last executing test programs: 6m7.684040755s ago: executing program 0 (id=8736): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) shutdown(r3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r3, 0x1, 0x6, 0x7}) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/84, 0x54}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000240)=""/172, 0xac}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}], 0x4, 0x2000, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m7.298058042s ago: executing program 0 (id=8740): r0 = socket(0x848000000015, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0xf3f6) recvmsg(r2, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40000000) (async) recvmsg(r2, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}}, 0x4) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b10000000000e5e049d5c7950000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000900)=0xe1d, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8000, r8}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r8, r10}, 0xc) 6m6.871215062s ago: executing program 0 (id=8743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000100001000000000000000000fe8000000000000000000000001400aa00000000000000000000ffffe000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000af000000000000001c001700000000000000000000000000fdffffff00000000000000004c001400636d61632861657329"], 0x158}}, 0x0) 6m6.61751871s ago: executing program 0 (id=8747): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) 6m6.46256025s ago: executing program 0 (id=8749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 6m5.885941753s ago: executing program 0 (id=8754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x7}, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x8844) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf0, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc3, 0x3, "d4c151543c088e3f7ca3e1e9af7cff0b02cdf5768f6a45938931ff0f7a5e3142d9be63bd8dd936f941e4f5e9ed366ca2224a5aa87c41b0bec993401db235474efaaf7f12ae4fb7f1e508dda7a8f37af2ca2e2a048256aa1ac22b852aefafff98de67e82097968d1e0585f5c96248ab6fde512b9187d6cff116c30ebaa412b5d4b65c13933e251583e5a794a21a6c678edc47a77c84ad09bc57041faf6884284cdf8624cbd61f61eb49e08be24297adea4154537a31c62e9c34b223ceeca002"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000014}, 0x801) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x40100) 5m50.657977845s ago: executing program 32 (id=8754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x7}, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x8844) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf0, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc3, 0x3, "d4c151543c088e3f7ca3e1e9af7cff0b02cdf5768f6a45938931ff0f7a5e3142d9be63bd8dd936f941e4f5e9ed366ca2224a5aa87c41b0bec993401db235474efaaf7f12ae4fb7f1e508dda7a8f37af2ca2e2a048256aa1ac22b852aefafff98de67e82097968d1e0585f5c96248ab6fde512b9187d6cff116c30ebaa412b5d4b65c13933e251583e5a794a21a6c678edc47a77c84ad09bc57041faf6884284cdf8624cbd61f61eb49e08be24297adea4154537a31c62e9c34b223ceeca002"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000014}, 0x801) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x40100) 11.378454455s ago: executing program 2 (id=11983): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000044) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000006c0)=0x40, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89e0, 0x500) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r5, 0x0, 0x0) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r10, 0x107, 0xc, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0xc6, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.869355558s ago: executing program 2 (id=11988): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e22, 0x0, 0x4e23, 0x1, 0xa, 0x20, 0x90, 0x3c}, {0x7, 0x10, 0x4, 0xb, 0x6, 0xe6, 0xffffffffffffffff, 0x400}, {0x4, 0x7, 0xffffffffffffffff, 0x10000}, 0xfffffff9, 0x6e6bbb, 0x2, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d5, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x4, 0x2, 0x4, 0x7, 0x5, 0x1}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x20000000, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040005}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r10, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r12, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc4}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r12, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="140a7c00"/19], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 10.239369872s ago: executing program 2 (id=11994): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 10.096534197s ago: executing program 2 (id=11996): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a048a000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) 10.000155783s ago: executing program 2 (id=11998): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYRES64=r0, @ANYRES64, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) (async) close(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYRES64=r0, @ANYRES64, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) 9.837742693s ago: executing program 2 (id=12000): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000008069"], 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000040)='\'\x00', 0x101082, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x7fff]}, {0xc, 0x5, 0x3, 0x40}}, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x6}) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000340)="2bf700e7290ca84cba2fb27f9e14cb63484f26c216b41b108a67c17637703228b7d5826b2518bdb4db27d02c308fde28709f8a5d3aa3a356bdae454a030bc3c2e1ee92459e730cff746d7da75d60b676e138b04db5dded134620ea4900bcfa4b8552b1b9bc1ca8bfdcb2d410d380b2641284cf204894ca34d573382b3a43305c839ac0d457c7258ad2b46ce5cc0eded90dcea1cd1a85cb8c774a45558e611501e56bd1e306659e04ee52662a51e5f7e5ee22eb564a19") sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000040001901feffffffac03200001ff12000200428015000a008f349200800a006f8a000280"], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 8.003351056s ago: executing program 5 (id=12016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) 7.822020273s ago: executing program 5 (id=12018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) close(r1) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0xf6, "26aadf71ca4862ccb9a5236a9dae34a95e64f1f30b8bc2d0b18ffa312bce5c349ed52e219deca02afd2b7733256c6b4d188e49fb7f9e5883c36c04bb07d31af08e66727da480cf980e26b660daaa010b10996100afd7b5b0e2cd65712bbb5e93cc6d4c5f42f6ca1d8f86fe68b2b1434c9512cdce7a6b4aac21219bfaf9923b5f14e52146284982cb30631c4425e867ccf9772b5813243af64a457d03ef04bfca41ee7e85d5e06574f751a1819507915c5ba1925dd62ccff161fc9f023fa1e2f4b031d62a6e021cd2e113def19c1526c7c94fd6b9563d07f583a459d24d49d49c9c2e2c1702b8dda2fe96befa1773b12353d87f345c74"}, &(0x7f00000004c0)=0xfe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.31465768s ago: executing program 1 (id=12040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040014) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000ac0)="fc4c", 0x2}], 0x1}}], 0x1, 0x4c040) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x10, 0x3}, {0xfff2, 0xffff}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r9, @ANYBLOB="c3041f000000933b168f00000000009e1507dde461bb373471ba48c4c3404208252f9a8f0ff459898765ec9317b1ea10a40af4d40399e1b2299892f7916d38a114c7e6857d3b5bce08de7a1374f2cf60c346a00a6f5f27a932c1552f63577996f17c6d66f328959513d4f74fbf5bc8", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r5, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x38}}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r5, 0x800, 0x6, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8c1) 3.462888321s ago: executing program 3 (id=12045): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) 3.078835391s ago: executing program 4 (id=12047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'memory'}, {0x2d, 'devices'}, {0x2b, 'net'}, {0x2b, 'io'}, {0x2b, 'rdma'}]}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.879650727s ago: executing program 4 (id=12048): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) recvmsg(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000000) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 2.747668944s ago: executing program 1 (id=12049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000006f0c000000000000000000000095000073f925ca1d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x91}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001480)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000014c0)=[{0x4, 0x4, 0xb, 0xa}, {0x3, 0x3, 0x4, 0x2}, {0x3, 0x1, 0x3}, {0x5, 0x2, 0x7, 0x7}, {0x2, 0x3, 0x1, 0x1}, {0x4, 0x2, 0xb, 0xa}, {0x2, 0x3, 0x3, 0x8}], 0x10, 0x5}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x91}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001480)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000014c0)=[{0x4, 0x4, 0xb, 0xa}, {0x3, 0x3, 0x4, 0x2}, {0x3, 0x1, 0x3}, {0x5, 0x2, 0x7, 0x7}, {0x2, 0x3, 0x1, 0x1}, {0x4, 0x2, 0xb, 0xa}, {0x2, 0x3, 0x3, 0x8}], 0x10, 0x5}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000016c0)={r5, 0x0, 0x7d, 0x0, &(0x7f0000001600)="333002bd08e5360674ddd0791ffb72c62e7206fc7587e793699329b80d8c76fa00b82dcb4fde9ae4a0cf03816a75d43b9ba87d4d2fbfd54a80779d414dc01f47e9369b5ef2315c7713d754f59d48412d5eb08e0bbfadc2de173aa8d13acf1c81f4b996a9db9855571844ce44b3416ba3bd115cabe88f66bb204156264f", 0x0, 0x8, 0x0, 0xa, 0x0, &(0x7f0000001680)="983feae794daf5f03976", 0x0, 0x2, 0x0, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00@\x00'], 0x18}, 0x0) 2.462171558s ago: executing program 3 (id=12050): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x6, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff0008000100150008"], 0x70}, 0x1, 0x0, 0x0, 0x2800}, 0x40) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x30008087, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000140)={0x3ff, 0x1, 0x5, 0x8}, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) (async) listen(r7, 0x6f6) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f00000033c0)={'icmp6\x00'}, &(0x7f0000003400)=0x1e) (async) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000003540)=0xffffffffffffffff, 0x4) (async) sendmmsg(r9, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) (async) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.255734844s ago: executing program 3 (id=12051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c2ebae653d49b47a5000000fcffffff698f4e5d7f23defd09000000a199be4a8bfd7cbacbae982aeaf4fa2f0e20d553d94c38cfdf0decc31f881c84da009eb995cc940209540c343f61d8bc2ee512183385f62f51876d46cd8ce6f675be394c87d6b46fd2b354cfbe029787ec5393efd9b0c57c5cfeba21e650f34cb58d4e6cc2874b28ec6f26b8a29e36896753ca494da4b71390514ec4ef9b2241985c3b7128b2763f2e34ded85e54c535335c3153c4d888c20193f8dcf5d1b5d2541f4b515c9481b865404a060025ae13db980f846c5947f5eda8976ad4b4547c5b994def14"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cd6a812a00000000000000000900000008001400000000000500150000000000050013000000"], 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000063c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000006400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f00000064c0)={0x0, 0x5a, &(0x7f0000006480)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRESOCT=r7], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf252d00000008002f000a000000080002000f3db4ce7aca979023a8df28542579c9a64944c9b3f494802d", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x24088005) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r8, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.012602466s ago: executing program 1 (id=12052): r0 = socket(0x840000000002, 0x3, 0xff) shutdown(r0, 0x1) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r1, 0xee01}}]}, 0x28}}, 0x0) (async, rerun: 32) r2 = getgid() (async, rerun: 32) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000004800), 0x1, 0x0) r4 = socket(0x26, 0x3, 0x8) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x3c, 0x0, 0x0) (async) r6 = getpid() (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r9 = getgid() (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x30, 0x12, 0x2fa9ccd93d5c0297, 0x70bd28, 0x0, {0x7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004bc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xf4) (async) r13 = getgid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r15, &(0x7f0000001780)='ns/ipc\x00') r16 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r17}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006180)={0x0, 0x0, 0x0}, &(0x7f00000061c0)=0xc) sendmmsg$unix(r0, &(0x7f0000006240)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)="edc77ff5f0731b105ebb1796602bad6a484f0dc99d1f79983d19ba4871650be3fa25c6cb12e07db046be17d2a3c76c6f50e718f2111c8ad15b463e86590e7426a2b70b3aa232", 0x46}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xc8, 0x1}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="38e0ade8e3cee4736ad3061ef3c6b5eae02943e452ea67057ef01f67a5ac65a99ef1a135eee17b54d47d73116127eff78a76055835c3076930b708657a57c495ca07a33547ff6522794ebcc9462f4d3e358a44d55ba82b6595563ce15ce87d1a86c128", 0x63}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000450e9f2fe7e1cb654e03e800001c0000000059d1e5d68ae99030040c84408a4cfc0d1728960255c921f05a36d1126ea28732ba882275ea4739749afaa4dd60d709b9507143b0b506f49f7184e14b125affab42b7659feca300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x1}}, {{&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f40)="6f77500506a9d3e47b16df1f8868f2ab2fb971a64c004565c209d4d7cbf8be8719cf39f8cfe098aea2044df83d90a6a776cf94dbe1626187e6ea2e6e37bd8930132ebe2561029fa97f539d08d16657f7fbf0676e390274dc7592be87d063a7b1262c9749d73327153b097e3496aa8840187e5be1a905341aa804242b72f65ab6cbcb7773c5685a8a18156bd137c7bbc18491d4ec2c8c002e5d74d2a2d0079b2333f8f9160e9468fc78d9bfe01c4a86d1cd00df7083a1ec7543d0ef51710e0c47aaf70aa28790d9059a", 0xc9}, {&(0x7f0000002040)="45a409f2737a8256", 0x8}], 0x2, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}], 0x40, 0x848}}, {{&(0x7f00000022c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004780)=[{&(0x7f0000002340)="96349d193d8e6fead657051a7449ec513df762e24ef2cf4714d3f64cdcd4718d139cbe90a057eb981f0b5668d4148f2eea0fb346fefe0ae5bfd8bc27f99348a5d2b4", 0x42}, {&(0x7f00000023c0)="f53693f92bf4c90fa22243d4414db71ceb243d9ec267ccbacfedb962ed99bc9a3d7375c2cd58becffc995ceef6943f243f861867c7b3e3fbe678ce8d3ecb67a3b873d25c2d82abb6160cf80cbfd4155f43b5a22e6f3cc4e771c0cfb71cf4036d0130a2b961637823e33ab6cfdf41a50d58ac55dbeaf878bf3f86f6230fbba6bcb7bf281dac1d19fe0dac72c070c1150949dcd0dce115c2f0420f0fffe46b5e70c5a0e347110865426aa461d3f8110d9bed2c52a448de45536c32d60e244ed36998a98436767aaf492ba6271f6a4433ea11640440d64f791a9fbef7f88d7314d158d3fb2f273aab8b06ee45fe056a2b6249155b9b2e51224a668f88bbff2e647a478afc338ae333be82b9b3a58db41dadf0f1d39d2c4d619791a41a0af5a354faeeb6be70c58461805e80dd9862f8d8acdf99cca19a7332ece795633fbf03d33a7b40d5e8fd485d1cc5ea84d1ff456d03c719c65bd01c4631979161651a9b160ffe0b313ff04d3c147b89ba797c719482e39d2c22da7817f5549adaa0be61ba9e3640ff78f4f347afd1295f86b8465136678a47afb74aad8d1eef08c6fdb432b462c355b903329da3fe6e840d5629698ec955eb65b3a362fed3bc26d31ce07a08a123ec4480382341f0bf89afb6406eb122946eb419b92a61c9e2953ac4dd20f310eea7567a22b09669ea1cadba8f78d40c9f1062c225c6b5158287466abc7381be30fca548ee89bee4f261714c55b327a7af830bfc43bed66dc54fe843a6f1ac1ddac72aa247c1ab83e3e1126cd8f147ca35cb9266116036f1ec947a57f2992f9777b9d7f70247467c157f72f20601d1446100aea42541f0656bbd39936493623a5b13f24f992ce853da65a3b3d2b701343ca9f3a6bc070c0235eca713380bd2f55860fa7a9948138eb189d035fd86fa244fa8c72bd8ef2d28a0b69e521fe909aa3ae775326301c39a16fbc89b1214756905f1c4f6c8190e63ce25a0015a976abe6b0f4cc92bc646388a8b0515c1eed3b5f7ffd63df9f763c8e6e2986a5dfd26704ab21ad232b7380e3ca205fcdae76ad0e1cb896b3c12f3a679e9001818003d74efe7226a2767315976567f57775861ad11d544848d42f5f1bb0085c01fbe4cd12ce6f985ac8de97c94e4b92c76900310211b9e7a1c61616a7bdb6f8680aa4a1bc564f2cc119d672437eb9ae58254e344f312e8291a4daed605d17fa05780485c41948a92d8e3c4a918104aedb11183530df94040b131bd8c6ee55b4608cda5b8f3ac6f77083d668de0ce4ea0ebe4ea6cc2f9fb6dad862fa8f1f049d40937013af938a60f88f4b518ad71b6e4bf22b1237196b79178959855fc7c1663b12212819b44e21232dd95981d48a21196dc7a08eb8eeac4e1201be1122b4a67d05f2514b56ff3ca84a9c98c286d9adfbb9465b1b8f96a657fc0d5271602a0ba2e8e4a2d259acfbb09df11612b86402a81a7c99360559ac5cd263bed7f4a7360d280f9859a55567da7cf32b47b6ab7c52fd0e0e03fe0ffb2b00d56cc12cea8974d6aa1f1b77795c12bb3ca4b862895fefe54b6ea2b28261893c6b2eaac7d55565804131341985ad6b2d931a037761dd4547e28f8df4c91cd50ae5089f80154f1df5d2f5e1b389c87025cb4a06e805134384f97db83851281d83e2f52215a25403a1b7c61269af1fdb5f302442864e24fd5da7b633aa8dccb51785920d6e7041a78225d0c3664e651bd60e873bb9f2fe81bb3574e2b8eeb9f1a3fdfca84c55bdb1c68d2d368e508840df4afcd6ae36047edcb8474bc7c9bcbb9b2d16942c6bfb9c8c53f9f982d2bcd66435aec23df9db3cea4f84f1fea9097d51843e087cb889ac2ec6635a2ac1fc68c145ec5798560354ea535f18471924f740a97199713d415c355412a925ab2326ae81b936f17cb837eb73a82bc41e3d2d41e5a44348741aefe3bc9a6d24d924e7fc41f29412cd5ccafb9b225e9851de818a8caeca1bc373d93a05054dfd9d23e5a3a2be56db22dca82e26e5079bab2b8e963c6307cdd07d2de836a5d3f7651241e3f63663dbb40a8951d5f6f730ec30b4b63ca0816a70539d01e37bdf8c53ab4af1521723120d4b62cfc766a0676a497827aed575816e638b5c16c4afb9a06f3dc80ccc099d26646c006d595cd6453b50a3c9da1bdb3b7697eef067ead628c24bf6ecb7fdaf8ab7fdc7ae8b0354fbea462ff9856693a434fd5e025939401fcc3756ab061282adc1e773cf451c38d7100e7a7f571f0c3ec319573baeb61773b17f83e97bf8731f290aa2806f924fcc031f33f1032960fd2f912c8e5601c8bfcecb2e58085cb75b2c356c8ce29fc6d136074bbb29f73b48ca74ca83e4c7b3f03c4b84b5c46575982660d73809034df8c824bb1063db416497b3523d326c80f7bde6cb4ae4d5912db0526956e9685668ee5ebd1290fe3921298aca931a008cee576e57c04017e337c59b8f817170989928a63009f1a738512b4135b5a91a2a2fea6f3371b5bd8aa4b1f874d9cefcf0d1cde320bd2ed1abe13a0613c68fb2fbe6108a90d81c605a0038d44fa524026892edd9c198fa166df1323a139871f141ba07c054b7353f699225e032c2f50227fa01602553535278305f8874a0f5d37cc117ef596746054510adafc19e87667fc42f5c9caa7d98646ebbb55e9c89e2650ca27744d2c341134c3a09e0a18044aad23d105f6c60850531074afbcfd71d61c339f74d2812c24d4eada4d829ac3bd0e8f78cf4f65f4592c6f45bb4f9e13ebe612f66b674576557f99c83270a59067ace24ffdc6f8e3d49ac1da41f03b40e318b50eaa0bfa6b3bb85fc1525fce1a2625b7fd1eb069a5beb6700ff9094cf7f1dbc7edc58ee50ccda150949781acd44b555be709ba679839df7c2aa2f1aadc6621323b1e967110a95a67a9bec1acdc09f3caad6c7315976e0bdad3ac7cb74a06603eddf3be8cc0c23b953f1f17a48d96b9b323f7f2a2cc6adcd1d81f6f772aeb28737d97ce15ce078dcac5ff5ddfddc18a811bbb923832140bbb89c9029795d9f3210263954a81d231c5c7353e9afdeee5f42c260da4956e55839981c39ead064771983cb557ee322d7287b0a30ec0fe481c1a476a4472f011057f4e076dfb3af92587b6660eec254cbc196ec148c30fab1805367c99db862779ab9117d0c21b649995357d4bc358865e17a20f1938adf67929ca5daa6e1fc860ab6a91ab495a2aea6f497bf6c0ff401c7e827a9981d67e5e139fcccb9923161c85b76aa874e4c734c79bb707c0aa15e4a3bf10872f42f4061e0c48a555a3bcf31352f062b4abee69b029707494cbea6493ccc493c0d499eba1dd93d9ff46d4efa99b7aa9462f945fa65a124e7a76b6fb5826bc5e46380707a5886abc308d1b2e2c0167580f9c23932b283d593ed2179900831c43be1f07d1be1bf336b061e5556701bc5dae198f61f9789a609a2e91b386c6b114c02ca75e74ed71ea7e723725fad1c000458d0fc712b1bbcb98c3fbeb0199367ed5f87ceeef525d4095331107120236606f13dad28d5262b1ab0f49c817b6a91c1b703e369e8bfb859c1769fb0dd39f80f054e196eefc4b89ce420aa3ad2e05546957e9a2babfaf6f4fec6e86d7ce218d8468e975c97ae4422018bddf4ff65dfb0f20c717318d939bdb5b6bef2593fb516b48f703b02907b3e10d027e4673200b89d962ec88609315324a3cf95d9c18bb849b9c86b12fc2a0a6a19668862b474ef59c8a7c6860c1aa875af2e09e4ad098c4676a43253bfa7a668bf4c4eceead43620266d0ff9e3dd5c749adeb457c3a67491e5de5c57ca7b3f8ecf725757ea54af468ccb258eb1b66cb76ff6ad3f63ddb00e9a024f6430340f20b3dfd2557b19ec1cf0e2b82a4eaeedfa47f84b50330cc58c9197e52849ddf12c6f9d83d509c334e550707f99af7f81f0093e249db54562363e2d77253e2e9b8c989f0abb0e1607f3871fbdd5840bd7ae04789f1b59b008e637d715821ce9c959ca987f49917e49d3080eeab4614c0c94792687067c71f1673ba5c4caed957f362b9829135ad33ff62c121cd0dd376d3aa6eaee9d71f6a65b3c4d236045654157366bb7cd736999202fab0267dfb5cc3bdbd1c1ff1d3bc33bcd05117206782559c3f969fafd200dab96e884f6ee1501e237e0816dd5062ee516c17fa6f13d1a1b1ad40b70910fb3ce20afec25856a7faccdca1c1ef28ec7988c7730c6b3a96dc817158908f55831407f045ad600033cd0e3a69ff8cafc03ae5623a53c0fe28c1f73d8008d246eeeb5f9bd79a45bb4d41f81b60d9f9ae4b4ddeb6017f93fa9126b1b41aa8fbf01583cac256c5e43e615cefef83c26cb127ed8eff83ad9923d98175cb4923283471f90b516dc4b66163cfa6a3bb892af986f777020d410ef7c0d0120fa91f1a83e29055aa58e74834766e5d5dc75631b69d88e0f8af1d1897a2b8dd4d1bdcee2c88c24f557e92e673a64183f93d899e65bb017b77c42a0bc01b75809c0d127cede3ddfad301dfabbb43dec08c65299a003d49d2bd1fb25721c35e20a1c57b37e8da3c513ef4778d85461cdeab0bdcd0c59596d969bb2e85f8fc48903563cc083e1d88040430d4ce16c1f0cf6110a2612819eb7f4b1681a8db66bec2d22758add012c3a1b562d89195c5716ee383fc42398f0d4845605442f9b33a381e90df7f43a2b31a900fed9af9c608261b8710e5d6f0fe23efb899c824316d99ed14db730b73f7fcba82289787037d00fa814c54f48c3a138aa3f16195742ac87fe10c265e48dcff7efba7380617c064f559857471a646722c1cacca32ec3ff84d0978379235d5fadcd6085ed6128200673ed178efbbeb40c0ae9f60820942ea0aedd7a08202eb826a230a3fcc896307e90c74d99c0357975620b0b902afa698431e9ad7ceffa00af38a2d85cdf46dcccf8b9c9aa24e8d002475f9cde19ab9829928e3126a579791898f3929e2bcb906ad5455a0c471da59561c503b516b5e2f6500bf746203d359089a8463f8f98a3dcae904a90fbf642fb8afd1ec6336771fae9a8d0d3d7671184608b9aae9f38016d9df80076bbd2b7b8d9d7a2730d5477a7eac176569eaf8ef699d1899fbf23fa702eca18b3445585a360e4226c048fbba8002539343dfecd5eb24e9acafd76c462959dbbb72ab269300fe8ea2ca2cc8747e9d547589f47108c8f201ea2b8edc2f7c1076295f80c4d57d896f2c3757884e498a6605e9e9c63dad846400c451b0e6a69417d0277a7aed90ab3102ff9c9c73b10826f7bc2c5901ef3d68e52f710c035f994f507457df99ba11a3c52886d2bbe7ab79c923659de37eb65b6c73231db2c023c648ce6cd20f55b49bfa45573c5513c0d14283a26cad5b36c70c7f2f2bea948f9bbfb2abd59079baf2a627561a2b024620ec834b11a2242f3c56327f14222a8b6a52a2d44fdad4758db2a73184b579a6e7be25f4c230ab616c90e921a5a88a200e3f7f556a4305eb45f300bab411ce5b99729df7e60ebc0f9fd8eb31b7de3e7d458d22502731364066e260e90f8ad608d81f5d25c5b6a2ed988869d252e4fc8f832b65881860c062ba251c9827ca435783819d567d7e57a621f72fb45882d096de5a9124fc50e19fe5fa75ee1a2fc7b3bb7518047af9e938e43819c00091cd367c979e039f861e9c079ad26f695a0dd7d1e2864a51bb6fc26f79d7ab8639f9b92469840fa55d911e17dd76b50e28a097c4494bb9ee3c335ff36783a85f2562879a6e45db39c2cd0cefcabb25c76e082f6769bf52b6c91ba640bf9a9522e9b69fe0c33a10", 0x1000}, {&(0x7f00000033c0)="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", 0x1000}, {&(0x7f00000043c0)="65c6bbcaf49491b0e47283c6e6e510ae11965629c70d02593f110926f51e488579efffa77a8de1cb9c7a55f058c47b52750390a8fc2e2b23a30d419280121567cd45b4964fe32059e019cff4102c6d87fd9ae533651ff30d27b423ce88e3cdd5f6a00dfc56578caf0e3dcf5824fd9be5790c392de678ab02befe9c87802e32c9262b582d6c1f026466a65b7924b04956ff68b976e665d9f3ab2b617a476b7b3376da34fca38571ede7af1029664127feebd5d1de0d815099507174fe6e4c10ef1fb604488bc6e09912104c0c27a12fd840a8f1473183cfbd37a77cfb40756a7e", 0xe0}, {&(0x7f00000044c0)="9f2d15a379432681617805fb48d145ced9561ecb04d3826f0dc1bad50c5605f4d34ffbdb01f98a255ff0bdcc7f7a6b60c402fa73bb8aecb82d4913207066d787ec607357102eee0497906c4a714ab22ca8e3bbdbe3253bf37f5910b0288122c9718599b92aae1b77573581f3e58e01c2b6", 0x71}, {&(0x7f0000004540)="a718668aa284228272", 0x9}, {&(0x7f0000004580)="9cc90703569823d57d277f55296c3f1fd083a1ee43891143936310f67eac1da7d95bfb5e2e61cdbcb5facf26c27b4cbee6efd06a5eed150e4b8fde5c18fc139af3dacc00bc82e5dcefa313fa02ae25cc6ebdd283d630ffff8fa1134ce82e79741a7470d57793771df2e53e68b11f544f3b5797d3da7306152a0b96dadad12538321b714a38fa2d3dc276b61b27b65321c46a98b62679b0b74326871258aceb8785fa643d15a75fcd0b563e358033d090d680421045e10a2b6bcec5a4d12a3a83f471a3df80a8f7173095fa9f1ca5", 0xce}, {&(0x7f0000001b80)="0287cf020a4fe54d7b1732b52aa3953bdf61ffbd1079d0d3ea80707370228eeee901a5162f4cda1e78706259ab49ccb74b134fed199c2d718894d09408bb9296aacc604368a249cb9b7004cf186be6995e656c8abdde019c58de636b823cc6a408861e023ba35f3dc71037f40830e20dc910294b77bc091f77fd655ab3e1470013cdda2870a6b464d371e8f0a3bb2222c5498292130058248d3cf9c5f467a75b92207394762fff9d2018078fdc7881bb5b5afc3981ce803adb55edd9428b9b1e98f464f5635ba8852df1e99201ea4fc549dc869dd589da1e854d85fe2e7eca94074afe8e871c5e3b57662e553738", 0xee}], 0x8, &(0x7f0000004840)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r3, r0, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x68, 0x14}}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000048c0)="cc76420776626581d7a8833fc14893bdcf2b0ae761a2763cef3ba11d43a3beea7719ceb54916a56e4858206ec1a583a8c2b75791264d46f20d973c98e87be2b0ae91c7eb12ce055aa5584d383f3a5aaf7dfcde42490483cc", 0x58}, {&(0x7f0000004940)="d15d5ca10a98044c", 0x8}, {&(0x7f0000004980)="a8a8e5ded2cefde9418f483fc54daf5c96c74afb246739dc03f335a14fbcde04f944a7c977e28795427497bd152db3edcc624ef0ea9d84ca9d3b3dac99fa6a33a3d145a6095434752eb04b5fb7d9a051d79921dd4ce44964ee3add70b28a4577aef8a9d436aae00024daca5a61c3e9eceb9158a5ed212f4d4fee6db555c2a2dc2b57de96a34da176a9a68dc6da8c790e1f6384bb3f6864b1e299b6d4921f6bd40b1ea0a9f62b059a8f3939e8b215afedf2717e7ba139c96c", 0xb8}, {&(0x7f0000004a40)="815a536b61411ec71ea9a0b067994116feff669d5f6b201b6b5eb4235e18b160de1370db916b7129cabd2d663f484eae76a2bc26f1d926ee671b9df27f06b3ea3e39d2739d36e266fb917eff88c7d8c9f4232552adbdd5bb1d26", 0x5a}, {&(0x7f0000004ac0)="4a0a2000aa4218708113adc52858f1bb024ac265b1526bb1613d600f34b8ced3aa41b40f503801968ffe5a50c556c4d82df20cb13da018757d1bba9daed817666fa2a7008d9ac51909449bf4cf8b8f063cfefa455ee29bf938ac5febcdf4cfa5d100", 0x62}], 0x5, &(0x7f0000004d40)=[@rights={{0x34, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0, r0, r10, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x78}}, {{&(0x7f0000004dc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006100)=[{&(0x7f0000004e40)="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", 0x1000}, {&(0x7f0000005e40)="4b1ac5c97930ba3592e60692cfcdeddbd87ed7e4c6e234e4ef5f6b49fc84c5f2f7d5c53b1d36d1dfbb5a783bac582b5bc7519d148a7f548e92d1bd3ec8bcb4c9eac85c821ac1cfb7", 0x48}, {&(0x7f0000005ec0)="f0fece4ca7b99a7b49bef59b774f1b5bfb28a35bd99f7e02aad2a045d243e2b9e6a9004afcde19fdbc059771eb77cc098b83421b0361b49d8868d8a492a90dda9a93547e01c881cbf791b3cb0b6657e3f0d33ae9b178748a02fd0f37e73ce1e3808718e0fe9c739799a8b910f8f8adb716331c9d6a18ac2f80bcec7bc6da99fef2c46cc4fbafe735da8895080d145a28e19a91795fd30f877fb8b2bc81c90e8554206b7cb06d39966e", 0xa9}, {&(0x7f0000005f80)="c09ae4aa041a805f3c9a213d3e122369737961e2e2495ece86736610e12105ee146913961c67f17d7e7f92d350f4a840a6f933e7a08fc18311f34de1731ca909dbec045a4f9cab239284dd3f97aa34963eb03aea5bf86a9c5b30fdb5d8931fc9f3504e0e05b187e8e4a6776f9ac0b6a57062bb0954718bf507897ab1feb34ebe3bcab62cff341464a3c05b407832fb41fbb7000cd02f24005367641eb2505354bf5c9d8df6a4149afa5ab515766a26992addef92625081e8d59ba115902422e7c45c7f842250cf7e", 0xc8}, {&(0x7f0000006080)="47bcee4413e34b73c806c41f1fb820280667ad6ede4490e4df084a95a73022d652d97e24353aba4d778c3a67124a4ba39a29a2fb9c7978d3ee3579f9ca5cd04bb9c70ce1b350ce4c5c5c82", 0x4b}], 0x5, &(0x7f0000006200)=[@cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x38, 0x800}}], 0x6, 0x40) (async) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e", 0x14}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) 2.011842956s ago: executing program 3 (id=12053): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x12, 0x1, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) 1.856561564s ago: executing program 3 (id=12054): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095", @ANYRES64=0x0, @ANYRES16=r0, @ANYRES64=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17}, 0x94) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r9, 0xb97534d5fe9704cf, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x379}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240089c4}, 0x2400c000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b0, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x48}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xf8, 0xfa, "238306b66121c39688a852381ba61be98000fcc98f85be8e338ad77c8bfdecba68ac6141acd124eabf0a10f36cbecbbbaea75a712b5020d8913329cc492619765c93980def88bf81e5302b551790e6d9243ded2f032d00bbd374bd3f352bb72ff5534296727eb58f4a5c968876b4c4d7c071e2ac56e176761b8b15064b6e4bb03b9a4a2ec8c14e1b30d5b44b1418b5966e2c37071dee9db6a377fca8767031236820dc5dd1f80979b1c91486510dffe94184a3853953085986c23138145867b902744dd2b1cab0d7a8aa64a183acc9b4e1798d73d7fcf6b4cda2a8df419bafaaf26e5f28b9ce29f1e1bd14eef1fc12e96e4310d1"}, @NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "aa70c1ce7920935acc4d2bb51a197b3a114a81322ecd0e37621dfb602ede5c72c393839de9a268e69bc9a3b4836b53800bb6597cc89511a1ac0550ee3d402b47b63496aa02773432f508719b8bb6e609af12ae993725f664fcbd53144b2e6a02aa94b82234be769f332d7927a1"}, @NL80211_ATTR_FILS_ERP_RRK={0x19, 0xfc, "28364df9f8203eed44bb3593588448b6d201942b5f"}]]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40840}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) 1.85292628s ago: executing program 4 (id=12055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100210000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000084000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.768911457s ago: executing program 1 (id=12056): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x4000084) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1, 0x0, 0x0, 0xffffffff}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={@remote, @local, 0xb, 0xa}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x7b, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @fwd={0x10}, @enum={0xa}, @enum64={0x2, 0x4, 0x0, 0x13, 0x1, 0x8, [{0xf, 0xfffffff8, 0x668}, {0x5, 0x2, 0xa52}, {0xa, 0x12c, 0xc}, {0x1, 0x4, 0x7fffffff}]}]}}, &(0x7f0000000540)=""/13, 0x8a, 0xd, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x0, 0x4, 0x0, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, 0x0) close(0x3) 1.709301291s ago: executing program 5 (id=12057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 1.650713423s ago: executing program 4 (id=12058): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) (async) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000240)=""/20, &(0x7f0000000280)=0x14) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}}, 0x0) 1.600924842s ago: executing program 3 (id=12059): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x8, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x44}}, 0x800) 1.349433491s ago: executing program 5 (id=12060): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x519fd189, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x519fd189, 0x4) listen(r0, 0x8) 1.27681249s ago: executing program 5 (id=12061): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@mcast2}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x6c}, @in=@local, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@lifetime_val={0x24, 0x9, {0x4ddb3317, 0x3, 0x5, 0xfffffffffffffffa}}]}, 0x11c}}, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) 850.372351ms ago: executing program 4 (id=12062): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xfffd, 0x1c, 0x0, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000005}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xfffd, 0x1c, 0x0, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000005}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r9, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) (async) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r9, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) write(r10, &(0x7f0000000140)="01020000010006", 0x7) (async) write(r10, &(0x7f0000000140)="01020000010006", 0x7) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) 717.156535ms ago: executing program 5 (id=12063): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000010000000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f00000003c0)=r2}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r9, 0x917}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'tunl0\x00', {0x5}, 0x4}) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4) sendmsg$key(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2, 0x5, 0x7f, 0x9, 0x19, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x4, 0x7, 0xc8c, 0xe89c}, @sadb_lifetime={0x4, 0x2, 0x5, 0x3d, 0x0, 0x7fff}, @sadb_key={0x7, 0x8, 0x170, 0x0, "87b68786f9aeec916dec0162fdc94d719bbb6e667aa8859afead0406ccbabba6c52037bf7198e82438405561a774"}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@loopback, 0x27, 0x4, 0x14}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2b, 0x3506}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0xc8}}, 0x0) 716.25769ms ago: executing program 1 (id=12064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) 546.461607ms ago: executing program 1 (id=12065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x5, 0x6, 0x24, @mcast2, @private0, 0x1, 0x8000, 0x1, 0x9}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0)={@local, 0x0}, &(0x7f0000000b00)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000b40)={'sit0\x00', 0x0, 0x7800, 0x40, 0x2, 0x5, {{0xf, 0x4, 0x3, 0x1, 0x3c, 0x68, 0x0, 0x26, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x27, 0xbb, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, @private=0xa010102, @remote, @empty, @multicast2, @broadcast]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'gretap0\x00', &(0x7f0000000c00)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x9, 0x7, {{0x6, 0x4, 0x1, 0x20, 0x18, 0x67, 0x0, 0x27, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10c, r3, 0x400, 0x70bd2b, 0x3, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x51db345d35e9de90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r11) sendmsg$TIPC_CMD_SET_NETID(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r12, 0x101, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000004) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r12, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc8d1}, 0x40000) 0s ago: executing program 4 (id=12066): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYBLOB="d32905a451ff7f000000caf441373591909d4f6553d5ee28d39dd6ec3105fca503004fce96a2cb297a46544830f6f283c275c683a2ac1bcb2ce2edd8bbf7fe5e442329b2a8d2221a3014c6977f8d4831ffb9c31514648eadd6b05e8d3144dcd6a31bececef2666af2a9c73310000000000000010000000", @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES32=r2, @ANYRES64=r3, @ANYRES8=r5, @ANYRES8, @ANYRESDEC=r2, @ANYRES64, @ANYRES16=r5], 0xfdd1) kernel console output (not intermixed with test programs): ][T14767] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.434126][T14772] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.461603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.564281][ T8100] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.707827][ T6283] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.801175][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10678'. [ 1067.855766][T14774] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.988918][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10683'. [ 1068.007046][ T9495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.016802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.022222][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.093253][ T9494] veth0_macvtap: left promiscuous mode [ 1068.536713][ T9513] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10689'. [ 1068.867090][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10695'. [ 1068.893760][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10695'. [ 1068.922166][ T9539] validate_nla: 1 callbacks suppressed [ 1068.922183][ T9539] netlink: 'syz.4.10697': attribute type 8 has an invalid length. [ 1068.983688][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10697'. [ 1069.114247][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10698'. [ 1069.378121][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.386726][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.395193][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.432116][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.460669][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.492313][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.517886][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.525237][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.537175][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.574174][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.591174][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.611112][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.654899][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.685025][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.704552][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.724014][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.742212][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.749344][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.758654][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.769784][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.776936][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.784995][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.792407][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.800706][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.808284][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.816389][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.823077][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.833250][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.840343][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.848640][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.855412][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.867773][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.883014][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.889742][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.898912][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.906937][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.915664][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.923296][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.929786][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.938069][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.944634][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.951374][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.957899][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.965844][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.972556][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.979190][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1069.985752][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1070.004934][ T9580] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1070.013545][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1070.098251][ T9557] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1070.580218][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10716'. [ 1070.660394][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10716'. [ 1070.758807][ T9615] tipc: MTU too low for tipc bearer [ 1070.798046][ T9616] syzkaller1: entered promiscuous mode [ 1070.827973][ T9616] syzkaller1: entered allmulticast mode [ 1071.156077][ T9633] netlink: 'syz.4.10721': attribute type 1 has an invalid length. [ 1071.175160][ T9645] netlink: 'syz.3.10726': attribute type 4 has an invalid length. [ 1071.638745][ T9665] netlink: 'syz.2.10732': attribute type 1 has an invalid length. [ 1072.187892][T12031] net_ratelimit: 742 callbacks suppressed [ 1072.187910][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.272097][T14774] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.307319][ T9709] __nla_validate_parse: 3 callbacks suppressed [ 1072.307337][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1072.329736][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1072.357291][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1072.441500][ T8100] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.469767][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10752'. [ 1072.481502][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1072.503048][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1072.522915][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1072.592926][T14774] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.661369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.723942][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10756'. [ 1072.746571][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.824236][ T8090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.832574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.872688][T14774] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.971452][ T9742] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10760'. [ 1073.015004][T14774] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1073.126747][ T9748] FAULT_INJECTION: forcing a failure. [ 1073.126747][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.140849][ T9748] CPU: 1 UID: 0 PID: 9748 Comm: syz.4.10763 Not tainted syzkaller #0 PREEMPT(full) [ 1073.140875][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1073.140889][ T9748] Call Trace: [ 1073.140898][ T9748] [ 1073.140908][ T9748] dump_stack_lvl+0xe8/0x150 [ 1073.140939][ T9748] should_fail_ex+0x40c/0x560 [ 1073.140974][ T9748] should_failslab+0xa8/0x100 [ 1073.141019][ T9748] ? __inet_hash_connect+0x1631/0x25a0 [ 1073.141109][ T9748] kmem_cache_alloc_noprof+0x87/0x650 [ 1073.141137][ T9748] ? __inet_hash_connect+0xe9b/0x25a0 [ 1073.141177][ T9748] __inet_hash_connect+0x1631/0x25a0 [ 1073.141229][ T9748] ? __inet_hash_connect+0x5ce/0x25a0 [ 1073.141289][ T9748] ? __pfx___inet_hash_connect+0x10/0x10 [ 1073.141322][ T9748] ? sk_setup_caps+0x94f/0xbc0 [ 1073.141356][ T9748] ? inet6_ehashfn+0x2f/0x3b0 [ 1073.141397][ T9748] ? inet6_hash_connect+0xeb/0x170 [ 1073.141439][ T9748] tcp_v6_connect+0x10f2/0x1b70 [ 1073.141482][ T9748] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1073.141511][ T9748] ? __lock_acquire+0x683/0x2cd0 [ 1073.141540][ T9748] __inet_stream_connect+0x258/0xe00 [ 1073.141613][ T9748] ? do_raw_spin_lock+0x12b/0x2f0 [ 1073.141640][ T9748] ? lock_sock_nested+0x6a/0x100 [ 1073.141666][ T9748] ? __pfx___inet_stream_connect+0x10/0x10 [ 1073.141693][ T9748] ? inet_stream_connect+0x51/0xa0 [ 1073.141718][ T9748] ? __local_bh_enable_ip+0xd0/0x130 [ 1073.141745][ T9748] inet_stream_connect+0x66/0xa0 [ 1073.141771][ T9748] kernel_connect+0x141/0x1c0 [ 1073.141796][ T9748] ? __pfx_kernel_connect+0x10/0x10 [ 1073.141815][ T9748] ? do_raw_spin_lock+0x12b/0x2f0 [ 1073.141860][ T9748] ? __local_bh_enable_ip+0xd0/0x130 [ 1073.141886][ T9748] smc_connect+0x78c/0xdb0 [ 1073.141973][ T9748] __sys_connect+0x323/0x460 [ 1073.142010][ T9748] ? __pfx___sys_connect+0x10/0x10 [ 1073.142053][ T9748] ? __pfx_ksys_write+0x10/0x10 [ 1073.142088][ T9748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.142111][ T9748] __x64_sys_connect+0x7a/0x90 [ 1073.142140][ T9748] do_syscall_64+0x174/0x580 [ 1073.142160][ T9748] ? trace_irq_disable+0x3b/0x140 [ 1073.142190][ T9748] ? clear_bhb_loop+0x40/0x90 [ 1073.142216][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.142236][ T9748] RIP: 0033:0x7f8342f9ce59 [ 1073.142256][ T9748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.142274][ T9748] RSP: 002b:00007f8343e3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1073.142295][ T9748] RAX: ffffffffffffffda RBX: 00007f8343215fa0 RCX: 00007f8342f9ce59 [ 1073.142310][ T9748] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 1073.142323][ T9748] RBP: 00007f8343e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.142336][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.142348][ T9748] R13: 00007f8343216038 R14: 00007f8343215fa0 R15: 00007ffe527eabe8 [ 1073.142383][ T9748] [ 1073.785883][ T9770] netlink: 184 bytes leftover after parsing attributes in process `syz.1.10772'. [ 1074.047124][ T9787] netlink: 'syz.3.10774': attribute type 29 has an invalid length. [ 1074.081831][ T9787] tipc: Enabled bearer , priority 0 [ 1074.118659][ T9787] netlink: 'syz.3.10774': attribute type 29 has an invalid length. [ 1074.716100][ T9814] : entered promiscuous mode [ 1075.201179][T12031] tipc: Node number set to 546130305 [ 1075.453941][ T9841] batadv0: entered promiscuous mode [ 1075.489455][ T9844] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1075.503915][ T9841] ip6gretap0: entered promiscuous mode [ 1075.585012][ T9841] hsr1: entered promiscuous mode [ 1075.947094][ T9735] Bluetooth: hci4: command 0x0406 tx timeout [ 1076.026515][ T8090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1076.084417][ T9882] FAULT_INJECTION: forcing a failure. [ 1076.084417][ T9882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.133752][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: syz.4.10804 Not tainted syzkaller #0 PREEMPT(full) [ 1076.133781][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1076.133794][ T9882] Call Trace: [ 1076.133803][ T9882] [ 1076.133815][ T9882] dump_stack_lvl+0xe8/0x150 [ 1076.133848][ T9882] should_fail_ex+0x40c/0x560 [ 1076.133888][ T9882] _copy_to_user+0x31/0xb0 [ 1076.133916][ T9882] simple_read_from_buffer+0xe1/0x170 [ 1076.133951][ T9882] proc_fail_nth_read+0x1bb/0x230 [ 1076.133982][ T9882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.134013][ T9882] ? rw_verify_area+0x24a/0x4c0 [ 1076.134044][ T9882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.134070][ T9882] vfs_read+0x213/0xa80 [ 1076.134104][ T9882] ? __pfx___mutex_lock+0x10/0x10 [ 1076.134148][ T9882] ? __pfx_vfs_read+0x10/0x10 [ 1076.134181][ T9882] ? __fget_files+0x2a/0x420 [ 1076.134226][ T9882] ? __fget_files+0x3a2/0x420 [ 1076.134252][ T9882] ? __fget_files+0x2a/0x420 [ 1076.134290][ T9882] ksys_read+0x150/0x270 [ 1076.134324][ T9882] ? __pfx_ksys_read+0x10/0x10 [ 1076.134366][ T9882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.134390][ T9882] do_syscall_64+0x174/0x580 [ 1076.134411][ T9882] ? trace_irq_disable+0x3b/0x140 [ 1076.134443][ T9882] ? clear_bhb_loop+0x40/0x90 [ 1076.134470][ T9882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.134491][ T9882] RIP: 0033:0x7f8342f5d68e [ 1076.134511][ T9882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1076.134530][ T9882] RSP: 002b:00007f8343e39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1076.134551][ T9882] RAX: ffffffffffffffda RBX: 00007f8343e3a6c0 RCX: 00007f8342f5d68e [ 1076.134568][ T9882] RDX: 000000000000000f RSI: 00007f8343e3a0a0 RDI: 0000000000000003 [ 1076.134581][ T9882] RBP: 00007f8343e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.134595][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.134608][ T9882] R13: 00007f8343216038 R14: 00007f8343215fa0 R15: 00007ffe527eabe8 [ 1076.134644][ T9882] [ 1076.567075][ T9899] netlink: 'syz.5.10808': attribute type 30 has an invalid length. [ 1077.017855][ T9933] pim6reg: entered allmulticast mode [ 1077.027974][ T9933] netlink: 'syz.4.10818': attribute type 7 has an invalid length. [ 1077.037395][ T9933] netlink: 'syz.4.10818': attribute type 7 has an invalid length. [ 1077.046289][ T9933] pim6reg: left allmulticast mode [ 1077.221590][ T8082] net_ratelimit: 48 callbacks suppressed [ 1077.221609][ T8082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.402039][ T8082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.531325][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.651233][T14767] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.763975][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.784800][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.861675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.890622][ T9970] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1077.913064][T14768] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.934363][ T9968] tc action pedit 'at' offset 6 out of bounds [ 1078.121209][ T8082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1078.254861][T14767] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1078.357314][ T9992] __nla_validate_parse: 46 callbacks suppressed [ 1078.357333][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10837'. [ 1078.404183][ T9992] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10837'. [ 1078.429642][ T9992] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10837'. [ 1078.434489][ T9994] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10838'. [ 1078.727597][T10010] tipc: New replicast peer: 0.0.0.0 [ 1078.733875][T10010] tipc: Enabled bearer , priority 10 [ 1079.049590][T10031] macsec2: entered promiscuous mode [ 1079.258263][T10040] syzkaller0: entered promiscuous mode [ 1079.287588][T10040] syzkaller0: entered allmulticast mode [ 1079.429446][T10050] ip6t_rpfilter: unknown options [ 1079.511931][T10050] netlink: 'syz.3.10855': attribute type 4 has an invalid length. [ 1079.522686][T10050] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1079.535280][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1079.905500][ T809] tipc: Node number set to 265419260 [ 1079.976556][T14772] bridge_slave_1: left allmulticast mode [ 1079.990040][T14772] bridge_slave_1: left promiscuous mode [ 1079.996743][T14772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.033436][T14772] bridge_slave_0: left allmulticast mode [ 1080.046833][T14772] bridge_slave_0: left promiscuous mode [ 1080.056984][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10862'. [ 1080.074832][T14772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.154568][T10089] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.10862'. [ 1080.178191][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10863'. [ 1080.948037][ T6283] smc: removing ib device syz1 [ 1081.031872][ T6283] smbdirect: ib_dev[syz1] removed [ 1081.136528][T14772] batman_adv: batadv0: Removing interface: gretap1 [ 1081.149928][ T8090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1081.316504][T14772] bond10 (unregistering): (slave geneve2): Releasing active interface [ 1081.628893][T14772] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1081.638365][T14772] bridge3 (unregistering): left promiscuous mode [ 1081.760298][T14772] bond3 (unregistering): (slave bridge5): Releasing active interface [ 1081.836173][T14772] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 1081.852469][T14772] bridge6 (unregistering): left promiscuous mode [ 1081.964383][T14772] bond11 (unregistering): (slave bridge8): Releasing active interface [ 1082.112111][T14772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.130946][T14772] bond_slave_0: left promiscuous mode [ 1082.148391][T14772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.158893][T14772] bond_slave_1: left promiscuous mode [ 1082.168626][T14772] bond0 (unregistering): (slave team0): Releasing backup interface [ 1082.188640][T14772] team0: left promiscuous mode [ 1082.197163][T14772] team_slave_0: left promiscuous mode [ 1082.203445][T14772] team_slave_1: left promiscuous mode [ 1082.212303][T14772] bond0 (unregistering): Released all slaves [ 1082.231424][T14772] bond1 (unregistering): Released all slaves [ 1082.331733][T14772] bond2 (unregistering): left promiscuous mode [ 1082.398002][T14772] bond2 (unregistering): Released all slaves [ 1082.423939][ T8080] net_ratelimit: 29 callbacks suppressed [ 1082.423954][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.438101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.489052][T14772] bond3 (unregistering): Released all slaves [ 1082.556273][T14772] bond4 (unregistering): Released all slaves [ 1082.645451][T14772] bond5 (unregistering): Released all slaves [ 1082.746365][T14772] bond6 (unregistering): Released all slaves [ 1082.777190][T14772] bond7 (unregistering): Released all slaves [ 1082.874099][T14772] bond8 (unregistering): Released all slaves [ 1082.960775][T14772] bond9 (unregistering): Released all slaves [ 1082.986065][T24947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.033300][T14772] bond10 (unregistering): Released all slaves [ 1083.061323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.158861][T14772] bond11 (unregistering): Released all slaves [ 1083.203418][ T4397] xfrm0 speed is unknown, defaulting to 1000 [ 1083.217698][ T4397] syz1: Port: 1 Link DOWN [ 1083.292205][ T35] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.432371][T10132] veth0: entered promiscuous mode [ 1083.472556][ T35] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.515179][T10130] veth0: left promiscuous mode [ 1083.615143][ T8080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.704469][T14767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.713145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.749414][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10875'. [ 1083.805117][T10147] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10872'. [ 1083.857883][ T8082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.995264][T10160] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1084.422184][T10168] netlink: 'syz.3.10881': attribute type 1 has an invalid length. [ 1084.550495][T10177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10883'. [ 1084.600874][T10181] netlink: 67 bytes leftover after parsing attributes in process `syz.5.10882'. [ 1084.625975][T10169] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1084.657508][T10169] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1084.704979][T10169] bond7: (slave ip6gre1): making interface the new active one [ 1084.747815][T10169] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 1084.910279][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.973956][T10188] netlink: 'syz.1.10884': attribute type 32 has an invalid length. [ 1085.010709][T10189] netlink: 'syz.2.10885': attribute type 1 has an invalid length. [ 1085.097797][T10172] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1085.230308][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10885'. [ 1085.519441][T10192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1085.573574][T10192] bond3: (slave bond4): making interface the new active one [ 1085.590465][T10192] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1085.668423][ T29] audit: type=1107 audit(1781464962.310:89): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1085.668423][ T29] yk:Xd4yUH,_╆ь8' [ 1085.826481][T10194] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 1085.949490][T10197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1086.209911][T10200] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1086.308276][T10200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1086.324185][T10200] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1086.335360][T10200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1086.357617][T10200] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1086.367888][T10200] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1086.389405][T10208] syzkaller0: entered promiscuous mode [ 1086.396898][T10208] syzkaller0: entered allmulticast mode [ 1086.562167][T10220] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1086.571808][T10220] bond5: option arp_ip_target: invalid value (0) [ 1086.597807][T10220] bond5 (unregistering): Released all slaves [ 1087.052208][T14772] tipc: Disabling bearer [ 1087.065116][T14772] tipc: Disabling bearer [ 1087.085065][T14772] tipc: Disabling bearer [ 1087.091893][T14772] tipc: Left network mode [ 1087.113856][T10240] bridge0: port 1(syz_tun) entered blocking state [ 1087.175261][T10240] bridge0: port 1(syz_tun) entered disabled state [ 1087.230931][T10244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1087.246059][T10240] syz_tun: entered allmulticast mode [ 1087.281330][T10240] syz_tun: entered promiscuous mode [ 1087.431890][ T8100] net_ratelimit: 57 callbacks suppressed [ 1087.431911][ T8100] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.458361][ T8088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1087.609211][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10899'. [ 1087.618577][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10899'. [ 1087.627897][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.637145][ T8082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1087.731193][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.823817][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1087.931570][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.973901][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10902'. [ 1088.044453][T10273] syzkaller0: entered promiscuous mode [ 1088.057197][T10273] syzkaller0: entered allmulticast mode [ 1088.184427][T14767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.184427][T24947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.184835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.347846][T10285] netlink: 248 bytes leftover after parsing attributes in process `syz.5.10909'. [ 1088.925741][T10312] netlink: 'syz.2.10917': attribute type 49 has an invalid length. [ 1088.977919][T14772] hsr_slave_0: left promiscuous mode [ 1088.994362][T14772] hsr_slave_1: left promiscuous mode [ 1089.004578][T14772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.023424][T14772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.035547][T14772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.045186][T14772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.138367][T14772] veth1_vlan: left promiscuous mode [ 1089.146911][T14772] veth0_vlan: left promiscuous mode [ 1089.399514][T10335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10922'. [ 1089.681933][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10923'. [ 1089.749805][T14772] team0 (unregistering): Port device team_slave_1 removed [ 1089.789795][T14772] team0 (unregistering): Port device team_slave_0 removed [ 1090.180184][T10312] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1090.200803][T10312] ip6gretap0: entered promiscuous mode [ 1090.207082][T10312] ip6gretap0: entered allmulticast mode [ 1090.537163][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10927'. [ 1090.695990][T14772] IPVS: stop unused estimator thread 0... [ 1090.728386][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10930'. [ 1090.764758][T10368] nbd: must specify a device to reconfigure [ 1090.960428][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.009082][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10935'. [ 1091.027828][T10383] tipc: Resetting bearer [ 1091.050872][T10383] syzkaller0: entered allmulticast mode [ 1091.070864][T10382] tipc: Resetting bearer [ 1091.193448][T10392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10936'. [ 1091.232199][T14772] tipc: Resetting bearer [ 1091.663695][T10408] netlink: 'syz.2.10938': attribute type 1 has an invalid length. [ 1091.726997][T10408] netlink: 'syz.2.10938': attribute type 7 has an invalid length. [ 1091.744338][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10939'. [ 1091.822647][T10408] netlink: 'syz.2.10938': attribute type 8 has an invalid length. [ 1091.883929][T10408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10938'. [ 1092.116752][T10429] netlink: 'syz.5.10941': attribute type 10 has an invalid length. [ 1092.162903][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10941'. [ 1092.189253][T10429] team0: entered allmulticast mode [ 1092.202603][T10429] bridge0: port 1(team0) entered blocking state [ 1092.221676][T10429] bridge0: port 1(team0) entered disabled state [ 1092.247307][T10429] team0: entered promiscuous mode [ 1092.505718][T14772] net_ratelimit: 62 callbacks suppressed [ 1092.505738][T14772] bond3: (slave bridge6): failed to get link speed/duplex [ 1092.562166][T14772] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1092.722931][ T8096] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1092.773098][ T8096] bond3: (slave bridge6): failed to get link speed/duplex [ 1092.812002][T10461] syzkaller0: entered promiscuous mode [ 1092.833660][T10461] syzkaller0: entered allmulticast mode [ 1092.981644][T14772] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.002160][ T8090] bond3: (slave bridge6): failed to get link speed/duplex [ 1093.104393][T14772] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.132467][ T8090] bond3: (slave bridge6): failed to get link speed/duplex [ 1093.241442][ T8096] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.266372][T10482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10953'. [ 1093.302036][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1093.343535][ T5294] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1093.408712][T10485] netlink: 'syz.4.10954': attribute type 4 has an invalid length. [ 1093.892666][T10510] netlink: 'syz.2.10960': attribute type 16 has an invalid length. [ 1093.934384][T10510] veth0_macvtap: entered allmulticast mode [ 1094.034072][T10517] bridge5: entered allmulticast mode [ 1094.204839][T10523] xt_hashlimit: size too large, truncated to 1048576 [ 1094.508825][T10545] netlink: 'syz.3.10972': attribute type 1 has an invalid length. [ 1094.522968][T10543] __nla_validate_parse: 7 callbacks suppressed [ 1094.522986][T10543] netlink: 208 bytes leftover after parsing attributes in process `syz.5.10971'. [ 1094.702916][T10545] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1094.720589][T10549] tipc: Resetting bearer [ 1094.786720][T10557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1094.793681][T10553] pimreg3: entered allmulticast mode [ 1094.849267][T10553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1094.956636][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10972'. [ 1094.989628][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10972'. [ 1095.051432][T10541] tipc: Resetting bearer [ 1095.487261][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10985'. [ 1095.531430][T10593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1095.669016][T10593] macvlan0: entered promiscuous mode [ 1095.705335][T10593] macvlan0: entered allmulticast mode [ 1095.725472][T10593] bond9: entered promiscuous mode [ 1095.747519][T10593] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1095.770222][T10617] ip6t_srh: unknown srh invflags 4000 [ 1095.777944][T10593] bond9: left promiscuous mode [ 1095.831772][ T6283] tipc: Resetting bearer [ 1095.904596][T10616] tipc: Resetting bearer [ 1095.936208][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10991'. [ 1095.954113][T10627] netlink: 'syz.1.10993': attribute type 1 has an invalid length. [ 1095.972646][T10616] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1096.028374][T10632] netlink: 33 bytes leftover after parsing attributes in process `syz.5.10994'. [ 1096.037998][T10632] netlink: 140 bytes leftover after parsing attributes in process `syz.5.10994'. [ 1096.055589][T10626] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10993'. [ 1096.074875][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10993'. [ 1096.097150][T10625] bond7: (slave bridge6): making interface the new active one [ 1096.106804][T10625] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1096.116262][T10632] netlink: 33 bytes leftover after parsing attributes in process `syz.5.10994'. [ 1096.130372][T10626] bond0: ARP target 8.4.0.0 is already present [ 1096.136832][T10626] bond0: option arp_ip_target: invalid value (1032) [ 1096.289378][T10635] xt_hashlimit: size too large, truncated to 1048576 [ 1096.324013][T10636] xt_NFQUEUE: number of total queues is 0 [ 1096.412287][T10651] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 1096.853293][T10652] tipc: Enabled bearer , priority 0 [ 1096.878524][T10656] syzkaller0: entered promiscuous mode [ 1096.888840][T10656] syzkaller0: entered allmulticast mode [ 1096.923407][T10660] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1096.996621][T10639] tipc: Resetting bearer [ 1097.096658][T10639] tipc: Disabling bearer [ 1097.492234][T10698] netlink: 'syz.2.11010': attribute type 4 has an invalid length. [ 1097.521719][ T8090] net_ratelimit: 68 callbacks suppressed [ 1097.521737][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1097.543970][T24947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.581591][ T8090] bond3: (slave bridge6): failed to get link speed/duplex [ 1097.621458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.673633][ T8100] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1097.711498][T10703] pim6reg: entered allmulticast mode [ 1097.741138][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1097.881544][T14772] bond3: (slave bridge6): failed to get link speed/duplex [ 1097.921277][T14772] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.011086][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1098.043060][ T8080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.089322][T10725] bridge0: port 1(team0) entered disabled state [ 1098.380014][T10748] netlink: 'syz.3.11028': attribute type 1 has an invalid length. [ 1098.415321][T10748] netlink: 'syz.3.11028': attribute type 4 has an invalid length. [ 1098.424141][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1098.577705][T10748] veth1_virt_wifi: entered promiscuous mode [ 1098.614809][T10748] veth1_virt_wifi: entered allmulticast mode [ 1099.669159][T10828] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1099.762661][T10830] netlink: 'syz.2.11049': attribute type 21 has an invalid length. [ 1099.804827][T10830] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1099.820806][T10830] bond5 (unregistering): Released all slaves [ 1099.916810][T10833] netlink: 'syz.1.11050': attribute type 2 has an invalid length. [ 1100.297036][T10860] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1100.309385][T10860] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1100.325157][T10860] gretap2: entered promiscuous mode [ 1100.336279][T10860] gretap2: entered allmulticast mode [ 1100.575133][T10872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.777228][T10875] syzkaller0: entered promiscuous mode [ 1100.782903][ T29] audit: type=1107 audit(1781464977.420:90): pid=10869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1100.782903][ T29] yk:Xd4yUH,_╆ь8' [ 1100.805288][T10875] syzkaller0: entered allmulticast mode [ 1100.858773][T10877] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1102.601589][ T8096] net_ratelimit: 87 callbacks suppressed [ 1102.601612][ T8096] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1102.622308][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1102.721773][ T6283] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1102.732995][ T8090] bond3: (slave bridge6): failed to get link speed/duplex [ 1102.744619][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.784582][T10833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1102.794464][T10859] __nla_validate_parse: 11 callbacks suppressed [ 1102.794480][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11055'. [ 1102.824348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.835642][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1102.862069][ T8100] bond3: (slave bridge6): failed to get link speed/duplex [ 1102.964976][T14767] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.021695][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1103.406606][T10915] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1103.461196][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1103.472659][T10915] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1103.489863][T10915] gretap3: entered promiscuous mode [ 1103.504254][T10915] gretap3: entered allmulticast mode [ 1103.907060][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11076'. [ 1104.331348][T10973] netlink: 'syz.2.11086': attribute type 2 has an invalid length. [ 1104.757703][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11094'. [ 1104.929297][T11006] syzkaller0: entered promiscuous mode [ 1104.936431][T11006] syzkaller0: entered allmulticast mode [ 1104.955743][T11006] netlink: 165 bytes leftover after parsing attributes in process `syz.4.11098'. [ 1105.170407][T11023] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11103'. [ 1105.354017][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11105'. [ 1105.498676][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11109'. [ 1105.517937][T11036] netlink: 'syz.4.11109': attribute type 12 has an invalid length. [ 1105.670402][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11112'. [ 1105.876386][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11117'. [ 1106.010176][T11064] syzkaller0: entered promiscuous mode [ 1106.026209][T11064] syzkaller0: entered allmulticast mode [ 1106.064797][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.074129][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.143373][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11119'. [ 1106.202673][T11077] hsr_slave_1 (unregistering): left promiscuous mode [ 1106.237954][T11074] syz_tun: left promiscuous mode [ 1106.262557][T11074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.269809][T11074] bridge0: port 1(bridge_slave_0) entered listening state [ 1106.279402][T11074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.286587][T11074] bridge0: port 2(bridge_slave_1) entered listening state [ 1106.325222][T11074] bond1: left promiscuous mode [ 1106.338290][T11074] ip6gre1: left allmulticast mode [ 1106.360199][T11074] hsr0: left promiscuous mode [ 1106.952390][T11114] netlink: 'syz.4.11128': attribute type 10 has an invalid length. [ 1107.098364][T11128] veth0_to_bond: entered allmulticast mode [ 1107.269440][T11128] netlink: 'syz.2.11132': attribute type 1 has an invalid length. [ 1107.326831][ T8082] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 1107.398331][ T8082] bond2: now running without any active interface! [ 1107.498131][T11152] netlink: 'syz.5.11137': attribute type 9 has an invalid length. [ 1107.712747][ T6283] net_ratelimit: 82 callbacks suppressed [ 1107.712769][ T6283] bond3: (slave bridge6): link status up again after 0 ms [ 1107.772686][T15410] bond3: (slave bridge6): link status up again after 0 ms [ 1107.811112][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1107.825233][T11173] netlink: 'syz.1.11140': attribute type 4 has an invalid length. [ 1107.837168][T11172] netlink: 'syz.2.11139': attribute type 1 has an invalid length. [ 1107.875450][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1107.910341][T11173] __nla_validate_parse: 5 callbacks suppressed [ 1107.910357][T11173] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11140'. [ 1107.945033][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.995625][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11139'. [ 1108.021625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.043656][T15410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.055064][ T6283] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1108.093123][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1108.291169][ T8082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1108.351089][ T8090] bond3: (slave bridge6): failed to get link speed/duplex [ 1108.484289][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11147'. [ 1108.501192][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1108.536494][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11147'. [ 1108.568168][T11202] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11149'. [ 1108.588877][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11147'. [ 1108.926241][T11217] netlink: 'syz.2.11153': attribute type 17 has an invalid length. [ 1108.983218][T11218] nbd: must specify a device to reconfigure [ 1108.990876][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11153'. [ 1109.040896][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11156'. [ 1109.050581][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11153'. [ 1109.095050][T11217] erspan0: entered promiscuous mode [ 1109.116067][T11217] erspan0: left promiscuous mode [ 1109.425358][T11235] batadv0: entered promiscuous mode [ 1109.450628][T11235] macsec1: entered promiscuous mode [ 1109.474453][T11235] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1109.518405][T11235] batadv0: left promiscuous mode [ 1109.803902][T11262] netlink: 'syz.5.11166': attribute type 8 has an invalid length. [ 1109.826727][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11166'. [ 1110.044486][T11277] veth1_macvtap: left promiscuous mode [ 1110.057847][T11277] macsec0: entered promiscuous mode [ 1110.070216][T11277] macsec0: entered allmulticast mode [ 1110.134775][T11281] veth1_macvtap: entered promiscuous mode [ 1110.149721][T11281] veth1_macvtap: entered allmulticast mode [ 1110.157359][T11281] macsec0: left promiscuous mode [ 1110.163605][T11281] macsec0: left allmulticast mode [ 1110.168786][T11281] veth1_macvtap: left allmulticast mode [ 1110.485108][T11302] netlink: 'syz.5.11179': attribute type 2 has an invalid length. [ 1110.494948][T11299] vlan2: entered allmulticast mode [ 1110.501079][ T9735] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1110.504564][ T5651] Bluetooth: hci0: command 0x0406 tx timeout [ 1110.540831][T11302] netlink: 'syz.5.11179': attribute type 2 has an invalid length. [ 1110.906788][T11322] xt_hashlimit: size too large, truncated to 1048576 [ 1111.135118][T11344] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1111.652380][T11365] netlink: 'syz.3.11199': attribute type 4 has an invalid length. [ 1111.700428][T11365] bond0: left promiscuous mode [ 1111.718211][T11365] bond_slave_0: left promiscuous mode [ 1111.732804][T11365] bond_slave_1: left promiscuous mode [ 1112.089236][T11394] syzkaller1: entered promiscuous mode [ 1112.100866][T11394] syzkaller1: entered allmulticast mode [ 1112.372837][T11417] netlink: 'syz.3.11214': attribute type 1 has an invalid length. [ 1112.377749][T11418] netlink: 'syz.3.11214': attribute type 1 has an invalid length. [ 1112.460482][T11417] bond9: entered promiscuous mode [ 1112.468066][T11417] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1112.549691][T11426] syzkaller0: entered promiscuous mode [ 1112.568206][T11426] syzkaller0: entered allmulticast mode [ 1112.828567][ T6283] net_ratelimit: 96 callbacks suppressed [ 1112.828589][ T6283] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1112.905453][ T8082] bond3: (slave bridge6): failed to get link speed/duplex [ 1112.984366][ T8082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.005456][T11449] netlink: 'syz.4.11221': attribute type 39 has an invalid length. [ 1113.041762][ T8090] bond3: (slave bridge6): failed to get link speed/duplex [ 1113.145463][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.153725][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.162982][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.163855][T11454] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20000 [ 1113.171302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.189705][ T6283] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1113.221763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.284226][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.307945][T11449] netlink: 'syz.4.11221': attribute type 39 has an invalid length. [ 1113.353929][T11449] netlink: 'syz.4.11221': attribute type 39 has an invalid length. [ 1113.391346][T11449] netlink: 'syz.4.11221': attribute type 39 has an invalid length. [ 1113.541928][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1113.803125][T11483] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1113.817420][T11490] __nla_validate_parse: 10 callbacks suppressed [ 1113.817436][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11231'. [ 1113.829731][T11483] bond6 (unregistering): Released all slaves [ 1113.855327][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11232'. [ 1114.838576][T11538] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11244'. [ 1114.849531][T11539] netlink: 272 bytes leftover after parsing attributes in process `syz.3.11246'. [ 1114.886256][T11538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11244'. [ 1114.970327][T11547] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1114.980674][T11547] syzkaller1: group set to 0 [ 1114.998042][T11549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.466752][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11258'. [ 1115.505290][T11577] validate_nla: 62 callbacks suppressed [ 1115.505309][T11577] netlink: 'syz.1.11259': attribute type 1 has an invalid length. [ 1115.538732][T11577] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1115.587696][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11258'. [ 1115.617853][T11579] bond10: Unable to set down delay as MII monitoring is disabled [ 1115.637105][T11579] bond10 (unregistering): Released all slaves [ 1115.718808][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1116.231660][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11265'. [ 1116.279063][T11607] sock: sock_timestamping_bind_phc: sock not bind to device [ 1116.299182][T11605] team0: Port device team_slave_0 removed [ 1116.326011][T11607] tipc: Failed to remove unknown binding: 66,0,0/265419260:2554291633/2554291635 [ 1116.349919][T11607] tipc: Failed to remove unknown binding: 66,0,0/265419260:2554291633/2554291634 [ 1116.375460][T11607] tipc: Failed to remove unknown binding: 66,0,0/265419260:2554291633/2554291635 [ 1116.412284][T11607] tipc: Failed to remove unknown binding: 66,0,0/265419260:2554291633/2554291634 [ 1116.463684][T11614] netlink: 'syz.4.11268': attribute type 8 has an invalid length. [ 1116.501801][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11268'. [ 1116.524164][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.531833][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.896463][T11637] sctp: [Deprecated]: syz.1.11274 (pid 11637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1116.896463][T11637] Use struct sctp_sack_info instead [ 1117.079248][ T29] audit: type=1800 audit(1781464993.720:91): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11277" name=1AA59D943BE3F4AED50EA5A6B8686731CB89EF77123C899B699EEAA8EAA00734611196639064 dev="tmpfs" ino=2293 res=0 errno=0 [ 1117.486682][T11665] netlink: 'syz.5.11282': attribute type 39 has an invalid length. [ 1117.911639][ T8088] net_ratelimit: 76 callbacks suppressed [ 1117.911657][ T8088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1117.973941][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1118.050029][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.106697][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1118.172170][T14767] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.221455][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1118.263998][T11707] xt_hashlimit: size too large, truncated to 1048576 [ 1118.302653][ T8096] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.344265][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.353643][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1118.431399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.591042][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1118.603926][T11720] xt_policy: output policy not valid in PREROUTING and INPUT [ 1118.792448][T11726] ip6t_srh: unknown srh match flags 5F28 [ 1118.839025][T11731] __nla_validate_parse: 15 callbacks suppressed [ 1118.839043][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11302'. [ 1118.911759][T11729] netlink: 'syz.5.11301': attribute type 1 has an invalid length. [ 1118.919908][T11729] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11301'. [ 1118.930505][T11729] netlink: 658 bytes leftover after parsing attributes in process `syz.5.11301'. [ 1118.984753][T11729] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11301'. [ 1119.052448][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11303'. [ 1119.267121][T11753] veth1_to_bond: entered allmulticast mode [ 1119.279003][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11308'. [ 1119.313018][T11753] veth1_to_bond (unregistering): left allmulticast mode [ 1119.339469][T11753] bond0: (slave bond_slave_1): Releasing backup interface [ 1119.538780][T11765] netlink: 'syz.3.11314': attribute type 11 has an invalid length. [ 1119.562236][T11767] netlink: 'syz.5.11313': attribute type 29 has an invalid length. [ 1119.573105][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11313'. [ 1119.589224][T11769] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11315'. [ 1119.675334][T11771] IPv6: NLM_F_CREATE should be specified when creating new route [ 1119.860349][T11783] netem: change failed [ 1120.023625][T11798] x_tables: duplicate underflow at hook 2 [ 1120.433404][T11819] : entered promiscuous mode [ 1120.475910][T11828] Cannot find add_set index 4 as target [ 1120.650014][T11833] netlink: 308 bytes leftover after parsing attributes in process `syz.1.11331'. [ 1120.680332][T11835] netlink: 'syz.5.11332': attribute type 1 has an invalid length. [ 1120.712873][T11835] netlink: 228 bytes leftover after parsing attributes in process `syz.5.11332'. [ 1120.941609][T11848] netlink: 'syz.5.11336': attribute type 2 has an invalid length. [ 1120.953258][T11851] batadv0: entered promiscuous mode [ 1120.958882][T11851] macsec3: entered promiscuous mode [ 1120.966261][T11851] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1120.977426][T11851] batadv0: left promiscuous mode [ 1120.996834][T11852] team0: No ports can be present during mode change [ 1121.087504][T11855] gretap3: entered promiscuous mode [ 1121.120648][T11855] batman_adv: batadv0: Adding interface: gretap3 [ 1121.143638][T11855] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.232314][T11855] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1121.263788][T11861] tipc: Resetting bearer [ 1121.455674][T11871] netlink: 'syz.4.11341': attribute type 11 has an invalid length. [ 1121.614556][T11879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.621873][T11879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.629480][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.636730][T11879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.930634][T11871] tipc: Enabled bearer , priority 0 [ 1121.955233][T11871] syzkaller0: entered promiscuous mode [ 1121.964052][ T29] audit: type=1107 audit(1781464998.600:92): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1121.964052][ T29] yk:Xd4yUH,_╆ь8' [ 1121.992835][T11871] syzkaller0: entered allmulticast mode [ 1122.005815][T11871] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1122.036542][T11871] tipc: Resetting bearer [ 1122.057640][T11865] tipc: Resetting bearer [ 1122.109943][T11865] tipc: Disabling bearer [ 1122.219202][T11900] netlink: 'syz.2.11350': attribute type 10 has an invalid length. [ 1122.827740][T11933] netlink: 'syz.5.11361': attribute type 11 has an invalid length. [ 1123.043880][T11935] net_ratelimit: 108 callbacks suppressed [ 1123.043972][T11935] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 1123.136352][ T29] audit: type=1107 audit(1781464999.780:93): pid=11931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1123.136352][ T29] yk:Xd4yUH,_╆ь8' [ 1123.174396][T11949] tipc: Enabled bearer , priority 0 [ 1123.191658][T11935] syzkaller0: entered promiscuous mode [ 1123.197663][T11935] syzkaller0: entered allmulticast mode [ 1123.222545][T11933] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1123.318762][T11935] tipc: Resetting bearer [ 1123.332107][ T6283] bond3: (slave bridge6): failed to get link speed/duplex [ 1123.365170][T11931] tipc: Resetting bearer [ 1123.423781][T11931] tipc: Disabling bearer [ 1123.551273][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.581907][T14772] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.601742][T14772] bond3: (slave bridge6): failed to get link speed/duplex [ 1123.621906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.630275][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1123.759073][T11971] netlink: 'syz.2.11372': attribute type 10 has an invalid length. [ 1123.812211][T11971] bridge0: port 1(syz_tun) entered disabled state [ 1123.819584][T11971] syz_tun: left allmulticast mode [ 1123.826383][T11971] bridge0: port 1(syz_tun) entered disabled state [ 1123.843106][T11971] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1123.868918][T14772] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.994872][T14772] bond3: (slave bridge6): failed to get link speed/duplex [ 1124.024258][T15410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.038209][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1124.083183][T11982] __nla_validate_parse: 13 callbacks suppressed [ 1124.083200][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1124.149397][T11982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1124.188698][T11987] syzkaller1: entered promiscuous mode [ 1124.229162][T11987] syzkaller1: entered allmulticast mode [ 1124.273227][T12001] tipc: Resetting bearer [ 1124.323297][T12001] netlink: 'syz.3.11381': attribute type 11 has an invalid length. [ 1124.428966][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.439371][T12001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.456695][T12001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.499880][T12001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.517983][T12001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1124.540409][T12001] veth1_vlan: left promiscuous mode [ 1124.547299][T12001] veth0_vlan: left promiscuous mode [ 1124.554681][T12001] veth0_vlan: entered promiscuous mode [ 1124.564621][T12001] veth1_vlan: entered promiscuous mode [ 1124.575677][T12001] veth1_macvtap: left promiscuous mode [ 1124.584655][T12001] veth0_macvtap: left promiscuous mode [ 1124.592152][T12001] veth1_macvtap: entered promiscuous mode [ 1124.604193][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1124.609101][ T29] audit: type=1107 audit(1781465001.250:94): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1124.609101][ T29] yk:Xd4yUH,_╆ь8' [ 1124.618450][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1124.639590][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1124.649330][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1124.667457][T12001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1124.683198][T12001] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1124.695394][T12001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1124.708593][T12001] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1124.719566][T12001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1124.731817][T12001] veth0_macvtap: entered promiscuous mode [ 1124.775065][T12001] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1124.788174][T12001] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1124.882545][T14767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.889871][T14767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.963028][T14767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.970323][T14767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.049739][T12014] tipc: Enabling of bearer rejected, already enabled [ 1125.070308][ T8090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.088990][ T8090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.113729][ T8090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.130414][T12018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11384'. [ 1125.157971][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11387'. [ 1125.176803][T12018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11384'. [ 1125.202884][T12020] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1125.257343][T12022] tipc: Resetting bearer [ 1125.319736][T12000] tipc: Resetting bearer [ 1125.443791][ T8090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.468690][ T8096] tipc: Resetting bearer [ 1125.493109][T12031] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1125.643674][T12063] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11393'. [ 1125.662680][ T809] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1125.980640][T12087] netlink: 'syz.2.11401': attribute type 11 has an invalid length. [ 1126.204687][T12092] tipc: Resetting bearer [ 1126.252681][T12092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1126.267520][T12106] netlink: 'syz.4.11406': attribute type 12 has an invalid length. [ 1126.282173][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11406'. [ 1126.288147][T12092] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1126.309812][ T29] audit: type=1107 audit(1781465002.950:95): pid=12080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1126.309812][ T29] yk:Xd4yUH,_╆ь8' [ 1126.332490][T12084] syzkaller1: entered promiscuous mode [ 1126.338018][T12084] syzkaller1: entered allmulticast mode [ 1126.371453][T12103] tipc: Enabling of bearer rejected, already enabled [ 1126.383236][T12112] tipc: Resetting bearer [ 1126.389484][T12106] netlink: 'syz.4.11406': attribute type 12 has an invalid length. [ 1126.392439][T15410] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1126.413067][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11406'. [ 1126.436972][T15410] bond2: (slave veth0_to_bond): making interface the new active one [ 1126.447860][T15410] bond2: active interface up! [ 1126.483485][ T6283] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1126.528506][T12081] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1126.695951][ T6283] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1126.777779][T12123] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11408'. [ 1126.788004][T12123] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11408'. [ 1126.965551][T12131] netlink: 'syz.2.11410': attribute type 1 has an invalid length. [ 1127.246907][T12139] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1127.329369][T12144] bridge0: Caught tx_queue_len zero misconfig [ 1127.563689][T15410] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1127.592398][T15410] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1127.801545][T24947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1128.016976][T12183] tipc: Enabling of bearer rejected, failed to enable media [ 1128.055271][T15410] net_ratelimit: 52 callbacks suppressed [ 1128.055291][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.118144][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1128.221147][ T8088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.241433][ T8088] bond3: (slave bridge6): failed to get link speed/duplex [ 1128.344651][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.371297][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1128.471554][T14767] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.513248][ T8100] bond3: (slave bridge6): failed to get link speed/duplex [ 1128.592382][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.651287][ T8090] bond3: (slave bridge6): failed to get link speed/duplex [ 1128.661167][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1128.811157][T12211] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1128.830595][T12211] netlink: 'syz.4.11435': attribute type 1 has an invalid length. [ 1128.839143][T12211] netlink: 'syz.4.11435': attribute type 1 has an invalid length. [ 1128.847799][T12211] netlink: 'syz.4.11435': attribute type 1 has an invalid length. [ 1128.890637][T12211] netlink: 'syz.4.11435': attribute type 1 has an invalid length. [ 1128.980816][T12221] netlink: 'syz.5.11438': attribute type 1 has an invalid length. [ 1129.040378][T12221] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1129.314958][T12230] __nla_validate_parse: 7 callbacks suppressed [ 1129.314979][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11440'. [ 1129.640501][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11449'. [ 1129.650765][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11449'. [ 1129.659752][T12257] netlink: 'syz.2.11449': attribute type 3 has an invalid length. [ 1129.668838][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11448'. [ 1129.997175][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11452'. [ 1130.132880][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11454'. [ 1130.143118][T12240] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1130.679001][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1131.447703][ T9735] Bluetooth: hci0: command 0x0406 tx timeout [ 1131.448023][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1132.258074][T12364] lo speed is unknown, defaulting to 1000 [ 1132.371275][T12372] netlink: 'syz.5.11474': attribute type 16 has an invalid length. [ 1132.440109][T12372] netlink: 'syz.5.11474': attribute type 17 has an invalid length. [ 1132.787268][T12372] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1132.801642][T12372] veth3: left promiscuous mode [ 1132.806458][T12372] veth3: left allmulticast mode [ 1132.813215][T12372] veth5: left promiscuous mode [ 1132.818027][T12372] veth5: left allmulticast mode [ 1132.838671][T12372] bond2: left promiscuous mode [ 1132.843505][T12372] bond2: left allmulticast mode [ 1132.856321][T12372] bond4: left promiscuous mode [ 1132.894522][T12372] bond6: left promiscuous mode [ 1132.899326][T12372] vti1: left promiscuous mode [ 1132.909735][T12372] hsr1: left promiscuous mode [ 1132.917779][T12372] bridge5: left allmulticast mode [ 1132.965718][T12384] tipc: Resetting bearer [ 1132.971892][T12384] tipc: Resetting bearer [ 1132.995711][ T4398] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1133.091471][ C1] net_ratelimit: 94 callbacks suppressed [ 1133.091493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.107576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.120176][ T4398] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1133.123238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.136604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.151647][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.160168][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.168744][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.180226][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.215614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.225447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.334065][T12394] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11484'. [ 1133.643182][T12413] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11486'. [ 1133.712573][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1133.758706][T12424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11488'. [ 1134.049173][T12442] netlink: 'syz.3.11494': attribute type 1 has an invalid length. [ 1134.190794][T12442] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1134.428679][T12458] netlink: 'syz.3.11496': attribute type 1 has an invalid length. [ 1134.878453][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1134.923278][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1135.037965][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1135.046969][T12491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1135.476095][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11510'. [ 1135.517034][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11508'. [ 1135.694192][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11511'. [ 1135.788948][T12512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11513'. [ 1135.801349][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11515'. [ 1135.861188][T12511] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11515'. [ 1135.960484][T12525] sctp: [Deprecated]: syz.5.11518 (pid 12525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1135.960484][T12525] Use struct sctp_sack_info instead [ 1136.142206][T12531] syzkaller0: entered promiscuous mode [ 1136.147842][T12531] syzkaller0: entered allmulticast mode [ 1136.414334][T12546] netlink: 'syz.1.11523': attribute type 1 has an invalid length. [ 1136.527142][T12554] netlink: 'syz.4.11527': attribute type 1 has an invalid length. [ 1136.734247][T12550] geneve3: entered allmulticast mode [ 1136.837662][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1136.845005][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1136.845461][T12563] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1137.048081][T12571] bond6: entered promiscuous mode [ 1137.059489][T12571] bond6: entered allmulticast mode [ 1137.310804][T12590] bond10: Removing last ns target with arp_interval on [ 1137.560487][T12604] ipt_ECN: cannot use operation on non-tcp rule [ 1137.867952][T12630] bridge_slave_1: left allmulticast mode [ 1137.900292][T12630] bridge_slave_1: left promiscuous mode [ 1137.922739][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.932203][T12615] block nbd0: reconnected socket [ 1138.151495][ T8088] net_ratelimit: 78 callbacks suppressed [ 1138.151517][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.165622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.223654][ T8090] veth1_to_bridge: left allmulticast mode [ 1138.229437][ T8090] veth1_to_bridge: left promiscuous mode [ 1138.235269][ T8090] bridge0: port 4(veth1_to_bridge) entered disabled state [ 1138.244231][ T8090] gretap0: left allmulticast mode [ 1138.249261][ T8090] gretap0: left promiscuous mode [ 1138.254338][ T8090] bridge0: port 3(gretap0) entered disabled state [ 1138.265837][ T8090] bridge_slave_1: left allmulticast mode [ 1138.271519][ T8090] bridge_slave_1: left promiscuous mode [ 1138.277215][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.286049][ T8090] bridge_slave_0: left allmulticast mode [ 1138.291699][ T8090] bridge_slave_0: left promiscuous mode [ 1138.297344][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.345659][ T8090] dvmrp0: left allmulticast mode [ 1138.374361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.452583][T12637] netlink: 'syz.1.11553': attribute type 11 has an invalid length. [ 1138.484314][ T9735] block nbd0: Receive control failed (result -32) [ 1138.588170][T12643] netlink: 'syz.3.11555': attribute type 10 has an invalid length. [ 1138.717602][ T8090] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 1138.762343][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1138.763143][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1138.779134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.788071][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1138.843353][T12061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.923500][ T29] audit: type=1107 audit(1781465015.520:96): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1138.923500][ T29] yk:Xd4yUH,_╆ь8' [ 1139.139825][ T8090] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1139.382924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.438403][ T8100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.447160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.661840][ T8090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.681599][ T8090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.692920][ T8090] bond0 (unregistering): Released all slaves [ 1139.704627][ T8090] bond1 (unregistering): Released all slaves [ 1139.722677][ T8090] bond2 (unregistering): Released all slaves [ 1139.739762][ T8090] bond3 (unregistering): Released all slaves [ 1139.774319][ T8090] bond4 (unregistering): Released all slaves [ 1139.791509][ T8090] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1139.800220][ T8090] bond5 (unregistering): Released all slaves [ 1139.820160][ T8090] bond6 (unregistering): Released all slaves [ 1139.841453][ T8090] bond7 (unregistering): Released all slaves [ 1139.858235][ T8090] bond8 (unregistering): Released all slaves [ 1139.878650][T12032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.900604][ T8090] bond9 (unregistering): Released all slaves [ 1139.917744][ T8090] bond10 (unregistering): Released all slaves [ 1139.935029][T12634] netlink: 'syz.4.11552': attribute type 15 has an invalid length. [ 1139.942956][T12634] __nla_validate_parse: 7 callbacks suppressed [ 1139.942969][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11552'. [ 1139.962052][T12640] netlink: 56 bytes leftover after parsing attributes in process `syz.5.11554'. [ 1140.056035][ T8096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.077683][T12641] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1140.086555][T12641] veth0_macvtap: entered promiscuous mode [ 1140.117105][T12641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1140.125365][ T8100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1140.243848][ T8090] tipc: Disabling bearer [ 1140.249517][ T8090] tipc: Disabling bearer [ 1140.282336][ T8090] tipc: Left network mode [ 1140.284573][T12647] tipc: Enabled bearer , priority 0 [ 1140.306913][T12650] syzkaller0: entered promiscuous mode [ 1140.329561][T12650] syzkaller0: entered allmulticast mode [ 1140.494876][T12634] netlink: 'syz.4.11552': attribute type 15 has an invalid length. [ 1140.503717][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11552'. [ 1140.564679][T12650] tipc: Resetting bearer [ 1140.683212][T12650] tipc: Disabling bearer [ 1141.038266][T12691] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11565'. [ 1141.060028][T12691] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11565'. [ 1141.071525][T12694] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11565'. [ 1141.113286][T12697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11563'. [ 1141.185815][T12704] netlink: 'syz.1.11568': attribute type 1 has an invalid length. [ 1141.263936][T12707] bond8: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 1141.304950][T12704] veth5: entered promiscuous mode [ 1141.357286][T12704] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 1141.413690][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11571'. [ 1141.580331][T12724] netlink: 'syz.1.11575': attribute type 11 has an invalid length. [ 1141.697160][T12724] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1141.838213][ T8080] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1141.854310][T12735] netlink: 'syz.5.11580': attribute type 1 has an invalid length. [ 1141.916330][T12735] netlink: 244 bytes leftover after parsing attributes in process `syz.5.11580'. [ 1141.926026][ T8080] bond8: active interface up! [ 1141.940405][T12739] netlink: 'syz.2.11581': attribute type 26 has an invalid length. [ 1141.949547][ T29] audit: type=1107 audit(1781465018.580:97): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1141.949547][ T29] yk:Xd4yUH,_╆ь8' [ 1141.969300][T12724] tipc: Enabled bearer , priority 0 [ 1142.024784][T12728] syzkaller0: entered promiscuous mode [ 1142.030423][T12728] syzkaller0: entered allmulticast mode [ 1142.038499][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11581'. [ 1142.173087][T12744] bond7: option lp_interval: invalid value (0) [ 1142.179735][T12744] bond7: option lp_interval: allowed values 1 - 2147483647 [ 1142.188710][T12744] bond7 (unregistering): Released all slaves [ 1142.247985][T12724] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1142.278445][T12728] tipc: Resetting bearer [ 1142.370140][T12722] tipc: Resetting bearer [ 1142.464794][T12722] tipc: Disabling bearer [ 1142.573609][T12760] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1142.598482][T12760] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1142.692356][T12764] macsec1: entered promiscuous mode [ 1142.697621][T12764] bridge0: entered promiscuous mode [ 1142.702999][T12764] macsec1: entered allmulticast mode [ 1142.708305][T12764] bridge0: entered allmulticast mode [ 1143.192011][T24947] net_ratelimit: 46 callbacks suppressed [ 1143.192030][T24947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.227630][ T8096] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1143.235154][ T8096] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1143.242590][ T8096] bond3: (slave bridge6): failed to get link speed/duplex [ 1143.301923][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.303363][ T8100] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1143.310560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.458184][T12792] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1143.477469][T12792] macvlan0: entered promiscuous mode [ 1143.482775][T12792] macvlan0: entered allmulticast mode [ 1143.489314][T12792] bond11: entered promiscuous mode [ 1143.494984][T12792] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1143.505282][T12792] bond11: left promiscuous mode [ 1143.571204][ T8080] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1143.574496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.578627][ T8080] bond3: (slave bridge6): failed to get link speed/duplex [ 1143.750888][T12806] netlink: 'syz.2.11600': attribute type 1 has an invalid length. [ 1143.759112][T12806] netlink: 'syz.2.11600': attribute type 2 has an invalid length. [ 1143.769495][T12806] netlink: 'syz.2.11600': attribute type 1 has an invalid length. [ 1143.777592][T12806] netlink: 'syz.2.11600': attribute type 2 has an invalid length. [ 1143.794738][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1143.848767][T12808] netlink: 'syz.2.11601': attribute type 1 has an invalid length. [ 1145.018043][T12830] netlink: 'syz.1.11606': attribute type 11 has an invalid length. [ 1145.169734][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.177167][ T8090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.188093][T14767] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1145.211671][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.266766][ T8090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.282823][ T8090] veth1_macvtap: left promiscuous mode [ 1145.288794][ T8090] veth0_macvtap: left promiscuous mode [ 1145.298591][ T8090] veth1_vlan: left promiscuous mode [ 1145.369317][ T29] audit: type=1107 audit(1781465021.990:98): pid=12829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1145.369317][ T29] yk:Xd4yUH,_╆ь8' [ 1145.462505][T12851] __nla_validate_parse: 11 callbacks suppressed [ 1145.462526][T12851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1145.931886][T12830] tipc: Enabled bearer , priority 0 [ 1145.938976][T12849] syzkaller0: entered promiscuous mode [ 1145.945019][T12849] syzkaller0: entered allmulticast mode [ 1145.956590][T12850] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1146.026886][T12853] tipc: Resetting bearer [ 1146.136619][T12829] tipc: Resetting bearer [ 1146.170746][T12829] tipc: Disabling bearer [ 1146.386779][T12881] bond12: option all_slaves_active: invalid value (222) [ 1146.398573][T12881] bond12 (unregistering): Released all slaves [ 1146.442914][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11621'. [ 1146.452891][T12880] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1146.525495][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11621'. [ 1146.795299][T12898] netlink: 288 bytes leftover after parsing attributes in process `syz.1.11623'. [ 1146.885311][T12902] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.11626'. [ 1146.978726][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11627'. [ 1147.078053][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11628'. [ 1147.117510][T12908] vlan2: entered allmulticast mode [ 1147.152657][T12908] bond0: entered allmulticast mode [ 1147.178226][T12908] bond_slave_0: entered allmulticast mode [ 1147.280038][T12923] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11632'. [ 1147.297029][T12923] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11632'. [ 1147.306173][T12921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11633'. [ 1147.701059][ T8090] IPVS: stop unused estimator thread 0... [ 1147.748223][T12945] bond12: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1147.783790][T12945] bond12 (unregistering): Released all slaves [ 1148.298635][T12973] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1148.317638][ T8100] net_ratelimit: 110 callbacks suppressed [ 1148.317655][ T8100] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1148.342450][ T8100] bond3: (slave bridge6): failed to get link speed/duplex [ 1148.427287][ T8100] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1148.465272][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1148.596493][ T8096] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1148.639043][T12983] policy can only be matched on NF_INET_PRE_ROUTING [ 1148.639064][T12983] unable to load match [ 1148.657955][T24947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.761487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.773074][ T8096] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1148.822646][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1148.839166][T12991] netlink: 'syz.5.11654': attribute type 9 has an invalid length. [ 1148.872654][ T8096] bond3: (slave bridge6): failed to get link speed/duplex [ 1148.891733][ T8088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1149.403482][T13026] netlink: 'syz.4.11666': attribute type 1 has an invalid length. [ 1149.425769][T13024] xfrm1: entered allmulticast mode [ 1149.607699][T13036] tipc: Resetting bearer [ 1149.644651][T13045] syzkaller0: entered promiscuous mode [ 1149.650168][T13045] syzkaller0: entered allmulticast mode [ 1149.683584][T13036] netlink: 'syz.3.11672': attribute type 11 has an invalid length. [ 1149.820325][T13036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1149.849044][T13036] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1149.889663][T13055] tipc: Enabling of bearer rejected, already enabled [ 1149.896253][T12031] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1149.939717][T13054] tipc: Resetting bearer [ 1149.966259][T13054] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1149.973512][T13054] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1150.021028][ T29] audit: type=1107 audit(1781465026.640:99): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1150.021028][ T29] yk:Xd4yUH,_╆ь8' [ 1150.060263][T13054] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1150.076478][T13036] tipc: Enabling of bearer rejected, already enabled [ 1150.122544][T13036] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1150.166236][T13033] tipc: Resetting bearer [ 1150.214835][T24947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1150.254272][T13070] xt_hashlimit: size too large, truncated to 1048576 [ 1150.295911][T13075] syzkaller1: entered promiscuous mode [ 1150.319041][T13075] syzkaller1: entered allmulticast mode [ 1150.400590][T13081] 1XD: renamed from 00XD (while UP) [ 1150.499307][T13081] 1XD: entered allmulticast mode [ 1150.605699][ T8096] tipc: Resetting bearer [ 1150.641388][T13087] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1150.707821][T13089] xt_bpf: check failed: parse error [ 1150.810926][T13095] netlink: 'syz.5.11686': attribute type 21 has an invalid length. [ 1150.818884][T13095] IPv6: NLM_F_CREATE should be specified when creating new route [ 1151.587566][T13136] set match dimension is over the limit! [ 1152.444909][T13174] __nla_validate_parse: 71 callbacks suppressed [ 1152.444929][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11712'. [ 1152.828638][T13194] netlink: 212 bytes leftover after parsing attributes in process `syz.3.11716'. [ 1152.832462][T13178] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1152.882949][T13178] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1152.978613][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11717'. [ 1153.232190][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11722'. [ 1153.267473][T13202] syzkaller0: entered promiscuous mode [ 1153.272984][T13202] syzkaller0: entered allmulticast mode [ 1153.349525][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11723'. [ 1153.372745][T13224] net_ratelimit: 82 callbacks suppressed [ 1153.372760][T13224] openvswitch: netlink: Flow key attr not present in new flow. [ 1153.471072][T24949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.483904][T13225] openvswitch: netlink: Tunnel attr 143 out of range max 16 [ 1153.491565][ T8082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.499789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.521341][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1153.623316][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1153.637068][T13239] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11727'. [ 1153.664574][ T8082] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1153.695124][T13241] netlink: 'syz.4.11728': attribute type 1 has an invalid length. [ 1153.703001][T13241] netlink: 'syz.4.11728': attribute type 2 has an invalid length. [ 1153.710828][T13241] netlink: 'syz.4.11728': attribute type 1 has an invalid length. [ 1153.754366][ T8080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1153.855633][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1153.890231][T13250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11733'. [ 1153.905538][T13250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1153.909196][T13245] netlink: 'syz.5.11730': attribute type 3 has an invalid length. [ 1153.917499][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1153.962554][T15410] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1154.421064][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11740'. [ 1154.823586][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.848451][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1154.985020][T13312] bond0: (slave bond_slave_1): Releasing backup interface [ 1155.040332][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11747'. [ 1155.217775][T13325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11750'. [ 1155.652057][T13356] netlink: 'syz.5.11759': attribute type 21 has an invalid length. [ 1155.668860][T13356] netlink: 'syz.5.11759': attribute type 6 has an invalid length. [ 1157.136390][T13429] tipc: Resetting bearer [ 1157.144435][T13429] nbd: must specify a size in bytes for the device [ 1157.632538][T13463] __nla_validate_parse: 74 callbacks suppressed [ 1157.632556][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11792'. [ 1157.676178][T13465] syzkaller0: entered promiscuous mode [ 1157.681842][T13465] syzkaller0: entered allmulticast mode [ 1157.905584][T13478] netlink: 'syz.3.11796': attribute type 16 has an invalid length. [ 1157.913544][T13478] netlink: 'syz.3.11796': attribute type 3 has an invalid length. [ 1157.934075][T13478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11796'. [ 1157.985333][T13470] syzkaller1: entered promiscuous mode [ 1157.990945][T13470] syzkaller1: entered allmulticast mode [ 1158.009124][T13470] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.11793'. [ 1158.021853][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11793'. [ 1158.128762][T13485] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1158.336379][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11802'. [ 1158.376432][ T8096] net_ratelimit: 96 callbacks suppressed [ 1158.376451][ T8096] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1158.481754][ T8082] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1158.489378][ T8082] bond3: (slave bridge6): failed to get link speed/duplex [ 1158.527000][ T8088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1158.594403][T13517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11804'. [ 1158.610516][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11807'. [ 1158.643759][ T8096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.646967][ T8100] bond3: (slave bridge6): failed to get link speed/duplex [ 1158.659003][ T8100] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1158.702033][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.728187][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1158.812185][ T8082] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1158.897415][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11811'. [ 1158.959510][T13526] syzkaller0: entered promiscuous mode [ 1158.965245][T13526] syzkaller0: entered allmulticast mode [ 1159.245312][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1159.265200][T13555] nft_compat: unsupported protocol 0 [ 1159.275348][ T8082] nci: nci_rx_work: unknown MT 0x1 [ 1159.369324][T13558] netlink: 'syz.1.11815': attribute type 9 has an invalid length. [ 1159.377997][T13558] netlink: 'syz.1.11815': attribute type 6 has an invalid length. [ 1159.387576][T13558] netlink: 'syz.1.11815': attribute type 1 has an invalid length. [ 1159.928541][T13544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.204018][T13586] netlink: 'syz.2.11819': attribute type 11 has an invalid length. [ 1162.266606][T13586] tipc: Resetting bearer [ 1162.284132][T13586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1162.293233][T13586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1162.302029][T13586] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1162.953241][T13621] macvlan2: entered promiscuous mode [ 1162.958781][T13621] macvlan2: entered allmulticast mode [ 1163.256549][T13625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11832'. [ 1163.409626][T15410] net_ratelimit: 54 callbacks suppressed [ 1163.409644][T15410] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1163.455499][ T8100] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1163.503049][ T8096] bond3: (slave bridge6): failed to get link speed/duplex [ 1163.538908][T13634] xt_connbytes: Forcing CT accounting to be enabled [ 1163.569875][ T8090] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1163.600320][T13637] FAULT_INJECTION: forcing a failure. [ 1163.600320][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.616910][ T8090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1163.669257][T13637] CPU: 1 UID: 0 PID: 13637 Comm: syz.2.11838 Not tainted syzkaller #0 PREEMPT(full) [ 1163.669284][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1163.669297][T13637] Call Trace: [ 1163.669306][T13637] [ 1163.669317][T13637] dump_stack_lvl+0xe8/0x150 [ 1163.669355][T13637] should_fail_ex+0x40c/0x560 [ 1163.669386][T13637] should_failslab+0xa8/0x100 [ 1163.669420][T13637] ? dst_alloc+0x105/0x170 [ 1163.669445][T13637] kmem_cache_alloc_noprof+0x87/0x650 [ 1163.669486][T13637] dst_alloc+0x105/0x170 [ 1163.669514][T13637] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1163.669538][T13637] ? ip_route_output_key_hash_rcu+0x1cf1/0x2720 [ 1163.669570][T13637] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1163.669597][T13637] ip_route_output_key_hash+0x18d/0x2a0 [ 1163.669626][T13637] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1163.669656][T13637] ? __asan_memset+0x22/0x50 [ 1163.669696][T13637] ip_route_output_flow+0x2a/0x150 [ 1163.669799][T13637] ? security_sk_classify_flow+0x6d/0x150 [ 1163.669831][T13637] tcp_v4_connect+0x7b4/0x1950 [ 1163.669947][T13637] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1163.669985][T13637] mptcp_connect+0x4d3/0x7a0 [ 1163.670085][T13637] __inet_stream_connect+0x258/0xe00 [ 1163.670134][T13637] ? __pfx___inet_stream_connect+0x10/0x10 [ 1163.670157][T13637] ? __kasan_kmalloc+0x93/0xb0 [ 1163.670187][T13637] ? __kmalloc_cache_noprof+0x318/0x660 [ 1163.670222][T13637] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1163.670243][T13637] ? __kmalloc_cache_noprof+0x157/0x660 [ 1163.670285][T13637] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1163.670314][T13637] mptcp_sendmsg_fastopen+0x17b/0x540 [ 1163.670341][T13637] mptcp_sendmsg+0x1a69/0x1d10 [ 1163.670385][T13637] ? aa_sk_perm+0x6d5/0x900 [ 1163.670421][T13637] ? __pfx_aa_sk_perm+0x10/0x10 [ 1163.670447][T13637] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1163.670477][T13637] ? sock_rps_record_flow+0x19/0x350 [ 1163.670500][T13637] ? inet_sendmsg+0x298/0x320 [ 1163.670520][T13637] ? __pfx_inet_sendmsg+0x10/0x10 [ 1163.670543][T13637] ____sys_sendmsg+0x853/0xa20 [ 1163.670583][T13637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1163.670623][T13637] ? import_iovec+0x73/0xa0 [ 1163.670651][T13637] ___sys_sendmsg+0x2a5/0x360 [ 1163.670679][T13637] ? __lock_acquire+0x683/0x2cd0 [ 1163.670706][T13637] ? __pfx____sys_sendmsg+0x10/0x10 [ 1163.670741][T13637] ? kstrtouint+0x6e/0xe0 [ 1163.670797][T13637] ? __fget_files+0x2a/0x420 [ 1163.670823][T13637] ? __fget_files+0x3a2/0x420 [ 1163.670857][T13637] __sys_sendmmsg+0x27c/0x4e0 [ 1163.670894][T13637] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1163.670923][T13637] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1163.670971][T13637] ? ksys_write+0x242/0x270 [ 1163.671001][T13637] ? __pfx_ksys_write+0x10/0x10 [ 1163.671034][T13637] __x64_sys_sendmmsg+0xa0/0xc0 [ 1163.671064][T13637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.671086][T13637] do_syscall_64+0x174/0x580 [ 1163.671103][T13637] ? trace_irq_disable+0x3b/0x140 [ 1163.671132][T13637] ? clear_bhb_loop+0x40/0x90 [ 1163.671155][T13637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.671175][T13637] RIP: 0033:0x7ff003d9ce59 [ 1163.671193][T13637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.671218][T13637] RSP: 002b:00007ff004c05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1163.671238][T13637] RAX: ffffffffffffffda RBX: 00007ff004015fa0 RCX: 00007ff003d9ce59 [ 1163.671252][T13637] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 1163.671265][T13637] RBP: 00007ff004c05090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.671276][T13637] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.671287][T13637] R13: 00007ff004016038 R14: 00007ff004015fa0 R15: 00007ffc31b69d08 [ 1163.671316][T13637] [ 1164.040271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.066190][ T8096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.127998][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.143729][ T8096] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1164.152080][ T8080] bond3: (slave bridge6): failed to get link speed/duplex [ 1164.282672][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1164.344073][T13661] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11842'. [ 1164.490324][T13668] syzkaller0: entered promiscuous mode [ 1164.495887][T13668] syzkaller0: entered allmulticast mode [ 1164.611445][T13672] syzkaller0: entered promiscuous mode [ 1164.627240][T13672] syzkaller0: entered allmulticast mode [ 1164.649463][T13674] bond11 (unregistering): Released all slaves [ 1165.079332][T13677] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.11848'. [ 1165.622334][T13705] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1166.473363][T13727] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11862'. [ 1166.906974][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.914293][ C1] bridge0: topology change detected, propagating [ 1166.920888][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.928177][ C1] bridge0: topology change detected, propagating [ 1167.026958][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11864'. [ 1168.066818][T13681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1168.252425][T13735] tipc: Enabling of bearer rejected, already enabled [ 1168.276532][T13735] tipc: Resetting bearer [ 1168.494290][T13756] tipc: Resetting bearer [ 1168.570024][T13755] tipc: Resetting bearer [ 1168.620661][ T6283] net_ratelimit: 117 callbacks suppressed [ 1168.620679][ T6283] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1168.675165][ T6283] bond3: (slave bridge6): failed to get link speed/duplex [ 1168.725152][ T6283] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1168.744957][ T8082] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1168.789734][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11876'. [ 1168.797807][ T8082] bond3: (slave bridge6): failed to get link speed/duplex [ 1168.806030][T24949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.863271][T15410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.872198][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.882829][ T8100] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1168.903550][T14767] bond3: (slave bridge6): failed to get link speed/duplex [ 1169.236831][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11879'. [ 1169.342648][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1169.445572][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11881'. [ 1169.526793][T13793] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1169.583364][ T8082] tipc: Resetting bearer [ 1170.878045][ T5651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1170.916360][ T5651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1170.924382][ T5651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1170.993213][ T5651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1171.010250][ T5651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1171.050858][T13862] syz.1.11905 (13862) used obsolete PPPIOCDETACH ioctl [ 1171.188666][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11904'. [ 1171.189176][T13865] xt_TCPMSS: Only works on TCP SYN packets [ 1171.415445][T13872] lo speed is unknown, defaulting to 1000 [ 1171.670491][T13887] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11910'. [ 1171.699834][T13887] netlink: 'syz.2.11910': attribute type 1 has an invalid length. [ 1171.831589][T13855] lo speed is unknown, defaulting to 1000 [ 1172.023367][T13900] Cannot find del_set index 3 as target [ 1172.051157][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1172.079444][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11914'. [ 1172.218350][T13900] ipvlan1: entered allmulticast mode [ 1172.235638][T13900] veth0_vlan: entered allmulticast mode [ 1173.094024][ T5651] Bluetooth: hci2: command tx timeout [ 1173.519198][T13939] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11926'. [ 1173.644403][ C1] net_ratelimit: 104 callbacks suppressed [ 1173.644422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.678404][T13939] vlan0: entered allmulticast mode [ 1173.683580][T13939] gretap0: entered allmulticast mode [ 1173.712972][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.720121][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.727370][T13855] bridge_slave_0: entered allmulticast mode [ 1173.734954][T13855] bridge_slave_0: entered promiscuous mode [ 1173.743013][T13855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.750144][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.758419][T13855] bridge_slave_1: entered allmulticast mode [ 1173.766165][T13855] bridge_slave_1: entered promiscuous mode [ 1173.902238][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.924338][T12061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.950119][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.977249][T13953] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11930'. [ 1174.018688][T13855] team0: Port device team_slave_0 added [ 1174.031818][T13855] team0: Port device team_slave_1 added [ 1174.043316][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.051558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.072825][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.090397][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.099138][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.125240][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.148563][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.164845][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.198618][T13955] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11931'. [ 1174.206214][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.265925][T13955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.278720][T13955] bond_slave_0: left allmulticast mode [ 1174.287002][T13955] bond0 (unregistering): Released all slaves [ 1174.335502][T13855] hsr_slave_0: entered promiscuous mode [ 1174.341941][T13855] hsr_slave_1: entered promiscuous mode [ 1174.348085][T13855] debugfs: 'hsr0' already exists in 'hsr' [ 1174.353810][T13855] Cannot create hsr debugfs directory [ 1174.423163][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1174.614788][T14767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.627353][T14772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.691737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.776440][T13855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.786990][T13855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.797272][T13855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1174.873295][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11936'. [ 1174.933189][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.944892][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1174.963211][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11937'. [ 1175.116579][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11941'. [ 1175.153165][ T5651] Bluetooth: hci2: command tx timeout [ 1175.326140][T13855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.363312][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11943'. [ 1175.390986][T13855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.401292][T13855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1175.435794][T14011] netlink: 'syz.2.11946': attribute type 11 has an invalid length. [ 1175.460582][T14011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11946'. [ 1175.569963][T14006] tipc: Resetting bearer [ 1175.690699][T14006] tipc: Enabling of bearer rejected, already enabled [ 1175.699972][ T29] audit: type=1107 audit(1781465052.300:100): pid=14004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1175.699972][ T29] yk:Xd4yUH,_╆ь8' [ 1175.814439][T13855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.828514][T13855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.857881][T13855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1175.869194][T14018] netlink: 'syz.4.11948': attribute type 2 has an invalid length. [ 1175.877379][T14018] netlink: 'syz.4.11948': attribute type 2 has an invalid length. [ 1175.890627][T14015] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1175.898053][T14015] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1175.907020][T14006] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1175.914527][T14006] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1175.922393][T14006] tipc: Resetting bearer [ 1175.928322][T14011] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1176.083837][T14024] xt_policy: too many policy elements [ 1176.110184][T13855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1176.120480][T13855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.165741][T13855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1176.233831][T14028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11951'. [ 1176.490547][T14048] netlink: 'syz.1.11959': attribute type 11 has an invalid length. [ 1176.498520][T14048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11959'. [ 1176.596246][T14048] batadv0: entered promiscuous mode [ 1176.602528][T14048] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1176.693439][T14048] tipc: Enabled bearer , priority 0 [ 1176.702372][T14048] syzkaller0: entered promiscuous mode [ 1176.707870][T14048] syzkaller0: entered allmulticast mode [ 1176.714060][ T29] audit: type=1107 audit(1781465053.330:101): pid=14047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1176.714060][ T29] yk:Xd4yUH,_╆ь8' [ 1176.791235][T14048] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1176.820508][T14048] tipc: Resetting bearer [ 1176.830137][T14047] tipc: Resetting bearer [ 1176.863477][T14047] tipc: Disabling bearer [ 1176.891756][T13855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1176.902278][T13855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.910155][T13855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1176.928778][T13855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.937173][T13855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1176.948792][T13855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1176.959082][T13855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1176.999224][T13855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1177.128383][T13855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.157131][T13855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.198976][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1177.217350][T15410] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1177.234036][T14069] veth0: entered promiscuous mode [ 1177.243446][ T5651] Bluetooth: hci2: command tx timeout [ 1177.244678][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11963'. [ 1177.385866][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.393038][ T8080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.442064][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.449253][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.483620][T14080] netlink: 'syz.2.11967': attribute type 4 has an invalid length. [ 1177.701271][T14093] netlink: 'syz.1.11971': attribute type 11 has an invalid length. [ 1177.834127][T14093] tipc: Enabled bearer , priority 0 [ 1177.938754][T14093] syzkaller0: entered promiscuous mode [ 1177.944320][ T29] audit: type=1107 audit(1781465054.560:102): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1177.944320][ T29] yk:Xd4yUH,_╆ь8' [ 1177.999703][T14093] syzkaller0: entered allmulticast mode [ 1178.007385][T14093] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1178.048853][T14093] tipc: Resetting bearer [ 1178.073185][T14091] tipc: Resetting bearer [ 1178.139486][T14091] tipc: Disabling bearer [ 1178.322264][T13855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.481130][T14117] tunl0: entered promiscuous mode [ 1178.510118][T14117] netlink: 'syz.1.11977': attribute type 4 has an invalid length. [ 1178.716581][T14133] xt_hashlimit: size too large, truncated to 1048576 [ 1178.789846][T14136] syzkaller0: entered promiscuous mode [ 1178.795364][T14136] syzkaller0: entered allmulticast mode [ 1178.803151][T15410] net_ratelimit: 96 callbacks suppressed [ 1178.803167][T15410] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1178.851843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.924924][ T8080] bond3: (slave bridge6): failed to get link speed/duplex [ 1179.043437][T13855] veth0_vlan: entered promiscuous mode [ 1179.076815][T14146] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1179.087993][ T4398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.089725][T15410] bond3: (slave bridge6): failed to get link speed/duplex [ 1179.089762][T15410] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1179.089796][T15410] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1179.090845][T15410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.144987][T13855] veth1_vlan: entered promiscuous mode [ 1179.171395][T14148] netlink: 'syz.1.11985': attribute type 16 has an invalid length. [ 1179.189579][T14148] __nla_validate_parse: 10 callbacks suppressed [ 1179.189596][T14148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11985'. [ 1179.261445][T14148] veth0_macvtap: entered allmulticast mode [ 1179.275606][T13855] veth0_macvtap: entered promiscuous mode [ 1179.285363][T14150] netlink: 'syz.4.11987': attribute type 11 has an invalid length. [ 1179.293692][T13855] veth1_macvtap: entered promiscuous mode [ 1179.310139][T14150] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11987'. [ 1179.325805][ T5651] Bluetooth: hci2: command tx timeout [ 1179.338526][ T8080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1179.346084][ T8080] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1179.365091][T13855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.380057][T13855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.407301][ T8080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.471547][ T8080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.492189][ T8080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.502542][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1179.539378][ T8080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.649792][T14160] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1179.711770][T14157] tipc: Resetting bearer [ 1179.763993][ T8088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.851049][ T8088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.868730][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11992'. [ 1179.916365][ T8088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.924216][ T8088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.023007][T14174] netlink: 'syz.1.11995': attribute type 11 has an invalid length. [ 1180.044312][T14174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1180.081176][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1180.165410][T14180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.177923][T14180] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11998'. [ 1180.208209][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.357441][T14185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11999'. [ 1180.369248][T14189] netlink: 'syz.2.12000': attribute type 10 has an invalid length. [ 1180.372257][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11999'. [ 1180.386183][T14191] netlink: 'syz.5.11898': attribute type 1 has an invalid length. [ 1180.432225][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11898'. [ 1180.751351][T14206] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 1180.768259][T14206] macvlan1: entered promiscuous mode [ 1180.826237][T14206] macvlan1: entered allmulticast mode [ 1180.832157][T14206] bond9: (slave macvlan1): Error -98 calling set_mac_address [ 1181.012908][ T9735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1181.027900][ T9735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1181.030487][T14218] netlink: 'syz.4.12006': attribute type 11 has an invalid length. [ 1181.042586][ T9735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1181.050749][ T9735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1181.058730][ T9735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1181.619062][T14210] tipc: Enabled bearer , priority 0 [ 1181.709629][T14210] syzkaller0: entered promiscuous mode [ 1181.715165][T14210] syzkaller0: entered allmulticast mode [ 1181.734671][ T29] audit: type=1107 audit(1781465058.310:103): pid=14209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gJ [ 1181.734671][ T29] yk:Xd4yUH,_╆ь8' [ 1181.760591][T14210] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1181.974671][ T2174] bond0: (slave syz_tun): Releasing backup interface [ 1182.062160][T14210] tipc: Resetting bearer [ 1182.083106][T14266] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1182.197152][T14209] tipc: Resetting bearer [ 1182.301313][T14209] tipc: Disabling bearer [ 1182.335817][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1182.389345][T14279] sctp: [Deprecated]: syz.5.12018 (pid 14279) Use of int in max_burst socket option. [ 1182.389345][T14279] Use struct sctp_assoc_value instead [ 1182.501552][T14279] syzkaller1: entered promiscuous mode [ 1182.521132][T14279] syzkaller1: entered allmulticast mode [ 1182.637563][T15410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.648662][T15410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.725182][T14212] lo speed is unknown, defaulting to 1000 [ 1182.741253][T14290] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1183.081968][T14294] bond0 (unregistering): Released all slaves [ 1183.176236][ T5651] Bluetooth: hci0: command tx timeout [ 1183.266872][T14310] netlink: 'syz.4.12026': attribute type 3 has an invalid length. [ 1183.276209][T14310] nft_compat: unsupported protocol 1 [ 1183.564438][T15410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.574783][T15410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.732226][T14333] netlink: 'syz.4.12030': attribute type 6 has an invalid length. [ 1183.997257][T12031] net_ratelimit: 65 callbacks suppressed [ 1183.997275][T12031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.045897][ T4398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.070011][T14348] netlink: 'syz.3.12033': attribute type 7 has an invalid length. [ 1184.093689][T15410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.136719][T15410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.152157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.198834][T14342] netem: change failed [ 1184.530482][T15410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.574240][T14342] __nla_validate_parse: 11 callbacks suppressed [ 1184.574258][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12032'. [ 1184.605505][T15410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.613697][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1184.741536][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.750964][T14212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.758224][T14212] bridge_slave_0: entered allmulticast mode [ 1184.780199][T14373] nft_compat: unsupported protocol 0 [ 1184.787729][T14212] bridge_slave_0: entered promiscuous mode [ 1184.824384][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.831849][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.839059][T14212] bridge_slave_1: entered allmulticast mode [ 1184.843696][T14767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.849465][T14212] bridge_slave_1: entered promiscuous mode [ 1184.893197][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.947914][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.965234][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.970692][T14379] netlink: 'syz.1.12040': attribute type 1 has an invalid length. [ 1185.059164][ T8080] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1185.125332][T15410] pimreg7: left allmulticast mode [ 1185.133131][T15410] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1185.251119][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12040'. [ 1185.271653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.284423][ T5651] Bluetooth: hci0: command tx timeout [ 1185.338494][T14397] Bluetooth: MGMT ver 1.23 [ 1185.416941][T14401] netlink: 'syz.4.12043': attribute type 3 has an invalid length. [ 1185.424796][T14401] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12043'. [ 1185.504599][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.568090][T14772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.576465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.631717][T15410] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 1185.659938][T15410] team0: Port device geneve1 removed [ 1186.298255][T15410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.327004][T15410] bond0 (unregistering): Released all slaves [ 1186.346974][T15410] bond1 (unregistering): Released all slaves [ 1186.369287][T15410] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1186.385900][T15410] bond2 (unregistering): Released all slaves [ 1186.412676][T15410] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1186.424728][T15410] bond3 (unregistering): Released all slaves [ 1186.444245][T15410] bond4 (unregistering): Released all slaves [ 1186.462109][T15410] bond5 (unregistering): Released all slaves [ 1186.479391][T15410] bond6 (unregistering): Released all slaves [ 1186.500482][T15410] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1186.509232][T15410] bond7 (unregistering): Released all slaves [ 1186.541352][T15410] bond8 (unregistering): Released all slaves [ 1186.561046][T14212] team0: Port device team_slave_0 added [ 1186.631080][T14212] team0: Port device team_slave_1 added [ 1186.737832][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.744916][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.803132][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.815846][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.823053][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.849543][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.955012][T14212] hsr_slave_0: entered promiscuous mode [ 1186.961795][T14212] hsr_slave_1: entered promiscuous mode [ 1186.968108][T14212] debugfs: 'hsr0' already exists in 'hsr' [ 1186.973856][T14212] Cannot create hsr debugfs directory [ 1187.324404][ T5651] Bluetooth: hci0: command tx timeout [ 1187.503123][T14429] syzkaller1: entered promiscuous mode [ 1187.508765][T14429] syzkaller1: entered allmulticast mode [ 1187.528782][T14429] tipc: Enabling of bearer rejected, failed to enable media [ 1187.705842][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1187.744344][T15410] tipc: Disabling bearer [ 1187.752842][T15410] tipc: Left network mode [ 1187.803284][T14436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12050'. [ 1188.796833][T14472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.806229][T14472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.825133][T14472] tipc: Resetting bearer [ 1188.830817][T14472] tipc: Resetting bearer [ 1188.905944][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12059'. [ 1188.954528][T14479] 1XD: left allmulticast mode [ 1188.993276][T14479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.000423][T14479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.009207][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.016341][T14479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.033507][T14772] net_ratelimit: 37 callbacks suppressed [ 1189.033523][T14772] bond3: (slave bridge6): link status up again after 0 ms [ 1189.072475][T14479] bridge8: left allmulticast mode [ 1189.083409][ T8090] bond3: (slave bridge6): link status up again after 0 ms [ 1189.107640][T12061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.127419][T14479] bond6: left promiscuous mode [ 1189.132210][T14479] bond6: left allmulticast mode [ 1189.137146][T14479] xfrm1: left allmulticast mode [ 1189.154677][T14767] bond3: (slave bridge6): link status up again after 0 ms [ 1189.206891][ T35] bond3: (slave bridge6): link status up again after 0 ms [ 1189.213015][T12061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.214464][ T8090] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 1189.257460][ T35] bond3: (slave bridge6): link status up again after 0 ms [ 1189.337631][ T6283] bond3: (slave bridge6): link status up again after 0 ms [ 1189.412559][ T5651] Bluetooth: hci0: command tx timeout [ 1189.418209][ T35] bond3: (slave bridge6): link status up again after 0 ms [ 1190.461178][T15410] ------------[ cut here ]------------ [ 1190.466950][T15410] sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt [ 1190.466978][T15410] WARNING: net/mac80211/key.c:1164 at ieee80211_free_keys+0x56e/0x680, CPU#0: kworker/u8:31/15410 [ 1190.486770][T15410] Modules linked in: [ 1190.490869][T15410] CPU: 0 UID: 0 PID: 15410 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1190.500546][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1190.510630][T15410] Workqueue: netns cleanup_net [ 1190.515438][T15410] RIP: 0010:ieee80211_free_keys+0x56e/0x680 [ 1190.535632][T15410] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 07 c0 84 00 cc e8 91 af a4 f6 90 0f 0b 90 e9 22 fc ff ff e8 83 af a4 f6 90 <0f> 0b 90 e9 30 fe ff ff e8 75 af a4 f6 e9 1b fe ff ff 48 c7 c1 e0 [ 1190.555287][T15410] RSP: 0018:ffffc9000313f060 EFLAGS: 00010293 [ 1190.561378][T15410] RAX: ffffffff8b2090ad RBX: ffff888063148e80 RCX: ffff8880363a5d00 [ 1190.569377][T15410] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1190.577370][T15410] RBP: ffffc9000313f130 R08: ffffc9000313ee47 R09: 1ffff92000627dc8 [ 1190.585365][T15410] R10: dffffc0000000000 R11: fffff52000627dc9 R12: dffffc0000000000 [ 1190.593359][T15410] R13: 1ffff92000627e14 R14: 0000000000000002 R15: 0000000000000001 [ 1190.601357][T15410] FS: 0000000000000000(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000 [ 1190.610307][T15410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1190.616908][T15410] CR2: 00007f8342fea540 CR3: 00000000b3ea4000 CR4: 00000000003526f0 [ 1190.624934][T15410] Call Trace: [ 1190.628244][T15410] [ 1190.631225][T15410] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 1190.652447][T15410] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1190.658313][T15410] ieee80211_do_stop+0x1017/0x2220 [ 1190.663469][T15410] ? rcu_is_watching+0x15/0xb0 [ 1190.668281][T15410] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1190.673806][T15410] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1190.679761][T15410] ieee80211_stop+0x1af/0x220 [ 1190.684486][T15410] ? __pfx_ieee80211_stop+0x10/0x10 [ 1190.689733][T15410] __dev_close_many+0x366/0x6e0 [ 1190.694624][T15410] ? __lock_acquire+0x683/0x2cd0 [ 1190.699617][T15410] ? __pfx___dev_close_many+0x10/0x10 [ 1190.705056][T15410] ? wake_up_q+0x99/0xd0 [ 1190.709364][T15410] netif_close_many+0x222/0x410 [ 1190.714244][T15410] ? __pfx_netif_close_many+0x10/0x10 [ 1190.719644][T15410] ? __mutex_trylock_common+0x15f/0x270 [ 1190.726324][T15410] netif_close+0x160/0x220 [ 1190.730784][T15410] ? __pfx_netif_close+0x10/0x10 [ 1190.735757][T15410] ? __mutex_lock+0x30f/0x1590 [ 1190.740559][T15410] dev_close+0xf7/0x210 [ 1190.744754][T15410] cfg80211_shutdown_all_interfaces+0xb0/0x200 [ 1190.765322][T15410] ieee80211_remove_interfaces+0x108/0x6c0 [ 1190.771181][T15410] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1190.777289][T15410] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1190.783660][T15410] ieee80211_unregister_hw+0x5d/0x2c0 [ 1190.789085][T15410] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 1190.794687][T15410] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1190.800811][T15410] ? hwsim_exit_net+0xd1c/0xfc0 [ 1190.805797][T15410] ? __local_bh_enable_ip+0xd0/0x130 [ 1190.811126][T15410] hwsim_exit_net+0xef5/0xfc0 [ 1190.815841][T15410] ? hwsim_exit_net+0x34d/0xfc0 [ 1190.820754][T15410] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1190.825995][T15410] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1190.831904][T15410] ops_undo_list+0x43d/0x8d0 [ 1190.836541][T15410] ? __pfx_ops_undo_list+0x10/0x10 [ 1190.842928][T15410] ? idr_destroy+0x227/0x290 [ 1190.847614][T15410] cleanup_net+0x572/0x810 [ 1190.852073][T15410] ? __pfx_cleanup_net+0x10/0x10 [ 1190.857095][T15410] ? rcu_is_watching+0x15/0xb0 [ 1190.861893][T15410] ? process_scheduled_works+0xa20/0x14e0 [ 1190.880568][T15410] process_scheduled_works+0xa8e/0x14e0 [ 1190.886206][T15410] ? __pfx_process_scheduled_works+0x10/0x10 [ 1190.892243][T15410] ? assign_work+0x3cf/0x5d0 [ 1190.896883][T15410] worker_thread+0xa47/0xfb0 [ 1190.901575][T15410] kthread+0x389/0x470 [ 1190.905689][T15410] ? __pfx_worker_thread+0x10/0x10 [ 1190.910846][T15410] ? __pfx_kthread+0x10/0x10 [ 1190.915472][T15410] ret_from_fork+0x514/0xb70 [ 1190.920150][T15410] ? __pfx_ret_from_fork+0x10/0x10 [ 1190.925285][T15410] ? __switch_to+0xc89/0x1420 [ 1190.929998][T15410] ? __pfx_kthread+0x10/0x10 [ 1190.934622][T15410] ret_from_fork_asm+0x1a/0x30 [ 1190.939429][T15410] [ 1190.943432][T15410] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1190.950735][T15410] CPU: 0 UID: 0 PID: 15410 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1190.960397][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1190.970466][T15410] Workqueue: netns cleanup_net [ 1190.975255][T15410] Call Trace: [ 1190.978540][T15410] [ 1190.981480][T15410] vpanic+0x56c/0xa60 [ 1190.985517][T15410] ? __pfx__printk+0x10/0x10 [ 1190.990162][T15410] ? __pfx_vpanic+0x10/0x10 [ 1190.994688][T15410] ? is_bpf_text_address+0x292/0x2b0 [ 1190.999981][T15410] ? is_bpf_text_address+0x26/0x2b0 [ 1191.005223][T15410] panic+0xc5/0xd0 [ 1191.008954][T15410] ? __pfx_panic+0x10/0x10 [ 1191.013392][T15410] ? ret_from_fork_asm+0x1a/0x30 [ 1191.018361][T15410] __warn+0x315/0x4c0 [ 1191.022351][T15410] ? ieee80211_free_keys+0x56e/0x680 [ 1191.027658][T15410] ? ieee80211_free_keys+0x56e/0x680 [ 1191.032967][T15410] __report_bug+0x28e/0x530 [ 1191.037576][T15410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1191.043573][T15410] ? ieee80211_free_keys+0x56e/0x680 [ 1191.048883][T15410] ? __pfx___report_bug+0x10/0x10 [ 1191.053924][T15410] ? kthread_data+0x4f/0xc0 [ 1191.058434][T15410] ? wq_worker_running+0x9f/0x210 [ 1191.063480][T15410] ? synchronize_rcu_expedited+0x663/0x770 [ 1191.069298][T15410] ? lock_acquire+0x106/0x350 [ 1191.073984][T15410] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1191.080161][T15410] ? ieee80211_free_keys+0x56e/0x680 [ 1191.085471][T15410] report_bug+0x16a/0x220 [ 1191.089844][T15410] ? ieee80211_free_keys+0x56e/0x680 [ 1191.095144][T15410] ? ieee80211_free_keys+0x570/0x680 [ 1191.100453][T15410] handle_bug+0x9c/0x200 [ 1191.104714][T15410] exc_invalid_op+0x1a/0x50 [ 1191.109230][T15410] asm_exc_invalid_op+0x1a/0x20 [ 1191.114089][T15410] RIP: 0010:ieee80211_free_keys+0x56e/0x680 [ 1191.120006][T15410] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 07 c0 84 00 cc e8 91 af a4 f6 90 0f 0b 90 e9 22 fc ff ff e8 83 af a4 f6 90 <0f> 0b 90 e9 30 fe ff ff e8 75 af a4 f6 e9 1b fe ff ff 48 c7 c1 e0 [ 1191.139631][T15410] RSP: 0018:ffffc9000313f060 EFLAGS: 00010293 [ 1191.145719][T15410] RAX: ffffffff8b2090ad RBX: ffff888063148e80 RCX: ffff8880363a5d00 [ 1191.153708][T15410] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1191.161692][T15410] RBP: ffffc9000313f130 R08: ffffc9000313ee47 R09: 1ffff92000627dc8 [ 1191.169689][T15410] R10: dffffc0000000000 R11: fffff52000627dc9 R12: dffffc0000000000 [ 1191.177688][T15410] R13: 1ffff92000627e14 R14: 0000000000000002 R15: 0000000000000001 [ 1191.185691][T15410] ? ieee80211_free_keys+0x56d/0x680 [ 1191.191020][T15410] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 1191.196677][T15410] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1191.202535][T15410] ieee80211_do_stop+0x1017/0x2220 [ 1191.207670][T15410] ? rcu_is_watching+0x15/0xb0 [ 1191.212467][T15410] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1191.217967][T15410] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1191.223789][T15410] ieee80211_stop+0x1af/0x220 [ 1191.228486][T15410] ? __pfx_ieee80211_stop+0x10/0x10 [ 1191.233704][T15410] __dev_close_many+0x366/0x6e0 [ 1191.238587][T15410] ? __lock_acquire+0x683/0x2cd0 [ 1191.243542][T15410] ? __pfx___dev_close_many+0x10/0x10 [ 1191.248935][T15410] ? wake_up_q+0x99/0xd0 [ 1191.253192][T15410] netif_close_many+0x222/0x410 [ 1191.258053][T15410] ? __pfx_netif_close_many+0x10/0x10 [ 1191.263435][T15410] ? __mutex_trylock_common+0x15f/0x270 [ 1191.268996][T15410] netif_close+0x160/0x220 [ 1191.273424][T15410] ? __pfx_netif_close+0x10/0x10 [ 1191.278379][T15410] ? __mutex_lock+0x30f/0x1590 [ 1191.283158][T15410] dev_close+0xf7/0x210 [ 1191.287340][T15410] cfg80211_shutdown_all_interfaces+0xb0/0x200 [ 1191.293521][T15410] ieee80211_remove_interfaces+0x108/0x6c0 [ 1191.299366][T15410] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1191.305461][T15410] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1191.311814][T15410] ieee80211_unregister_hw+0x5d/0x2c0 [ 1191.317209][T15410] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 1191.322784][T15410] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1191.328882][T15410] ? hwsim_exit_net+0xd1c/0xfc0 [ 1191.333753][T15410] ? __local_bh_enable_ip+0xd0/0x130 [ 1191.339053][T15410] hwsim_exit_net+0xef5/0xfc0 [ 1191.343746][T15410] ? hwsim_exit_net+0x34d/0xfc0 [ 1191.348611][T15410] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1191.353833][T15410] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1191.359658][T15410] ops_undo_list+0x43d/0x8d0 [ 1191.364282][T15410] ? __pfx_ops_undo_list+0x10/0x10 [ 1191.369422][T15410] ? idr_destroy+0x227/0x290 [ 1191.374046][T15410] cleanup_net+0x572/0x810 [ 1191.378489][T15410] ? __pfx_cleanup_net+0x10/0x10 [ 1191.383464][T15410] ? rcu_is_watching+0x15/0xb0 [ 1191.388257][T15410] ? process_scheduled_works+0xa20/0x14e0 [ 1191.393992][T15410] process_scheduled_works+0xa8e/0x14e0 [ 1191.399566][T15410] ? __pfx_process_scheduled_works+0x10/0x10 [ 1191.405579][T15410] ? assign_work+0x3cf/0x5d0 [ 1191.410204][T15410] worker_thread+0xa47/0xfb0 [ 1191.414826][T15410] kthread+0x389/0x470 [ 1191.418920][T15410] ? __pfx_worker_thread+0x10/0x10 [ 1191.424065][T15410] ? __pfx_kthread+0x10/0x10 [ 1191.428680][T15410] ret_from_fork+0x514/0xb70 [ 1191.433296][T15410] ? __pfx_ret_from_fork+0x10/0x10 [ 1191.438430][T15410] ? __switch_to+0xc89/0x1420 [ 1191.443137][T15410] ? __pfx_kthread+0x10/0x10 [ 1191.447742][T15410] ret_from_fork_asm+0x1a/0x30 [ 1191.452539][T15410] [ 1191.456185][T15410] Kernel Offset: disabled [ 1191.460512][T15410] Rebooting in 86400 seconds..