last executing test programs: 4.314860039s ago: executing program 4 (id=3666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) (async, rerun: 64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) 4.009559012s ago: executing program 2 (id=3673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000046751e84a3bf00c9464fd0a92b6e00000a010100f7ffff5d00000000000008000240000000032c000000030a01030000e6ff00000000020000e33357060a1b419c30000000000800030073797a3200000000140000001100010000000000000000000000000005bb950221625a1efd2cb4"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3.897214427s ago: executing program 2 (id=3675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x210, 0x15, 0x8, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x75}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "746917bb101d60dec66f430773f0e793c371aa22d7284e8ef8f9a2a7ba9c5d8cdd"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "00e3086a08f711ff91d7d294bedef4db129778f884e0ff664490bc2f59a0d8cbf1dd8a1d2594cad47f2823708e5c0b265221e6"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "398652d8cdaa9de057609d52b2cb4ebd4b88c2dac89c365df4a93bcf89cbc1d8ec214ad879c02e1eeaafee86b0d8935e2794b1938295e65bf36e234b9103f8cdfcb8074f325633ac9a7168c14cc892112f3dfb61d20f90db84b5a485923394f38d747fb2d4dd11"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "af00886791d69625ec61c2853ab479300afe3dbdabba0f4d00633b621a8e590892434e8713363424f0586a6adb6f5b7f92cc52c5275803eee2d12926008cf58c9261b3f299b065cf093514853e9ddb0c09d7ae1c5fc09107799c6b9d89c1a46443e41f4796929da3551945ec38eb96a8a41f32d11595a6ee01b8363345f2a1adc408e9c9d281f699c06b06a0f3f430577782903b7084dee106fceafc854f5928b559e7118c24e30e7b1af81c4b636e3732cf5409738dbd7ffa3723f3196597b2f4f834eb025e91799747491abc8fc77d16a9b7a04521aa7563"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "d4e3e11c1e018c3bff0d53a3c1627d87b0bc2004be7852"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "16e45968c63359c8356d83f4c846a3e1ab4226f749f2ea4789a2ad79dd6ba18d63549828c46bb985b6c8b9ca68b896"}]}, 0x210}, 0x1, 0x0, 0x0, 0x8005}, 0x91) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r1, 0x2, 0x7, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe8, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6c7fa65336f01baa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe8}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x40010) write(r2, &(0x7f0000000a00)="26f05e08", 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a80)={'sit0\x00', r8, 0x8, 0x700, 0x6, 0x4, {{0xd, 0x4, 0x2, 0x8, 0x34, 0x68, 0x0, 0x9, 0x4, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0xd3, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x575b7f1}, {@local, 0x59d}, {@remote}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x248, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000f40)={0x1ff, 0x1}) socketpair(0x18, 0x80000, 0x1, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r12, &(0x7f0000000fc0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x1}, 0xe) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r13) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r14, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r15, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r16, 0x24, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x4) syz_emit_ethernet(0xed, &(0x7f0000001280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, 'X', "b8b16d", 0x200, "0c378e857a2756f88814215fba03e3d78f581245eebfd8bfd468c420284f7cfa5359e72b9f6c2854c712d74bbb19a0507183a3e98d329b0d9d84f658f51d316d5d72bfe0d710ca922b72a113f151167ad1b8117f2e0c16f9cdee919c0d8f04f99cfccab8351046736319773e08b03752e52170588aefbd0df34bd40a45e2c3be02b627f6db53b55d8d0ea54d7e99125bdf23c4c65ad9dad79740448c4decab6fbff032381d8ed6f37f9194dd1825b2f165776c137230059392becc7555124f99763f41c9614a30a2b696bbebcebba05c524717a9fe6a12"}}}}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)=@newnexthop={0x50, 0x68, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x3, 0x0, 0x24}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8, 0x5, r8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x8e}}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010101}]}, 0x50}}, 0x804) socket$inet_udp(0x2, 0x2, 0x0) 3.754579326s ago: executing program 4 (id=3676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @multicast1, @loopback}, "ffffff7f00000000"}}}}}, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d25bd700000020000001803000600001000060015000600000014001680100008800c000280080001005518a163000000"], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) 3.753671141s ago: executing program 3 (id=3677): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x40, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x44) sendto$packet(r5, &(0x7f00000004c0)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000500)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000740)={r2, &(0x7f0000000640)='\x00', 0x541301, &(0x7f0000000680)={@_ha_fsid={[0x0, 0x1]}, {0x6, 0x200, 0x3ff, 0x3}}, 0x1885, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x6}) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xa59, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x15, &(0x7f0000000200)=@raw=[@ldst={0x0, 0x0, 0x6, 0x0, 0x8, 0xfffffffffffffff8, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x9, 0x2, 0x1, 0x6, 0x80}, @tail_call, @alu={0x7, 0x1, 0x4, 0x1, 0x0, 0x8, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x15, 0x4f, &(0x7f0000000300)=""/79, 0x41000, 0x4, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xa, 0x1d56, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, r9, r10, r11], &(0x7f0000000800)=[{0x4, 0x3, 0x7, 0x4}], 0x10, 0x4}, 0x94) 3.740241593s ago: executing program 2 (id=3678): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000002b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002b40)={@cgroup=r0, r0, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002b80)={0x3, 0x0}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, &(0x7f0000000000), 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002bc0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) 3.590453054s ago: executing program 2 (id=3680): sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x8a, &(0x7f00000000c0)=0x7e, 0x4) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000100), 0x492492492492627, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a40)={'syzkaller1\x00', 0xc201}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001500)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "111363", 0x3ff, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [@routing={0x3c, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x4}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000880)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r6, 0xb81, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'policy\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nbd\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xbef94c2d64dd5d4f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) 3.588533005s ago: executing program 3 (id=3681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@flushsa={0x14, 0x1c, 0x2, 0x70bd27, 0x25dfdbfb, {0x6c}, [@iptfs_pkt_size={0x0, 0x29, 0x47}, @sec_ctx={0x0, 0x8, {0x0, 0x8, 0x0, 0xaa, 0x0, "130e68da1edf657ba3ea7d48597b2dd5e56cc0ec5485ee4a3206fd968418c947b3328cd45253b6790dfc76fdb86ba4d96941c6a8f6928497ef41eddaaa3c5ce70d1c7814c6a22a48d171b14e1490a79fcf977d4e011f4f10484ab6091cf2967f7225f0934fc661fe5abd29a12832c11f29576e1ab81cd763e3f9833e1da7e9c5d355b1a6ef8bc417f2bb1b2c29b2522913e298722d99363b9661007e18ad2a1941910c81c7fffa82e84ba0999d067acc83023a3efc29b8cc21e37680c29201257bd862107ad71bcfb151b461a176482b47fbf4d7758c189ac563ddeb6ec9bf03d926fd0645a99ffd5ea8eb4cbde0"}}, @algo_aead={0x0, 0x12, {{'aegis128\x00'}, 0x0, 0xc0, "319ef64f40dd66561423a9b7741de2b8bac727712ea65244b954181b60ecd04343df490e1e091194162b5933cb149ed6206dba2d"}}, @iptfs_max_qsize={0x0, 0x28, 0xbb8}, @algo_aead={0x0, 0x12, {{'morus1280-avx2\x00'}, 0x0, 0x100, "7dd8d24456114b9ceb7300b75532a9fc23c37db0abcb3f88f89116c8bbabee832b3cfa1b491b13129c4af388d24d9b5fd9eb1cf9af6e976e92beedd6ea80a420da67ec5f21d0457878282895d8ae4fee40152835b86ab44adc2fbb681cb2a436cf78be149af182c3383cf4c467e8cc1ca75e99d9d628a1c6eae557a39fccbdf883853ceb9d4978466a9e3c59d517304298"}}, @sa={0x0, 0x6, {{@in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x7, 0x4e22, 0x0, 0x2, 0xa0, 0x80, 0x3a, r1, r2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x3c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x800, 0x64e310ed, 0x9, 0x0, 0xffffffffffff0001, 0x5, 0x0, 0xf3}, {0x6, 0xffffffffffffffff, 0x9, 0x80}, {0x0, 0x4, 0x8}, 0x70bd29, 0x3505, 0x2, 0x1, 0x9, 0xa1}}]}, 0x7}}, 0x40844) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000240), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000300), 0xffffff6a) (async) sendfile(r3, r4, 0x0, 0xffffffff004) listen(r0, 0xffffffff) 3.581458681s ago: executing program 4 (id=3683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x17c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x208, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_DESC={0x1d0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d7b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x571}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9e7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaaed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x44d7}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71ba}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xe}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, @NFT_MSG_NEWFLOWTABLE={0x148, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5a0}, 0x1, 0x0, 0x0, 0x20000055}, 0x4) r1 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8943, &(0x7f0000000180)={'macvtap0\x00', 0x57e7}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b37, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x21, 0x0, 0x0, 0x5, 0x400, 0xffffffffffffffff, 0x26b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r3], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000b00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040003000900010073797a3000000000083102f23b9d53cf230000001100010000000000000000000000000a"], 0x64}}, 0x0) 3.32482578s ago: executing program 1 (id=3685): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000000)='bridge0\x00', 0x40000, &(0x7f0000000100)={@align=0x8, {0x9, 0x3, 0x10000, 0x891}}, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x99c}, {[0x6, 0x5, 0x4, 0x7]}, 0x2, 0x8, &(0x7f0000000200)=""/8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x400, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.155143088s ago: executing program 1 (id=3687): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 2.979321021s ago: executing program 3 (id=3689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000800)={'pim6reg0\x00', 0x400}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000a00)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000a40)=0x2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x400}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2c0800, 0x0) (rerun: 32) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000980)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000840000090000000002"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}}, &(0x7f00000006c0)='syzkaller\x00', 0x6, 0x18, &(0x7f0000000700)=""/24, 0x41100, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[{0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000380)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1a, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x81}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @private2}], 0x20, 0x4044055}, 0x24000052) (rerun: 64) 2.950368652s ago: executing program 1 (id=3690): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="4b001bc33f6364218b4343af357800000000000000000000000000000000000000d747489c5ad34274f75bc4adcfb9922b77ebd0be03ae7a6d9d7be7b422918c8785c3c28814cacbf27f1a67405e80843d98416e4f27777402d9a61013b6ff196043cc2e56b00000000000", 0x4e7327143867902b) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000d40)={r3, &(0x7f0000000d80)="ca", &(0x7f0000000dc0)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000e00)={r3, &(0x7f0000000e40), &(0x7f0000000e80)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000e00)={r3, &(0x7f0000000e40), &(0x7f0000000e80)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000ec0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540), 0x10}, 0x94) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}}}, 0x108) syz_emit_ethernet(0x42, &(0x7f0000000240)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "8f00ec", 0xc, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 2.751241755s ago: executing program 1 (id=3692): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xe, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"/686], &(0x7f0000002d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000002d40), 0x3a, 0x10, &(0x7f0000002d80), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00100040", @ANYRES16=r3, @ANYBLOB="df4800000000000000000c0000000c000380040005000400038018000180140002007369743000"/50], 0x38}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002980)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="01", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="b8", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0xc2cc, @mcast2, 0xfff}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="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", 0x1000}], 0x2, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x240}}], 0x3, 0x0) shutdown(r2, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000500)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@generic={0x8863, "1f7761"}}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x8, 0x7, 0x6, 0x7, 0x9, 0x8, 0x3, 0x6, 0x2, 0x40, 0x80, 0x40, 0x0, 0x1}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010000104470c00"/20, @ANYRES32=0x0, @ANYBLOB="0000020020720000300012800b00010062726964676500002000028006f80900010000000000008008e0d4396d000000f1d2f644ca8a2a55301fa74aad5589c7b8fb6eca3d669bc5b25e059c39f2675583687cc64d71a0afc56ddd9eaf752730463713f2913f059bdb491f8837fa309ab97c66e6bfaf5d4bb85ef4ad26370b3ccb4d40c3010b5a3211ddc9989bb35059ec86fee41a13d1cf5cff8ff4fbe41906179f0a2344bdac93e90347cdc611eb"], 0x50}}, 0x0) 2.559240031s ago: executing program 0 (id=3694): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x205, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe9b}}]}, @action_dump_flags]}, 0x34}, 0x1, 0x0, 0x0, 0x40006}, 0x801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xe, 0xffff}, {0x5}}}, 0x24}}, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3f}}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000003c0)=""/222, &(0x7f00000004c0)=0x61637876) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.302479794s ago: executing program 0 (id=3695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000004400)={'gretap0\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000004740), &(0x7f0000004780)=0x4) sendmsg$nl_route(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004480)={&(0x7f00000044c0)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r7, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = getpid() syz_open_procfs$namespace(r10, &(0x7f00000047c0)='ns/time_for_children\x00') syz_open_procfs$namespace(r10, &(0x7f0000004800)='ns/pid\x00') r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000004540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000004580)={0x0, 0x0, &(0x7f00000045c0)={&(0x7f0000004600)={0x30, r11, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000004700)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000046c0)={&(0x7f0000004840)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00032bbd7000fbdbdf25010000000000000009410000004c002200201000657468ba9a00000000d53c0000000000000000000000000000000000000000000000000000000000000000000000003d000000000000000000000000000000000000000000f9"], 0x68}, 0x1, 0x0, 0x0, 0x40880}, 0x8010) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x54, r5, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)="bb3a54358b34c5", 0x7, 0x4, &(0x7f00000000c0)={0xa, 0x12, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) 2.293312285s ago: executing program 3 (id=3696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @private2, 0xcf}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000029000000370000003b0b000000000000c204800000000001000740000000000e09040000000000000000000000000000000000050000000000000006"], 0x78}}], 0x2, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0xfffffffffffffe41}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xb) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/223, 0xdf}], 0x1}, 0x5539}], 0x1, 0x10022, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfff1, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 842.36985ms ago: executing program 4 (id=3697): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x0, 0x10, &(0x7f0000001900), 0x1e}, 0x48) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x8}}) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r4, &(0x7f0000000340)={0xa, 0x0, 0x179, @empty, 0x9, 0x3}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001940)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r1, 0x0, 0xe, 0x0, &(0x7f0000001a00)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f0000001a40)='\x00', 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 714.79522ms ago: executing program 4 (id=3698): r0 = socket$inet6(0xa, 0x4, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f"], 0x48}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xe8, @empty, 0x10}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 482.892145ms ago: executing program 1 (id=3699): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000500)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000006c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, &(0x7f0000000700)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xf8}]}, 0x24}}, 0x8004) write$nci(r0, &(0x7f0000000880)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7ffffffc}, 0x1c) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @void, {@ipv4={0x8864, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x57, 0x6, 0x4, 0x0, @private=0xa010101, @remote}}}}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x4, @a={0x7, 0x3, 0x0, 0x6, {0x4, 0x2c, "844a6840ce7d4baceb5a5e9f1a2d0a74e4bba791e102c06c6d0facfef16c2456117a9f8f8d8716a5e0074f79", 0x40, 0x7}}}, 0x38) 455.56883ms ago: executing program 3 (id=3700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x29, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000200), 0x4) 13.623551ms ago: executing program 0 (id=3701): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a080045000028006700000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f0d469279556ac617880eddd55a460a9eb478b875e4d50742b741514877792ba81b11fc413af51776ffc1399047be454d06d26f5262c204d6bec9cce7f367e29af1490cd317465c5a8711171bf46afdfc3fb0ce1d81326fed6acdef7ab2ea01193b1fa2454cedd03eb857c966404eb0aff5b1338b4e2e7b23264c729ee965a4b4dc307bb284e5987851c2b89930738ee49aad2cbf9c1586399bad8b8f72e2f93a03256ab313f5642a88d27f6a8c6d20ac79821a24a335f09b455ce1d8ed017c159365a5dd5ff0a76a8c62c6d506a93768328c0388cd160da588acab8ad65559beecd4e6861a7cd4cfd7295"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c006700000706907864010101ac1414aa4402000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c20000090780000bc573a49a3df3f455e31c59293e68535355eaf377e683789b41260ed810a13f78af479737eae88aa0c093ed09bea6f001ba76c580ee509211913e7d46d9d1968ba2d0e74c99634161312fef55ba0819336f8434ca55dda4b93ad3b362eb96b0316e00162909128"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 11.668135ms ago: executing program 0 (id=3702): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x138, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x138}}, 0x0) 11.139032ms ago: executing program 0 (id=3703): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x180000) writev(r1, &(0x7f0000000000), 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) 10.172611ms ago: executing program 0 (id=3704): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffc, 0x18, 0x400000f, 0x4, 0xffffffffffffbfff, 0x80000000}, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8000008) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x6e, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r6, 0x3a, 0x1, 0x0, 0x20000000) sendto$packet(r1, &(0x7f0000000400)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) 9.660639ms ago: executing program 2 (id=3705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000bb0000ab8000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x24}, 0x94) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'batadv_slave_0\x00', 0x0}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000001980), 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x5, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0x7b, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000019c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x1, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001a40)=[{0x5, 0x1, 0xf, 0x8}, {0x0, 0x4, 0xf, 0x3}, {0x0, 0x4, 0x5, 0xc}], 0x10, 0x300000}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80e82, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000040)=0x1) 8.265486ms ago: executing program 3 (id=3706): socketpair$unix(0x1, 0xde0716b015cbfade, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f0000000440)=0xe8) r4 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000540)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="9c5dba5bde48f5813c9c3858b8a74ea337e765b5f5c4578e40f1289b6652248ce912ab45d6d214165ab69f5067b047ff81a99662776baeb1b68afbf961c969abc4cd21b0807fd2d6c809365e6ec641ca1834c31681f9d11f1b917498325da817c10b3787ea1bcb0a92af3b995a477f0bb03d1c1e792bac0076b5d0a34e44eeb4652f32cbde1146c5bffb4c482ab0f7394f4e55dcc843e44796333507820d53172f74bb9bf969d4aa9ae9c71705dec41aca9507bd21edca06dc5a77fa6044d628242821a0cdb28133e37b25ad1da9c9f8cd2d66f8aa26dd34f620ffa36a5cfb48955541e56aa1dfc5", 0xe8}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfa}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r7}}}], 0x40, 0x4}}], 0x2, 0x20040041) sendmsg$nl_generic(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x26, 0x100, 0x70bd26, 0x25dfdbfe, {0xf}, [@typed={0x8, 0x158, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440c0}, 0xc0804) r8 = socket(0x6, 0x80000, 0x5) sendmsg$netlink(r8, &(0x7f0000002c80)={&(0x7f00000006c0)=@kern={0x10, 0x0, 0x0, 0x184}, 0xc, &(0x7f0000002c40)=[{&(0x7f0000000700)={0x38, 0x3c, 0x800, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x15, 0x13f, 0x0, 0x1, [@nested={0x4, 0x7b}, @generic="5bf6424a1f", @typed={0x7, 0x77, 0x0, 0x0, @str='+}\x00'}]}, @typed={0x5, 0xe7, 0x0, 0x0, @str='\x00'}]}, 0x38}, {&(0x7f0000000740)={0x11b8, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, "", [@generic="d0b299c3d4655cc5755c1342387bba4dbe7dd0798180e85d26a32fcbc48af2244be0e0c14c3d32ebe4f82bf09a059dcb97a2d93a42f2c31e2186fd3e483658e136bc68ac5a4b6c2e31f52572c312c5e499fd8ee8f801118735cb43f79b9612fc733a0239be7be349e8925c1452bcf68b7c4122244cf4563b89cbeeec669ac446ed8d9f556e6db083031da1a4b8d7426e4d76", @generic="8c2e651a4772f17abc076a00a1bade39827b9627f906f4aaebb54a2bc6f9986277d10f3fed3cc095f048d82a33172cd1335ccace1486fd77864bbb1b15d2132c48daff40a02a96d2b10f4163518dd883bb6d488fd3152193a5a89212fc6fc78ac15973110af204c1b4893088336776410a2bc63412ccd8970b413c23b6d65b8ef85f59caf012ae0b037a137b4334141ab46ff7f87a6798de", @nested={0x107b, 0x166, 0x0, 0x1, [@nested={0x4, 0x13e}, @generic="b7232b4b121145da75bdcf71db85058b150bac14bf1bddcfd8388f4823ff326630a26ee2756ab111ba2a2e55c3fdcb474d490634169558624083aa72be9f57d024ceb35d4db83bf27d720f209fdb7b60eb20cb19b4afbc9d97a40a8bcf8426f676e03fcc644a4d", @nested={0x4, 0x75}, @typed={0x1004, 0x27, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x15a}]}]}, 0x11b8}, {&(0x7f0000001900)={0x11a0, 0x36, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}, @nested={0x1185, 0x60, 0x0, 0x1, [@typed={0xc, 0x2e, 0x0, 0x0, @u64=0xcc8}, @nested={0x4, 0x4f}, @nested={0x4, 0x14c}, @generic="13d55c3d75cdc392f4ffa7d96352f999aa4ddfc0aa2f63b3ebb99796d1e3e2665c0a4c11d991e0ef9e306c8f", @generic="6940d1ba06c76b621f4ddb139d5e7025d8c84792bd481945a0171ce715b78195b368b402d5fc2ef2b3f85e7149f78918230a33ad80056ede0a39211917bcf323902b2c931f53689d2ed1c3f0674f5bb16ac034961910885474ca85e477e9fe90bb85f37c472a2f2d1f728f1418a0d6233ad97939cbc5791b439821c5a94defc6a8110a191b655eee03b3385ebb1261c8e9941303264b52f49b6b4d0d9b42f804409e53b64f46726c1a36ccfd805e9d1756c98e2ce3f186b238b66b7d", @generic="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", @typed={0x4, 0x9b}, @generic="1501e0b18e47078253606ec26348c91dc16b90e232aaeb0aca47e3f6c41ad20f219d2dbda95deeba6710d2ecade4cbe4bea69c9d8a096f01f02db3fb27efbc848041bc386cafb3fd994beaa7ebd92eb28bbf36bd432cdffb815c2abd9ea2bb9ab7df485ac86722f5f6e3dc88fa7f6f68791b78215bcc4300c7", @typed={0x4, 0xc7}, @nested={0x4, 0xd1}]}]}, 0x11a0}, {&(0x7f0000002ac0)={0x170, 0x37, 0x71d8eed9509ea3dd, 0x70bd2d, 0x25dfdbff, "", [@nested={0x14e, 0x15d, 0x0, 0x1, [@generic="fdf4afddc356fbb0cdaeeae43de341ccecc7464ac73be133c6efa9e567327f8180d2063d542630ef688fc2f66c68e84e1cacbd71862797404c0c0025f5a9cbb2e2ac3a1458e947fd4d4dca839202fd9c29c155963999ff5382efb448a656a4a55303ee50d9f4d03376ad79fbc4b1ff7ddb9b28a3bebf7ebb52e705804c2abe25e247c2a0dd24f715a4b1bcd0dd72418697cbd8adaeb2201e35fefbf02b4b", @nested={0x4, 0x52}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@remote}, @generic="a211e1b498d0356e1d9a4a68b72ba5738861280e30c3e6b7a3fda8956d56eb8c901275d44ace286ccef6057f525eef0183cb0b9d1a4fa7d68b86303d19e4e6820174f412b92657a1704069224861821770749ef02574158a22b0bc705ebf4d0937a1b8474e15503fc480ed7a20a12a04ddaf11fc7887d5b7c1f3d6dadbab9dbb851a80c2d2f2ce9e2fe9266169db0aaa", @nested={0x4, 0xff}]}, @typed={0x8, 0x14f, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x7df}]}, 0x170}], 0x4, 0x0, 0x0, 0x8000}, 0x20000080) r9 = getgid() sendmsg$unix(r8, &(0x7f0000003000)={&(0x7f0000002cc0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002d40)="66800e7dd57af1e5216b219a3d7490b20225de6b567fcdffd33cc2e7e7931fbd49ae6f5cac00a4020f6893f7242ba21a8b25f097542685fb73f9d8aec0e6558967cb2b99186b8c94d2fe086ccb2769aee4c8ac26572478c1ee7aa24a2646f3004cb53a3fb3c6013c7a35ec4fc3838bbffc18bbad46b1d94e6c7f50f4fae5dbe5fd098acd9423722365e6c0b4ec63a00996546658ce2da6e23e5c4e5db2300e1019ea9dab1bb8ab6d2af866a8a4af8a079a81707a089fc3d0c44620e21bef34", 0xbf}, {&(0x7f0000002e00)="ce25b6648e3ac8bb467e2af078b7ce0a20d8944254e4a4787d9adeb55bc9272af2b83b15d9f0dfa6695b47f977be3b6536a6905f6ad2a258cf9773bfc7a15ac0ae2b2a4ae4b057d21bc398599c9b66bd24b3d1d96841be163b5510ebed8b76b3255b47f2a771be93bb7d3acf99a009736d943ef4c244e03360a99cd6e772f8fe66772e1fff33a92619f6e4bee145b5b3f6b980334614bea821a9ed5d8c61cea7c13d3aefe8e397297e6b8524e904d11e59cbe2c4a7b6d44b6a5a6d5dcef47728bd2e35a7d9e87e2f660797f88d705354f4165da699476d340f2c83", 0xdb}], 0x2, &(0x7f0000002f40)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, r3, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r7}}}], 0xa0, 0x4000001}, 0x20000000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0xfa341093791d8deb, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x14, 0x6, 0x1, 0x835b42d2c7e9ddff, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000011) r11 = gettid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0}, &(0x7f0000003600)=0xc) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003640)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000003780)={r1, &(0x7f0000003680)='+}\x00', 0x6000, &(0x7f00000036c0)={@align=0xffffffffffffffc3, {0x0, 0x1, 0x1e84, 0x8}}, 0x9, &(0x7f0000003700)={@_ha_fsid}, &(0x7f0000003740)=0x3}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000037c0)={0x0}, &(0x7f0000003800)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000003840)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000003940)=0xe8) sendmsg$unix(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003140)="de27eeec82f53c7eee0c82ea3a6b4576a1da54ec914ee8081b9a8b545b26bf9fd82a6cdb39ad01643d84e6aecb28f312a0138ba4a515c50ba94939c4cba934462d5590e1b1aaaec35dbcfbcf7b83bc4992f8e9e3b47548", 0x57}, {&(0x7f00000031c0)='Q\\', 0x2}, {&(0x7f0000003200)="ab88016669e2a620437ee366e9c3bf94297b19b71538ba5a989278817d5325a017b7c1001643239afdd841b00155141f5b20600d0c228e7d5d9565d6555ccd330c046b174aadced987980ea352b72bccac35d6a36c9251b941a4b1802ed0e0899b11ce926d5cf866d1b32a38eaf9960b6bded4dc7bd3e405ea7602a59cb3d77eba35544a0b098642ac095a0b6479ac4fdbd64b369746eca620d5b8f98ecaa7ea7f11df656d82705880dfee3254", 0xad}, {&(0x7f00000032c0)="fa4ec3e6cf3237a832376e40c8fef914671f8f37e14e60f6a94555897437f24f3d0a5d4f55e00bcb5a2f1f498e65a0735e6d0d7059981c3d833adff012ac4ad99a4ec54e1e5204fea2dabb639416e9b7cc7616db530310698ba6a39c8aa1221fb1d0703ac7b50ba4f0632b7214a7e910e53194", 0x73}, {&(0x7f0000003340)="88b65d207df5be314a5efbc2bd8dacbb7db3c2d53599cdd7def22be1640bec00fbfeb1824ba829a6b9f882425f3da38052a1a135d66438ef7afd41b4c007c345ba6829235e34e088c7b52fabf237e52b8babf11d2645844e0e384187713f9cee10a1d57e787ace5743410a1c2437f1ba9f67153a8220578abc86df85cb1e4bec51eac7409ab637bf96214551b79a0314a5f7576ee537708d3e66af7d2cfb6417f7fad9fe6be058307ed958c63d0d4770d50d08c2015e7830584b60a408033188934c", 0xc2}, {&(0x7f0000003440)="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", 0xfb}], 0x6, &(0x7f0000003980)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r9}}}, @rights={{0x2c, 0x1, 0x1, [r1, r8, r8, r1, r8, r8, r1]}}, @rights={{0x38, 0x1, 0x1, [r10, r10, r1, r0, r1, r13, r0, r14, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r9}}}], 0xa8, 0xc8d5}, 0x2000c844) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000003a80)=0x200000) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r17, 0x894b, &(0x7f0000003ac0)) ioctl$XFS_IOC_FD_TO_HANDLE(r14, 0xc038586a, &(0x7f0000003c00)={r1, &(0x7f0000003b00)='+}\x00', 0x101200, &(0x7f0000003b40)={@align=0x4, {0x3, 0xfffa, 0x9, 0x7fffffff}}, 0x18dd, &(0x7f0000003b80)={@_ha_fsid}, &(0x7f0000003bc0)=0x7}) setsockopt$inet_IP_IPSEC_POLICY(r18, 0x0, 0x10, &(0x7f0000003c40)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0xff, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x2e, 0x0, r3}, {0x1, 0x3ff, 0x4, 0xa2, 0x0, 0xff, 0x0, 0x10}, {0x9905, 0x7fffffffffffffff, 0x5, 0x1}, 0x4, 0x6e6bb9, 0xb165f7bcbd47a4c5, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@private2, 0x3503, 0x3, 0x1, 0x1, 0x0, 0x545, 0xff}}, 0xe8) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r8, 0x84, 0x82, &(0x7f0000003d40)={0x0, 0x6}, &(0x7f0000003d80)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r18, 0x84, 0x22, &(0x7f0000003dc0)={0x4, 0x1, 0x1, 0x0, r19}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000003e00)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r13, 0xd000941e, &(0x7f0000004200)={r20, "49b2824b213fa611352cc0a2f8b95ce3"}) sendmsg$TIPC_NL_MON_GET(r14, &(0x7f0000005400)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x510}, 0xc, &(0x7f00000053c0)={&(0x7f0000005280)={0x120, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49a1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90b}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x415}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "3a1a626975ef795e726360d615f9e278d0a2ee3b57c762a2a05f85fdf9e4f2"}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x11}, 0x880) 951.363µs ago: executing program 2 (id=3707): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000940)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@cgroup, r4, 0x2f, 0x28, r1, @void, @void, @void, @value=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000002000010000000000000000000a000000000000000000000008000600ffffff7f133f8e04a0"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r7 = socket(0x1f, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="038005e80000f287a0060f060800451400300000000000019078ac1e0301ac1414aa038490781200183f000164010101"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000cc0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x25}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x3c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r11, @ANYBLOB="0a001a0008021100000100000a0006000802111000"], 0x34}}, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) bind$packet(r13, &(0x7f0000000f40)={0x11, 0x300, r11, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r13, &(0x7f0000000f80)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000340)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02017d2901"], 0xdd12}], 0x1}, 0x20000400) socket(0x400000000010, 0x3, 0x0) 466.729µs ago: executing program 4 (id=3708): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="0000010000000000"], 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=3709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000740), 0x56) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000ac0)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) close(0x3) kernel console output (not intermixed with test programs): n invalid length. [ 219.901935][T12827] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 220.383434][T12843] bond6: entered allmulticast mode [ 220.388110][T12843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.592414][T12843] ip6gretap1: entered allmulticast mode [ 220.596674][T12843] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 220.610180][ T49] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.744887][ T1107] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.754384][T12863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.801449][T12863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.840961][T12863] bond0 (unregistering): (slave team0): Releasing backup interface [ 220.866849][T12863] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 220.892394][T12863] bond0 (unregistering): Released all slaves [ 221.031548][T12882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.513282][T12915] __nla_validate_parse: 17 callbacks suppressed [ 221.513301][T12915] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1919'. [ 221.513314][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 221.513326][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'. [ 221.682656][T12926] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1921'. [ 221.759378][T12922] gtp0: entered promiscuous mode [ 221.759398][T12922] gtp0: entered allmulticast mode [ 221.800257][T12934] netlink: 'syz.2.1923': attribute type 2 has an invalid length. [ 221.999020][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 222.005745][T12947] netlink: 'syz.4.1924': attribute type 3 has an invalid length. [ 222.005761][T12947] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1924'. [ 222.040935][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 222.051292][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 222.074336][ T1107] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.074375][ T1107] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.258625][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 222.270279][T12956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1931'. [ 222.270307][T12956] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 223.091826][T13021] x_tables: duplicate entry at hook 2 [ 223.715926][T13054] syzkaller0: left promiscuous mode [ 223.715947][T13054] syzkaller0: left allmulticast mode [ 223.765395][T13054] openvswitch: netlink: Multiple metadata blocks provided [ 224.070726][T13078] ip_tables: iptables: counters copy to user failed while replacing table [ 224.128569][T13089] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 224.717764][T13127] netlink: 'syz.1.1966': attribute type 4 has an invalid length. [ 225.059402][T13150] netlink: 'syz.3.1976': attribute type 4 has an invalid length. [ 225.080981][T13150] netlink: 'syz.3.1976': attribute type 4 has an invalid length. [ 225.100656][T13155] ip_tables: iptables: counters copy to user failed while replacing table [ 225.133942][T13157] tipc: Can't bind to reserved service type 1 [ 225.143925][T13150] bridge8: entered promiscuous mode [ 225.143980][T13150] bridge8: entered allmulticast mode [ 225.167144][T13153] netlink: 'syz.1.1975': attribute type 11 has an invalid length. [ 225.167162][T13153] netlink: 'syz.1.1975': attribute type 4 has an invalid length. [ 225.217753][T13153] Bluetooth: hci0: unsupported parameter 5135 [ 225.217773][T13153] Bluetooth: hci0: unsupported parameter 8192 [ 225.217785][T13153] Bluetooth: hci0: unsupported parameter 5135 [ 225.217795][T13153] Bluetooth: hci0: unsupported parameter 8192 [ 225.498094][T13187] netlink: 'syz.4.1985': attribute type 2 has an invalid length. [ 225.853275][T13217] netlink: 'syz.3.1993': attribute type 29 has an invalid length. [ 226.003562][T13228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 226.641519][T13270] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 226.762327][T13283] netlink: 'syz.3.2017': attribute type 8 has an invalid length. [ 226.765603][T13283] __nla_validate_parse: 55 callbacks suppressed [ 226.765619][T13283] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2017'. [ 227.437883][T13319] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 227.463076][T13323] tc_dump_action: action bad kind [ 227.788986][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 227.980214][T13351] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2036'. [ 227.980239][T13351] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2036'. [ 228.069879][T13359] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 228.334399][T13381] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2047'. [ 228.455788][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 228.752614][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2054'. [ 228.868712][T13394] ip_tables: iptables: counters copy to user failed while replacing table [ 228.963499][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 228.976529][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 229.097219][T13428] ip_tables: iptables: counters copy to user failed while replacing table [ 229.138359][T13430] rdma_op ffff88802a979238 conn xmit_rdma 0000000000000000 [ 229.180476][T13433] netlink: 'syz.3.2063': attribute type 4 has an invalid length. [ 229.204545][T13435] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.224533][T13435] bridge_slave_0 (unregistering): left allmulticast mode [ 229.224557][T13435] bridge_slave_0 (unregistering): left promiscuous mode [ 229.224688][T13435] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.660690][T13443] netlink: 'syz.0.2067': attribute type 9 has an invalid length. [ 229.660881][T13443] netlink: 'syz.0.2067': attribute type 9 has an invalid length. [ 229.873684][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 230.246452][T13484] tipc: Resetting bearer [ 230.246966][T13484] tipc: Resetting bearer [ 230.270594][ T9723] wg0 speed is unknown, defaulting to 1000 [ 230.417622][T13496] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 230.417646][T13496] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 230.454609][T13507] SET target dimension over the limit! [ 230.643775][T13513] erspan0: entered promiscuous mode [ 231.237196][T13552] netlink: 'syz.0.2095': attribute type 4 has an invalid length. [ 231.359471][T13562] netlink: 'syz.0.2100': attribute type 10 has an invalid length. [ 231.372563][T13562] team0: Port device dummy0 added [ 231.564813][T13572] netlink: 'syz.0.2103': attribute type 2 has an invalid length. [ 231.564981][T13571] netlink: 'syz.0.2103': attribute type 2 has an invalid length. [ 231.591447][T13573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.686182][T13558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.119498][T13603] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 232.268644][T13603] 8021q: adding VLAN 0 to HW filter on device bond13 [ 232.286608][T13610] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.288631][T13610] bond13: (slave team0): Enslaving as an active interface with a down link [ 232.654294][T13630] __nla_validate_parse: 7 callbacks suppressed [ 232.654314][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 232.672493][T13625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2118'. [ 232.672516][T13625] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2118'. [ 232.672531][T13625] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2118'. [ 232.980659][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 233.053593][T13658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.329882][T13680] ipip1: entered allmulticast mode [ 233.336830][T13685] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2138'. [ 233.411149][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 233.420628][T13691] tls_set_device_offload_rx: netdev not found [ 233.631962][T13702] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2143'. [ 233.675969][T13708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2144'. [ 234.096912][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2146'. [ 234.237782][T13731] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.241550][T13731] bond0 (unregistering): Released all slaves [ 234.368112][T13731] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.392858][T13731] bond0 (unregistering): Released all slaves [ 234.552508][T13731] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.583988][T13731] bond0 (unregistering): Released all slaves [ 234.803010][T13731] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.808578][T13731] bond0 (unregistering): Released all slaves [ 234.949471][T13771] validate_nla: 2 callbacks suppressed [ 234.949490][T13771] netlink: 'syz.1.2158': attribute type 2 has an invalid length. [ 234.949503][T13771] netlink: 'syz.1.2158': attribute type 11 has an invalid length. [ 234.976436][T13731] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.989158][T13731] bond0 (unregistering): Released all slaves [ 235.034430][T13774] tipc: Enabling of bearer rejected, already enabled [ 235.148212][T13777] netlink: 'syz.4.2162': attribute type 8 has an invalid length. [ 235.243637][T13788] batadv0: entered promiscuous mode [ 235.251721][T13788] macsec1: entered promiscuous mode [ 235.253066][T13788] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 235.254490][T13788] batadv0: left promiscuous mode [ 235.713998][T13820] tipc: Enabled bearer , priority 0 [ 235.838129][T13824] netlink: 'syz.1.2172': attribute type 18 has an invalid length. [ 235.866075][T13833] IPVS: ip_vs_add_dest(): server weight less than zero [ 235.924237][T13834] sch_tbf: burst 7 is lower than device syzkaller0 mtu (65500) ! [ 236.066094][T13833] 8021q: adding VLAN 0 to HW filter on device bond14 [ 236.558495][T13878] tipc: Enabling of bearer rejected, already enabled [ 236.851101][T13908] ip_tables: iptables: counters copy to user failed while replacing table [ 237.073901][T13925] tipc: Enabling of bearer rejected, already enabled [ 237.243833][T13938] xt_hashlimit: size too large, truncated to 1048576 [ 237.299170][T13940] netlink: 'syz.3.2205': attribute type 15 has an invalid length. [ 237.316651][T13945] xt_hashlimit: size too large, truncated to 1048576 [ 237.480141][T13953] xt_time: unknown flags 0x68 [ 237.694339][T13962] sctp: [Deprecated]: syz.2.2213 (pid 13962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.694339][T13962] Use struct sctp_sack_info instead [ 237.740143][T13962] netlink: 'syz.2.2213': attribute type 10 has an invalid length. [ 237.760296][T13962] __nla_validate_parse: 16 callbacks suppressed [ 237.760313][T13962] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2213'. [ 237.761445][T13970] syzkaller0: entered promiscuous mode [ 237.761463][T13970] syzkaller0: entered allmulticast mode [ 237.914286][T13978] netlink: 'syz.3.2217': attribute type 1 has an invalid length. [ 237.951014][T13982] vlan0: entered promiscuous mode [ 237.951035][T13982] erspan0: entered promiscuous mode [ 237.954279][T13982] ipt_rpfilter: unknown options [ 238.141882][T14001] tipc: Enabled bearer , priority 10 [ 238.142351][T14001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2223'. [ 238.191923][T14002] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 238.194189][T14002] batman_adv: batadv0: Adding interface: gretap1 [ 238.194203][T14002] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.194230][T14002] batman_adv: batadv0: Interface activated: gretap1 [ 238.407165][T14020] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 238.407190][T14020] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 238.790311][T14037] netlink: 'syz.2.2235': attribute type 4 has an invalid length. [ 238.834219][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 238.842004][T14041] veth12: entered promiscuous mode [ 238.842021][T14041] veth12: entered allmulticast mode [ 238.865367][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.867977][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.870053][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.880003][T14043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 238.887672][T14043] veth12: entered promiscuous mode [ 238.887688][T14043] veth12: entered allmulticast mode [ 238.990134][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 238.990195][T14045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2237'. [ 239.025628][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.034918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.255596][T14058] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 239.306653][T14058] bond9: entered promiscuous mode [ 239.322877][T14058] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.350710][T14058] bond9: (slave bridge9): making interface the new active one [ 239.350737][T14058] bridge9: entered promiscuous mode [ 239.351636][T14058] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 239.704025][T14088] netlink: 'syz.4.2251': attribute type 4 has an invalid length. [ 239.886576][T14099] macvlan0: entered promiscuous mode [ 239.917514][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'. [ 239.917543][T14103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 240.009955][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 240.064941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.068251][ T9724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.074445][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 240.149090][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.167019][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.219326][T14117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.343659][T14140] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 240.367775][T14128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.472257][T14145] bond10: (slave geneve4): making interface the new active one [ 240.472800][T14145] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 240.506119][ T8233] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 240.511068][ T8233] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 240.511172][ T8233] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 240.511249][ T8233] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 240.859261][T14178] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 240.861786][T14176] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 240.861804][T14176] syzkaller1: group set to 0 [ 240.862551][T14178] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 240.862567][T14178] syzkaller1: group set to 0 [ 241.215233][T14196] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 241.487592][T14218] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 241.591598][T14218] bond16: entered promiscuous mode [ 241.591995][T14218] 8021q: adding VLAN 0 to HW filter on device bond16 [ 241.905646][ T2253] net_ratelimit: 6 callbacks suppressed [ 241.905664][ T2253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.905775][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.074555][T14266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.145314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.511576][T14302] netlink: 'syz.1.2308': attribute type 4 has an invalid length. [ 242.559375][T14305] ip6t_ah: unknown flags 5 [ 242.932875][T14330] __nla_validate_parse: 15 callbacks suppressed [ 242.932896][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 242.961528][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 242.963542][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 243.002969][T14333] erspan0: left promiscuous mode [ 243.084355][T14339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2317'. [ 243.264454][T14350] tipc: Resetting bearer [ 243.286925][T14357] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 243.432957][T14366] netlink: 'syz.2.2321': attribute type 1 has an invalid length. [ 243.467112][T14366] 8021q: adding VLAN 0 to HW filter on device bond17 [ 243.496042][T14366] bond17: (slave veth0_to_bond): making interface the new active one [ 243.504042][T14366] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 243.532457][T14366] bond17: entered promiscuous mode [ 243.532473][T14366] veth0_to_bond: entered promiscuous mode [ 243.532636][T14366] bond17: entered allmulticast mode [ 243.532648][T14366] veth0_to_bond: entered allmulticast mode [ 243.755195][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2325'. [ 243.983035][T14399] netlink: 'syz.0.2331': attribute type 1 has an invalid length. [ 244.005478][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2332'. [ 244.302362][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2337'. [ 244.332347][T14425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.364001][T14425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2338'. [ 244.422441][T14432] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2340'. [ 244.481222][T14437] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 244.971070][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2348'. [ 244.993152][T14468] erspan0: entered promiscuous mode [ 245.127168][T14470] syzkaller0: entered promiscuous mode [ 245.127191][T14470] syzkaller0: entered allmulticast mode [ 245.561673][T14493] syzkaller0: entered promiscuous mode [ 245.561695][T14493] syzkaller0: entered allmulticast mode [ 245.854284][T14505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.991023][T14515] syzkaller0: entered promiscuous mode [ 245.991044][T14515] syzkaller0: entered allmulticast mode [ 245.991678][T14515] tipc: Resetting bearer [ 246.089404][T14512] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 246.089428][T14512] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 246.246909][T14527] ip_tables: iptables: counters copy to user failed while replacing table [ 246.402794][T14537] netlink: NAT attribute has 1 unknown bytes [ 246.402829][T14537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.593299][T14557] openvswitch: netlink: Multiple metadata blocks provided [ 246.933597][T14583] net_ratelimit: 1 callbacks suppressed [ 246.933616][T14583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.083329][T14647] netlink: 'syz.0.2399': attribute type 21 has an invalid length. [ 248.083351][T14647] __nla_validate_parse: 7 callbacks suppressed [ 248.083361][T14647] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2399'. [ 248.112501][T14647] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2399'. [ 248.284091][T14658] netlink: 'syz.0.2407': attribute type 21 has an invalid length. [ 248.362857][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2409'. [ 248.614221][T14677] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.615071][T14677] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.657082][T14678] sctp: [Deprecated]: syz.3.2415 (pid 14678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.657082][T14678] Use struct sctp_sack_info instead [ 248.922753][T14685] bond0: left promiscuous mode [ 248.922776][T14685] bond_slave_0: left promiscuous mode [ 248.922968][T14685] bond_slave_1: left promiscuous mode [ 248.927178][T14685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.023359][T14685] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 249.163966][T14696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 249.164300][T14696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 249.164584][T14696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 249.168796][T14696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 249.169068][T14696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 249.179905][T14696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 249.241282][T14703] tipc: Enabling of bearer rejected, already enabled [ 249.549825][T14714] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 249.549847][T14714] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2427'. [ 249.713076][T14731] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 249.769146][T14731] bond11: option mode: invalid value (10) [ 249.776089][T14731] bond11 (unregistering): Released all slaves [ 249.799716][T14732] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2430'. [ 249.822806][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2434'. [ 250.721603][T14796] IPVS: length: 157 != 24 [ 251.073610][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2448'. [ 251.222689][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 251.450875][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 251.578138][T14825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.596133][T14833] netlink: 'syz.4.2450': attribute type 5 has an invalid length. [ 252.078997][T14841] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2453'. [ 252.257303][T14855] netlink: 'syz.4.2457': attribute type 10 has an invalid length. [ 252.287744][T14857] netlink: 'syz.1.2458': attribute type 2 has an invalid length. [ 252.290601][T14855] team0: Device wg2 is of different type [ 252.346715][T14857] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.591092][T14869] team0: Device ipvlan0 failed to register rx_handler [ 252.824101][T14875] veth11: entered allmulticast mode [ 252.835380][T14877] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 253.064539][T14890] tipc: Enabling of bearer rejected, already enabled [ 253.211519][T14894] __nla_validate_parse: 1 callbacks suppressed [ 253.211538][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2471'. [ 253.212806][T14899] xt_l2tp: missing protocol rule (udp|l2tpip) [ 253.213159][T14899] veth1_vlan: entered promiscuous mode [ 253.247875][T14899] veth1_vlan: left promiscuous mode [ 253.266503][T14902] netlink: 'syz.3.2473': attribute type 7 has an invalid length. [ 253.741479][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 253.771243][T14935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2486'. [ 253.939443][T14950] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.939540][T14950] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 253.986032][T14955] net_ratelimit: 60 callbacks suppressed [ 253.986050][T14955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 254.193758][T14969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2500'. [ 254.193969][T14956] x_tables: duplicate underflow at hook 1 [ 254.547817][T14998] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 254.622565][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'. [ 254.648441][T15002] tipc: Enabling of bearer rejected, already enabled [ 254.820373][T15008] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 254.842073][T15006] can: request_module (can-proto-0) failed. [ 254.959320][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'. [ 254.983124][T15026] openvswitch: netlink: Flow key attr not present in new flow. [ 255.051480][T15021] netlink: 'syz.1.2515': attribute type 1 has an invalid length. [ 255.077236][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'. [ 255.081705][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'. [ 255.278936][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2525'. [ 255.305947][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'. [ 255.317432][T15044] nbd: must specify at least one socket [ 255.586828][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.586863][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.797129][T15063] bond0: (slave ip6tnl0): refused to change device type [ 256.283181][T15105] ip_tables: iptables: counters copy to user failed while replacing table [ 256.342503][T15107] gtp1: entered promiscuous mode [ 256.342526][T15107] gtp1: entered allmulticast mode [ 256.397505][T15109] netlink: 'syz.4.2538': attribute type 2 has an invalid length. [ 256.460886][T15114] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.492146][T15116] vlan1: entered allmulticast mode [ 256.492166][T15116] bond0: entered allmulticast mode [ 256.558450][T15114] bond19: Unable to set peer notification delay as MII monitoring is disabled [ 256.569392][T15121] ip_tables: iptables: counters copy to user failed while replacing table [ 256.591436][T15114] bond19 (unregistering): Released all slaves [ 256.750380][T15132] syzkaller0: left promiscuous mode [ 256.750401][T15132] syzkaller0: left allmulticast mode [ 256.871464][T15144] x_tables: ip_tables: osf match: only valid for protocol 6 [ 257.192481][T15171] batman_adv: batadv0: Adding interface: syzkaller0 [ 257.192497][T15171] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.192522][T15171] batman_adv: batadv0: Interface activated: syzkaller0 [ 257.300411][T15176] syzkaller0: entered promiscuous mode [ 257.300431][T15176] syzkaller0: entered allmulticast mode [ 257.425394][T15185] Unknown options in mask 4 [ 257.447047][T15188] netlink: 'syz.0.2563': attribute type 21 has an invalid length. [ 257.503014][T15190] xt_IDLETIMER: timeout value is zero [ 257.530154][T15192] syzkaller0: left promiscuous mode [ 257.530171][T15192] syzkaller0: left allmulticast mode [ 258.003007][T15226] netlink: 'syz.0.2575': attribute type 7 has an invalid length. [ 258.014081][T15230] netlink: 'syz.3.2577': attribute type 49 has an invalid length. [ 258.112588][T15230] ip6gretap0: entered promiscuous mode [ 258.112609][T15230] ip6gretap0: entered allmulticast mode [ 258.139765][T15238] netlink: 'syz.0.2578': attribute type 49 has an invalid length. [ 258.471185][T15264] syzkaller0: entered promiscuous mode [ 258.471207][T15264] syzkaller0: entered allmulticast mode [ 258.731097][T15280] __nla_validate_parse: 17 callbacks suppressed [ 258.731119][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2585'. [ 258.903843][T15290] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2588'. [ 259.259183][T15307] netlink: 'syz.0.2591': attribute type 83 has an invalid length. [ 259.264366][T15305] netlink: 'syz.2.2590': attribute type 1 has an invalid length. [ 259.563220][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.563544][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.563892][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.564192][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.605886][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.606223][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.606611][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.606925][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.607221][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.607578][T15325] ip_tables: iptables: counters copy to user failed while replacing table [ 259.986622][T15347] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2599'. [ 260.089591][T15348] tipc: Enabled bearer , priority 0 [ 260.110349][T15346] tipc: Disabling bearer [ 260.155775][ T5278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.434497][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2606'. [ 260.466854][T15381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2606'. [ 260.533794][T15381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2606'. [ 260.603945][T15398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2609'. [ 260.669661][T15398] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2609'. [ 260.700808][T15400] can: request_module (can-proto-3) failed. [ 260.704908][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.773438][T15413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2611'. [ 260.888427][T15411] can: request_module (can-proto-3) failed. [ 261.083734][T15434] tipc: New replicast peer: 172.20.20.187 [ 261.084481][T15434] tipc: Enabled bearer , priority 10 [ 261.221323][T15441] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2618'. [ 261.271838][T15445] netlink: 'syz.3.2619': attribute type 3 has an invalid length. [ 261.419445][T15456] netlink: 'syz.4.2623': attribute type 2 has an invalid length. [ 261.440666][T15454] pim6reg: entered allmulticast mode [ 261.454894][T15454] pim6reg: left allmulticast mode [ 261.856219][T15483] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 261.917508][T15483] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 261.922129][T15483] bond13 (unregistering): Released all slaves [ 261.993806][T15492] bond0: entered allmulticast mode [ 261.993826][T15492] bond_slave_0: entered allmulticast mode [ 261.993841][T15492] bond_slave_1: entered allmulticast mode [ 262.009958][T15492] sctp: [Deprecated]: syz.0.2634 (pid 15492) Use of int in max_burst socket option. [ 262.009958][T15492] Use struct sctp_assoc_value instead [ 262.586670][T15531] tipc: Enabling of bearer rejected, already enabled [ 262.729718][T15536] syzkaller0: left promiscuous mode [ 262.729740][T15536] syzkaller0: left allmulticast mode [ 263.116230][T15555] xfrm2: entered promiscuous mode [ 263.116252][T15555] xfrm2: entered allmulticast mode [ 263.378232][T15575] Unsupported ieee802154 address type: 0 [ 263.740242][T15591] syzkaller0: entered promiscuous mode [ 263.740266][T15591] syzkaller0: entered allmulticast mode [ 263.782937][T15593] __nla_validate_parse: 15 callbacks suppressed [ 263.782955][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2662'. [ 263.782982][T15593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2662'. [ 263.915242][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 263.915261][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 264.180274][T15620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2672'. [ 264.181087][T15613] netlink: 'syz.0.2669': attribute type 3 has an invalid length. [ 264.478416][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2677'. [ 264.503245][T15642] netlink: 'syz.0.2678': attribute type 1 has an invalid length. [ 264.539152][T15642] bond15: entered promiscuous mode [ 264.539648][T15642] 8021q: adding VLAN 0 to HW filter on device bond15 [ 264.555714][T15645] batman_adv: batadv0: Adding interface: syzkaller0 [ 264.555729][T15645] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.555764][T15645] batman_adv: batadv0: Interface activated: syzkaller0 [ 264.613017][T15642] 8021q: adding VLAN 0 to HW filter on device bond15 [ 264.624201][T15642] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 264.624223][T15642] bond15: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 264.646403][T15648] net_ratelimit: 24 callbacks suppressed [ 264.646419][T15648] ip_tables: iptables: counters copy to user failed while replacing table [ 264.649003][T15642] bond15: (slave xfrm1): making interface the new active one [ 264.649021][T15642] xfrm1: entered promiscuous mode [ 264.650136][T15642] bond15: (slave xfrm1): Enslaving as an active interface with an up link [ 264.899961][T15659] syzkaller0: entered promiscuous mode [ 264.899982][T15659] syzkaller0: entered allmulticast mode [ 264.980290][T15665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.980766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.007906][T15663] tipc: Resetting bearer [ 265.008213][T15663] tipc: Resetting bearer [ 265.195138][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.347974][T15697] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2694'. [ 265.347995][T15697] netlink: 1560 bytes leftover after parsing attributes in process `syz.3.2694'. [ 265.512761][T15710] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 265.575574][T15715] xt_NFQUEUE: number of total queues is 0 [ 265.616463][T15719] netlink: 'syz.1.2702': attribute type 4 has an invalid length. [ 265.616476][T15719] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2702'. [ 265.701721][T15717] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 265.701745][T15717] bond13: option packets_per_slave: allowed values 0 - 65535 [ 265.704169][T15717] bond13 (unregistering): Released all slaves [ 265.846128][T13786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.286363][ T2253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.864972][ T9724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.906371][ T9724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.387862][ T2253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.706158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.945062][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.014012][T15744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.347603][T15825] netlink: 'syz.4.2722': attribute type 4 has an invalid length. [ 269.366163][T15825] netlink: 'syz.4.2722': attribute type 4 has an invalid length. [ 269.460634][T15834] tipc: Enabling of bearer rejected, already enabled [ 269.719154][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2728'. [ 269.719179][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2728'. [ 269.778129][T15857] xt_l2tp: v2 doesn't support IP mode [ 269.796847][T15856] netlink: 'syz.1.2733': attribute type 83 has an invalid length. [ 269.987314][T13787] net_ratelimit: 1 callbacks suppressed [ 269.987331][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.991183][T15874] tipc: Enabled bearer , priority 0 [ 270.017410][T15872] tipc: Disabling bearer [ 270.102494][T15882] nbd: couldn't find device at index 15663104 [ 270.103412][T15880] nbd: couldn't find device at index 15663104 [ 270.109454][T15876] netlink: 'syz.2.2738': attribute type 5 has an invalid length. [ 270.109471][T15876] netlink: 'syz.2.2738': attribute type 9 has an invalid length. [ 270.109483][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 270.235129][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 270.348266][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'. [ 270.383480][T15903] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.411678][T15907] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 270.450887][T15907] 8021q: adding VLAN 0 to HW filter on device bond21 [ 270.454249][T15907] bond21: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 270.477152][T15907] bond21: entered allmulticast mode [ 270.503120][T15907] bond21: (slave ip6gretap2): Enslaving as an active interface with an up link [ 270.621936][T15920] tipc: Enabling of bearer rejected, already enabled [ 270.693374][T15927] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2754'. [ 270.707346][T15927] netlink: 'syz.3.2754': attribute type 11 has an invalid length. [ 270.758348][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 270.857022][T15935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.929000][T15930] syzkaller0: left promiscuous mode [ 270.929023][T15930] syzkaller0: left allmulticast mode [ 270.956442][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.025134][T13786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.027914][T15944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2760'. [ 271.164339][T15953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.164570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.208416][T15957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2764'. [ 271.297712][T15967] xt_LOG: level 8 >= 8 [ 271.336910][T15968] x_tables: duplicate underflow at hook 1 [ 271.416212][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 271.634523][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.067530][T13786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.206061][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 272.227621][T16024] batadv0: entered promiscuous mode [ 272.227792][T16024] macsec1: entered promiscuous mode [ 272.229762][T16024] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 272.232655][T16024] batadv0: left promiscuous mode [ 272.276633][T16026] xt_IDLETIMER: timeout value is zero [ 272.389879][ T9712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.473131][T16032] ip_tables: iptables: counters copy to user failed while replacing table [ 273.063970][T16073] netlink: 'syz.4.2800': attribute type 1 has an invalid length. [ 273.076336][T16075] netlink: 'syz.4.2800': attribute type 1 has an invalid length. [ 273.108356][T13786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.487918][T16105] x_tables: duplicate underflow at hook 1 [ 273.501226][T16105] xt_MASQUERADE: bad rangesize 2147483646 [ 273.597216][T16114] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.787150][T16124] tipc: Enabling of bearer rejected, already enabled [ 273.899018][T16128] vlan0: entered promiscuous mode [ 274.050817][T16140] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 274.241192][T16151] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 274.576912][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.580738][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.581419][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.583602][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.599919][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.617426][T16165] tipc: Enabled bearer , priority 0 [ 274.650684][T16164] tipc: Disabling bearer [ 274.672500][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.682174][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.690220][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.706423][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.710194][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.870259][T16176] netlink: 'syz.1.2824': attribute type 2 has an invalid length. [ 274.902354][T16176] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 275.074563][T16185] __nla_validate_parse: 9 callbacks suppressed [ 275.074584][T16185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 275.090839][T16185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 275.116048][T16190] net_ratelimit: 2 callbacks suppressed [ 275.116065][T16190] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.118188][ T5614] syz_tun (unregistering): left allmulticast mode [ 275.130946][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2827'. [ 275.139296][T16195] nbd: nbd0 already in use [ 275.163553][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2829'. [ 275.163575][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2829'. [ 275.164463][T16192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2829'. [ 275.164480][T16192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2829'. [ 275.188476][T16193] tipc: Resetting bearer [ 275.194445][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.264768][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.289519][ T31] audit: type=1107 audit(1792268094.851:7): pid=16197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+ºS>mȯ®ïYûAfymí¸ßy$oƒ­íÃM¬Œâ—Ѭ5¡{…¨‚äQ;`³Dë”�O¤eþÓ(ÀÞ¹¼‹ÿRQwSHÈå¹_^4¦�©Ö@àž‚W¦®¿›~QÃ…Y»î­s?ø%ZJ‹œ¶O t�P mG™×g†” ù‹Ã°àAYö Ív¯�›Ìöµ/²djŠÆh¶$4“˜ô÷±Ït' [ 275.384139][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2832'. [ 275.391330][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2832'. [ 275.431510][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.796186][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2839'. [ 275.797043][T16163] rxe_eth0 speed is unknown, defaulting to 1000 [ 276.078435][T16163] wg0 speed is unknown, defaulting to 1000 [ 276.228495][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.243802][T16249] ip_tables: iptables: counters copy to user failed while replacing table [ 276.306284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.506350][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.510793][T16276] xt_SECMARK: invalid mode: 9 [ 276.552886][T16278] netlink: 'syz.0.2850': attribute type 1 has an invalid length. [ 276.674507][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.675023][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.675393][T16163] bridge_slave_0: entered allmulticast mode [ 276.677398][T16163] bridge_slave_0: entered promiscuous mode [ 276.680380][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.680567][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.680684][T16163] bridge_slave_1: entered allmulticast mode [ 276.682390][T16163] bridge_slave_1: entered promiscuous mode [ 276.716984][T16163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.720371][T16163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.749885][T16163] team0: Port device team_slave_0 added [ 276.752738][T16163] team0: Port device team_slave_1 added [ 276.797237][ T52] Bluetooth: hci5: command tx timeout [ 276.846823][T16163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.846838][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.846860][T16163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.849829][T16163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.849841][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.849864][T16163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.987854][T16163] hsr_slave_0: entered promiscuous mode [ 276.988494][T16163] hsr_slave_1: entered promiscuous mode [ 276.988959][T16163] debugfs: 'hsr0' already exists in 'hsr' [ 276.988978][T16163] Cannot create hsr debugfs directory [ 277.035142][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035142][T16299] Use struct sctp_assoc_value instead [ 277.035186][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035186][T16299] Use struct sctp_assoc_value instead [ 277.035224][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035224][T16299] Use struct sctp_assoc_value instead [ 277.035273][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035273][T16299] Use struct sctp_assoc_value instead [ 277.035310][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035310][T16299] Use struct sctp_assoc_value instead [ 277.035344][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035344][T16299] Use struct sctp_assoc_value instead [ 277.035380][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035380][T16299] Use struct sctp_assoc_value instead [ 277.035416][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035416][T16299] Use struct sctp_assoc_value instead [ 277.035452][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035452][T16299] Use struct sctp_assoc_value instead [ 277.035488][T16299] sctp: [Deprecated]: syz.3.2855 (pid 16299) Use of int in maxseg socket option. [ 277.035488][T16299] Use struct sctp_assoc_value instead [ 277.266163][T13786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.632067][T16317] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 277.840249][T16163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.840283][T16163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.855760][T16330] netlink: 'syz.1.2863': attribute type 21 has an invalid length. [ 277.987161][ T9712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.061785][T16163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.061818][T16163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.255731][T16163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.255765][T16163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.464029][T16163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.464128][T16163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.650492][T16374] netlink: 'syz.3.2875': attribute type 10 has an invalid length. [ 278.670755][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.672078][T16374] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 278.770498][T16163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.784238][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.787832][T16163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.822121][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.829646][T16163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.849365][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.865764][ T52] Bluetooth: hci5: command tx timeout [ 278.873740][T16163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.894214][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.032864][T16163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.145624][T16163] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.155032][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.155176][T15786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.200670][T15786] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.200769][T15786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.392965][T16412] tipc: Enabling of bearer rejected, already enabled [ 279.741907][T16439] netlink: 'syz.3.2887': attribute type 4 has an invalid length. [ 279.825899][T16444] bridge0: port 1(veth0) entered blocking state [ 279.825982][T16444] bridge0: port 1(veth0) entered disabled state [ 279.826131][T16444] veth0: entered allmulticast mode [ 279.833773][T16444] veth0: entered promiscuous mode [ 279.834692][T16444] bridge0: port 1(veth0) entered blocking state [ 279.834821][T16444] bridge0: port 1(veth0) entered forwarding state [ 280.304986][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.311032][T16163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.393940][T13789] net_ratelimit: 3 callbacks suppressed [ 280.393958][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.430936][T16484] __nla_validate_parse: 11 callbacks suppressed [ 280.430955][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2896'. [ 280.433144][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2896'. [ 280.599619][T16492] Unknown options in mask 4 [ 280.624356][T16495] netlink: 'syz.2.2897': attribute type 15 has an invalid length. [ 280.663931][T16492] syzkaller1: entered promiscuous mode [ 280.663952][T16492] syzkaller1: entered allmulticast mode [ 280.780009][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2901'. [ 280.819822][T16163] veth0_vlan: entered promiscuous mode [ 280.839923][T16163] veth1_vlan: entered promiscuous mode [ 280.898219][T16163] veth0_macvtap: entered promiscuous mode [ 280.909700][T16163] veth1_macvtap: entered promiscuous mode [ 280.946024][ T52] Bluetooth: hci5: command tx timeout [ 280.950382][T16163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.974586][T16163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.006332][T15792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.076642][T15787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.077006][T15787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.127563][T15787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.127582][T15787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.190416][T15795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.190434][T15795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.196877][T16513] tipc: Enabling of bearer rejected, already enabled [ 281.214861][T15786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.433484][T13786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.507109][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.537084][T16528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'. [ 281.537177][T16528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'. [ 281.788443][T16542] ip_tables: iptables: counters copy to user failed while replacing table [ 282.004588][T16547] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 282.039257][T16547] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 282.437512][T16533] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 282.467617][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.726327][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2921'. [ 282.883835][T16585] tipc: Bearer : already 2 bearers with priority 10 [ 282.883854][T16585] tipc: Bearer : trying with adjusted priority [ 282.884124][T16585] tipc: New replicast peer: 172.20.20.187 [ 282.897299][T16585] tipc: Enabled bearer , priority 9 [ 283.026074][ T52] Bluetooth: hci5: command tx timeout [ 283.308196][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2932'. [ 283.313366][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 283.506149][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.533812][T16622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2935'. [ 284.021307][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2942'. [ 284.545666][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.546308][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.822647][T16661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.935765][T16642] netlink: 'syz.3.2943': attribute type 3 has an invalid length. [ 285.311766][T16679] syzkaller0: entered promiscuous mode [ 285.311789][T16679] syzkaller0: entered allmulticast mode [ 285.355220][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 285.453090][T16697] __nla_validate_parse: 5 callbacks suppressed [ 285.453109][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 285.455849][T16697] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2956'. [ 285.493267][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 285.518280][T16697] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2956'. [ 285.568341][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2959'. [ 285.568390][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2959'. [ 285.588721][T13789] net_ratelimit: 1 callbacks suppressed [ 285.588737][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.692025][T16719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2962'. [ 285.692145][T16719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2962'. [ 285.692246][T16719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2962'. [ 285.692357][T16719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2962'. [ 285.995005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.995293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.996134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.996421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.996698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.996960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.625873][T13787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.752392][T16780] ipip0: entered allmulticast mode [ 286.984177][T16806] netlink: 'syz.1.2987': attribute type 24 has an invalid length. [ 287.038580][T16812] l2tp_ppp: sess 2/0: no socket in recv [ 287.146376][T16816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.343510][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.362285][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.372516][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.381013][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.382905][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.585778][ T9712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.722975][T15788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 287.724192][T15788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 287.724220][T15788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.724243][T15788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 287.873981][T15788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 287.874014][T15788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 287.874038][T15788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.874059][T15788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 287.988589][T16821] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.166979][T15788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 288.167012][T15788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 288.167036][T15788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.167058][T15788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 288.191263][T16846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.368662][T15788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 288.368693][T15788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 288.368717][T15788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.368739][T15788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 288.451431][T16821] wg0 speed is unknown, defaulting to 1000 [ 288.928272][T15788] veth0: left allmulticast mode [ 288.928319][T15788] veth0: left promiscuous mode [ 288.932093][T15788] bridge0: port 1(veth0) entered disabled state [ 289.054333][T15788] batman_adv: batadv0: Interface deactivated: gretap1 [ 289.058526][T15788] tipc: Resetting bearer [ 289.426168][ T52] Bluetooth: hci0: command tx timeout [ 289.471042][T15788] batman_adv: batadv0: Removing interface: gretap1 [ 289.487425][T15788] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 289.557795][T15788] tipc: Disabling bearer [ 289.588358][T15788] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 289.588405][T15788] bridge3 (unregistering): left promiscuous mode [ 289.588423][T15788] bridge3 (unregistering): left allmulticast mode [ 289.639484][T15788] .` (unregistering): (slave macsec0): Releasing backup interface [ 289.640161][T15788] veth1_macvtap: left promiscuous mode [ 289.640972][T15788] .` (unregistering): Released all slaves [ 289.664500][T15788] bond1 (unregistering): (slave bond2): Releasing backup interface [ 289.673470][T15788] bond1 (unregistering): Released all slaves [ 289.687994][T15788] bond2 (unregistering): Released all slaves [ 289.696474][T15788] bond3 (unregistering): Released all slaves [ 289.708758][T15788] bond4 (unregistering): Released all slaves [ 289.723610][T15788] bond5 (unregistering): Released all slaves [ 289.743581][T15788] bond6 (unregistering): Released all slaves [ 289.761873][T15788] bond0 (unregistering): Released all slaves [ 289.779009][T15788] bond7 (unregistering): Released all slaves [ 289.793573][T15788] bond8 (unregistering): Released all slaves [ 289.806316][T15788] bond9 (unregistering): Released all slaves [ 289.822193][T15788] bond10 (unregistering): Released all slaves [ 290.004436][T15788] tipc: Disabling bearer [ 290.013403][T15788] tipc: Disabling bearer [ 290.014345][T15788] tipc: Left network mode [ 290.249926][T15788] IPVS: stopping backup sync thread 13089 ... [ 290.394800][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.526603][T16909] ovs-s: entered promiscuous mode [ 290.738593][T16925] __nla_validate_parse: 44 callbacks suppressed [ 290.738612][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 290.998003][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 291.062238][T16821] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.062392][T16821] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.062638][T16821] bridge_slave_0: entered allmulticast mode [ 291.064507][T16821] bridge_slave_0: entered promiscuous mode [ 291.072102][T16821] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.072429][T16821] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.072549][T16821] bridge_slave_1: entered allmulticast mode [ 291.085483][T16821] bridge_slave_1: entered promiscuous mode [ 291.301723][T16821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.313329][T16821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.427961][T16821] team0: Port device team_slave_0 added [ 291.431351][T16821] team0: Port device team_slave_1 added [ 291.505268][ T52] Bluetooth: hci0: command tx timeout [ 291.530579][T16821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.530594][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.530613][T16821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.539188][T16821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.539201][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.539224][T16821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.754332][T16821] hsr_slave_0: entered promiscuous mode [ 291.757546][T16821] hsr_slave_1: entered promiscuous mode [ 291.758348][T16821] debugfs: 'hsr0' already exists in 'hsr' [ 291.758365][T16821] Cannot create hsr debugfs directory [ 292.024322][T15788] hsr_slave_0: left promiscuous mode [ 292.032683][T15788] hsr_slave_1: left promiscuous mode [ 293.401080][T17039] netlink: 'syz.2.3040': attribute type 21 has an invalid length. [ 293.527380][T17039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3040'. [ 293.588901][ T52] Bluetooth: hci0: command tx timeout [ 293.972967][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 294.204926][T17061] bond0: entered promiscuous mode [ 294.204950][T17061] bond_slave_0: entered promiscuous mode [ 294.205203][T17061] bond_slave_1: entered promiscuous mode [ 294.242897][T17061] batadv0: entered promiscuous mode [ 294.257335][T17061] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 294.412701][T17069] netlink: 872 bytes leftover after parsing attributes in process `syz.4.3044'. [ 295.057598][T17093] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3049'. [ 295.132429][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3050'. [ 295.206479][T17099] netlink: 'syz.2.3051': attribute type 2 has an invalid length. [ 295.228802][T17099] : entered promiscuous mode [ 295.245769][T17099] netlink: 'syz.2.3051': attribute type 8 has an invalid length. [ 295.245787][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 295.424917][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.532947][T15788] IPVS: stop unused estimator thread 0... [ 295.665733][ T52] Bluetooth: hci0: command tx timeout [ 295.742382][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3055'. [ 296.580729][T17141] net_ratelimit: 4 callbacks suppressed [ 296.580748][T17141] ip_tables: iptables: counters copy to user failed while replacing table [ 296.702688][T17153] netlink: 'syz.3.3058': attribute type 1 has an invalid length. [ 296.702711][T17153] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3058'. [ 296.702736][T17153] netlink: 'syz.3.3058': attribute type 2 has an invalid length. [ 296.702748][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'. [ 296.896517][T16821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.917979][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.919581][T16821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.937689][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.940674][T16821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.967448][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.968823][T16821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.991110][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.013707][T17160] openvswitch: netlink: IP tunnel dst address not specified [ 297.023254][T17160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.172809][T16821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.209283][T16821] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.238152][T15788] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.238282][T15788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.258728][T15788] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.258840][T15788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.318347][T17139] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 297.318368][T17139] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 297.358321][T17178] vxcan0: tx address claim with dest, not broadcast [ 297.568399][T17139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.568423][T17139] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 298.183058][T17226] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3076'. [ 298.572603][T16821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.759558][T16821] veth0_vlan: entered promiscuous mode [ 298.808697][T16821] veth1_vlan: entered promiscuous mode [ 298.891676][T16821] veth0_macvtap: entered promiscuous mode [ 298.924338][T16821] veth1_macvtap: entered promiscuous mode [ 298.999115][T17273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3085'. [ 299.012567][T16821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.035877][T17271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.037180][T16821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.187421][T15787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.190845][T15795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.191279][T15795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.191352][T15795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.341422][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3086'. [ 299.374285][T17289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3089'. [ 299.380870][T15763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.380889][T15763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.552447][T15766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.552461][T15766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.671754][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3091'. [ 299.671756][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3090'. [ 299.674399][T17301] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 299.990444][T17321] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3095'. [ 300.071992][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 300.242967][T17330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.298862][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.302578][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.303968][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.306173][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.313741][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.318253][T17335] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 300.346438][T15792] IPVS: starting estimator thread 0... [ 300.445316][T17339] IPVS: using max 28 ests per chain, 67200 per kthread [ 300.458596][T17344] netlink: 'syz.2.3103': attribute type 7 has an invalid length. [ 300.462846][T17343] netlink: 'syz.0.3101': attribute type 21 has an invalid length. [ 300.462866][T17343] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.475313][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.090856][T17332] rxe_eth0 speed is unknown, defaulting to 1000 [ 301.191330][T17378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.350768][T17382] tunl0: entered promiscuous mode [ 301.363012][T17382] netlink: 'syz.2.3111': attribute type 4 has an invalid length. [ 301.401511][T17387] netlink: 'syz.1.3113': attribute type 29 has an invalid length. [ 301.403764][T17387] netlink: 'syz.1.3113': attribute type 29 has an invalid length. [ 301.703195][T17332] wg0 speed is unknown, defaulting to 1000 [ 301.880023][T17409] Bluetooth: MGMT ver 1.23 [ 301.880996][T17409] Bluetooth: hci0: unsupported parameter 5135 [ 301.881014][T17409] Bluetooth: hci0: unsupported parameter 8192 [ 301.881026][T17409] Bluetooth: hci0: unsupported parameter 5135 [ 301.881037][T17409] Bluetooth: hci0: unsupported parameter 8192 [ 301.898168][T17409] xfrm1: entered allmulticast mode [ 301.981521][T17418] __nla_validate_parse: 8 callbacks suppressed [ 301.981538][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 302.055389][T17421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.060476][T17421] netlink: 'syz.4.3125': attribute type 10 has an invalid length. [ 302.087639][T17424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.091039][T17421] netlink: 'syz.4.3125': attribute type 10 has an invalid length. [ 302.316611][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3130'. [ 302.384749][ T52] Bluetooth: hci3: command tx timeout [ 302.414365][T17332] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.414422][T17332] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.414498][T17332] bridge_slave_0: entered allmulticast mode [ 302.421037][T17332] bridge_slave_0: entered promiscuous mode [ 302.431928][T17332] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.433677][T17332] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.433801][T17332] bridge_slave_1: entered allmulticast mode [ 302.441635][T17332] bridge_slave_1: entered promiscuous mode [ 302.523362][T17332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.535430][T17332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.574391][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'. [ 302.593852][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3133'. [ 302.598779][T17332] team0: Port device team_slave_0 added [ 302.612605][T17332] team0: Port device team_slave_1 added [ 302.738288][T17332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.738305][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.738327][T17332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.781009][T17332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.781025][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.781047][T17332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.860938][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 302.925333][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3139'. [ 303.000027][T17332] hsr_slave_0: entered promiscuous mode [ 303.002841][T17332] hsr_slave_1: entered promiscuous mode [ 303.171621][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 303.283035][T17483] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 303.316588][T17483] syzkaller0: entered promiscuous mode [ 303.316618][T17483] syzkaller0: entered allmulticast mode [ 303.471961][T17503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.583602][T17506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3150'. [ 303.793470][T17332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.793503][T17332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.793527][T17332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 303.793549][T17332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 303.828291][T17516] netlink: 'syz.4.3154': attribute type 2 has an invalid length. [ 303.877736][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 303.981270][T17332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.981305][T17332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.981328][T17332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 303.981351][T17332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 304.170584][T17332] bond0: (slave netdevsim1): Releasing backup interface [ 304.191924][T17332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.191955][T17332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.191978][T17332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 304.192001][T17332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 304.246296][T17538] netlink: 'syz.0.3159': attribute type 16 has an invalid length. [ 304.246315][T17538] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3159'. [ 304.259785][T17538] veth0_macvtap: entered allmulticast mode [ 304.276266][T17535] syzkaller0: entered promiscuous mode [ 304.276282][T17535] syzkaller0: entered allmulticast mode [ 304.391167][T17332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.391201][T17332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.391225][T17332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 304.391248][T17332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 304.464795][ T52] Bluetooth: hci3: command tx timeout [ 304.708323][T17332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.712389][T17332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.722399][T17332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.759900][T17332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.763114][T17332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.790839][T17332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.791790][T17332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.817503][T17332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.818087][T17565] validate_nla: 1 callbacks suppressed [ 304.818102][T17565] netlink: 'syz.1.3167': attribute type 18 has an invalid length. [ 304.818294][T17565] netlink: 'syz.1.3167': attribute type 18 has an invalid length. [ 304.942200][T17574] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 304.968721][T17332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.002670][T17332] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.029983][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.030702][T15786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.059512][T15766] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.059653][T15766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.132021][T17584] syzkaller0: left promiscuous mode [ 305.132043][T17584] syzkaller0: left allmulticast mode [ 305.515373][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 305.898520][T17631] xt_l2tp: wrong L2TP version: 255 [ 305.900854][T17631] xt_HMARK: spi-set and port-set can't be combined [ 306.229856][T17332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.260001][T17651] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1027929905/1027929906 [ 306.261296][T17651] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1027929905/1027929906 [ 306.377055][T17332] veth0_vlan: entered promiscuous mode [ 306.383621][T17659] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 306.433176][T17332] veth1_vlan: entered promiscuous mode [ 306.493901][T17332] veth0_macvtap: entered promiscuous mode [ 306.510495][T17332] veth1_macvtap: entered promiscuous mode [ 306.539599][T17332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.545265][ T52] Bluetooth: hci3: command tx timeout [ 306.564031][T17332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.696416][T15788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.696469][T15788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.696499][T15788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.696526][T15788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.801666][T15786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.801686][T15786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.940432][T15792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.940453][T15792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.177011][T17699] x_tables: duplicate underflow at hook 1 [ 307.275001][T17706] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.446778][T17710] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 307.446805][T17710] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 307.559693][T17719] __nla_validate_parse: 9 callbacks suppressed [ 307.559712][T17719] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3202'. [ 307.736651][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.740998][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.741777][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.744702][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.765384][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.922951][T17735] TC_ACT_REPEAT abuse ? [ 307.923182][T17735] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3206'. [ 307.967143][T17738] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 308.133715][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 308.192669][T17749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3210'. [ 308.407605][T17769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3214'. [ 308.407777][T17770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3214'. [ 308.443165][T17763] syzkaller0: entered promiscuous mode [ 308.443183][T17763] syzkaller0: entered allmulticast mode [ 308.521958][T17729] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.625262][ T52] Bluetooth: hci3: command tx timeout [ 308.738290][T17784] netlink: 'syz.2.3218': attribute type 10 has an invalid length. [ 308.755605][T17784] netlink: 'syz.2.3218': attribute type 11 has an invalid length. [ 308.755623][T17784] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3218'. [ 308.824772][T17789] netlink: 'syz.3.3220': attribute type 33 has an invalid length. [ 308.862765][T17788] macvtap1: entered promiscuous mode [ 308.862784][T17788] hsr0: entered promiscuous mode [ 308.863088][T17788] macvtap1: entered allmulticast mode [ 308.863101][T17788] hsr0: entered allmulticast mode [ 308.863111][T17788] hsr_slave_0: entered allmulticast mode [ 308.863124][T17788] hsr_slave_1: entered allmulticast mode [ 308.930362][T17793] ip6t_ah: unknown flags 5 [ 309.056091][T17794] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3221'. [ 309.110502][T17729] wg0 speed is unknown, defaulting to 1000 [ 309.441727][T17829] netlink: 'syz.2.3229': attribute type 33 has an invalid length. [ 309.445834][T17729] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.445990][T17729] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.446099][T17729] bridge_slave_0: entered allmulticast mode [ 309.447775][T17729] bridge_slave_0: entered promiscuous mode [ 309.450510][T17729] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.450684][T17729] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.451038][T17729] bridge_slave_1: entered allmulticast mode [ 309.452714][T17729] bridge_slave_1: entered promiscuous mode [ 309.487023][T17729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.492609][T17729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.547659][T17729] team0: Port device team_slave_0 added [ 309.549800][T17729] team0: Port device team_slave_1 added [ 309.572114][T17729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.572127][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.572149][T17729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.573452][T17729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.573466][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.573487][T17729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.629493][T17729] hsr_slave_0: entered promiscuous mode [ 309.631001][T17729] hsr_slave_1: entered promiscuous mode [ 309.631830][T17729] debugfs: 'hsr0' already exists in 'hsr' [ 309.631847][T17729] Cannot create hsr debugfs directory [ 309.825246][ T52] Bluetooth: hci2: command tx timeout [ 309.849072][T17729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.937221][T17729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.545152][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 311.915529][ T52] Bluetooth: hci2: command tx timeout [ 312.021490][T17807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.021513][T17807] nci: nci_start_poll: failed to set local general bytes [ 312.041441][T17729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.055666][T17796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.072455][T17729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.073311][T17729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.127237][T17729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.131770][T17729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.160137][T17729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.160963][T17729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.182475][T17729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.287620][T17850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3231'. [ 312.319809][T17729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.368109][T17855] bond22: entered promiscuous mode [ 312.368176][T17855] bond22: entered allmulticast mode [ 312.368646][T17855] 8021q: adding VLAN 0 to HW filter on device bond22 [ 312.408371][T17729] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.413942][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.414016][T15762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.427487][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 312.427781][T17864] netlink: 'syz.4.3234': attribute type 10 has an invalid length. [ 312.470737][T17864] team0: Device wg2 is of different type [ 312.522230][T15788] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.522310][T15788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.747665][T17888] netlink: 'syz.4.3237': attribute type 1 has an invalid length. [ 312.805667][T17888] bond2: (slave geneve2): making interface the new active one [ 312.807365][T17888] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 312.815825][T15792] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 312.818188][T15762] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 312.818424][T15762] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 312.818455][T15762] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 313.330886][T17922] bond23: Removing last ns target with arp_interval on [ 313.432108][T17729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.476051][T17729] veth0_vlan: entered promiscuous mode [ 313.477858][T15795] bond0: (slave bond_slave_0): interface is now down [ 313.477881][T15795] bond0: (slave bond_slave_1): interface is now down [ 313.484600][T17729] veth1_vlan: entered promiscuous mode [ 313.534205][T17729] veth0_macvtap: entered promiscuous mode [ 313.543948][T17729] veth1_macvtap: entered promiscuous mode [ 313.600162][T17729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.623335][T17729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.726961][T15795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.727030][T15795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.727059][T15795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.727086][T15795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.729554][T17943] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3248'. [ 313.729572][T17943] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3248'. [ 313.731099][T17943] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.756402][T17945] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3248'. [ 313.756423][T17945] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3248'. [ 313.760452][T17943] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.877686][T17952] netlink: 'syz.2.3251': attribute type 7 has an invalid length. [ 313.877706][T17952] netlink: 'syz.2.3251': attribute type 8 has an invalid length. [ 313.946515][T17956] sctp: Trying to GSO but underlying device doesn't support it. [ 313.959697][T17958] netlink: 'syz.2.3253': attribute type 2 has an invalid length. [ 313.960371][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'. [ 313.985132][ T52] Bluetooth: hci2: command tx timeout [ 314.965588][T17972] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3256'. [ 314.966110][T17970] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3256'. [ 315.594853][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.959707][T17907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.959730][T17907] nci: nci_start_poll: failed to set local general bytes [ 315.989579][T17901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.013199][T15788] bond0: (slave bond_slave_0): interface is now down [ 316.013219][T15788] bond0: (slave bond_slave_1): interface is now down [ 316.069010][ T52] Bluetooth: hci2: command tx timeout [ 316.097905][T15788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.097923][T15788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.157164][T15762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.157184][T15762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.291449][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 316.361749][T17991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3260'. [ 316.529372][T18002] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3263'. [ 316.966236][T18033] FAULT_INJECTION: forcing a failure. [ 316.966236][T18033] name failslab, interval 1, probability 0, space 0, times 0 [ 316.966272][T18033] CPU: 1 UID: 0 PID: 18033 Comm: syz.4.3269 Not tainted syzkaller #0 PREEMPT(full) [ 316.966291][T18033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.966306][T18033] Call Trace: [ 316.966314][T18033] [ 316.966322][T18033] dump_stack_lvl+0xe8/0x150 [ 316.966353][T18033] should_fail_ex+0x410/0x560 [ 316.966382][T18033] ? __alloc_skb+0x1db/0x7a0 [ 316.966409][T18033] should_failslab+0xa8/0x100 [ 316.966435][T18033] ? __alloc_skb+0x1db/0x7a0 [ 316.966460][T18033] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 316.966481][T18033] ? __alloc_skb+0x18d/0x7a0 [ 316.966507][T18033] ? __alloc_skb+0x1db/0x7a0 [ 316.966539][T18033] __alloc_skb+0x1db/0x7a0 [ 316.966572][T18033] netlink_ack+0x136/0xb30 [ 316.966593][T18033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.966636][T18033] netlink_rcv_skb+0x2a4/0x4a0 [ 316.966660][T18033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.966689][T18033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.966728][T18033] ? down_read+0x2be/0x330 [ 316.966756][T18033] genl_rcv+0x28/0x40 [ 316.966779][T18033] netlink_unicast+0x8ef/0xa80 [ 316.966817][T18033] netlink_sendmsg+0x813/0xb40 [ 316.966850][T18033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.966881][T18033] ? apparmor_socket_sendmsg+0x98/0x360 [ 316.966908][T18033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.966930][T18033] sock_sendmsg_nosec+0x13a/0x180 [ 316.966958][T18033] ____sys_sendmsg+0x54e/0x850 [ 316.966984][T18033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.967014][T18033] ? import_iovec+0x73/0xa0 [ 316.967045][T18033] ___sys_sendmsg+0x2a5/0x360 [ 316.967064][T18033] ? __lock_acquire+0x747/0x2de0 [ 316.967089][T18033] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.967152][T18033] ? __fget_files+0x2a/0x420 [ 316.967169][T18033] ? __fget_files+0x3a2/0x420 [ 316.967197][T18033] __x64_sys_sendmsg+0x1b1/0x290 [ 316.967221][T18033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.967264][T18033] do_syscall_64+0x166/0x520 [ 316.967285][T18033] ? trace_irq_disable+0x3b/0x140 [ 316.967304][T18033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.967323][T18033] ? clear_bhb_loop+0x70/0xc0 [ 316.967346][T18033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.967364][T18033] RIP: 0033:0x7f209ad9e559 [ 316.967386][T18033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.967401][T18033] RSP: 002b:00007f209bd07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.967421][T18033] RAX: ffffffffffffffda RBX: 00007f209b026090 RCX: 00007f209ad9e559 [ 316.967435][T18033] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 316.967446][T18033] RBP: 00007f209bd07090 R08: 0000000000000000 R09: 0000000000000000 [ 316.967457][T18033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.967468][T18033] R13: 00007f209b026128 R14: 00007f209b026090 R15: 00007fff98387268 [ 316.967501][T18033] [ 317.032117][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.032172][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.043101][ T1291] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 317.193426][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.226095][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.235338][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.236255][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.239626][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.411353][ T5615] syz_tun (unregistering): left allmulticast mode [ 317.411370][ T5615] syz_tun (unregistering): left promiscuous mode [ 317.411420][ T5615] bridge0: port 1(syz_tun) entered disabled state [ 317.611836][T18037] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.743634][T18037] wg0 speed is unknown, defaulting to 1000 [ 317.943042][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.943145][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.943361][T18037] bridge_slave_0: entered allmulticast mode [ 317.944381][T18037] bridge_slave_0: entered promiscuous mode [ 317.967218][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.967314][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.967698][T18037] bridge_slave_1: entered allmulticast mode [ 317.969731][T18037] bridge_slave_1: entered promiscuous mode [ 318.011481][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.014228][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.041135][T18037] team0: Port device team_slave_0 added [ 318.042995][T18037] team0: Port device team_slave_1 added [ 318.068193][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.068219][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.068240][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.069394][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.069406][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.069428][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.151066][T18037] hsr_slave_0: entered promiscuous mode [ 318.152045][T18037] hsr_slave_1: entered promiscuous mode [ 318.152745][T18037] debugfs: 'hsr0' already exists in 'hsr' [ 318.152763][T18037] Cannot create hsr debugfs directory [ 318.320849][T18037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.320872][T18037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.429711][T18037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.429733][T18037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.508518][T18037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.508543][T18037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.544928][T15788] bond0: (slave bond_slave_0): interface is now down [ 318.544948][T15788] bond0: (slave bond_slave_1): interface is now down [ 318.550559][T15788] bond0: now running without any active interface! [ 318.603793][T18037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.603817][T18037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.264816][ T52] Bluetooth: hci4: command tx timeout [ 319.604353][T18022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.604374][T18022] nci: nci_start_poll: failed to set local general bytes [ 319.626198][T18037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.632180][T18012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.657717][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.658677][T18037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.683727][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.693212][T18037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.712590][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.713360][T18037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.761332][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.792944][T18066] __nla_validate_parse: 1 callbacks suppressed [ 319.792961][T18066] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3274'. [ 319.877661][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 320.109426][T18037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.174323][T18037] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.204221][T15792] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.204335][T15792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.245356][T15795] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.245456][T15795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.263564][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'. [ 320.391330][T18112] syzkaller1: entered promiscuous mode [ 320.391352][T18112] syzkaller1: entered allmulticast mode [ 320.624940][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.339780][T18037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.355596][ T52] Bluetooth: hci4: command tx timeout [ 321.405191][T18037] veth0_vlan: entered promiscuous mode [ 321.413363][T18037] veth1_vlan: entered promiscuous mode [ 321.449040][T18037] veth0_macvtap: entered promiscuous mode [ 321.452464][T18037] veth1_macvtap: entered promiscuous mode [ 321.479656][T18037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.493583][T18037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.556085][T15792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.556121][T15792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.556160][T15792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.556183][T15792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.274039][T18178] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 323.297984][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 323.315400][T18178] bond1: (slave bridge3): making interface the new active one [ 323.315842][T18178] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 323.435924][ T52] Bluetooth: hci4: command tx timeout [ 324.261782][T18153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.321907][T15786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.321927][T15786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.413902][T15788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.413920][T15788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.434024][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3297'. [ 324.680440][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'. [ 324.806410][T18199] bond3 (unregistering): Released all slaves [ 324.871655][T18216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3306'. [ 324.871677][T18216] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3306'. [ 325.075139][T18228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3308'. [ 325.135082][T18237] ip_tables: iptables: counters copy to user failed while replacing table [ 325.289522][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 325.291670][T18246] netlink: 'syz.2.3313': attribute type 1 has an invalid length. [ 325.291687][T18246] netlink: 'syz.2.3313': attribute type 2 has an invalid length. [ 325.507697][ T52] Bluetooth: hci4: command tx timeout [ 325.529347][T18260] ip_tables: iptables: counters copy to user failed while replacing table [ 325.618895][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 325.641267][T18263] sit0: entered promiscuous mode [ 325.652521][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 325.664709][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 325.688372][T18266] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3320'. [ 325.691494][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 325.715622][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 325.772951][T18269] tc_dump_action: action bad kind [ 325.949143][T18280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3324'. [ 326.034338][T18291] netlink: get zone limit has 4 unknown bytes [ 326.045064][T18272] netlink: 'syz.4.3323': attribute type 2 has an invalid length. [ 326.166184][T18295] netlink: 'syz.2.3329': attribute type 3 has an invalid length. [ 326.210795][T18280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.231649][T18280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.246702][T18280] bond0 (unregistering): Released all slaves [ 326.801089][T18336] IPVS: set_ctl: invalid protocol: 92 172.20.20.19:20003 [ 327.442095][T18376] netlink: 'syz.1.3353': attribute type 10 has an invalid length. [ 327.707309][T18376] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 328.164334][T18413] Bluetooth: MGMT ver 1.23 [ 328.269360][T18424] IPVS: length: 239 != 24 [ 328.504303][T18432] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 328.668387][T18444] netlink: Only one type of NAT may be specified [ 328.668427][T18444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.784177][T18522] netlink: 'syz.1.3395': attribute type 3 has an invalid length. [ 330.037764][T18531] __nla_validate_parse: 19 callbacks suppressed [ 330.037782][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 330.208645][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3402'. [ 330.252159][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3402'. [ 330.382395][T18547] ip_tables: iptables: counters copy to user failed while replacing table [ 330.409237][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 330.714881][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.263486][T18589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3413'. [ 331.264764][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 332.287843][T18609] veth0: entered promiscuous mode [ 332.316211][T18610] Cannot find set identified by id 65534 to match [ 332.326283][T18611] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 332.326965][T18606] veth0: left promiscuous mode [ 332.434224][T18620] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3422'. [ 332.437849][T18610] netlink: 'syz.1.3418': attribute type 3 has an invalid length. [ 332.606480][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3426'. [ 332.606511][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3426'. [ 332.623811][T18629] ip6gretap0: entered promiscuous mode [ 332.642813][T18629] ip6gretap0: left promiscuous mode [ 332.834423][T18641] bridge_slave_0: left allmulticast mode [ 332.834449][T18641] bridge_slave_0: left promiscuous mode [ 332.834722][T18641] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.900070][T18641] bridge_slave_1: left allmulticast mode [ 332.900094][T18641] bridge_slave_1: left promiscuous mode [ 332.902649][T18641] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.971650][T18641] bond0: (slave bond_slave_0): Releasing backup interface [ 333.033007][T18641] bond0: (slave bond_slave_1): Releasing backup interface [ 333.122611][T18641] team0: Port device team_slave_0 removed [ 333.164253][T18641] team0: Port device team_slave_1 removed [ 333.168515][T18641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.168574][T18641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.199608][T18641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.199630][T18641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.223960][T18641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.366852][T18654] sctp: [Deprecated]: syz.2.3437 (pid 18654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.366852][T18654] Use struct sctp_sack_info instead [ 333.393840][T18659] syzkaller0: entered promiscuous mode [ 333.393861][T18659] syzkaller0: entered allmulticast mode [ 333.737713][T18672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.126841][T18685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3444'. [ 334.222459][T18688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3446'. [ 334.281440][T18691] syzkaller0: entered promiscuous mode [ 334.281462][T18691] syzkaller0: entered allmulticast mode [ 334.294789][T18691] tipc: Started in network mode [ 334.294817][T18691] tipc: Node identity ba915f428cfb, cluster identity 4711 [ 334.295125][T18691] tipc: Enabled bearer , priority 0 [ 334.321618][T18690] tipc: Resetting bearer [ 334.490615][T18690] tipc: Disabling bearer [ 334.743074][T18713] syzkaller0: entered promiscuous mode [ 334.743094][T18713] syzkaller0: entered allmulticast mode [ 334.920734][T18721] veth3: entered promiscuous mode [ 334.920759][T18721] veth3: entered allmulticast mode [ 334.986933][T18726] Set syz1 is full, maxelem 2076 reached [ 335.050427][T18733] __nla_validate_parse: 3 callbacks suppressed [ 335.050447][T18733] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3458'. [ 335.050463][T18733] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3458'. [ 335.050476][T18733] netlink: 'syz.3.3458': attribute type 5 has an invalid length. [ 335.050487][T18733] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3458'. [ 335.176979][T18739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3460'. [ 335.221820][T18744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3460'. [ 335.357584][T18746] netlink: 'syz.3.3461': attribute type 61 has an invalid length. [ 335.421288][T18746] gre1: entered promiscuous mode [ 335.421311][T18746] gre1: entered allmulticast mode [ 335.658852][T18767] syzkaller0: entered promiscuous mode [ 335.658873][T18767] syzkaller0: entered allmulticast mode [ 335.755143][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.989462][T18785] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3471'. [ 336.003867][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'. [ 336.017112][T18750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3462'. [ 336.017129][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3462'. [ 336.059351][T18786] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3471'. [ 336.170384][T18791] x_tables: duplicate underflow at hook 1 [ 336.751827][T18816] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 337.328439][T18857] tipc: Started in network mode [ 337.328468][T18857] tipc: Node identity ac1414aa, cluster identity 4711 [ 337.328718][T18857] tipc: New replicast peer: 172.20.20.187 [ 337.329532][T18857] tipc: Enabled bearer , priority 10 [ 337.414888][ T52] Bluetooth: hci3: ISO packet too small [ 337.523609][T18868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.620418][T18871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.644889][T18874] syzkaller0: entered promiscuous mode [ 337.644908][T18874] syzkaller0: entered allmulticast mode [ 337.681692][T18871] hsr0: entered allmulticast mode [ 337.681712][T18871] hsr_slave_0: entered allmulticast mode [ 337.681727][T18871] hsr_slave_1: entered allmulticast mode [ 337.683244][T18871] hsr0: entered promiscuous mode [ 337.684089][T18871] hsr_slave_0: left promiscuous mode [ 337.697524][T18871] hsr_slave_1: left promiscuous mode [ 337.721081][T18871] hsr0 (unregistering): left allmulticast mode [ 337.721116][T18871] hsr0 (unregistering): left promiscuous mode [ 337.909883][T18879] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 338.097291][T18894] block nbd3: server does not support multiple connections per device. [ 338.097787][T18894] block nbd3: shutting down sockets [ 338.137629][T18894] No such timeout policy "s" [ 338.137644][T18894] netlink: Failed to associated timeout policy 's' [ 338.282676][T18901] syz_tun: entered allmulticast mode [ 338.312779][T18900] syz_tun: left allmulticast mode [ 338.437017][T18913] syzkaller0: entered promiscuous mode [ 338.437038][T18913] syzkaller0: entered allmulticast mode [ 338.445061][T13787] tipc: Node number set to 2886997162 [ 338.816875][T18940] tipc: Enabling of bearer rejected, already enabled [ 338.961308][T18957] netlink: 'syz.0.3519': attribute type 2 has an invalid length. [ 338.982146][T18957] tipc: Started in network mode [ 338.982173][T18957] tipc: Node identity 8e312b9c285a, cluster identity 4711 [ 338.982308][T18957] tipc: Enabled bearer , priority 10 [ 339.010791][T18957] macsec1: entered promiscuous mode [ 339.068474][T18956] tipc: Resetting bearer [ 339.092863][T18956] tipc: Disabling bearer [ 339.322608][T18979] vlan0: entered promiscuous mode [ 339.419949][T18982] Unsupported ieee802154 address type: 0 [ 339.515885][T18985] netlink: 'syz.3.3528': attribute type 6 has an invalid length. [ 339.515903][T18985] netlink: 'syz.3.3528': attribute type 5 has an invalid length. [ 339.607031][T15766] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.608381][T15766] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.608425][T15766] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.608443][T15766] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.989761][T19030] ebt_limit: overflow, try lower: 0/0 [ 340.784896][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.701207][T19001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.905667][T19039] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 342.906628][T19043] netlink: 'syz.0.3544': attribute type 10 has an invalid length. [ 342.939758][T19043] team0: Port device dummy0 added [ 343.077940][T19047] tipc: New replicast peer: 172.20.20.187 [ 343.078757][T19047] tipc: Enabled bearer , priority 10 [ 343.401845][T19078] xt_CT: No such helper "pptp" [ 343.554593][T19098] Cannot find set identified by id 0 to match [ 343.596993][T19101] syzkaller0: entered promiscuous mode [ 343.597012][T19101] syzkaller0: entered allmulticast mode [ 343.598864][T19101] 0: reclassify loop, rule prio 0, protocol 700 [ 343.786922][T19109] syzkaller1: entered allmulticast mode [ 344.194765][T13784] tipc: Node number set to 912940866 [ 345.825607][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.270383][T19088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.270406][T19088] nci: nci_start_poll: failed to set local general bytes [ 346.281828][T19073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.424013][T19115] __nla_validate_parse: 26 callbacks suppressed [ 346.424031][T19115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'. [ 346.587723][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 346.659705][T19137] netlink: 'syz.2.3569': attribute type 32 has an invalid length. [ 346.659726][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 346.708440][T19137] bond2: Setting coupled_control to off (0) [ 346.793386][T19142] tipc: Enabling of bearer rejected, already enabled [ 346.886228][T19150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3574'. [ 346.888367][T19152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3575'. [ 347.049996][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'. [ 347.050677][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'. [ 347.098596][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.099073][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.152461][T19155] bridge_slave_0: left allmulticast mode [ 347.152477][T19155] bridge_slave_0: left promiscuous mode [ 347.152634][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.161596][T19155] bridge_slave_1: left allmulticast mode [ 347.161615][T19155] bridge_slave_1: left promiscuous mode [ 347.161785][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.203972][T19155] team0: Port device team_slave_0 removed [ 347.214744][T19155] team0: Port device team_slave_1 removed [ 347.217476][T19155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.219233][T19155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.221729][T19155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.223459][T19155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.253766][T19155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.361639][T19173] syzkaller1: entered promiscuous mode [ 347.361654][T19173] syzkaller1: entered allmulticast mode [ 347.881258][T19202] netlink: 'syz.4.3585': attribute type 1 has an invalid length. [ 347.992352][T19206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3588'. [ 350.008719][T19168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.008742][T19168] nci: nci_start_poll: failed to set local general bytes [ 350.011183][T19160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.201952][T19233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3596'. [ 350.241347][T19239] openvswitch: netlink: IP tunnel dst address not specified [ 350.241378][T19239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.376459][T19251] netlink: NAT attribute has 8 unknown bytes [ 350.376494][T19251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.458185][T19240] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 350.651638][T19256] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 350.710377][T19265] syzkaller0: entered promiscuous mode [ 350.710400][T19265] syzkaller0: entered allmulticast mode [ 350.716393][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3604'. [ 350.829999][T19274] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 350.864164][T19277] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 350.865125][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.966040][T19281] tipc: Enabling of bearer rejected, already enabled [ 351.019374][T19285] TCP: TCP_TX_DELAY enabled [ 351.054494][T19287] Set syz0 is full, maxelem 2 reached [ 351.071341][T19288] tipc: Enabling of bearer rejected, already enabled [ 351.283969][T19301] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 351.387975][T19306] syzkaller0: entered promiscuous mode [ 351.387996][T19306] syzkaller0: entered allmulticast mode [ 351.492490][T19308] __nla_validate_parse: 4 callbacks suppressed [ 351.492510][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 351.605847][T19312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3623'. [ 351.630901][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 351.813142][T19322] macvtap1: left promiscuous mode [ 351.813914][T19322] gre1: left promiscuous mode [ 351.814232][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3630'. [ 351.828388][T19324] netlink: 'syz.2.3628': attribute type 11 has an invalid length. [ 351.883453][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3630'. [ 351.946881][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.981166][T19333] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3631'. [ 351.981185][T19333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3631'. [ 352.118921][T19341] syzkaller0: entered promiscuous mode [ 352.118943][T19341] syzkaller0: entered allmulticast mode [ 352.644418][T19362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3639'. [ 352.678994][T19366] netlink: 'syz.0.3642': attribute type 1 has an invalid length. [ 352.741374][T19366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.767856][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 352.836878][T19370] tipc: Enabling of bearer rejected, already enabled [ 352.951772][T19381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3643'. [ 353.534517][T19407] netlink: 'syz.3.3652': attribute type 62 has an invalid length. [ 353.731263][T19419] x_tables: unsorted underflow at hook 3 [ 353.749067][T19418] netlink: 'syz.1.3657': attribute type 2 has an invalid length. [ 353.769966][T19421] dvmrp0: entered allmulticast mode [ 354.166904][T19442] tipc: Enabling of bearer rejected, already enabled [ 354.243763][T19453] netlink: 'syz.0.3669': attribute type 97 has an invalid length. [ 354.243786][T19453] netlink: 'syz.0.3669': attribute type 97 has an invalid length. [ 354.353504][T19459] pim6reg: entered allmulticast mode [ 354.360390][T19459] veth1_to_hsr: entered allmulticast mode [ 354.360624][T19459] pim6reg: left allmulticast mode [ 354.360717][T19459] veth1_to_hsr: left allmulticast mode [ 354.411250][T19459] netlink: 'syz.0.3672': attribute type 32 has an invalid length. [ 354.464221][T19459] bond4: option coupled_control: invalid value (118) [ 354.474515][T19459] bond4 (unregistering): Released all slaves [ 354.812184][T19492] netlink: 'syz.2.3680': attribute type 5 has an invalid length. [ 355.914765][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.945766][T15786] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.946759][T15786] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.946795][T15786] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.946825][T15786] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.649170][T19552] lo speed is unknown, defaulting to 1000 [ 357.649232][T19552] lo speed is unknown, defaulting to 1000 [ 357.650149][T19552] lo speed is unknown, defaulting to 1000 [ 357.677506][T19552] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 357.677539][T19552] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 357.677584][T19552] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 357.748294][T19552] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 357.766721][T19492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.852418][T19552] lo speed is unknown, defaulting to 1000 [ 357.865664][T19552] lo speed is unknown, defaulting to 1000 [ 357.871898][T19552] lo speed is unknown, defaulting to 1000 [ 357.879940][T19552] lo speed is unknown, defaulting to 1000 [ 358.019388][T19552] lo speed is unknown, defaulting to 1000 [ 358.045233][T19552] lo speed is unknown, defaulting to 1000 [ 358.051797][T19552] lo speed is unknown, defaulting to 1000 [ 358.062780][T19552] lo speed is unknown, defaulting to 1000 [ 358.072047][T19552] lo speed is unknown, defaulting to 1000 [ 358.276362][T19575] __nla_validate_parse: 19 callbacks suppressed [ 358.276381][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'. [ 358.395683][T19583] syzkaller0: entered promiscuous mode [ 358.395706][T19583] syzkaller0: entered allmulticast mode [ 358.403717][T19578] ------------[ cut here ]------------ [ 358.403729][T19578] sp->magic != HWSIM_STA_MAGIC [ 358.403743][T19578] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1cec/0x2580, CPU#1: syz.2.3707/19578 [ 358.438814][T19578] Modules linked in: [ 358.442731][T19578] CPU: 1 UID: 0 PID: 19578 Comm: syz.2.3707 Not tainted syzkaller #0 PREEMPT(full) [ 358.452182][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.462294][T19578] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 358.468255][T19578] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 75 b9 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 67 b9 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 358.487896][T19578] RSP: 0018:ffffc900124ceb80 EFLAGS: 00010287 [ 358.493957][T19578] RAX: ffffffff873d570b RBX: 0000000000000000 RCX: 0000000000080000 [ 358.501966][T19578] RDX: ffffc9000e899000 RSI: 0000000000000194 RDI: 0000000000000195 [ 358.509961][T19578] RBP: ffffc900124ced10 R08: ffff888054575c8f R09: 0000000000000000 [ 358.517950][T19578] R10: ffff888054575c80 R11: ffffffff873d3a20 R12: dffffc0000000000 [ 358.525933][T19578] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92002499dbc [ 358.533893][T19578] FS: 00007f12196ba6c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 358.542832][T19578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.549429][T19578] CR2: 0000001b3370dff8 CR3: 000000005bbb4000 CR4: 00000000003526f0 [ 358.557416][T19578] Call Trace: [ 358.560693][T19578] [ 358.563627][T19578] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 358.569124][T19578] ieee80211_tx_frags+0x3df/0x890 [ 358.574157][T19578] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 358.579729][T19578] __ieee80211_xmit_fast+0xabf/0x2160 [ 358.585120][T19578] ? __lock_acquire+0x747/0x2de0 [ 358.590052][T19578] ? __flow_hash_from_keys+0x431/0x6c0 [ 358.595521][T19578] ? cfg80211_classify8021d+0x67e/0x1220 [ 358.601152][T19578] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 358.606998][T19578] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 358.612804][T19578] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 358.618547][T19578] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 358.624092][T19578] ? lock_acquire+0x115/0x350 [ 358.628790][T19578] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 358.634874][T19578] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 358.641017][T19578] __ieee80211_subif_start_xmit+0x706/0x1770 [ 358.647045][T19578] ? sock_alloc_send_pskb+0x878/0x990 [ 358.652420][T19578] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 358.658860][T19578] ? vfs_write+0x612/0xba0 [ 358.663267][T19578] ? ksys_write+0x150/0x270 [ 358.667781][T19578] ? do_syscall_64+0x166/0x520 [ 358.672537][T19578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.678633][T19578] ieee80211_subif_start_xmit+0xf1/0x570 [ 358.684258][T19578] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 358.690515][T19578] ? netif_skb_features+0x8ba/0xf20 [ 358.695730][T19578] ? __pfx_netif_skb_features+0x10/0x10 [ 358.701264][T19578] ? __lock_acquire+0x747/0x2de0 [ 358.706224][T19578] dev_hard_start_xmit+0x2cd/0x830 [ 358.711335][T19578] __dev_queue_xmit+0x14d1/0x3920 [ 358.716386][T19578] ? __dev_queue_xmit+0x29b/0x3920 [ 358.721499][T19578] ? _copy_from_iter+0x21b/0x1660 [ 358.726522][T19578] ? skb_set_owner_w+0x263/0x3d0 [ 358.731449][T19578] ? __pfx___dev_queue_xmit+0x10/0x10 [ 358.736833][T19578] ? __pfx__copy_from_iter+0x10/0x10 [ 358.742123][T19578] ? __pfx_packet_parse_headers+0x10/0x10 [ 358.747869][T19578] ? packet_xmit+0x68/0x330 [ 358.752357][T19578] ? skb_put+0x112/0x210 [ 358.756613][T19578] packet_sendmsg+0x3f11/0x51a0 [ 358.761461][T19578] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 358.766852][T19578] ? lock_acquire+0x115/0x350 [ 358.771520][T19578] ? aa_file_perm+0x18b/0x15f0 [ 358.776293][T19578] ? __pfx_packet_sendmsg+0x10/0x10 [ 358.781491][T19578] ? aa_sk_perm+0x713/0x900 [ 358.786042][T19578] ? __futex_wait+0x358/0x400 [ 358.790713][T19578] ? __pfx_aa_sk_perm+0x10/0x10 [ 358.795595][T19578] ? aa_sock_msg_perm+0x144/0x210 [ 358.800621][T19578] ? apparmor_socket_sendmsg+0x98/0x360 [ 358.806196][T19578] ? __pfx_packet_sendmsg+0x10/0x10 [ 358.811389][T19578] sock_sendmsg_nosec+0x13a/0x180 [ 358.816436][T19578] sock_write_iter+0x2de/0x3e0 [ 358.821184][T19578] ? __pfx_sock_write_iter+0x10/0x10 [ 358.826481][T19578] ? bpf_lsm_file_permission+0x9/0x20 [ 358.831830][T19578] ? security_file_permission+0x75/0x260 [ 358.837484][T19578] vfs_write+0x612/0xba0 [ 358.841720][T19578] ? __pfx_vfs_write+0x10/0x10 [ 358.846498][T19578] ? __fget_files+0x2a/0x420 [ 358.851073][T19578] ksys_write+0x150/0x270 [ 358.855420][T19578] ? __pfx_ksys_write+0x10/0x10 [ 358.860270][T19578] do_syscall_64+0x166/0x520 [ 358.864879][T19578] ? trace_irq_disable+0x3b/0x140 [ 358.869889][T19578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.875970][T19578] ? clear_bhb_loop+0x70/0xc0 [ 358.880640][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.886538][T19578] RIP: 0033:0x7f121879e559 [ 358.890944][T19578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.910569][T19578] RSP: 002b:00007f12196ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.919002][T19578] RAX: ffffffffffffffda RBX: 00007f1218a25fa0 RCX: 00007f121879e559 [ 358.926984][T19578] RDX: 000000000000001c RSI: 0000200000000f80 RDI: 000000000000000b [ 358.934967][T19578] RBP: 00007f1218835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 358.942919][T19578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.950924][T19578] R13: 00007f1218a26038 R14: 00007f1218a25fa0 R15: 00007ffe695002c8 [ 358.958927][T19578] [ 358.961955][T19578] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.969219][T19578] CPU: 1 UID: 0 PID: 19578 Comm: syz.2.3707 Not tainted syzkaller #0 PREEMPT(full) [ 358.978571][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.988608][T19578] Call Trace: [ 358.991873][T19578] [ 358.994790][T19578] vpanic+0x56d/0xa60 [ 358.998767][T19578] ? __pfx__printk+0x10/0x10 [ 359.003344][T19578] ? __pfx_vpanic+0x10/0x10 [ 359.007843][T19578] ? is_bpf_text_address+0x292/0x2b0 [ 359.013115][T19578] ? is_bpf_text_address+0x26/0x2b0 [ 359.018309][T19578] panic+0xc5/0xd0 [ 359.022022][T19578] ? __pfx_panic+0x10/0x10 [ 359.026440][T19578] __warn+0x315/0x4c0 [ 359.030406][T19578] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 359.035680][T19578] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 359.040955][T19578] __report_bug+0x276/0x570 [ 359.045451][T19578] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 359.050721][T19578] ? __pfx___report_bug+0x10/0x10 [ 359.055741][T19578] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 359.061447][T19578] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 359.066716][T19578] report_bug+0x16b/0x220 [ 359.071033][T19578] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 359.076302][T19578] ? mac80211_hwsim_tx+0x1cee/0x2580 [ 359.081573][T19578] handle_bug+0x9c/0x200 [ 359.085802][T19578] exc_invalid_op+0x1a/0x50 [ 359.090293][T19578] asm_exc_invalid_op+0x1a/0x20 [ 359.095152][T19578] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 359.101033][T19578] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 75 b9 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 67 b9 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 359.120621][T19578] RSP: 0018:ffffc900124ceb80 EFLAGS: 00010287 [ 359.126676][T19578] RAX: ffffffff873d570b RBX: 0000000000000000 RCX: 0000000000080000 [ 359.134630][T19578] RDX: ffffc9000e899000 RSI: 0000000000000194 RDI: 0000000000000195 [ 359.142582][T19578] RBP: ffffc900124ced10 R08: ffff888054575c8f R09: 0000000000000000 [ 359.150552][T19578] R10: ffff888054575c80 R11: ffffffff873d3a20 R12: dffffc0000000000 [ 359.158504][T19578] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92002499dbc [ 359.166462][T19578] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 359.171907][T19578] ? mac80211_hwsim_tx+0x1ceb/0x2580 [ 359.177208][T19578] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 359.182665][T19578] ieee80211_tx_frags+0x3df/0x890 [ 359.187696][T19578] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 359.193240][T19578] __ieee80211_xmit_fast+0xabf/0x2160 [ 359.198604][T19578] ? __lock_acquire+0x747/0x2de0 [ 359.203533][T19578] ? __flow_hash_from_keys+0x431/0x6c0 [ 359.208985][T19578] ? cfg80211_classify8021d+0x67e/0x1220 [ 359.214610][T19578] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 359.220428][T19578] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 359.226215][T19578] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 359.231929][T19578] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 359.237466][T19578] ? lock_acquire+0x115/0x350 [ 359.242124][T19578] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 359.248184][T19578] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 359.254320][T19578] __ieee80211_subif_start_xmit+0x706/0x1770 [ 359.260294][T19578] ? sock_alloc_send_pskb+0x878/0x990 [ 359.265653][T19578] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 359.272048][T19578] ? vfs_write+0x612/0xba0 [ 359.276447][T19578] ? ksys_write+0x150/0x270 [ 359.280927][T19578] ? do_syscall_64+0x166/0x520 [ 359.285674][T19578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.291730][T19578] ieee80211_subif_start_xmit+0xf1/0x570 [ 359.297350][T19578] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 359.303578][T19578] ? netif_skb_features+0x8ba/0xf20 [ 359.308766][T19578] ? __pfx_netif_skb_features+0x10/0x10 [ 359.314293][T19578] ? __lock_acquire+0x747/0x2de0 [ 359.319224][T19578] dev_hard_start_xmit+0x2cd/0x830 [ 359.324333][T19578] __dev_queue_xmit+0x14d1/0x3920 [ 359.329350][T19578] ? __dev_queue_xmit+0x29b/0x3920 [ 359.334461][T19578] ? _copy_from_iter+0x21b/0x1660 [ 359.339467][T19578] ? skb_set_owner_w+0x263/0x3d0 [ 359.344386][T19578] ? __pfx___dev_queue_xmit+0x10/0x10 [ 359.349758][T19578] ? __pfx__copy_from_iter+0x10/0x10 [ 359.355043][T19578] ? __pfx_packet_parse_headers+0x10/0x10 [ 359.360747][T19578] ? packet_xmit+0x68/0x330 [ 359.365232][T19578] ? skb_put+0x112/0x210 [ 359.369458][T19578] packet_sendmsg+0x3f11/0x51a0 [ 359.374302][T19578] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 359.379677][T19578] ? lock_acquire+0x115/0x350 [ 359.384348][T19578] ? aa_file_perm+0x18b/0x15f0 [ 359.389099][T19578] ? __pfx_packet_sendmsg+0x10/0x10 [ 359.394283][T19578] ? aa_sk_perm+0x713/0x900 [ 359.398776][T19578] ? __futex_wait+0x358/0x400 [ 359.403437][T19578] ? __pfx_aa_sk_perm+0x10/0x10 [ 359.408273][T19578] ? aa_sock_msg_perm+0x144/0x210 [ 359.413292][T19578] ? apparmor_socket_sendmsg+0x98/0x360 [ 359.418827][T19578] ? __pfx_packet_sendmsg+0x10/0x10 [ 359.424016][T19578] sock_sendmsg_nosec+0x13a/0x180 [ 359.429031][T19578] sock_write_iter+0x2de/0x3e0 [ 359.433783][T19578] ? __pfx_sock_write_iter+0x10/0x10 [ 359.439060][T19578] ? bpf_lsm_file_permission+0x9/0x20 [ 359.444416][T19578] ? security_file_permission+0x75/0x260 [ 359.450042][T19578] vfs_write+0x612/0xba0 [ 359.454276][T19578] ? __pfx_vfs_write+0x10/0x10 [ 359.459029][T19578] ? __fget_files+0x2a/0x420 [ 359.463607][T19578] ksys_write+0x150/0x270 [ 359.467922][T19578] ? __pfx_ksys_write+0x10/0x10 [ 359.472767][T19578] do_syscall_64+0x166/0x520 [ 359.477344][T19578] ? trace_irq_disable+0x3b/0x140 [ 359.482359][T19578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.488420][T19578] ? clear_bhb_loop+0x70/0xc0 [ 359.493078][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.498953][T19578] RIP: 0033:0x7f121879e559 [ 359.503355][T19578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.522951][T19578] RSP: 002b:00007f12196ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.531347][T19578] RAX: ffffffffffffffda RBX: 00007f1218a25fa0 RCX: 00007f121879e559 [ 359.539304][T19578] RDX: 000000000000001c RSI: 0000200000000f80 RDI: 000000000000000b [ 359.547259][T19578] RBP: 00007f1218835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 359.555210][T19578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.563161][T19578] R13: 00007f1218a26038 R14: 00007f1218a25fa0 R15: 00007ffe695002c8 [ 359.571129][T19578] [ 359.574413][T19578] Kernel Offset: disabled [ 359.578729][T19578] Rebooting in 86400 seconds..