ea2c3980825a65a088ef44e4a30a16c5a9a7a2a3731324e240acf741bd6ab551ec19441688d775f78187e5b2700d923c2212dc9281b4c8ae4584d27e476436ef4fb72e254b679f31352c16134ce03271bcff82ccba79cad3a21b9b9b2a9cbbd09ab5547a82ee0bd4b31c9600d1e728dec9d251fd262f2f8e1493b783a2ac7d3dbc7b7c5a72c096f16f728e7797b94f258f5ccea3507e2461ce03e6812049bf46974f586f097aff8f98d9be68c1d8296e48d088c14e103a50082c87abf556b58a6b23537a22326976e2b5b6efc35254ac7affdf5ebbf8d0e5cf7dee42c4c9abe483005b42a3ca1b3264f6834ab56e73f85b0f940803eaa5e7b88120d00cd213197bd28b9450c67250e43d5cc759445f6f0a4aa4ab6f78f72151bb82d2aff4f1424d0cc2290619b50b802e2aa73396de99d23a11fd417c2e2f07259c322b620fd3c5813368222e36f3a8dee3441f8fe0f11986a91c13c63c4ae2bc54352a8742089efc12a3f0cb4c6fc0cf437e3f0ba9d0b0f0e351cc75bb81229d258d6ffce8db5f188523503c929cedc6b456c398764e813ef70ca5be61614449878fe5b04e439a33f8c784efb252aaeaf443a70ccf1d080808eaf652632cb0736be0130743b3f1fc9645c5801b36faf00e672db167bcd73fef2c7c8030c2c7712fbb95ae365356f9185c9fc64b473a96909ff1cfa9f61a2f46aedb96cd618a862085ed7081a3b8d412899e4ae319c17d8ea2f76831a1cc9e28c5036eb9eb38912f076c6bcbc9caa5852b65994ffcbda7c0dc1505eb747366667c457de7d04c163ce213f4351682996729d251b7e8741b38299a164dc80940c0f2365198f0ebbab229ebd023ca1d53062c767967c43926a1f83f414cebb0419f85b715ae8c1bb81100e9f55d96e9f5076b28426c3c08074f959b02390bed3bab07d719ebd720bf45fbbafa87c606b064437444ef968d5b5dd47017220a421d00b3414ec3546e45861edf63dd69d35d828ad80226174847733cc73be50c8542fabd74f50f30cab274b014abef2338549961ed13729f3455e8c674e5d4c5af249c68dac328194a2017b1e9b1164145739e4f29da25653b49efe25d17dec9744195619ad99aeb46482984f9adf29dc41f194af86ce59ca1ee80f25ac01746c8aa044124357f1e79ace985a5c1ea6e74cfa80a4661b04cc7cf61f15087ed902617a16a147739706a95eb44fbae30c89b94d511b9a8a17c2e48820c6d4a402e14c1ff75a46e9bb87fbcf851ec30839af8726aa59e6c202eba45604497c88e2fd0faf249e857727362a43a7bf8aad6fe8c21a4cd360d0c93b60404648b9aeba14cb0cc780ab08fd152e290875bb220c10654c0f17e8dbd8324b1c4c62a89338d5ab6ae4fff948349b46ed5e339af1645250b654afa0791fcf77e0837488bfa716230613f1f4e75b7e9bce5cd77c2286ef9a8ec20588c16d3043f63bfbdb8ce1e494d5d95a18d06d6d9a72902e9a1cacfc60b865be2b60f95dc54b05636606acadcb34c96ca282fac0dd0aa15a090146d3fe106a4076f7db9b5094cdb554fb7049eba7d84a014c33ad3e8544e61d12ba66439a140b4f791faeef937e3ad2d4ffc67c35ad87f7393da0d5d50ee", 0x1000, 0xa}, {0x2, 0x2, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="6c44f7277339ccdf11c83724c59a9f40e78f9aced4924572df3e4d13da1fcefef84e692def35af6509f553dc43f17174c9f8f4dacfc8a89dd002a5da77", 0x3d, 0x12}, {0x0, 0x1, &(0x7f0000001940)='\x00', &(0x7f0000001980)="0381d0133d63e5deb2bc3c7ac231d0510021c673d5840fe40212469055e599cd6a8bfa5b2d6f1be185188a5d43229a21a17bccd83698c8a44e1d4ce4f13ecead5012c0c8fb50f1e6d9475004c5022683a31e761539a93dc86402f6971ffa7556c392dc49e0673089c8dacdbb358c6b90fd773c09a75ec67afe83c2cab266409ba0e7fa9b3c194fe2d743177e3091a0ca131c800d5245651035c98d50aaaf8f7fdcb6d9db11998e12e30549c53ecf404619c6aa693512d3d2053b", 0xba}, {0x3, 0x5, &(0x7f0000001a40)='\x00', &(0x7f0000001a80)="7bdfca82c20e0e73145ecd83c04a2c40d1759b3a75dd7acaf4c881b18c2af486f045c6004c4396426c4b79e4265ad41e9b7a4a764ab6ef1875ab0a2f04e033318b7ffc1bbb724725259e494a707995b6c0a1065d1d729db0ed3e7d8613e137e4a3ceec07055ad3bf4cebd9ba2c9f0636dd5087cc56287b582a1cd8ca", 0x7c, 0x2}]}) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000001d80)={&(0x7f0000001c80)=""/211, 0x8000, 0x0, 0x8, 0x1}, 0x20) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x3f909d67c846a6ad, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80008}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x537, @private0={0xfc, 0x0, '\x00', 0x1}, 0x58bf}}}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x501}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff0ef}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="02003f43f53d033bdf0920c0adf6af9700000400f4c2b86238258d76604696e3cef795582c4fa9a169d1972af8cb1974da5247b734867f3171822f3ddead5e1185c4c906f34c08d0022eea2244db0ca3b7778b8224e52a67d7d8722e571b8378906a303c77ee40083567bda10c9c02b59961b646047be0eb221bf239131437c14d63b64484c9b46e4021dfd13ac05fa277169e1fb780ca758f96fa01dd27e5545c20facbc566bcd8f88ed2c9dcb92ea545794ae15d13f678e2b71f353b4d946d6d54cef1f93c93fb3e11738884570557cdac7ecdf1fc41d0ea73de4799d68eb5cb254dca3d1cdc91315b4b94d88c98d33e028c37e3e8dd304979139b3edbf65c0917914c85df6ea68a8588f3035a98d9c362562bae01bf3fa48e54150b5d45474fd00c22451f837d436680894a32e8a4ef1ce9c9c97895be50f9d4c696d0f4d7be9c1dd3cd8945d007e35b83dee06ee25010deda73c31b35d255b567c8393dc404da7b17488f4950032beae51ecbe40babcf4017c963077111b4cc6228196a009925d58cc2ed7d5907b85cb52b7d1e4dfe97cd76f2ab269127eec909037e1cacd9e4d442f2d63a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r13}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): tlink: 'syz.0.2789': attribute type 1 has an invalid length. [ 422.200603][T17031] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2789'. [ 422.247866][T17031] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2789'. [ 422.278570][T17028] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2787'. [ 422.295945][T17031] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2789'. [ 422.594172][T17045] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2792'. [ 422.818509][T17014] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.953725][T17062] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2794'. [ 423.479075][T17078] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.700824][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'. [ 423.808442][ T5641] Bluetooth: hci5: command tx timeout [ 423.821917][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 423.850751][T17099] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2803'. [ 423.955855][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.972752][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.992765][T17014] bridge_slave_0: entered allmulticast mode [ 423.997037][T17106] ipt_rpfilter: unknown options [ 424.014817][T17014] bridge_slave_0: entered promiscuous mode [ 424.174279][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.201166][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.238331][T17014] bridge_slave_1: entered allmulticast mode [ 424.260703][T17014] bridge_slave_1: entered promiscuous mode [ 424.288829][T17115] netlink: 'syz.0.2808': attribute type 3 has an invalid length. [ 424.341396][T17117] netlink: 'syz.2.2807': attribute type 11 has an invalid length. [ 424.465712][T17109] xt_hashlimit: size too large, truncated to 1048576 [ 424.558866][T17125] bond13: entered promiscuous mode [ 424.573539][T17125] bond13: entered allmulticast mode [ 424.604418][T17113] xt_hashlimit: size too large, truncated to 1048576 [ 424.627200][T17113] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 424.628661][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.685075][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.882355][T17014] team0: Port device team_slave_0 added [ 424.922062][T17014] team0: Port device team_slave_1 added [ 425.066105][T17142] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 425.173485][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.198859][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.253193][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.265082][T17146] bridge_slave_1: mtu less than device minimum [ 425.310544][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.322180][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.352169][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.472660][T17014] hsr_slave_0: entered promiscuous mode [ 425.480002][T17014] hsr_slave_1: entered promiscuous mode [ 425.494752][T17155] vlan3: entered allmulticast mode [ 425.500817][T17155] veth0_to_bond: entered allmulticast mode [ 425.893950][ T5641] Bluetooth: hci5: command tx timeout [ 425.895145][T17168] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 425.972526][T17172] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 426.119097][T17014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.132745][T17014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.331049][T17189] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 426.333563][T17014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.368938][T17014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.411972][T17191] netlink: 'syz.2.2826': attribute type 1 has an invalid length. [ 426.420331][T17191] netlink: 'syz.2.2826': attribute type 2 has an invalid length. [ 426.429026][T17189] 8021q: adding VLAN 0 to HW filter on device bond11 [ 426.480074][T17195] bond11: (slave veth25): Enslaving as an active interface with a down link [ 426.551820][T17014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.565474][T17014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.646997][T17203] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 426.658917][T17189] bond11: (slave veth27): Enslaving as an active interface with a down link [ 426.668225][T17203] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 426.742388][T17014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.760923][T17014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.268402][T17225] __nla_validate_parse: 11 callbacks suppressed [ 427.268424][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2834'. [ 427.373419][T17014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.444786][T17229] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 427.474694][T17014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.494133][T17014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.521253][T17014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.651104][T17229] 8021q: adding VLAN 0 to HW filter on device bond8 [ 427.668507][T17014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.704148][T17014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.730645][T17238] tipc: Enabling of bearer rejected, already enabled [ 427.747478][T17014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.760486][T17014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.855182][T17234] tipc: Resetting bearer [ 427.883171][T17234] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2836'. [ 427.922253][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 427.967351][ T5641] Bluetooth: hci5: command tx timeout [ 428.117570][T17256] bridge9: entered promiscuous mode [ 428.138877][T17256] bridge9: entered allmulticast mode [ 428.283301][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.364725][T17014] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.592831][T17282] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2843'. [ 428.658006][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.666749][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.716573][T17285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2847'. [ 428.728367][T17285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2847'. [ 428.786034][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.793283][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.061050][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2851'. [ 429.204684][T17307] bridge13: entered promiscuous mode [ 429.224440][T17307] bridge13: entered allmulticast mode [ 429.505981][T17322] netlink: 'syz.0.2858': attribute type 268 has an invalid length. [ 429.838288][T17336] syzkaller0: entered promiscuous mode [ 429.843997][T17336] syzkaller0: entered allmulticast mode [ 429.919718][T17336] tipc: Enabled bearer , priority 0 [ 429.952324][T17335] tipc: Resetting bearer [ 430.033226][T17335] tipc: Disabling bearer [ 430.056882][ T5637] Bluetooth: hci5: command tx timeout [ 430.096806][T17345] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 430.096829][T17344] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 430.133753][T17345] netlink: 'syz.2.2862': attribute type 62 has an invalid length. [ 430.145593][T17014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.178152][T17347] tipc: Enabling of bearer rejected, failed to enable media [ 430.264558][T17347] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.761580][T17364] bridge14: entered promiscuous mode [ 430.776517][T17364] bridge14: entered allmulticast mode [ 430.942113][T17014] veth0_vlan: entered promiscuous mode [ 430.991039][T17014] veth1_vlan: entered promiscuous mode [ 431.022265][T17381] macvtap1: entered promiscuous mode [ 431.029411][T17381] macvtap1: entered allmulticast mode [ 431.035016][T17381] veth1_vlan: entered allmulticast mode [ 431.066573][T17381] macvtap2: entered promiscuous mode [ 431.072021][T17381] macvtap2: entered allmulticast mode [ 431.109753][T17382] macvtap2: entered promiscuous mode [ 431.115188][T17382] macvtap2: entered allmulticast mode [ 431.333295][T17014] veth0_macvtap: entered promiscuous mode [ 431.382136][T17014] veth1_macvtap: entered promiscuous mode [ 431.476856][T17391] syzkaller0: entered promiscuous mode [ 431.489714][T17391] syzkaller0: entered allmulticast mode [ 431.511752][T17394] team0: Port device xfrm0 removed [ 431.520845][T17394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.552517][T17014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.560721][T17391] netlink: 'syz.1.2872': attribute type 12 has an invalid length. [ 431.583402][T17393] netlink: 'syz.1.2872': attribute type 12 has an invalid length. [ 431.692098][T17014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.745083][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.780295][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.813413][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.848070][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.126055][ T5637] Bluetooth: hci5: command 0x0405 tx timeout [ 432.324347][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.344107][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.431603][T17422] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2878'. [ 432.513822][ T3321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.550918][ T3321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.249424][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 433.384865][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 433.422834][T17468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2885'. [ 433.614611][T17458] vti0: entered promiscuous mode [ 433.661348][T17460] bridge10: entered promiscuous mode [ 433.670897][T17460] bridge10: entered allmulticast mode [ 434.211509][T17491] netlink: 'syz.1.2893': attribute type 10 has an invalid length. [ 434.439212][T17496] netlink: 'syz.1.2894': attribute type 10 has an invalid length. [ 434.492639][T17496] netlink: 'syz.1.2894': attribute type 10 has an invalid length. [ 434.555192][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.591763][T17496] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 434.800760][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 435.490180][T17515] netlink: 'syz.4.2898': attribute type 1 has an invalid length. [ 435.522977][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 435.589263][T17507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2896'. [ 435.645439][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.783376][T17519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2899'. [ 435.821651][T17519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2899'. [ 436.762128][T17542] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 436.817299][T17539] bridge15: entered promiscuous mode [ 436.880318][T17539] bridge15: entered allmulticast mode [ 437.040350][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 437.065951][T17542] 8021q: adding VLAN 0 to HW filter on device bond12 [ 437.369540][T17545] bond12: (slave veth29): Enslaving as an active interface with a down link [ 437.550675][T17552] bond12: (slave veth31): Enslaving as an active interface with a down link [ 437.722282][T17554] bond1: option packets_per_slave: invalid value (1048582) [ 437.758963][T17554] bond1: option packets_per_slave: allowed values 0 - 65535 [ 438.265046][T17554] bond1 (unregistering): Released all slaves [ 438.427912][T17542] bond12: entered allmulticast mode [ 438.451676][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 438.987408][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2913'. [ 439.029226][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2913'. [ 439.114262][T17586] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 439.124431][T17587] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 439.133534][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 439.453721][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 439.865263][ C1] sched: DL replenish lagged too much [ 440.099322][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'. [ 440.137769][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.158935][T17611] ipvlan0: left allmulticast mode [ 440.171890][T17611] veth0_vlan: left allmulticast mode [ 440.217058][T17611] veth1_macvtap: left allmulticast mode [ 440.232572][T17611] macsec0: left allmulticast mode [ 440.311911][T17611] veth1_vlan: left allmulticast mode [ 440.345661][T17611] macvtap1: left promiscuous mode [ 440.375140][T17611] macvtap1: left allmulticast mode [ 440.530454][T17611] bond4: left promiscuous mode [ 440.603496][T17611] geneve3: left promiscuous mode [ 440.674043][T17611] bridge6: left promiscuous mode [ 440.711495][T17611] bridge6: left allmulticast mode [ 440.972160][T17611] bridge7: left promiscuous mode [ 441.021746][T17611] bridge7: left allmulticast mode [ 441.113887][T17611] bond7: left promiscuous mode [ 441.146772][T17611] bond8: left promiscuous mode [ 441.153751][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 441.163132][T17611] erspan2: left promiscuous mode [ 441.171517][T17611] bond8: left allmulticast mode [ 441.199822][T17611] erspan2: left allmulticast mode [ 441.224088][T17611] vti0: left promiscuous mode [ 441.238691][T17611] vti0: left allmulticast mode [ 441.335158][T17611] bridge9: left promiscuous mode [ 441.358420][T17611] bridge9: left allmulticast mode [ 441.393092][T17611] gre3: left promiscuous mode [ 441.662311][T17611] bridge10: left promiscuous mode [ 441.683622][T17611] bridge10: left allmulticast mode [ 441.705652][T17611] bond12: left allmulticast mode [ 441.774011][ T141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.976081][ T141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.015070][ T141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.063324][ T141] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.278494][T17642] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 442.510524][T17646] netlink: 'syz.3.2926': attribute type 1 has an invalid length. [ 442.608001][T17646] 8021q: adding VLAN 0 to HW filter on device bond14 [ 442.640551][T17649] bond14: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 442.943377][T17654] : entered promiscuous mode [ 443.534168][T17662] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2930'. [ 443.753846][T17669] virt_wifi0 speed is unknown, defaulting to 1000 [ 445.153821][T17693] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2934'. [ 445.301359][T17699] nbd: illegal input index -1 [ 445.352250][T17692] bond15: Removing last ns target with arp_interval on [ 447.258959][T17732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2943'. [ 447.319465][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.350414][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.359168][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.372289][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.396120][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.904219][T17744] netlink: 'syz.4.2946': attribute type 2 has an invalid length. [ 447.985156][T17744] netlink: 'syz.4.2946': attribute type 8 has an invalid length. [ 448.076273][T17744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2946'. [ 449.485437][ T5637] Bluetooth: hci0: command tx timeout [ 449.790535][T17777] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 449.850830][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 449.919257][T17777] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2954'. [ 450.003649][T17784] Bluetooth: MGMT ver 1.23 [ 450.643192][T17733] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.546686][T17808] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.556389][T17808] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.574464][ T5637] Bluetooth: hci0: command tx timeout [ 451.819751][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 451.871369][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2961'. [ 451.949762][T17733] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.965005][T17733] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.984045][T17733] bridge_slave_0: entered allmulticast mode [ 452.002406][T17733] bridge_slave_0: entered promiscuous mode [ 452.034981][T17733] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.072403][T17733] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.097374][T17733] bridge_slave_1: entered allmulticast mode [ 452.122741][T17733] bridge_slave_1: entered promiscuous mode [ 452.137930][T17815] netlink: 'syz.2.2962': attribute type 11 has an invalid length. [ 452.258734][T17733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.307487][T17733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.422416][T17821] openvswitch: netlink: Multiple metadata blocks provided [ 452.447263][T17733] team0: Port device team_slave_0 added [ 452.532659][T17733] team0: Port device team_slave_1 added [ 452.652612][T17733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.670029][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.725361][T17733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.762565][T17733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.781211][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.811130][T17733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.031485][T17733] hsr_slave_0: entered promiscuous mode [ 453.044640][T17733] hsr_slave_1: entered promiscuous mode [ 453.062756][T17733] debugfs: 'hsr0' already exists in 'hsr' [ 453.074614][T17733] Cannot create hsr debugfs directory [ 453.082154][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 453.108011][T17828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2965'. [ 453.587706][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2967'. [ 453.645510][ T5637] Bluetooth: hci0: command tx timeout [ 453.996916][T17841] ieee802154 phy1 wpan1: encryption failed: -90 [ 454.006672][T17843] netlink: 'syz.4.2970': attribute type 4 has an invalid length. [ 454.019514][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2968'. [ 454.674390][T17850] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 454.699522][T17850] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 454.911825][T17865] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 454.967626][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 454.987286][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 455.010549][T17867] netlink: 'syz.2.2973': attribute type 18 has an invalid length. [ 455.210496][T17853] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.504171][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 455.725479][ T5637] Bluetooth: hci0: command tx timeout [ 465.437016][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2977'. [ 465.481333][T17894] netlink: 'syz.0.2977': attribute type 1 has an invalid length. [ 465.533687][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2977'. [ 465.561002][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2977'. [ 465.689210][T17894] bond9: entered promiscuous mode [ 465.702194][T17894] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.781337][T17898] bond9: (slave bridge10): making interface the new active one [ 465.809972][T17898] bridge10: entered promiscuous mode [ 465.853429][T17898] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 466.199069][T17908] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2979'. [ 466.948112][T17925] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 467.459940][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2988'. [ 467.496379][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2989'. [ 467.515552][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2989'. [ 467.877150][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 467.896944][T17948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2990'. [ 468.058904][T17954] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 468.086373][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2991'. [ 468.285493][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 468.422085][ T5637] block nbd3: Receive control failed (result -32) [ 469.509348][T17995] x_tables: duplicate underflow at hook 2 [ 469.659707][T17733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 469.680082][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.693732][T17733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 469.725603][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.737973][T17733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 469.761979][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.779558][T17733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 469.812569][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.221877][T17733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.294702][T17733] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.343713][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.350979][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.405140][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.412495][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.528119][T18019] xt_l2tp: missing protocol rule (udp|l2tpip) [ 470.743449][T18023] netlink: 'syz.2.3006': attribute type 1 has an invalid length. [ 470.789182][T18023] nbd: error processing sock list [ 470.828049][T18022] __nla_validate_parse: 4 callbacks suppressed [ 470.828071][T18022] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3007'. [ 470.934436][T18022] tc_dump_action: action bad kind [ 471.917470][T17733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.170658][T18065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'. [ 472.213075][T17733] veth0_vlan: entered promiscuous mode [ 472.260109][T17733] veth1_vlan: entered promiscuous mode [ 472.354316][T17733] veth0_macvtap: entered promiscuous mode [ 472.379134][T17733] veth1_macvtap: entered promiscuous mode [ 472.441633][T17733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.488421][T17733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.527317][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.580004][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.617745][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.636855][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.958378][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.975389][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.089097][ T3321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.106734][ T3321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.124020][T18060] infiniband syz1: set down [ 473.139918][T18060] infiniband syz1: added bond0 [ 473.164881][T18060] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 473.170753][T18060] infiniband syz1: Couldn't open port 1 [ 473.194927][T18060] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 473.228009][T18060] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 473.279075][T18060] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 473.362267][T18081] virt_wifi0 speed is unknown, defaulting to 1000 [ 473.425719][T18060] RDS/IB: syz1: added [ 473.440210][T18060] smc: adding ib device syz1 with port count 1 [ 473.463086][T18060] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 473.472955][T18085] syzkaller1: entered promiscuous mode [ 473.484262][T18085] syzkaller1: entered allmulticast mode [ 473.805413][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 473.811681][ T5641] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 474.478805][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.496552][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.507944][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.518628][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.530189][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.314654][T18108] sctp: [Deprecated]: syz.1.3023 (pid 18108) Use of int in max_burst socket option. [ 475.314654][T18108] Use struct sctp_assoc_value instead [ 475.368409][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3023'. [ 476.109050][T18121] ip6gre1: entered allmulticast mode [ 476.620088][ T5637] Bluetooth: hci4: command tx timeout [ 477.383353][T18157] bond1: entered promiscuous mode [ 477.419193][T18157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.826263][T18175] netlink: 'syz.1.3036': attribute type 22 has an invalid length. [ 477.992072][T18093] virt_wifi0 speed is unknown, defaulting to 1000 [ 478.043561][T18180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3037'. [ 478.360414][T18185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.601395][T18191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3039'. [ 478.680295][T18194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3040'. [ 478.691484][T18193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3040'. [ 478.691915][ T5637] Bluetooth: hci4: command tx timeout [ 478.868000][T18195] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 479.240694][T18210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3044'. [ 479.251855][T18210] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3044'. [ 479.348546][T18093] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.366160][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.383956][T18093] bridge_slave_0: entered allmulticast mode [ 479.422497][T18093] bridge_slave_0: entered promiscuous mode [ 479.453335][T18093] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.464556][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.473106][T18093] bridge_slave_1: entered allmulticast mode [ 479.481907][T18093] bridge_slave_1: entered promiscuous mode [ 479.615664][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.643976][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.768503][T18093] team0: Port device team_slave_0 added [ 479.778988][T18232] x_tables: duplicate underflow at hook 1 [ 479.779451][T18093] team0: Port device team_slave_1 added [ 479.791634][T18232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3050'. [ 479.838136][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.845141][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.912090][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.926723][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.933941][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.960662][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.011152][T18093] hsr_slave_0: entered promiscuous mode [ 480.018952][T18093] hsr_slave_1: entered promiscuous mode [ 480.025949][T18093] debugfs: 'hsr0' already exists in 'hsr' [ 480.032892][T18093] Cannot create hsr debugfs directory [ 480.159454][T18244] netlink: 'syz.1.3053': attribute type 4 has an invalid length. [ 480.287807][T18093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.300235][T18093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 480.347081][T18247] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3054'. [ 480.419929][T18093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.430608][T18093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 480.500620][T18253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3056'. [ 480.538929][T18093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.550327][T18093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 480.739799][T18264] netlink: 'syz.1.3057': attribute type 3 has an invalid length. [ 480.765513][ T5637] Bluetooth: hci4: command tx timeout [ 480.773337][T18093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.794411][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 480.816675][T18093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 481.074071][T18269] virt_wifi0 speed is unknown, defaulting to 1000 [ 481.482192][ T5890] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.511669][ T5890] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.604592][ T5890] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.632088][T18295] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 481.654890][ T5890] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.703432][T18294] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 481.733506][T18093] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.762445][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.787127][T18093] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.829013][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.864502][T18093] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.877601][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.888501][T18093] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 481.900441][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.984064][T18311] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 482.087962][T18317] IPVS: sh: FWM 3 0x00000003 - no destination available [ 482.514162][T18093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.527980][T18322] smbdirect: ib_dev[syz2] removed [ 482.602924][T18093] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.648589][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.655871][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.791733][T18335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.833103][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.840379][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.851824][ T5637] Bluetooth: hci4: command tx timeout [ 483.012058][T18093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.040055][T18093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.340081][T18357] __nla_validate_parse: 7 callbacks suppressed [ 483.340101][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3079'. [ 483.481226][T18361] can: request_module (can-proto-0) failed. [ 483.768610][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 483.791275][T18375] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3083'. [ 484.377589][T18093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.604893][T18093] veth0_vlan: entered promiscuous mode [ 484.641959][T18093] veth1_vlan: entered promiscuous mode [ 484.758811][T18093] veth0_macvtap: entered promiscuous mode [ 484.784307][T18093] veth1_macvtap: entered promiscuous mode [ 484.788869][T18416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3091'. [ 484.857267][T18093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.890174][T18093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.934784][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 485.043864][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.054501][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.141223][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.173958][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.229282][T18422] bridge0: port 1(erspan0) entered blocking state [ 485.236431][T18422] bridge0: port 1(erspan0) entered disabled state [ 485.243180][T18422] erspan0: entered allmulticast mode [ 485.261873][T18422] erspan0: left allmulticast mode [ 485.370492][T18423] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3093'. [ 485.511253][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.529048][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.802697][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 485.824793][T18432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3095'. [ 485.825762][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.855588][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.107050][T18437] netlink: 'syz.0.3021': attribute type 10 has an invalid length. [ 486.172901][T18437] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 486.468331][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3097'. [ 486.919775][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.953441][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.963304][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.975476][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.988903][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.408148][T18471] block nbd4: not configured, cannot reconfigure [ 488.285857][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3106'. [ 488.662117][ T29] audit: type=1800 audit(1781078535.465:19): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3109" name="memory.events" dev="tmpfs" ino=3204 res=0 errno=0 [ 488.749651][T18510] __nla_validate_parse: 1 callbacks suppressed [ 488.749674][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3110'. [ 488.779240][T18510] hsr_slave_0: left promiscuous mode [ 488.790754][T18510] hsr_slave_1: left promiscuous mode [ 489.038145][T18524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3112'. [ 489.089898][ T5641] Bluetooth: hci1: command tx timeout [ 489.113306][T18530] netlink: 'syz.0.3114': attribute type 6 has an invalid length. [ 489.423617][T18544] syzkaller1: entered promiscuous mode [ 489.452390][T18544] syzkaller1: entered allmulticast mode [ 489.474898][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3119'. [ 489.505421][T18544] netlink: 'syz.4.3119': attribute type 8 has an invalid length. [ 489.536306][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'. [ 489.590215][T18551] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3120'. [ 489.594677][T18544] geneve2: entered promiscuous mode [ 489.618263][T18544] geneve2: entered allmulticast mode [ 489.786195][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3122'. [ 489.836684][T18560] netlink: 'syz.3.3122': attribute type 21 has an invalid length. [ 490.124950][T18560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3122'. [ 490.160171][T18560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3122'. [ 490.362755][T18572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.372701][T18572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.401391][T18572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.414732][T18572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.679881][T18596] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3128'. [ 490.714417][T18596] netlink: 'syz.4.3128': attribute type 1 has an invalid length. [ 490.842476][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 490.980128][T18456] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.034419][T18456] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.069705][T18456] bridge_slave_0: entered allmulticast mode [ 491.116338][T18456] bridge_slave_0: entered promiscuous mode [ 491.176209][ T5641] Bluetooth: hci1: command tx timeout [ 491.234950][T18456] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.258276][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.269030][T18456] bridge_slave_1: entered allmulticast mode [ 491.283715][T18456] bridge_slave_1: entered promiscuous mode [ 491.470367][T18456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.486753][T18456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.620141][T18456] team0: Port device team_slave_0 added [ 491.650358][T18456] team0: Port device team_slave_1 added [ 491.660058][T18632] netlink: 'syz.3.3140': attribute type 1 has an invalid length. [ 491.779874][T18632] bond17: entered promiscuous mode [ 491.814169][T18632] 8021q: adding VLAN 0 to HW filter on device bond17 [ 491.982406][T18649] netlink: 'syz.4.3143': attribute type 1 has an invalid length. [ 492.009279][T18640] bond17: (slave bridge16): making interface the new active one [ 492.046358][T18640] bridge16: entered promiscuous mode [ 492.066605][T18640] bond17: (slave bridge16): Enslaving as an active interface with an up link [ 492.098333][T18456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.123180][T18456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.196616][T18456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.219745][T18456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.227158][T18456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.255429][T18456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.347696][T18654] bond2: entered allmulticast mode [ 492.372512][T18654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.453753][T18671] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 492.488820][T18660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.511342][T18660] bond2: (slave geneve3): making interface the new active one [ 492.519270][T18660] geneve3: entered allmulticast mode [ 492.527318][T18660] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 492.570365][ T5894] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.709697][ T5894] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.803299][T18456] hsr_slave_0: entered promiscuous mode [ 492.834883][T18456] hsr_slave_1: entered promiscuous mode [ 492.853421][ T5894] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.877287][ T5894] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.145153][T18705] veth0: entered promiscuous mode [ 493.247944][ T5641] Bluetooth: hci1: command tx timeout [ 493.447328][T18702] veth0: left promiscuous mode [ 493.715148][T18456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.743478][T18456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.755994][T18730] __nla_validate_parse: 9 callbacks suppressed [ 493.756014][T18730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3159'. [ 493.869235][T18732] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3162'. [ 493.901381][T18735] IPVS: Error joining to the multicast group [ 494.093841][T18456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.132760][T18456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.239605][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3164'. [ 494.372923][T18456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.402753][T18456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.692941][T18456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.707682][T18456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.101690][T18789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3178'. [ 495.325930][ T5641] Bluetooth: hci1: command tx timeout [ 495.326579][T18456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 495.378540][T18456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.432186][T18456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 495.491452][T18456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.529242][T18456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 495.586799][T18456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.621231][T18456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 495.660751][T18456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.769751][T18807] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 495.772122][T18802] netlink: 5880 bytes leftover after parsing attributes in process `syz.4.3183'. [ 495.778343][T18807] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 496.030868][T18456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.066151][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 496.084076][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 496.099353][T18456] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.132828][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.140251][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.184249][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.191496][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.559600][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 497.033551][T18848] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:21 [ 497.048019][T18848] xt_hashlimit: size too large, truncated to 1048576 [ 497.134931][T18852] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.185118][T18852] bridge_slave_0 (unregistering): left allmulticast mode [ 497.221505][T18852] bridge_slave_0 (unregistering): left promiscuous mode [ 497.289682][T18852] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.377658][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3195'. [ 497.387987][T18855] netlink: 'syz.4.3194': attribute type 1 has an invalid length. [ 497.409159][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 497.431804][T18456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.594970][T18456] veth0_vlan: entered promiscuous mode [ 497.659160][T18456] veth1_vlan: entered promiscuous mode [ 497.765092][T18873] netlink: 'syz.3.3197': attribute type 1 has an invalid length. [ 497.773501][T18456] veth0_macvtap: entered promiscuous mode [ 497.834614][T18873] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 497.839957][T18456] veth1_macvtap: entered promiscuous mode [ 497.946542][T18456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.974213][T18879] ip6t_srh: unknown srh invflags BA61 [ 497.981120][T18456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.018192][ T5890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.042932][ T5890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.064324][T18882] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 498.073539][ T5890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.180847][T18882] bond1: entered promiscuous mode [ 498.186644][T18882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.200492][ T5890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.428378][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.468226][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.591556][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.622525][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.795967][T18902] __nla_validate_parse: 4 callbacks suppressed [ 498.795987][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 498.822106][T18901] bridge17: entered promiscuous mode [ 498.841209][T18901] bridge17: entered allmulticast mode [ 499.318515][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 499.413571][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.429577][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.437958][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.451591][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.464147][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.812053][ T3321] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.044553][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3216'. [ 500.090517][T18946] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.3218'. [ 500.100828][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'. [ 500.153670][T18946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3218'. [ 500.271239][T18952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3219'. [ 501.076894][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'. [ 501.106862][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 501.136564][T18990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3229'. [ 501.177048][ T1123] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.202901][T18989] lo speed is unknown, defaulting to 1000 [ 501.209229][ T1123] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.227739][ T1123] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.244636][T18989] lo speed is unknown, defaulting to 1000 [ 501.259547][ T1123] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.279720][T18989] lo speed is unknown, defaulting to 1000 [ 501.315825][T18989] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 501.341697][T18989] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 501.392920][T18989] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 501.567046][ T5637] Bluetooth: hci2: command tx timeout [ 501.571665][T18989] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 501.623501][T18997] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 501.756289][T18997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.778814][T18989] lo speed is unknown, defaulting to 1000 [ 501.800902][T18989] lo speed is unknown, defaulting to 1000 [ 501.853460][T18989] lo speed is unknown, defaulting to 1000 [ 501.973711][T18989] lo speed is unknown, defaulting to 1000 [ 502.061087][T18989] lo speed is unknown, defaulting to 1000 [ 502.165832][T18989] lo speed is unknown, defaulting to 1000 [ 502.193859][T18930] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.202362][T18930] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.211521][T18930] bridge_slave_0: entered allmulticast mode [ 502.220316][T18930] bridge_slave_0: entered promiscuous mode [ 502.231317][T18989] lo speed is unknown, defaulting to 1000 [ 502.231681][T18930] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.245125][T18930] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.253152][T18930] bridge_slave_1: entered allmulticast mode [ 502.261596][T18930] bridge_slave_1: entered promiscuous mode [ 502.286132][T18989] lo speed is unknown, defaulting to 1000 [ 502.319863][T18930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.340736][T18989] lo speed is unknown, defaulting to 1000 [ 502.348542][T18930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.377698][T18989] lo speed is unknown, defaulting to 1000 [ 502.445161][T18930] team0: Port device team_slave_0 added [ 502.465594][T18930] team0: Port device team_slave_1 added [ 502.639179][ T29] audit: type=1800 audit(1781078549.445:20): pid=19041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3242" name=932CECEB98A374E6AB211673D6AD6C5D4CD96F4E28743F349D207B261EFDA7EB32538710D804A0A30BC426C4F1123CAE1A25F434640FADAC78F06FAC3EBAB75E5BFF26457AE9B10C58584554B9D3EA83EA438307EEB31D7FD0F03FC0228B76AE2BD11D7606AA7DDD671B582DBF077EC7AD13CF641C413CB0D825B7E7D553BA71C081FA565C679DD5636E650C544BDA9362F1D08AC771A6FF36E1241799E872A8DC8BBAE734490377DF229D766DDE16BDA1AEC03C16C5982C847BB76F4032CC3C03 dev="tmpfs" ino=358 res=0 errno=0 [ 502.848404][T19052] netlink: 'syz.0.3244': attribute type 13 has an invalid length. [ 503.009212][T18930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.016542][T18930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.055640][T18930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.090818][T19038] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.423987][T18930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.450417][T18930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.527420][T18930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.645697][ T5637] Bluetooth: hci2: command tx timeout [ 503.808828][T19064] bond1: Removing last ns target with arp_interval on [ 503.876922][T18930] hsr_slave_0: entered promiscuous mode [ 503.884024][T18930] hsr_slave_1: entered promiscuous mode [ 503.919144][T18930] debugfs: 'hsr0' already exists in 'hsr' [ 503.930404][T18930] Cannot create hsr debugfs directory [ 504.046054][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 504.126469][T19080] __nla_validate_parse: 6 callbacks suppressed [ 504.126489][T19080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3251'. [ 504.187441][T19079] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 504.663757][T18930] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.899134][T18930] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.949665][T19102] x_tables: duplicate underflow at hook 1 [ 505.020028][T19102] xt_CT: No such helper "syz0" [ 505.221593][T18930] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.327000][T19112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3259'. [ 505.362775][T19112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3259'. [ 505.446706][T18930] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.726007][ T5637] Bluetooth: hci2: command tx timeout [ 505.909976][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 505.924635][T19128] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3265'. [ 505.936796][T18930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 505.956285][T18930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.976285][T18930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.021623][T18930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.040728][T18930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.071367][T18930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.086870][T18930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.124370][T18930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.275638][T19142] bridge0: port 1(ip6gretap0) entered blocking state [ 506.302208][T19142] bridge0: port 1(ip6gretap0) entered disabled state [ 506.333487][T19142] ip6gretap0: entered allmulticast mode [ 506.353008][T19142] ip6gretap0: entered promiscuous mode [ 506.359780][T19142] bridge0: port 1(ip6gretap0) entered blocking state [ 506.366677][T19142] bridge0: port 1(ip6gretap0) entered forwarding state [ 506.392633][T19146] kÿ: entered promiscuous mode [ 506.434201][T19148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3271'. [ 506.495879][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3271'. [ 506.530582][T19148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'. [ 506.582881][T18930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.641028][T18930] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.680092][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.687363][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.746570][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.753724][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.174521][T19163] sit0: Caught tx_queue_len zero misconfig [ 507.428379][T19145] lo speed is unknown, defaulting to 1000 [ 507.450838][T19172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3278'. [ 507.501669][T19172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3278'. [ 507.805557][ T5637] Bluetooth: hci2: command tx timeout [ 508.199902][T18930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.450071][T18930] veth0_vlan: entered promiscuous mode [ 508.495036][T18930] veth1_vlan: entered promiscuous mode [ 508.682283][T18930] veth0_macvtap: entered promiscuous mode [ 508.718822][T18930] veth1_macvtap: entered promiscuous mode [ 508.790868][T18930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.831251][T18930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.832149][T19222] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 509.068044][ T1123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.085390][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.118216][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.121510][T19227] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 509.136994][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.464063][T19239] __nla_validate_parse: 6 callbacks suppressed [ 509.464084][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3295'. [ 509.486732][ T5892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.510114][ T5892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.522696][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3296'. [ 509.532779][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 509.617511][ T3287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.644481][ T3287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.649604][T19242] ipvlan2: entered allmulticast mode [ 509.666011][T19242] batadv0: entered allmulticast mode [ 509.676285][T19242] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 509.937393][T19252] netlink: 'syz.1.3298': attribute type 4 has an invalid length. [ 509.947253][T19251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3210'. [ 509.961947][T19248] syzkaller1: entered promiscuous mode [ 509.971833][T19248] syzkaller1: entered allmulticast mode [ 509.994365][T19255] netlink: 'syz.1.3298': attribute type 4 has an invalid length. [ 510.006850][T19248] netlink: 'syz.2.3299': attribute type 8 has an invalid length. [ 510.262179][T19252] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.270135][T19252] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.094816][T19252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.122872][T19252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.379722][ T3287] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 511.422500][ T141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.445675][ T5892] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.478393][ T5892] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.499065][ T5892] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.878562][T19310] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 512.069918][T19283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.227924][ T8558] bridge0: entered promiscuous mode [ 512.300025][T19323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3316'. [ 512.345425][T19325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'. [ 512.490000][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 512.500692][T19325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 512.528249][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 512.822558][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3321'. [ 512.969615][T19338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.630333][T19357] syzkaller0: entered promiscuous mode [ 513.638639][T19357] syzkaller0: entered allmulticast mode [ 513.664152][T19362] xfrm1: entered allmulticast mode [ 513.846681][T19365] sctp: [Deprecated]: syz.2.3329 (pid 19365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.846681][T19365] Use struct sctp_sack_info instead [ 513.906613][T19368] sctp: [Deprecated]: syz.2.3329 (pid 19368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.906613][T19368] Use struct sctp_sack_info instead [ 514.047801][T19372] netlink: 'syz.4.3331': attribute type 1 has an invalid length. [ 514.201139][T19377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3331'. [ 517.187491][T19360] tap0: tun_chr_ioctl cmd 2148553947 [ 517.199199][T19372] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 517.369363][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3334'. [ 517.391828][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3334'. [ 517.405446][T19393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3334'. [ 517.641742][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 517.702987][T19408] netlink: 'syz.4.3337': attribute type 10 has an invalid length. [ 517.707186][T19401] ip6tnl1: entered allmulticast mode [ 517.734779][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 517.750707][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 517.762905][T19408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3337'. [ 517.767365][ T1123] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 517.799197][T19413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3338'. [ 517.808828][T19412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3338'. [ 517.833985][T19408] team0: entered promiscuous mode [ 517.861743][T19408] team_slave_0: entered promiscuous mode [ 517.882229][T19408] team_slave_1: entered promiscuous mode [ 517.900662][T19408] team0: entered allmulticast mode [ 517.922703][T19408] team_slave_0: entered allmulticast mode [ 517.938385][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3341'. [ 517.938907][T19408] team_slave_1: entered allmulticast mode [ 517.980239][T19408] bridge0: port 3(team0) entered blocking state [ 517.994127][T19408] bridge0: port 3(team0) entered disabled state [ 518.008758][T19408] bridge0: port 3(team0) entered blocking state [ 518.015520][T19408] bridge0: port 3(team0) entered forwarding state [ 518.292903][T19432] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 518.299114][T19397] lo speed is unknown, defaulting to 1000 [ 518.484242][T19440] netlink: 'syz.2.3347': attribute type 66 has an invalid length. [ 518.952387][T19457] syzkaller1: entered promiscuous mode [ 518.989330][T19457] syzkaller1: entered allmulticast mode [ 519.377785][T19467] bond1: option primary_reselect: invalid value (6) [ 519.394935][T19467] bond1 (unregistering): Released all slaves [ 519.518519][T19471] bond1: option primary_reselect: invalid value (6) [ 519.527271][T19471] bond1 (unregistering): Released all slaves [ 519.889179][T19489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.010516][T19490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.060651][T19490] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.121811][T19490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.312088][T19490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.323650][T19490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.338622][T19490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 520.354575][T19490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.387431][T19490] veth1_vlan: left promiscuous mode [ 520.485535][T19490] veth0_vlan: left promiscuous mode [ 520.505146][T19490] veth0_vlan: entered promiscuous mode [ 520.517821][T19490] veth1_vlan: entered promiscuous mode [ 520.554322][T19490] veth1_macvtap: left promiscuous mode [ 520.567613][T19490] veth0_macvtap: left promiscuous mode [ 520.582626][T19490] veth0_macvtap: entered promiscuous mode [ 520.614595][T19490] veth1_macvtap: entered promiscuous mode [ 520.647047][T19490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.667115][T19490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.686978][T19490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.706266][T19490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.831025][T19494] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 520.831513][T19490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.902912][ T3321] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 520.961206][T19503] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 520.990208][T19503] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 521.113146][ T1123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.137909][ T1123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.165038][ T1123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.194315][ T1123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.582852][ T8519] IPVS: starting estimator thread 0... [ 521.687726][T19541] IPVS: using max 27 ests per chain, 64800 per kthread [ 522.049795][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 522.125656][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.217256][T19559] TC_ACT_REPEAT abuse ? [ 522.378474][T19573] IPVS: set_ctl: invalid protocol: 11596 255.255.255.255:20014 [ 522.637021][T19590] __nla_validate_parse: 74 callbacks suppressed [ 522.637042][T19590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3385'. [ 522.981543][T19597] block nbd4: server does not support multiple connections per device. [ 522.990536][T19597] block nbd4: shutting down sockets [ 524.009529][T19616] lo speed is unknown, defaulting to 1000 [ 524.115418][ T29] audit: type=1800 audit(1781078570.915:21): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3397" name=CB dev="tmpfs" ino=442 res=0 errno=0 [ 524.694878][T19653] Bluetooth: MGMT ver 1.23 [ 524.699877][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 524.920444][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3403'. [ 525.160914][T19677] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 525.357109][T19667] xt_hashlimit: size too large, truncated to 1048576 [ 525.491711][T19688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3410'. [ 525.506641][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3405'. [ 525.555734][T19680] xt_hashlimit: size too large, truncated to 1048576 [ 525.566479][T19680] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 525.819383][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3412'. [ 525.850732][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 525.942866][T19700] team0: Port device team_slave_0 removed [ 526.121430][T19705] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 526.144961][T19705] syzkaller1: Refused to change device type [ 526.576349][T19723] netlink: 'syz.4.3418': attribute type 39 has an invalid length. [ 526.602558][T19723] sctp: [Deprecated]: syz.4.3418 (pid 19723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.602558][T19723] Use struct sctp_sack_info instead [ 526.876304][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3422'. [ 526.888489][T19737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3422'. [ 526.907708][T19738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 527.054735][T19743] xt_CT: No such helper "netbios-ns" [ 527.308211][T19759] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3429'. [ 527.591637][T19775] syzkaller0: entered promiscuous mode [ 527.608293][T19775] syzkaller0: entered allmulticast mode [ 527.649513][T19775] tipc: Started in network mode [ 527.664747][T19775] tipc: Node identity , cluster identity 4711 [ 527.678591][T19775] tipc: Failed to obtain node identity [ 527.692251][T19775] tipc: Enabling of bearer rejected, failed to enable media [ 528.423986][T19796] __nla_validate_parse: 3 callbacks suppressed [ 528.424007][T19796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3439'. [ 528.454623][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 528.487134][T19797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3440'. [ 528.538638][T19796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.598258][T19800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 528.820978][T19806] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 529.121894][T19820] netlink: 'syz.4.3447': attribute type 1 has an invalid length. [ 529.140608][T19820] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3447'. [ 529.170228][T19820] openvswitch: netlink: Actions may not be safe on all matching packets [ 529.191198][T19826] sctp: [Deprecated]: syz.2.3448 (pid 19826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.191198][T19826] Use struct sctp_sack_info instead [ 529.233087][T19828] dummy0: entered allmulticast mode [ 529.253273][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 529.278841][T19824] netlink: 'syz.0.3445': attribute type 1 has an invalid length. [ 529.307277][ T24] IPVS: starting estimator thread 0... [ 529.374270][T19824] bond2: entered promiscuous mode [ 529.380207][T19824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.411209][T19835] IPVS: using max 30 ests per chain, 72000 per kthread [ 529.571215][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'. [ 529.778951][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 529.793471][T19843] netlink: 'syz.3.3450': attribute type 1 has an invalid length. [ 529.813831][T19843] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3450'. [ 529.844865][T19843] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3450'. [ 529.847937][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3451'. [ 530.426311][T19879] syzkaller1: entered promiscuous mode [ 530.446891][T19879] syzkaller1: entered allmulticast mode [ 530.844513][T19889] syzkaller0: entered promiscuous mode [ 530.866808][T19889] syzkaller0: entered allmulticast mode [ 531.005425][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.591812][T19914] tipc: Enabling of bearer rejected, failed to enable media [ 532.036349][T19927] bond2: option downdelay: invalid value (18446744073709551613) [ 532.060775][T19927] bond2: option downdelay: allowed values 0 - 2147483647 [ 532.293297][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 532.738077][T19927] bond2 (unregistering): Released all slaves [ 532.926626][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 533.203374][T19959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 533.286741][T19959] syzkaller0: entered promiscuous mode [ 533.293494][T19959] syzkaller0: entered allmulticast mode [ 533.327138][T19923] lo speed is unknown, defaulting to 1000 [ 533.498126][T19978] xt_limit: Overflow, try lower: 1024/134217728 [ 533.555898][T19978] xt_HMARK: spi-set and port-set can't be combined [ 534.244604][T20003] __nla_validate_parse: 10 callbacks suppressed [ 534.244626][T20003] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3496'. [ 534.267706][T20003] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 534.311660][T20005] tipc: Started in network mode [ 534.324170][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 534.332883][T20005] tipc: Node identity 00000000000000008, cluster identity 4711 [ 534.427979][T20009] erspan0: entered promiscuous mode [ 534.435852][T20009] macvlan2: entered allmulticast mode [ 534.441514][T20009] erspan0: entered allmulticast mode [ 534.834010][T20026] hmac(sha224: entered promiscuous mode [ 534.926433][T20034] netlink: 'syz.3.3506': attribute type 1 has an invalid length. [ 535.009111][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3507'. [ 535.019886][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3507'. [ 535.034423][T20036] netlink: 58 bytes leftover after parsing attributes in process `syz.0.3507'. [ 535.104227][T20042] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 535.162527][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3508'. [ 535.216957][T20044] unsupported nla_type 216 [ 535.262211][T20034] bond2: entered promiscuous mode [ 535.269164][T20044] netlink: zone id is out of range [ 535.283489][T20044] netlink: zone id is out of range [ 535.290520][T20034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.303207][T20044] netlink: zone id is out of range [ 535.328107][T20044] netlink: zone id is out of range [ 535.346342][T20037] vlan2: entered allmulticast mode [ 535.356427][T20044] netlink: zone id is out of range [ 535.371602][T20037] bond2: entered allmulticast mode [ 535.387768][T20044] netlink: zone id is out of range [ 535.413037][T20051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3508'. [ 535.439545][T20044] netlink: zone id is out of range [ 535.448737][T20053] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3510'. [ 535.465078][T20044] netlink: zone id is out of range [ 535.478196][T20044] netlink: zone id is out of range [ 535.508898][T20044] netlink: zone id is out of range [ 535.518368][T20040] bond2: (slave bridge2): making interface the new active one [ 535.537325][T20040] bridge2: entered promiscuous mode [ 535.550844][T20040] bridge2: entered allmulticast mode [ 535.571575][T20040] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 535.620401][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 535.641643][T20041] team0 (unregistering): Port device team_slave_0 removed [ 535.673148][T20041] team0 (unregistering): Port device team_slave_1 removed [ 536.013364][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3515'. [ 536.270794][T20098] netlink: 'syz.4.3521': attribute type 1 has an invalid length. [ 536.369373][T20101] bond4: entered promiscuous mode [ 536.382962][T20101] bond4: entered allmulticast mode [ 536.388786][T20101] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.737612][T20110] syzkaller0: entered promiscuous mode [ 536.749334][T20110] syzkaller0: entered allmulticast mode [ 536.762389][T20109] tipc: Started in network mode [ 536.783433][T20109] tipc: Node identity b66f92710f1e, cluster identity 4711 [ 536.799147][T20109] tipc: Enabled bearer , priority 0 [ 536.981731][T20109] tipc: Resetting bearer [ 537.063211][T20109] tipc: Disabling bearer [ 537.648696][T20142] netlink: 'syz.2.3531': attribute type 13 has an invalid length. [ 537.696053][T20142] netlink: 'syz.2.3531': attribute type 17 has an invalid length. [ 537.943553][T20107] sctp: [Deprecated]: syz.4.3522 (pid 20107) Use of int in max_burst socket option deprecated. [ 537.943553][T20107] Use struct sctp_assoc_value instead [ 538.350508][T20142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.392192][T20142] macvlan2: left allmulticast mode [ 538.398284][T20142] erspan0: left allmulticast mode [ 538.412185][ T7499] lo speed is unknown, defaulting to 1000 [ 538.413762][T20106] lo speed is unknown, defaulting to 1000 [ 538.818859][T20168] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 539.348372][T20182] vxcan0: tx drop: invalid da for name 0x00000000000000c7 [ 539.382989][T20182] __nla_validate_parse: 2 callbacks suppressed [ 539.383011][T20182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3544'. [ 539.658398][T20193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3546'. [ 540.141666][T20207] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3551'. [ 540.224955][T20211] vlan2: entered promiscuous mode [ 540.234311][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3551'. [ 540.249859][T20211] bridge0: entered promiscuous mode [ 540.269265][T20213] batadv_slave_0: Caught tx_queue_len zero misconfig [ 540.344296][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'. [ 540.494165][T20227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3557'. [ 540.504583][T20226] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 540.608195][T20226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.637183][T20232] netlink: 'syz.3.3558': attribute type 1 has an invalid length. [ 540.674669][T20230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3557'. [ 540.701581][T20230] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3557'. [ 540.813514][T20232] bond3: entered promiscuous mode [ 540.860729][T20232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.122397][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'. [ 541.151117][T20249] netlink: 'syz.2.3562': attribute type 2 has an invalid length. [ 541.170981][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 541.287045][T20249] net_ratelimit: 9 callbacks suppressed [ 541.287068][T20249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.624504][T20265] macsec1: entered allmulticast mode [ 541.634475][T20265] bond0: entered allmulticast mode [ 541.646573][T20267] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 541.657282][T20265] bond_slave_0: entered allmulticast mode [ 541.663721][T20265] bond_slave_1: entered allmulticast mode [ 541.672973][T20265] bond_slave_0: entered promiscuous mode [ 541.681920][T20265] bond_slave_1: entered promiscuous mode [ 541.698443][T20265] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 541.707296][T20265] bond0: left allmulticast mode [ 541.712220][T20265] bond_slave_0: left allmulticast mode [ 541.718395][T20265] bond_slave_1: left allmulticast mode [ 541.724240][T20265] dummy0: entered promiscuous mode [ 541.762617][ T8558] bond_slave_0: left promiscuous mode [ 541.770046][ T8558] bond_slave_1: left promiscuous mode [ 541.777054][ T8558] dummy0: left promiscuous mode [ 542.301280][T20294] netlink: 'syz.4.3576': attribute type 10 has an invalid length. [ 542.450493][T20298] netlink: 'syz.3.3577': attribute type 1 has an invalid length. [ 542.469501][T20296] geneve4: entered promiscuous mode [ 543.031895][T20294] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 543.157845][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 43564 - 0 [ 543.181770][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 43564 - 0 [ 543.280860][T20298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.397776][T20305] bond4: (slave veth3): Enslaving as an active interface with a down link [ 543.478899][T20315] bond4 (unregistering): (slave veth3): Releasing active interface [ 543.512474][T20315] bond4 (unregistering): Released all slaves [ 543.579849][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 43564 - 0 [ 543.704265][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 43564 - 0 [ 543.991496][T20349] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 544.372954][T20351] bridge0: port 1(ip6gretap0) entered disabled state [ 544.403362][T20351] bridge0: port 3(team0) entered disabled state [ 544.412538][T20351] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.742937][T20351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.783356][T20351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.144141][ T5894] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.190207][ T5894] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 545.216695][ T5894] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 43564 - 0 [ 545.248300][ T5894] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.277868][ T5894] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 545.303112][ T5894] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 43564 - 0 [ 545.339225][ T5894] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.365162][ T5894] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 545.404809][ T5894] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 43564 - 0 [ 545.439648][ T3321] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.465863][ T3321] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 545.504616][ T3321] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 43564 - 0 [ 546.337294][T20450] netlink: 'syz.4.3606': attribute type 1 has an invalid length. [ 546.364808][T20450] __nla_validate_parse: 9 callbacks suppressed [ 546.364831][T20450] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3606'. [ 546.393227][T20450] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3606'. [ 546.406243][T20450] netlink: 'syz.4.3606': attribute type 1 has an invalid length. [ 546.465411][T20450] netlink: 634 bytes leftover after parsing attributes in process `syz.4.3606'. [ 547.444722][T20465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3608'. [ 547.692048][T20475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3613'. [ 547.933010][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'. [ 547.966894][T20481] netlink: 'syz.1.3615': attribute type 29 has an invalid length. [ 548.016056][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3615'. [ 548.019415][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 548.107355][T20486] bond0: (slave dummy0): Releasing backup interface [ 548.151854][T20486] dummy0: left allmulticast mode [ 548.926761][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.160897][T20538] syz_tun: entered allmulticast mode [ 549.332784][T20548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3628'. [ 549.465486][T20553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3631'. [ 550.522302][T20572] netlink: 'syz.3.3636': attribute type 4 has an invalid length. [ 550.970448][T20574] netlink: set zone limit has 4 unknown bytes [ 551.934168][T20602] netlink: 'syz.0.3648': attribute type 21 has an invalid length. [ 552.173416][T20604] __nla_validate_parse: 3 callbacks suppressed [ 552.173437][T20604] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3647'. [ 552.238532][T20604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.463630][T20617] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 552.569730][T20626] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3652'. [ 552.601968][T20626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'. [ 552.645525][T20626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3652'. [ 552.700865][T20630] nbd: nbd2 already in use [ 552.737576][T20630] block nbd2: NBD_DISCONNECT [ 552.777527][T20630] block nbd2: Send disconnect failed -32 [ 552.789536][T20635] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.797288][T20635] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.842934][T20630] block nbd2: shutting down sockets [ 552.956133][T20635] bridge0: entered allmulticast mode [ 554.005027][T20637] vlan2: left promiscuous mode [ 554.012755][T20637] bridge0: left promiscuous mode [ 554.037191][T20637] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 554.107976][T20681] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 554.311705][T20691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3662'. [ 554.493044][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3665'. [ 554.527998][T20700] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.727168][T20706] sctp: [Deprecated]: syz.1.3667 (pid 20706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.727168][T20706] Use struct sctp_sack_info instead [ 554.897382][T20714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3671'. [ 554.902530][T20699] syzkaller0: entered promiscuous mode [ 554.951999][T20699] syzkaller0: entered allmulticast mode [ 555.178740][T20723] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 555.231186][T20725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3672'. [ 555.457302][T20736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.426720][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3678'. [ 556.453959][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3678'. [ 559.878523][T20724] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 559.881200][T20722] netlink: 'syz.4.3674': attribute type 1 has an invalid length. [ 559.949995][T20722] __nla_validate_parse: 5 callbacks suppressed [ 559.950019][T20722] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3674'. [ 560.039629][T20722] NCSI netlink: No device for ifindex 0 [ 560.550845][T20778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3685'. [ 560.652968][T20776] bond3: option all_slaves_active: invalid value (127) [ 560.672506][T20776] bond3 (unregistering): Released all slaves [ 560.777971][T20778] vlan3: entered promiscuous mode [ 560.799737][T20778] erspan0: entered promiscuous mode [ 560.941775][T20780] kthread_run failed with err -4 [ 561.467512][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'. [ 561.541001][T20802] bond3: option resend_igmp: invalid value (2878) [ 561.603930][T20802] bond3: option resend_igmp: allowed values 0 - 255 [ 561.640799][T20802] bond3 (unregistering): Released all slaves [ 561.900458][T20810] tipc: Enabled bearer , priority 0 [ 562.057744][T20799] tipc: Disabling bearer [ 562.453897][T20844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3699'. [ 562.532417][T20851] openvswitch: netlink: Multiple metadata blocks provided [ 562.751962][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3699'. [ 562.761382][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 562.761780][T20857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3701'. [ 562.819269][T20857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.211712][T20870] syzkaller1: entered promiscuous mode [ 563.267126][T20870] syzkaller1: entered allmulticast mode [ 564.110825][T20893] syzkaller0: entered promiscuous mode [ 564.138644][T20893] syzkaller0: entered allmulticast mode [ 564.324205][T20903] sctp: [Deprecated]: syz.3.3710 (pid 20903) Use of int in maxseg socket option. [ 564.324205][T20903] Use struct sctp_assoc_value instead [ 564.557549][T20912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3712'. [ 564.638773][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'. [ 565.159227][T20929] x_tables: unsorted entry at hook 2 [ 565.222606][T20932] gtp1: entered promiscuous mode [ 565.256157][T20932] gtp1: entered allmulticast mode [ 565.311469][T20932] team0: Device gtp1 is of different type [ 565.506825][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'. [ 565.600967][T20938] bond4: entered promiscuous mode [ 565.617054][T20938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 566.196702][T20959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3724'. [ 566.274287][T20959] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.3724'. [ 566.329128][T20961] netlink: 'syz.2.3725': attribute type 1 has an invalid length. [ 566.532445][T20962] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 566.734997][T20973] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3726'. [ 566.826160][T20973] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3726'. [ 566.934036][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3727'. [ 566.993790][T20978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3727'. [ 567.007576][T20930] lo speed is unknown, defaulting to 1000 [ 568.123196][T20987] syzkaller1: entered promiscuous mode [ 568.133204][T21010] netlink: 'syz.2.3732': attribute type 10 has an invalid length. [ 568.148397][T20987] syzkaller1: entered allmulticast mode [ 568.552037][T21006] bridge_slave_0: left allmulticast mode [ 568.562579][T21006] bridge_slave_0: left promiscuous mode [ 568.583961][T21006] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.621561][T21006] bridge_slave_1: left allmulticast mode [ 568.641455][T21006] bridge_slave_1: left promiscuous mode [ 568.649969][T21006] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.676230][T21006] bond0: (slave bond_slave_0): Releasing backup interface [ 568.701359][T21006] bond0: (slave bond_slave_1): Releasing backup interface [ 568.728672][T21006] team0: Port device team_slave_0 removed [ 568.747110][T21006] team0: Port device team_slave_1 removed [ 568.754319][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.766409][T21006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.780187][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.790286][T21006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.804716][T21006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.605084][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.634637][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.641631][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.648568][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.655499][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.662359][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.669255][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.676194][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.683113][T21041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 569.750796][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'. [ 569.785562][T21047] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3747'. [ 569.794815][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'. [ 570.205944][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.352289][T21085] __nla_validate_parse: 3 callbacks suppressed [ 571.352312][T21085] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3756'. [ 572.063551][T21103] netlink: 'syz.2.3761': attribute type 5 has an invalid length. [ 572.378716][T21069] lo speed is unknown, defaulting to 1000 [ 572.573460][T21120] tipc: Started in network mode [ 572.612342][T21120] tipc: Node identity ac1414aa, cluster identity 2047 [ 572.644310][T21120] tipc: Enabled bearer , priority 5 [ 573.755330][ T5643] tipc: Node number set to 2886997162 [ 573.937735][T21148] tipc: Started in network mode [ 573.961604][T21148] tipc: Node identity bae17810cd23, cluster identity 4711 [ 573.999718][T21148] tipc: Enabled bearer , priority 0 [ 574.018804][T21147] syzkaller0: entered promiscuous mode [ 574.064146][T21147] syzkaller0: entered allmulticast mode [ 574.231352][T21147] tipc: Resetting bearer [ 574.287695][T21146] tipc: Resetting bearer [ 574.400753][T21146] tipc: Disabling bearer [ 574.666431][T21170] Bluetooth: MGMT ver 1.23 [ 575.698663][T21193] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3790'. [ 575.985608][T21170] lo speed is unknown, defaulting to 1000 [ 576.253146][T21198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 576.355696][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3792'. [ 576.766473][ T5641] Bluetooth: hci2: command 0x0401 tx timeout [ 576.767016][ T5637] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 576.935629][T21216] nbd: illegal input index -1 [ 576.994453][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.048281][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.309215][T21226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3797'. [ 577.340315][T21225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3798'. [ 577.392265][T21226] veth1_to_team: entered promiscuous mode [ 577.427718][T21226] gretap0: entered promiscuous mode [ 577.443342][T21226] debugfs: 'hsr0' already exists in 'hsr' [ 577.466202][T21226] Cannot create hsr debugfs directory [ 577.484275][T21226] hsr0: entered promiscuous mode [ 577.642790][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 577.678130][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 577.724092][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 577.964791][T21237] netlink: 'syz.4.3801': attribute type 29 has an invalid length. [ 577.999994][T21237] netlink: 'syz.4.3801': attribute type 29 has an invalid length. [ 578.241062][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3804'. [ 578.276020][T21241] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 578.322793][T21241] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3804'. [ 578.434079][T21247] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 578.532807][T21247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3805'. [ 578.662681][T21251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'. [ 578.820249][T21256] netlink: 'syz.3.3808': attribute type 1 has an invalid length. [ 578.869520][ T8558] xfrm0 speed is unknown, defaulting to 1000 [ 578.881018][T21228] infiniband syz0: set active [ 578.896505][T21228] infiniband syz0: added xfrm0 [ 578.913786][T21228] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 578.935252][T21228] infiniband syz0: Couldn't open port 1 [ 578.975064][T21228] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 579.038009][T21228] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 579.109851][T21228] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 579.368266][T21266] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3811'. [ 579.381476][T21228] RDS/IB: syz0: added [ 579.402601][T21228] smc: adding ib device syz0 with port count 1 [ 579.427949][T21228] smc: ib device syz0 port 1 has no pnetid [ 579.466978][ T8558] xfrm0 speed is unknown, defaulting to 1000 [ 579.500542][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 579.646228][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 579.903923][T21281] net_ratelimit: 1976 callbacks suppressed [ 579.903944][T21281] veth1_vlan: mtu less than device minimum [ 579.966421][ T5890] wlan1: Trigger new scan to find an IBSS to join [ 580.220179][T21285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.425217][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 581.270639][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 581.284614][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3820'. [ 581.749420][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 582.128792][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 582.259287][T21264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.653132][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3823'. [ 582.692652][T21306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.906559][T21310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3824'. [ 582.929329][ T7829] wlan1: Trigger new scan to find an IBSS to join [ 583.042767][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 583.442100][T21328] hmó3)ó: entered promiscuous mode [ 583.767288][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 584.049101][T21333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3832'. [ 584.337339][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3834'. [ 584.763761][T21352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3838'. [ 584.831697][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 585.938506][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 585.965479][ T3287] wlan1: Trigger new scan to find an IBSS to join [ 586.166873][T21390] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 586.207204][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 586.255488][T21390] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 586.368438][T21391] syzkaller1: entered promiscuous mode [ 586.394142][T21391] syzkaller1: entered allmulticast mode [ 586.837359][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3852'. [ 586.839098][ T29] audit: type=1800 audit(1781078633.645:22): pid=21398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3851" name="memory.events" dev="tmpfs" ino=611 res=0 errno=0 [ 586.917738][T21400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3852'. [ 586.933083][ T7831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.187410][T21228] xfrm0 speed is unknown, defaulting to 1000 [ 588.509369][T21420] syz.3.3858 (21420) used greatest stack depth: 17760 bytes left [ 588.693692][T21447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3863'. [ 588.762924][T21459] pim6reg1: entered promiscuous mode [ 588.854115][T21459] pim6reg1: entered allmulticast mode [ 588.953542][T21447] pimreg: entered allmulticast mode [ 589.091286][T21467] netlink: 'syz.0.3866': attribute type 10 has an invalid length. [ 589.169173][T21467] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3866'. [ 589.506879][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 589.557286][T21475] netlink: 'syz.4.3868': attribute type 1 has an invalid length. [ 589.628728][T21483] netlink: 'syz.2.3870': attribute type 1 has an invalid length. [ 589.868673][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3871'. [ 589.959869][T21487] netlink: 'syz.4.3871': attribute type 13 has an invalid length. [ 590.171692][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 590.221990][T21494] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 590.250722][T21494] tipc: Enabled bearer , priority 5 [ 591.082268][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'. [ 591.138802][T21523] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3880'. [ 591.184559][T21523] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3880'. [ 591.365339][ T10] tipc: Node number set to 3111228017 [ 591.578461][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3882'. [ 593.194011][T21570] bond3: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 593.203487][T21570] bond3: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 593.353930][T21578] bridge_slave_0: left allmulticast mode [ 593.374483][T21578] bridge_slave_0: left promiscuous mode [ 593.393745][T21578] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.444099][T21578] bridge_slave_1: left allmulticast mode [ 593.464108][T21578] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.528110][T21578] bond0: (slave bond_slave_0): Releasing backup interface [ 593.582194][T21578] bond0: (slave bond_slave_1): Releasing backup interface [ 593.629141][T21578] team0: Port device team_slave_1 removed [ 593.644460][T21578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.652583][T21578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.662773][T21578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.674547][T21578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.688741][T21578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 594.077945][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3898'. [ 594.102192][T21590] netlink: 'syz.4.3894': attribute type 13 has an invalid length. [ 594.129265][T21606] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3896'. [ 594.143619][T21590] netlink: 'syz.4.3894': attribute type 17 has an invalid length. [ 594.175622][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 594.422513][T21609] smc: removing ib device syz1 [ 594.581508][T21590] bridge0: port 1(ip6gretap0) entered blocking state [ 594.588446][T21590] bridge0: port 1(ip6gretap0) entered forwarding state [ 594.639916][T21609] smbdirect: ib_dev[syz1] removed [ 594.711582][T21590] bridge0: left promiscuous mode [ 594.830273][T21590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.949778][T21590] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.062435][T21590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.200376][T21590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.283269][T21590] veth1_vlan: left promiscuous mode [ 595.315038][T21590] veth0_vlan: left promiscuous mode [ 595.331754][T21590] veth0_vlan: entered promiscuous mode [ 595.367222][T21590] veth1_vlan: entered promiscuous mode [ 595.400969][T21590] veth1_macvtap: left promiscuous mode [ 595.424563][T21590] veth0_macvtap: left promiscuous mode [ 595.441274][T21590] veth0_macvtap: entered promiscuous mode [ 595.492927][T21590] veth1_macvtap: entered promiscuous mode [ 595.525395][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.560927][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.588166][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.628819][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.693131][T21590] ip6gre1: left allmulticast mode [ 595.712636][T21590] bond1: left promiscuous mode [ 595.720091][T21590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.808151][ T5641] Bluetooth: hci5: command 0x0405 tx timeout [ 595.874584][T21590] geneve2: left promiscuous mode [ 595.909991][T21590] geneve2: left allmulticast mode [ 595.946505][T21590] bond2: left allmulticast mode [ 595.963776][T21590] geneve3: left allmulticast mode [ 595.988299][T21590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.053364][T21590] ip6tnl1: left allmulticast mode [ 596.067563][T21590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.088320][T21590] bond4: left promiscuous mode [ 596.098988][T21590] bond4: left allmulticast mode [ 596.115972][T21590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.134188][T21590] geneve4: left promiscuous mode [ 596.179265][T21590] hsr0: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 596.202768][T21590] hsr0: left promiscuous mode [ 596.397342][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.404644][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.600989][ T5890] bridge0: port 3(team0) entered blocking state [ 596.607587][ T5890] bridge0: port 3(team0) entered forwarding state [ 596.692039][ T5643] bridge0: entered promiscuous mode [ 596.705006][ T7829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.717888][ T7829] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 596.732394][ T7829] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 46789 - 0 [ 596.800948][ T7829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.839682][ T7829] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 596.894553][ T7829] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 46789 - 0 [ 597.192626][ T7829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.222588][ T7829] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.264239][ T7829] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 46789 - 0 [ 597.424320][ T7829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.479090][ T7829] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.522721][ T7829] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 46789 - 0 [ 597.540183][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 597.716925][ T1123] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 597.918939][T21665] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 597.972191][T21671] xt_hashlimit: size too large, truncated to 1048576 [ 597.979292][T21671] xt_hashlimit: max too large, truncated to 1048576 [ 597.988591][T21665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.316584][T21673] syzkaller0: entered promiscuous mode [ 598.360548][T21673] syzkaller0: entered allmulticast mode [ 598.453096][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 598.671571][T21682] ip6gretap0: entered promiscuous mode [ 598.713503][T21682] macsec1: entered promiscuous mode [ 598.784690][T21682] ip6gretap0: left promiscuous mode [ 600.308875][T21718] geneve2: entered promiscuous mode [ 600.601901][T21720] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 600.726975][T21720] bond5 (unregistering): Released all slaves [ 600.938647][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 601.233561][T21721] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 601.576972][T21744] sctp: [Deprecated]: syz.1.3925 (pid 21744) Use of int in maxseg socket option. [ 601.576972][T21744] Use struct sctp_assoc_value instead [ 601.726476][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 601.917302][T21744] bond5: option tlb_dynamic_lb: invalid value (5) [ 601.956152][T21744] bond5 (unregistering): Released all slaves [ 602.251843][T21753] bridge0: entered promiscuous mode [ 602.406089][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 602.735374][T21771] bond4: entered allmulticast mode [ 602.800860][T21772] ipip0: entered promiscuous mode [ 602.824990][T21772] ipip0: entered allmulticast mode [ 602.931016][T21786] netlink: 'syz.2.3933': attribute type 23 has an invalid length. [ 603.124631][T21800] FAULT_INJECTION: forcing a failure. [ 603.124631][T21800] name failslab, interval 1, probability 0, space 0, times 0 [ 603.136461][T21801] xt_NFQUEUE: number of total queues is 0 [ 603.193953][T21800] CPU: 1 UID: 0 PID: 21800 Comm: syz.4.3937 Not tainted syzkaller #0 PREEMPT(full) [ 603.193984][T21800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 603.193995][T21800] Call Trace: [ 603.194003][T21800] [ 603.194013][T21800] dump_stack_lvl+0xe8/0x150 [ 603.194047][T21800] should_fail_ex+0x412/0x560 [ 603.194172][T21800] should_failslab+0xa8/0x100 [ 603.194194][T21800] ? skb_clone+0x212/0x3a0 [ 603.194247][T21800] kmem_cache_alloc_noprof+0x87/0x650 [ 603.194277][T21800] ? __netlink_lookup+0xc6/0x8b0 [ 603.194344][T21800] skb_clone+0x212/0x3a0 [ 603.194374][T21800] __netlink_deliver_tap+0x404/0x850 [ 603.194411][T21800] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.194439][T21800] netlink_deliver_tap+0x19c/0x1b0 [ 603.194464][T21800] netlink_unicast+0x730/0x8e0 [ 603.194498][T21800] netlink_sendmsg+0x813/0xb40 [ 603.194533][T21800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.194563][T21800] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.194598][T21800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.194632][T21800] ____sys_sendmsg+0x972/0x9f0 [ 603.194657][T21800] ? __might_fault+0xaf/0x130 [ 603.194691][T21800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.194726][T21800] ? import_iovec+0x73/0xa0 [ 603.194785][T21800] ___sys_sendmsg+0x2a5/0x360 [ 603.194808][T21800] ? __lock_acquire+0x6b5/0x2cf0 [ 603.194845][T21800] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.194909][T21800] ? __fget_files+0x2a/0x420 [ 603.194961][T21800] ? __fget_files+0x3a0/0x420 [ 603.194998][T21800] __x64_sys_sendmsg+0x1bd/0x2a0 [ 603.195025][T21800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.195060][T21800] ? __pfx_ksys_write+0x10/0x10 [ 603.195100][T21800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.195124][T21800] do_syscall_64+0x174/0x580 [ 603.195149][T21800] ? trace_irq_disable+0x3b/0x140 [ 603.195178][T21800] ? clear_bhb_loop+0x40/0x90 [ 603.195205][T21800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.195225][T21800] RIP: 0033:0x7fbe5b19ce59 [ 603.195245][T21800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.195262][T21800] RSP: 002b:00007fbe5c085028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.195285][T21800] RAX: ffffffffffffffda RBX: 00007fbe5b415fa0 RCX: 00007fbe5b19ce59 [ 603.195299][T21800] RDX: 0000000004004014 RSI: 00002000000004c0 RDI: 0000000000000003 [ 603.195313][T21800] RBP: 00007fbe5c085090 R08: 0000000000000000 R09: 0000000000000000 [ 603.195325][T21800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.195337][T21800] R13: 00007fbe5b416038 R14: 00007fbe5b415fa0 R15: 00007ffc487c7868 [ 603.195378][T21800] [ 603.266109][T21805] lo speed is unknown, defaulting to 1000 [ 603.463020][T21815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3941'. [ 603.671597][T21805] xfrm0 speed is unknown, defaulting to 1000 [ 603.820414][T21825] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3943'. [ 603.873003][T21825] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3943'. [ 604.167200][T21830] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3944'. [ 604.822313][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 605.105756][T21848] FAULT_INJECTION: forcing a failure. [ 605.105756][T21848] name failslab, interval 1, probability 0, space 0, times 0 [ 605.179128][T21848] CPU: 1 UID: 0 PID: 21848 Comm: syz.2.3952 Not tainted syzkaller #0 PREEMPT(full) [ 605.179161][T21848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.179173][T21848] Call Trace: [ 605.179181][T21848] [ 605.179190][T21848] dump_stack_lvl+0xe8/0x150 [ 605.179220][T21848] should_fail_ex+0x412/0x560 [ 605.179249][T21848] should_failslab+0xa8/0x100 [ 605.179272][T21848] __kmalloc_noprof+0xe8/0x760 [ 605.179303][T21848] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 605.179399][T21848] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 605.179439][T21848] genl_family_rcv_msg_doit+0xd9/0x330 [ 605.179477][T21848] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 605.179516][T21848] ? apparmor_capable+0x126/0x170 [ 605.179542][T21848] ? bpf_lsm_capable+0x9/0x20 [ 605.179563][T21848] ? security_capable+0x7e/0x2c0 [ 605.179642][T21848] genl_rcv_msg+0x61c/0x7a0 [ 605.179679][T21848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.179705][T21848] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 605.179855][T21848] ? __pfx_nl80211_new_mpath+0x10/0x10 [ 605.179891][T21848] ? __pfx_nl80211_post_doit+0x10/0x10 [ 605.179919][T21848] ? __pfx_ref_tracker_free+0x10/0x10 [ 605.179981][T21848] netlink_rcv_skb+0x232/0x4b0 [ 605.180009][T21848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.180039][T21848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.180079][T21848] ? down_read+0x270/0x2e0 [ 605.180127][T21848] ? genl_rcv+0xd/0x40 [ 605.180156][T21848] genl_rcv+0x28/0x40 [ 605.180183][T21848] netlink_unicast+0x75c/0x8e0 [ 605.180218][T21848] netlink_sendmsg+0x813/0xb40 [ 605.180252][T21848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.180280][T21848] ? aa_sock_msg_perm+0xf1/0x1b0 [ 605.180313][T21848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.180345][T21848] ____sys_sendmsg+0x972/0x9f0 [ 605.180369][T21848] ? __might_fault+0xaf/0x130 [ 605.180404][T21848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.180438][T21848] ? import_iovec+0x73/0xa0 [ 605.180468][T21848] ___sys_sendmsg+0x2a5/0x360 [ 605.180491][T21848] ? __lock_acquire+0x6b5/0x2cf0 [ 605.180518][T21848] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.180584][T21848] ? __fget_files+0x2a/0x420 [ 605.180608][T21848] ? __fget_files+0x3a0/0x420 [ 605.180643][T21848] __x64_sys_sendmsg+0x1bd/0x2a0 [ 605.180671][T21848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.180706][T21848] ? __pfx_ksys_write+0x10/0x10 [ 605.180747][T21848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.180771][T21848] do_syscall_64+0x174/0x580 [ 605.180792][T21848] ? trace_irq_disable+0x3b/0x140 [ 605.180822][T21848] ? clear_bhb_loop+0x40/0x90 [ 605.180848][T21848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.180867][T21848] RIP: 0033:0x7fedbfd9ce59 [ 605.180897][T21848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.180914][T21848] RSP: 002b:00007fedc0c3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.180936][T21848] RAX: ffffffffffffffda RBX: 00007fedc0015fa0 RCX: 00007fedbfd9ce59 [ 605.180950][T21848] RDX: 0000000004004014 RSI: 00002000000004c0 RDI: 0000000000000003 [ 605.180963][T21848] RBP: 00007fedc0c3c090 R08: 0000000000000000 R09: 0000000000000000 [ 605.180975][T21848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.180986][T21848] R13: 00007fedc0016038 R14: 00007fedc0015fa0 R15: 00007fffa090f3d8 [ 605.181022][T21848] [ 605.681609][T21851] bridge0: left promiscuous mode [ 605.701143][T21851] bridge0: left allmulticast mode [ 605.778569][T21853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3953'. [ 605.834766][T21851] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 605.851944][T21851] bond2: left promiscuous mode [ 605.865844][T21851] bridge2: left promiscuous mode [ 605.872837][T21851] vlan2: left allmulticast mode [ 605.879859][T21851] bond2: left allmulticast mode [ 605.885117][T21851] bridge2: left allmulticast mode [ 605.894039][T21851] bond3: left promiscuous mode [ 605.904554][T21851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 605.916281][T21851] geneve2: left promiscuous mode [ 606.062567][T21863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3956'. [ 606.072534][T21863] netlink: 'syz.3.3956': attribute type 2 has an invalid length. [ 606.080738][T21863] netlink: 'syz.3.3956': attribute type 1 has an invalid length. [ 606.089207][T21863] netlink: 'syz.3.3956': attribute type 1 has an invalid length. [ 606.164141][T21858] bond5: entered promiscuous mode [ 606.187304][T21858] bond5: entered allmulticast mode [ 606.215050][T21863] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 606.759448][ T5650] IPVS: starting estimator thread 0... [ 606.831158][T21887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3965'. [ 606.867362][T21884] IPVS: using max 26 ests per chain, 62400 per kthread [ 606.930264][T21891] netlink: 'syz.0.3967': attribute type 1 has an invalid length. [ 606.999313][T21891] bond5: entered promiscuous mode [ 607.005834][T21891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 607.007928][T21898] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 607.038988][T21896] bond5: (slave bridge5): making interface the new active one [ 607.057212][T21896] bridge5: entered promiscuous mode [ 607.064041][T21896] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 607.080555][T21897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3968'. [ 607.111353][T21897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.244147][T21905] netlink: 'syz.1.3970': attribute type 1 has an invalid length. [ 607.286623][T21891] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 607.321435][T21909] netlink: 'syz.1.3970': attribute type 10 has an invalid length. [ 607.328985][T21891] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 607.339865][T21906] netlink: 'syz.1.3970': attribute type 10 has an invalid length. [ 607.715794][T21920] netlink: 'syz.1.3971': attribute type 1 has an invalid length. [ 607.822296][T21927] netlink: 'syz.1.3971': attribute type 1 has an invalid length. [ 609.567787][T21952] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:0 [ 609.726087][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 610.281848][T21997] __nla_validate_parse: 1 callbacks suppressed [ 610.281871][T21997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3986'. [ 611.175981][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 611.310177][T22023] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.390036][T22035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3996'. [ 611.422870][T22037] bond0: (slave ip6tnl0): refused to change device type [ 611.470605][T21911] Set syz1 is full, maxelem 65536 reached [ 611.551303][T22037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3997'. [ 611.602756][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'. [ 611.624021][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 611.688853][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.702775][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.713898][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.755111][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.881913][T22044] sctp: [Deprecated]: syz.1.3999 (pid 22044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.881913][T22044] Use struct sctp_sack_info instead [ 612.215597][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4004'. [ 612.247137][T22062] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4003'. [ 612.332900][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4004'. [ 612.334495][T22067] geneve5: entered promiscuous mode [ 612.604757][T22079] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 612.624061][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4008'. [ 613.178936][ T10] lo speed is unknown, defaulting to 1000 [ 613.225088][ T8558] xfrm0 speed is unknown, defaulting to 1000 [ 613.433438][T22089] bridge6: entered promiscuous mode [ 613.454629][T22089] bridge6: entered allmulticast mode [ 613.478401][T22098] netlink: 'syz.0.4013': attribute type 1 has an invalid length. [ 613.662658][T22100] bond6: entered promiscuous mode [ 613.713931][T22100] bond6: entered allmulticast mode [ 613.731372][T22100] 8021q: adding VLAN 0 to HW filter on device bond6 [ 613.750672][T22103] tipc: Enabling of bearer rejected, already enabled [ 613.800656][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4014'. [ 613.854096][T22098] bridge6: entered promiscuous mode [ 613.875838][T22098] bridge6: entered allmulticast mode [ 613.887333][ T5887] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 613.909752][T22098] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 613.982343][T22100] bridge7: entered promiscuous mode [ 613.988350][T22100] bridge7: entered allmulticast mode [ 613.994699][T22100] bond6: (slave bridge7): Enslaving as a backup interface with a down link [ 614.008686][T22116] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 614.049730][ T5887] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 614.790147][T22151] netlink: 'syz.3.4026': attribute type 2 has an invalid length. [ 615.023212][T22167] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old? [ 615.220376][T22179] netlink: 'syz.3.4035': attribute type 21 has an invalid length. [ 615.757696][T22198] tc_dump_action: action bad kind [ 615.990490][T22203] bridge8: entered promiscuous mode [ 616.010586][T22203] bridge8: entered allmulticast mode [ 616.198304][T22211] ================================================================== [ 616.206433][T22211] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x197/0xfc0 [ 616.214413][T22211] Read of size 8 at addr ffff88808c133ab0 by task syz.1.4045/22211 [ 616.222306][T22211] [ 616.224638][T22211] CPU: 1 UID: 0 PID: 22211 Comm: syz.1.4045 Not tainted syzkaller #0 PREEMPT(full) [ 616.224657][T22211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.224668][T22211] Call Trace: [ 616.224675][T22211] [ 616.224682][T22211] dump_stack_lvl+0xe8/0x150 [ 616.224703][T22211] print_address_description+0x55/0x1e0 [ 616.224741][T22211] ? __sk_msg_recvmsg+0x197/0xfc0 [ 616.224757][T22211] print_report+0x58/0x70 [ 616.224771][T22211] kasan_report+0x117/0x150 [ 616.224793][T22211] ? __sk_msg_recvmsg+0x197/0xfc0 [ 616.224812][T22211] __sk_msg_recvmsg+0x197/0xfc0 [ 616.224838][T22211] udp_bpf_recvmsg+0x196/0xac0 [ 616.224937][T22211] ? aa_sk_perm+0x6d5/0x900 [ 616.224962][T22211] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 616.224987][T22211] ? sock_rps_record_flow+0x19/0x350 [ 616.225050][T22211] ? inet_recvmsg+0x101/0x120 [ 616.225073][T22211] ? __pfx_inet_recvmsg+0x10/0x10 [ 616.225096][T22211] sock_recvmsg+0x155/0x1b0 [ 616.225139][T22211] ____sys_recvmsg+0x1e6/0x4a0 [ 616.225166][T22211] ? __pfx_____sys_recvmsg+0x10/0x10 [ 616.225192][T22211] ? import_iovec+0x73/0xa0 [ 616.225213][T22211] ___sys_recvmsg+0x215/0x590 [ 616.225233][T22211] ? __pfx____sys_recvmsg+0x10/0x10 [ 616.225253][T22211] ? __fget_files+0x2a/0x420 [ 616.225280][T22211] ? __fget_files+0x3a0/0x420 [ 616.225303][T22211] do_recvmmsg+0x334/0x800 [ 616.225347][T22211] ? __pfx_do_recvmmsg+0x10/0x10 [ 616.225365][T22211] ? handle_mm_fault+0xf1/0x3170 [ 616.225389][T22211] ? __pfx_do_futex+0x10/0x10 [ 616.225427][T22211] __x64_sys_recvmmsg+0x198/0x250 [ 616.225447][T22211] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 616.225470][T22211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.225487][T22211] do_syscall_64+0x174/0x580 [ 616.225504][T22211] ? trace_irq_disable+0x3b/0x140 [ 616.225528][T22211] ? clear_bhb_loop+0x40/0x90 [ 616.225545][T22211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.225562][T22211] RIP: 0033:0x7f298cd9ce59 [ 616.225576][T22211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.225592][T22211] RSP: 002b:00007f298db99028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 616.225610][T22211] RAX: ffffffffffffffda RBX: 00007f298d015fa0 RCX: 00007f298cd9ce59 [ 616.225622][T22211] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000006 [ 616.225633][T22211] RBP: 00007f298ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 616.225643][T22211] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 616.225653][T22211] R13: 00007f298d016038 R14: 00007f298d015fa0 R15: 00007ffc514ebf98 [ 616.225672][T22211] [ 616.225677][T22211] [ 616.486933][T22211] Allocated by task 22215: [ 616.491350][T22211] kasan_save_track+0x3e/0x80 [ 616.496136][T22211] __kasan_kmalloc+0x93/0xb0 [ 616.501084][T22211] __kmalloc_cache_noprof+0x31c/0x660 [ 616.506471][T22211] sk_psock_skb_ingress_self+0x5e/0x370 [ 616.512062][T22211] sk_psock_verdict_recv+0x7d9/0x8d0 [ 616.517374][T22211] udp_read_skb+0x5f8/0x6d0 [ 616.521956][T22211] sk_psock_verdict_data_ready+0x49c/0x9a0 [ 616.527775][T22211] __udp_enqueue_schedule_skb+0xc4b/0x12e0 [ 616.533586][T22211] udp_queue_rcv_one_skb+0x755/0x10f0 [ 616.539049][T22211] __udp4_lib_mcast_deliver+0xad7/0xb70 [ 616.544596][T22211] udp_rcv+0xcd0/0x1db0 [ 616.548753][T22211] ip_protocol_deliver_rcu+0x282/0x440 [ 616.554294][T22211] ip_local_deliver_finish+0x3bb/0x6f0 [ 616.559844][T22211] NF_HOOK+0x336/0x3c0 [ 616.564094][T22211] ip_sublist_rcv_finish+0x1f0/0x240 [ 616.569383][T22211] ip_sublist_rcv+0x5c6/0xa70 [ 616.574253][T22211] ip_list_rcv+0x3f1/0x450 [ 616.578760][T22211] __netif_receive_skb_list_core+0x7e5/0x810 [ 616.584823][T22211] netif_receive_skb_list_internal+0x995/0xcf0 [ 616.591025][T22211] netif_receive_skb_list+0x55/0x450 [ 616.596405][T22211] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 616.602139][T22211] bpf_prog_test_run_xdp+0x81c/0x1160 [ 616.607527][T22211] bpf_prog_test_run+0x2c7/0x340 [ 616.612469][T22211] __sys_bpf+0x643/0x950 [ 616.616922][T22211] __x64_sys_bpf+0x7c/0x90 [ 616.621348][T22211] do_syscall_64+0x174/0x580 [ 616.625947][T22211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.631850][T22211] [ 616.634269][T22211] Freed by task 22216: [ 616.638335][T22211] kasan_save_track+0x3e/0x80 [ 616.643019][T22211] kasan_save_free_info+0x46/0x50 [ 616.648171][T22211] __kasan_slab_free+0x5c/0x80 [ 616.652988][T22211] kfree+0x1c5/0x640 [ 616.656902][T22211] __sk_msg_recvmsg+0xdb7/0xfc0 [ 616.661774][T22211] udp_bpf_recvmsg+0x196/0xac0 [ 616.666554][T22211] sock_recvmsg+0x155/0x1b0 [ 616.671087][T22211] ____sys_recvmsg+0x1e6/0x4a0 [ 616.675856][T22211] ___sys_recvmsg+0x215/0x590 [ 616.680539][T22211] do_recvmmsg+0x334/0x800 [ 616.684964][T22211] __x64_sys_recvmmsg+0x198/0x250 [ 616.690028][T22211] do_syscall_64+0x174/0x580 [ 616.694625][T22211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.700522][T22211] [ 616.702850][T22211] The buggy address belongs to the object at ffff88808c133800 [ 616.702850][T22211] which belongs to the cache kmalloc-1k of size 1024 [ 616.716907][T22211] The buggy address is located 688 bytes inside of [ 616.716907][T22211] freed 1024-byte region [ffff88808c133800, ffff88808c133c00) [ 616.730811][T22211] [ 616.733136][T22211] The buggy address belongs to the physical page: [ 616.739543][T22211] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88808c132800 pfn:0x8c130 [ 616.749607][T22211] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 616.758104][T22211] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 616.766615][T22211] page_type: f5(slab) [ 616.770617][T22211] raw: 00fff00000000240 ffff88813fe1adc0 ffffea0000481410 ffffea0002579210 [ 616.779206][T22211] raw: ffff88808c132800 000000080010000f 00000000f5000000 0000000000000000 [ 616.787881][T22211] head: 00fff00000000240 ffff88813fe1adc0 ffffea0000481410 ffffea0002579210 [ 616.796555][T22211] head: ffff88808c132800 000000080010000f 00000000f5000000 0000000000000000 [ 616.805233][T22211] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 616.813904][T22211] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 616.822733][T22211] page dumped because: kasan: bad access detected [ 616.829161][T22211] page_owner tracks the page as allocated [ 616.834889][T22211] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5747, tgid 5747 (kworker/1:5), ts 517592536593, free_ts 517385452760 [ 616.855739][T22211] post_alloc_hook+0x22d/0x280 [ 616.860526][T22211] get_page_from_freelist+0x2593/0x2610 [ 616.866072][T22211] __alloc_frozen_pages_noprof+0x18d/0x380 [ 616.871877][T22211] allocate_slab+0x77/0x660 [ 616.876382][T22211] refill_objects+0x339/0x3d0 [ 616.881062][T22211] __pcs_replace_empty_main+0x321/0x720 [ 616.886608][T22211] __kmalloc_noprof+0x474/0x760 [ 616.891474][T22211] ___neigh_create+0x6d5/0x2250 [ 616.896395][T22211] ip6_finish_output2+0x729/0x13e0 [ 616.901576][T22211] ip6_output+0x340/0x550 [ 616.905917][T22211] NF_HOOK+0x177/0x4f0 [ 616.910020][T22211] mld_sendpack+0x8b4/0xe40 [ 616.914527][T22211] mld_ifc_work+0x835/0xe70 [ 616.919073][T22211] process_scheduled_works+0xb5d/0x1860 [ 616.924653][T22211] worker_thread+0xa53/0xfc0 [ 616.929257][T22211] kthread+0x389/0x470 [ 616.933330][T22211] page last free pid 19378 tgid 19369 stack trace: [ 616.939827][T22211] __free_frozen_pages+0xc1c/0xd30 [ 616.944965][T22211] __slab_free+0x274/0x2c0 [ 616.949390][T22211] qlist_free_all+0x99/0x100 [ 616.953989][T22211] kasan_quarantine_reduce+0x148/0x160 [ 616.959467][T22211] __kasan_slab_alloc+0x22/0x80 [ 616.964324][T22211] kmem_cache_alloc_node_noprof+0x384/0x690 [ 616.970230][T22211] __alloc_skb+0x1d0/0x7d0 [ 616.974676][T22211] rtmsg_ifinfo_build_skb+0x84/0x260 [ 616.979990][T22211] rtnetlink_event+0x1b7/0x270 [ 616.984793][T22211] notifier_call_chain+0x1ad/0x3d0 [ 616.989905][T22211] call_netdevice_notifiers+0x90/0xd0 [ 616.995322][T22211] do_setlink+0xe7b/0x45a0 [ 616.999748][T22211] rtnl_newlink+0x14ca/0x1bb0 [ 617.004425][T22211] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 617.009380][T22211] netlink_rcv_skb+0x232/0x4b0 [ 617.014256][T22211] netlink_unicast+0x75c/0x8e0 [ 617.019053][T22211] [ 617.021385][T22211] Memory state around the buggy address: [ 617.027187][T22211] ffff88808c133980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 617.035254][T22211] ffff88808c133a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 617.043318][T22211] >ffff88808c133a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 617.051386][T22211] ^ [ 617.057018][T22211] ffff88808c133b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 617.065076][T22211] ffff88808c133b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 617.073131][T22211] ================================================================== [ 617.117059][T22211] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 617.124319][T22211] CPU: 1 UID: 0 PID: 22211 Comm: syz.1.4045 Not tainted syzkaller #0 PREEMPT(full) [ 617.133725][T22211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 617.143804][T22211] Call Trace: [ 617.147143][T22211] [ 617.150098][T22211] vpanic+0x56c/0xa60 [ 617.154113][T22211] ? __pfx_vpanic+0x10/0x10 [ 617.158638][T22211] ? __pfx___schedule+0x10/0x10 [ 617.163518][T22211] panic+0xc5/0xd0 [ 617.167252][T22211] ? __pfx_panic+0x10/0x10 [ 617.171681][T22211] ? preempt_schedule_common+0x82/0xd0 [ 617.177147][T22211] ? __sk_msg_recvmsg+0x197/0xfc0 [ 617.182175][T22211] check_panic_on_warn+0x89/0xb0 [ 617.187127][T22211] ? __sk_msg_recvmsg+0x197/0xfc0 [ 617.192243][T22211] end_report+0x73/0x170 [ 617.196577][T22211] ? __sk_msg_recvmsg+0x197/0xfc0 [ 617.201612][T22211] kasan_report+0x128/0x150 [ 617.206157][T22211] ? __sk_msg_recvmsg+0x197/0xfc0 [ 617.211189][T22211] __sk_msg_recvmsg+0x197/0xfc0 [ 617.216054][T22211] udp_bpf_recvmsg+0x196/0xac0 [ 617.220838][T22211] ? aa_sk_perm+0x6d5/0x900 [ 617.225385][T22211] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 617.230732][T22211] ? sock_rps_record_flow+0x19/0x350 [ 617.236049][T22211] ? inet_recvmsg+0x101/0x120 [ 617.240744][T22211] ? __pfx_inet_recvmsg+0x10/0x10 [ 617.245780][T22211] sock_recvmsg+0x155/0x1b0 [ 617.250297][T22211] ____sys_recvmsg+0x1e6/0x4a0 [ 617.255069][T22211] ? __pfx_____sys_recvmsg+0x10/0x10 [ 617.260465][T22211] ? import_iovec+0x73/0xa0 [ 617.265001][T22211] ___sys_recvmsg+0x215/0x590 [ 617.269709][T22211] ? __pfx____sys_recvmsg+0x10/0x10 [ 617.274928][T22211] ? __fget_files+0x2a/0x420 [ 617.279560][T22211] ? __fget_files+0x3a0/0x420 [ 617.284249][T22211] do_recvmmsg+0x334/0x800 [ 617.288679][T22211] ? __pfx_do_recvmmsg+0x10/0x10 [ 617.293716][T22211] ? handle_mm_fault+0xf1/0x3170 [ 617.298665][T22211] ? __pfx_do_futex+0x10/0x10 [ 617.303441][T22211] __x64_sys_recvmmsg+0x198/0x250 [ 617.308472][T22211] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 617.314033][T22211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.320289][T22211] do_syscall_64+0x174/0x580 [ 617.324887][T22211] ? trace_irq_disable+0x3b/0x140 [ 617.329927][T22211] ? clear_bhb_loop+0x40/0x90 [ 617.334612][T22211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.340596][T22211] RIP: 0033:0x7f298cd9ce59 [ 617.345017][T22211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.364714][T22211] RSP: 002b:00007f298db99028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 617.373484][T22211] RAX: ffffffffffffffda RBX: 00007f298d015fa0 RCX: 00007f298cd9ce59 [ 617.381465][T22211] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000006 [ 617.389549][T22211] RBP: 00007f298ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 617.397524][T22211] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 617.405494][T22211] R13: 00007f298d016038 R14: 00007f298d015fa0 R15: 00007ffc514ebf98 [ 617.413477][T22211] [ 617.417070][T22211] Kernel Offset: disabled [ 617.421416][T22211] Rebooting in 86400 seconds..