last executing test programs: 4.734724504s ago: executing program 0 (id=18040): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0xa8408410}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x10, 0x6, 0x8}], 0x10}, 0x41) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0xa8408410}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x10, 0x6, 0x8}], 0x10}, 0x41) (async) 4.573358331s ago: executing program 0 (id=18041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@delqdisc={0x54, 0x25, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0x1, 0xd}, {0xfff2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xb7, 0xd8c6, 0x0, 0x0, 0x6, 0x0, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}, {&(0x7f0000000c80)={0x570, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@generic="9d7641529e2be2fca8dcd1f447375fff31e603be5862e5d1635d55ee222f4dd778f12a89224792548692900b9e45455a2df6a9a65f38f24ab79079cfe7ee42c1bf00cc7be1750b7262643034ce723d7fb7018d41dc0c4e81f286b8a94e7dd3633a06fc60e65af64f2aa703736e0f20ad7a488d8a6214e6c2704a7d20bc8eeee3ed75b044412f56a6adf7b3cd6d0491599ef5946bc3445da82da2caf74a8f66f7cde461b0f6bb2fe569c2fe20a3454ec6b610fe221a27", @nested={0x1c4, 0xc8, 0x0, 0x1, [@generic="d88e81a049e4893f77428698814ec940146fb560907e423a2c3a25ef937446dbaca336939cc744e2a467f107afcf147e74cfd694160452d97d814ac566a1576edd58bd8951e81bd0260bb53ebb06813d4d5e3c8ffceb437b49a287087da54a97fd439d9f2732eb807b6d12165df1f3b24647737d237e4a6a5306775d01bfa69811ddf42a1ef30bc1113296faac003390ffc7a73ccf434dde1391cb7372798edec9d14798732d0b044b34fe8e578fb48d42a046a250f72a214ac615153407c9bf98af747024d7e9d25bd8dc8f26be3f451d6527bf8315f1e0ffdb05a36b6d0ecf896864eae4235d727e5f0429", @typed={0xd3, 0xb0, 0x0, 0x0, @binary="0184d6793a416a88f9fce923e60f39ecb2d68d49446ab342efc6ce2e3408843de7bbf63057585d4145fa16237caf645b444f722980a8a0693ae881b089b21dc2cef2dba5b692bcace8e7a63617e4cdde0316a251247403b12b0d68b7b47635eada0474b3802719ad2b2ccbceda1f34d9f96ae55a594c144117a7c8d24095a126f33fdaf152d78f9479113621b94c1de59e414bbb4159aa2e1771b5d9f2be73033de4caa8db600666f47c2104910da081b3e012680c1dec288f2737eecde0dea037448c01cc2dcee6744c2f53f42d7b"}]}, @generic="ab8d438dd097c07892de9cc9e9afaee83fdd0c2c398557faa4d01ca32baaf773b7acde52d59df788e15650abc23a4e38401c742d5d040b6fe20080244870e693e51260de057c29edf5ce53c6a58126b1c098126ccfe1305885090dd16fa4a19615fec8b2944d2e8bac14dad91433d31726f686453ef3e0b53c91d66d390197b4f16e9e15d5bc7dcbd068714284", @nested={0x10, 0x12c, 0x0, 0x1, [@nested={0x4, 0x14f}, @typed={0x4, 0x14b}, @nested={0x4, 0xdd}]}, @nested={0x2c, 0x9c, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x129, 0x0, 0x0, @fd=r1}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x107}]}, @generic="7cd9853ed24f1133fe94313053bc139d1d0027df50622d036a56fc43c30b98cd76ac9fce262e4db82b389c3247db083b69c56b375e31f45ed0c4c1c20d5942d2c27452e23cc1e354263cdb291edbd1121f0866f8141ded008ffe2f07d0773496f4b637f51da78fd451da9289b9a3be80394d261ecfb66f562c2d36a2743c5e524eaf0c0a16559ed2e447fafc82d1f5b31e90db4f31b8107b", @nested={0x8a, 0x141, 0x0, 0x1, [@generic="a6af971981697c44db741aca0fbb1faf41a2b09457b239c55d94348f11e18e010436ef1995a40fd0ff8ea7292043092a8eb7600b43201c7fc137972e263c0b4c42cc4ef7a1fd70b2369bf9a543f148f73a236418e8c8ebbb92379e5ee8955aba8a0e48b7b9f7149dce4e163ea32193b70008867b6864", @nested={0x4, 0x114}, @nested={0x4, 0xf9}, @nested={0x4, 0x1b}, @nested={0x4, 0xac}]}, @nested={0xac, 0x7a, 0x0, 0x1, [@nested={0xa8, 0x6c, 0x0, 0x1, [@typed={0x8d, 0x76, 0x0, 0x0, @binary="8bd834ce6412eae6d97f8d49b4b482f61a5d3967a62628d7a2cab0a9369d9f92d2576d13e95328d722de351db24e167d84dac0f3c28847dd06de4b5fd35f30e37802317a0552e98dce28babdfda889a5a9ca90ce94e6172211f0c16b5517374c8deb24fbfd6f787098d60a9300308b60c2eb31222118154c3aed34598d8d454a1dedebd8df2a8aea9d"}, @typed={0x8, 0x155, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x51, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x86}]}]}, @nested={0x49, 0x92, 0x0, 0x1, [@generic="b76dacc66eb91ef566cfaaee3801f7bd8ffdbfb48e88f4152950ba613940faaa030c21ef8a4ad9d75641c8621199d061c3a10c67f15f9bc935d4b2b899b01ec83f", @nested={0x4, 0x14e}]}]}, 0x570}, {&(0x7f0000002ec0)={0x2490, 0x39, 0x8, 0x70bd28, 0x25dfdbfb, "", [@nested={0x2334, 0x11f, 0x0, 0x1, [@generic="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", @generic="6d40f261070cf3385e77c17c71515b61d68fb272ccfb5114f95e47c724f23a831af7d9aaca50f7dd719e0d8dd478d113684c9a63bedfa84c66e2091959584bca9297c7c66d81d55471bf218bcb6200ea3064d9edc92405e7fb0a0711335b635a0208b6dcbb77919c6711515d66a13b65fc6a5a1de7ef40612a7ca675aa84fa0e358b20cf190afe6497b93bccd06f94441946c9f7c3480a43f20248338739452b4b040c7c434f399953bba9e136b7122dbcf30e07b8057de53fd6a94e5b97f8e68c98b8d55374f00edf198ca374ca", @generic="ad596372b840b054a0f8e963e4d46245d9527832b497eeef0ce5f42e4c1c11ef82d30921e2bc2f534bc741bb636898335255c63544b00fcb89384709ab0694af0b63adb6948250b2b6acbfbb6d9543d205ec9a12bd08e6a45a36d10e37d3d747fd9403d03fe7f4ecd8fc6a788850284d921ade21dd053b23e346884873f8915b9187b7c58fc344a7d6", @generic="84bda63d926a17a83bc9bf7975ff588d4d52d3b248b0243305afc6d16ba1041960c30aa9923949f412a1a43a85d59ab467e4c7e9d93b1ec7f7a3113edd2485c24c89ffaaa0eaee65f30579a9963434f1f95956a9b680d0449aaf3057fe21", @generic="5672270825350e59369a875802b1af0c38faaacf7ef19385ce353f24ef81bfbc41bd40912ced848f512115fc79af9f46852810cfcdf72390c9f5b1a2377067ccd95e736cf2c736746e7ecaf587f7a47818be21d8dfd3733a1d0aa014c0293c8f680a521d17b842412bc4fb8e1dd59c2ae31d4cbd11ed47695d16783e2cb88e71cb3f5135be4d00f90ba2cc97115f04e2df5b86a6e7127ecd63abf6fe9f39e4b94265d24ef38ec4b8c722bc6853228bb9e69335ef043712fa50c31ec13c244bc8d06dca8cf37a752a", @nested={0x4, 0x1e}, @typed={0x8, 0x9d, 0x0, 0x0, @u32=0x9056}, @generic="4c14d06069efe8c337b964848eb3136bda0084b0a8678f54535b5f60923c47d5371641a95b8856932d53dd81260d254ebb60162ecead35aa1a6e86ca9f98fc92ea66ee7af1c0f153015a030989f0358ed344235d2f01e8e572d02d1c4b11465c291cb15a846d2779fa95518173abcdb35aad547344e28f9c5fa557d9ad32486348fc242cb835f38ad5f2b8ab81897183f28064f37880b9718d28f79f3543a2de574c235d325a04aa83bac2243ee030bc295fed93d8cdc26c7b13addb6d1c572fdc2e352f45a9e5eb4ef27135fcaa2346097ad868280f9020fdb898228a17f41be0f51e54924b5b1ea0186a5e90c3ba5c1ecff9604971fdce12c1bd712217d52ed882eacdcce8a2eb918e08e668643863e1f3eb829ac773a569754bcf9b36efdc2b5476830936b4e22706a40f85c541f79b0882e2ae74e8199ed6e516cb1b1fc6f2f5e6ebc882141a720347c2e9668f9fa4284312ffb30c7b53abfbeef8eee33b077cdb579220fb423b1c86adec8fabf68c811bd30fdc357eec219e77b78205034de2065725f3eec8970975d5ca41b81799872113ae77f135481583e4990619c2a4077cdea318c73f9a9df8c59658d46cd409ef5ace9927de09f627b5ec74549e3bf354758b7d45db2b9ceb8dafe15775397c43f55882384df5a01088ed3feb4f0b0409f63dc539733e4a75aa0fd280513159334a0c21bd265ef14d29ac90bdc6feeb660bbf4d54dd299967a584a1e538dace808a06b1a2e55163dcfb752c1d00869d5c3fa5258159389f655007ad313fa04915b3a854ff854ff293978afaf0241800e77c582b5f5c45f51adc0ef3b87dcd7939851abb814791d1b4e76a8903dbb47589ad01e7764434b83089a20b5abe3c8b2d83bf22754e9e9a7c19e93465e20dce2a765b656f62d1c9a3c484dcd0c0646410d4045b9d08361ed4146dc7d4a27d880212d3a0caf28f4c1f0cd4ce95ec06c765abe08cfe390fc7b943d6ddb4fd89856473c8f61322745a789b61b928af4c906798571b19a580827699c0f7459f715da9fb2a4b0d0e3fad4c91115fc2ddcf70f88177f736c79c35e9abedb1b1d89e55b666a511cb40e120168b09dd4de725ec7e3fd882bad0f1d775d5c2dcd0c1670ffdc633ec9cf0d7c298d9a69973267a5e06844e36457e12d1c1ef68fbc91235bf9da8fe04739f9dba50235b44560ff3126130ed56fa721d03673cf4e42290ffb846066ebca612d599b81c4ca3ece5cea0f72374758de0ba8088cbc091e88513b20f37ba74049d5543aa02df2b2b01ea90b0d8eb437e0e39b7e06edfa3a3c2b64a4fd9561975100c7ee0bd7afd6678cbc19b02c6e01b1e9e8b3a18fbb8099d69e21ef7ccdcce3a559675a6d381d3417fa458734ffd74004412d1301d66bd769152e88c8c46e3b1aef55841db780ede27937157721b815524c391e5982a2166e54b4f9c9a3f36d16494fa8003c21e85e18daf8500cdefd43708d602005e7c88da79610abc1e5de56ddc6424b619510a3eab0455486c399190e84a861891e87e2b8355434988a984c8887bd0c2e84dfa6b6809aacabb2bd190eae3fdb4190a55fa5a1d207e4233230b85a8ecded91dfc5e80424db710a2f776b1952d4869a372832bdf9d48f5cfc67f1fd18f79f2d189ce2965b88cb9f9548fe8db34fccf504401d10c09044aa0c4035393ef629821703cf0d06994d76006e1c0654b467ed91bed546e9cea3d2550d6ce14dd24557645299765de19412a6dd5d2af5fdb3963e00fa91bb3d8bf6046cae7d7560ded2721daa226ede82a4f1acf820ac508af1b8c662aa644f73d0e10a244cf66b42d17282d4bf72f28987846981ed8d15db8c0a70b4501777b13ef632fafa337bb290dc8194212b925d5c3de67e376251bfbb9c367e7a62fa1567a793fdd795ce5da6fb8ee2405cd3b804f46b9b133698273c1eb5022ceafbb95fc0cf2a676eddb010030427999f6a3381224fb805a6ac8ae9a850c5b46763953007ab90e8b3bc6bc901dd189af2dd38e73e197400f398a420406486cd164bcff58960ee00c367953de43566202fa5ffebcbdc76b9087d48528202883f63e263aea35a099ddb1ee3364a8bbe578e312771ddfd05e99d56e0cda8af839ce20521ede80b07fd48f8a063a4e71c08206f757cd99feaa55b7f9b0b0de6b2a7b7d065d3a5b98b04084c36f28e64d012c6c24125cac9bdd5ccb1ebdca810a4c43c30cf6d3cedd0dc4ac5230fa3f4b63b95075f014337601e0c09e799f9f1b01cf9eff098772d4bf25519e2adae056d83f194b22ac9e3cd1c31287074054043ec09f0c7151b3dab431372ba0f9a379ffa7ce7cab6a3315c9a8774b578adaaaa3835514011d7f015fa411831ab9d93011b18fe273e491620495a3cdaf3abba127cdf9b67d123c6a1310d122d73d6f6f52169b20e7d1e981f2ddc04f84a8d89d7483803c9222c8436f576e61f18286a16ad0ad4fc93260e736c7261b91a6e7d39b82c0d8e13d9cfea2ed13c74095a9b35ef15ad94b726d698bb4d15eda4b3c1f7dc98751971bd0ed929ab84f1a20eccf3b94105567641b1cfefb86039c8a153bbc9e16aa4963327ab0ba80209503f418702a5c053663a8a18d6c9fe5b61109e96617910fd636de1b4d57edaec69a7a4242eeb7c84f2357f5de852d01b9b6400afc1d375759334ee30c37773f9e306ea0fb6ee83885b8ead1b3858ff0eb4704e87a7722e26c0e9ae3b90064a05820a31dbc5da92bd8df85637885c00c3cdd21c0d74052e55dec236edc607b7d3c6729dfa6f4087a05c3ccee9e7d9345e4c38d913e01d2311cf4c390f8dfb8c150b4eb52366a27b94eb71d489eda1f1dfb778ee2e8e10a014f43ec6f72728ee2abaf777182c9564f4cc3d5dd0edc7855cc47de1585c2ad5a32e2814d75c22e243c1ea19f227728860d55e23b7d1a6e3d773b486fc57abb4b3f9d05b5fab0eaba684446fbb39fb18ec82933911486298dfb1ffb2de6917d7be3b71428761cf7a6200483ca6b6c0fe9dd6f35897105509d5fa506a5bdbff51502abbc073563499d29a003423769424ab305ce2b3fd756340a203bbae3bf7ade0b5395f7965fd8c0ea2b9267a2cbec12f7a0859bc37a9fdd40f83ba5ec5a5db3b24bb34588c923eae61d34f900f18b7491fc28f431eee782be916b679f46007accb99e8120d5a9333e873c8d380d7e7e9c4f098c396f2a104c2a5e8fd68c7f28d6ceb97dedaf5e3ad6d4a89f9377c47de5e1a6f00416403d1d67519f3f7c7fd462882ee9eddfff50933bb7302c20e2952b1c64732b3612b2cd15bb1623a2b3bba9d6995293eb7b60bffedcb34073c9847da0853c7d20cb7c605017e17e747793cb6527d67f274e6a23a4d3591e416ac9ed5120a0dd477ad2f15d240094f3bea705ae5dc72329546bbe4c744239ce155c7a1ec7ba03bc66e6273fdbc0e14e138bade6807fe6c0f8ec38ff38ace540c4b142b4f5226435458ed2f414f97f34dbc249d5bbd2f3b1286678bb3a7e93a323acd7094091cbb6cbdca1272831173749e5a7e0df352ca92e86b32c3267d5887f8532b68a5206afc6957b4270b7045befeb8d3733c28d9e0f8330ef481bec7fb758075c313102aebc9b17f7957fe0e55d2169095082517f937ca54646f79347f684982e77cc668125e31321cdf531ff52ff89efac5c53e4f76267b867f2804a5b0273c61f382db30977d74ee0c4954a7419c86a0ff8ae0b03772bd8c19aaad4c3c457a14236b2f77d1ab101ba581ccc9b9dac6e9e95620b6bb7f093fc4778bd79ccfce8eadae19267cca606bb39bcf51955fa7fd4c26aed76cf2a6e3a8f5f93dcdcb5e17894060f4df30b332c1f3d63bba76857dc6b3e5bdc659355be80668e1db8327e5f2dd7434e870b7e60f83e88b92557931175f51453f47ca46a609a5981fcea760c1e0c82de39a7eee715264f668bd9c7ae21b1df6fb0c00eaa1282f06de68b12d2f63c2d7c507c6b94347549336aa3bba2b9fb2599a2b84bf196716b5aef1d92fe82713902520e10aee63e93c2c33e36af97a210b5636a50ae0502b07def4e927ce6cb7df4438dc6473d7e007332d02d440de78beddf4c7fee743c59c75afa6e5a140eee4920de7d77001729a9264d858a3016b24810556931e778fe61c7b910e2cacb74be39ccaca920e92b7822a2963b7dc65df227cb83bafcad867996f580bb52e23569d61f424fb803d726a841ddb7f7bb54797197df8d4b60a82ca9f888f7b9b3b82ecdc2b8555273243522668f4683562cae0cd37fc09ac653e533441f4e14325cfa7b3358654caeaee52fe36af6f2df046e1638df9acd55ea00a93fcee91357f76e42a4d50729465eb2b7bc47e4c6a76593f40bb6ea28d899f50a73e34d6d6fc6023acae17c08cdba5002cffcc82a2ba0c0b57e4078846ebd19f47ac888b64768a530a6db07b261f29b0b2682550a84db012433d5e133bd36587b8f025e47bba42605d6e1ffce59997a31634bf1ac94a26bee6624740a480eae4154c451f1b13b955b32235e63e6cbfdebb6666d35afc3d726f1349e2a6b452eece9c1ce6830cfd4c975ac474f46219f410105786a5de5ad95afe0ddfa8dc79b7d4983136aef396e2b725237a917fc45d917971e59c51e701e61bfffcd0fedf0320b516a2815bef855138fb97d8fdfa8e0b219e1b801a82b25e96ee7c4df8a8a9a105cfffc022cf87a4a65ffd730119169011c3a286f335c019763556eb86416e5351c74bc09f6ec9f736caf28b091be4d9e85594282c3ba7edf344117614fb73b78db1bd4ad09d967a466569ed3d548f2bb29e93a95b718663e50ed8aa3ced9271df9799137002b7d90c80a577df0a0fc3631bb596d5547df51c878703ab48898c462cd63e597f47aff150bb29e0ad1ec78045cf301669f00abe028611464ba4c7d324c38b3a30764ec38721d2bde78ff192eceb6f31eae2048632084a80e7c9ab05c198759a7068b1226e1f52436ede802d4b3291c3749c494a439afa879c3ffe9fa62eace83583ccb0adfe9f9881092c846ce308507e5c3d8ce8b670309769e606e6bc4ee6a7f4a683927ea9c0532cc77c753bb507c9e9059d7b05f7f5dba8af1f8d6ede19d011fbaedb6c992ed877d747c9fcbe8b803c01f3306757b96c4036cec998b9e7d3eeed74481efc6477e9ba66ecefad91c1f12463e33ab88d47f87c1a53c413103f9bd3b467a34e95685966f02bf20f6caf436347af0e2f073fb14df849f2b1f6f8f11c0ced0452a8ab657958c8cf903a54d73bb77997970b8ff4bb500baa35ba79745dbb3938a54b06fe1ced23cd014b5c83b3ace6c2f538359080178758a5a1923850247327a1d2340e0e5a108ae29c4966db086312a03d27842ad54c56565b1937ce7f3081f7ba6647a65562f11aea6a9497169354a2f2875fa5497aeffff59d15b6f201dd289a34b77a3d9d8c9a99bff2e2b4633b4b237837b4f8a3143f4bfa710e29081c75cc536d22210529b0c51bc62deb9bac5b7822092cedea4b489e10d1750d8b096552477771c4da49a34c9a3275dbe09607a50e18ef7a66bd027d2976977451664bc1a3d80a4fbcdab748e05902190b43298ff3bbbb2e4bec917e36a68a3e3a3a173afc0999939c621eedaee6f4602e53295e1c62f33b0613a02dd0df1d911156d4fb8abba759f3b505b740dd696c93e36582dd78cdb476474d13f3259034426e920f380903abdd2e2e0a1f9744e7ab86c2ea5bc0542b305ee451e3f9682bb39d035d5bff0460947c7cc04b23f5c10541c8436f2e2adb28fe3b5b60b9682e387", @generic="288f28234da11dae791abe90a4c6e1053dfbd3bd603270af2612550d3b57eb9f20855003b44e7b3e843cb51b40294120c520cc84fa211f648e876dbea3b44ec715e9d89d0f2abc6fa5e5e5dc40b4a0ccc2d7e587119305b3130b6084a9a566ac1d58564b61bc4cc562f04127a596c177a52f787ae9ae4975adc07dd75a47201f7db03851afa7811ba3899ba9591e3838b32c8532c4659f2cc9c5b4c7f2ab79137c6d9e02ab3b56"]}, @generic="9e41ce406c60b1e06d535432481c10fd278cdec4468e9a685a3fc57667d4f426175d1c075f14d9e8f1516fb2b9421fbfe2f7e5fd5191cfac08939292fa0e1b35a988342174f100ada36f63498ef3ef9aa9ccf318c1b5ea82a3987df14565ee13dae482b029079dada7bb40347c62f00ac1ea21e5239ddc6b8af6061cd79886373e2a63e2ceda166919000fba6c2fbd3bbccfa69a2a76fb96a9c7c9adfff1a208d2ddc3c16980869c0e838eca150503aec957eb4365b0be51bb2e05e23f", @generic="5bdde9286ce3888e557bf4d64581c2ef025cf849c73fcb15f5ff05d88c7a389c11ca40b14c8edc0639898e32f4624c40ae42afafd07a2acdf8", @generic="2683bd276cfc5ba2741309d3d30ded8c679947727ab87f4fe4682d5d54fc59e553d9d1429627c89a762a4d63803ea92d194b77959ac71db5a199dafbd7cc40dff9bc275155c4bd143102f309afe5a1846c0b2488"]}, 0x2490}], 0x3}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYRES32=r1], 0x348}, 0x1, 0x0, 0x0, 0x800}, 0x51) 4.290756738s ago: executing program 0 (id=18045): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000240)=0x1000000, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x1, r7, 0x0, r5}, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r3, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x2c}}, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xc4, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x8c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_XOR={0x68, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "343c26da048f1560fd07fb76bc4b38de24f323863c0c853acf71ddf23748bc70dc3e962f37a67ea5427b85d77c40afbd29f87c848e8ade48791c03dc71bc1750b8ed12c7e9d61ed2c3c8ba96452fa42150773e0c160253cfaf44c82dfb"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x160}}, 0x0) 2.142146173s ago: executing program 1 (id=18070): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) 1.931532342s ago: executing program 1 (id=18073): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.898383915s ago: executing program 2 (id=18074): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0, 0x2}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) socket$nl_generic(0x10, 0x3, 0x10) 1.745273822s ago: executing program 1 (id=18076): unshare(0x3c010200) 1.618150327s ago: executing program 1 (id=18077): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7b0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x0, 0xffffffff, 0x25dfdbfc, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.512513988s ago: executing program 3 (id=18078): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r3, &(0x7f00000002c0)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c905774c44cb2bc91021afc803dedba2961f36224f99f38fe24", 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@gettfilter={0x44, 0x2e, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xa}, {0x0, 0x4}, {0xffe0, 0x5}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xb0}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000060000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000001000039da81680aef0000000000000000000500"/34], 0x50) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x1}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x200, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x4, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfffb, 0x10000, 0x3b84, 'snmp_trap\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.416166074s ago: executing program 1 (id=18079): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r4, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000240)={r3, &(0x7f0000000040)=':@}]\x00', 0x24100, &(0x7f0000000180)={@align=0x6, {0x40, 0x4, 0x100, 0x7f}}, 0x1000, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x4a32}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x6c, r6, 0x8, 0x70bd2b, 0xc24, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x64}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24e}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (rerun: 64) 1.341392559s ago: executing program 2 (id=18081): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000001240)="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", 0x108) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@remote, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000000)='-\x18\\\x00', 0x40200, &(0x7f0000000040)={@align=0x3, {0x1, 0x3, 0x400000, 0x5}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}, {[0x0, 0x6, 0x54, 0x6]}, 0x2, 0x33, &(0x7f0000000180)=""/51}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xb28, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1.321554389s ago: executing program 3 (id=18082): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r1) 1.280972753s ago: executing program 1 (id=18083): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x48801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x101, 0x0, 0x3, 0x1}, 0x8) (async) r1 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f00000000c0), 0x0}, 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@ipv4_newnexthop={0x20, 0x68, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x5}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x1) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r10, 0x5fa3dbc996777dbd, 0x0, 0x0, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}]}, 0x1c}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000000000000000000000380000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000abe393215d4fb2759f050930f900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) splice(r5, 0x0, r11, 0x0, 0x100000000, 0x4) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000010800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) socket(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) 1.140374102s ago: executing program 4 (id=18084): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xcb, 0xc, "b277c40b63250f0400fbaa0eaee8aeeff945442402b5bdcfecaa4403f248ae0767a362f8b9bfb648e706651a0ae99c5befef3f080a7badeec63fdd91e5a31134bf022c6fbdf6f39684fc796e6c7c2e9745949048d95af41d3a81cbf38fb2dda109d4a88aaf56058caf6d0efeea14be73c7649b9e487560830adecca0d89cc14ab9cd94089278ccc16522b9b76a24aacf03d604044912fa28b55f12c1bae85efa9e6826adff8230f072e8364e4aed7f107b199ea0bc7b74caa1e3104996816f8be214c203f57dda"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x114}}, 0x0) 1.134241084s ago: executing program 3 (id=18085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000001a80000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.107196442s ago: executing program 0 (id=18086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='#*\x00', 0x410800, &(0x7f0000000100)={@align=0x506e, {0x1, 0x6b, 0x1, 0x7fffffffffffffff}}, 0xffffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1}) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0xadc, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa70, 0x3, 0x0, 0x1, [{0x2b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x204, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x52, 0x1, "e62c5532358c05ad39a2c0d52ed8d9b3246f34902952a206819e890092b16e7f04117bdf2e576e709a4769ece735990886718da848b59e1e7eab25239bf81d9a840d77414fcaef4a1a92c39224b3"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x60, 0x1, "95c67b2ea8e45151717d517c563e9dfa62ff0bc0eccf0de199089e7534711549282c222232787dd36a6d3e392c22ac32f1c8ecce9308e6d958ce4eaa41ee2b1f6dc833587db54e526596fe03481785dc2b462055d4010f77c8d5c05f"}, @NFTA_DATA_VALUE={0x36, 0x1, "4d7101c110c2a84f6f7f5fa73c87a51b2c205c274556487036baff4d6cfd0e5a859e159a299ea37c09b999a538f2d42fb9d5"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa, 0x1, '7*S=^O'}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x102, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x48, 0xa, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x86, 0x6, 0x1, 0x0, "6bfbad09e4ebd8fe0fc24a46dc8db94fffeb0255e3c046f6fbdd490fed0468bee90da00638958db566248bee41e0670cba270bf41e5e72588c2daf2064c433f13e493c764f8cfaecac44a86d187172436adb5ef8af786a8f4d328a4d52d85915e0c64ba51c1fa7fa41e084126e2da645e7ad1b05004faaf607cd200812a674540ddb"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3cc11275fb98e938}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x96, 0x1, "dcfd0867bf10c377f887111f5af11006ccac7b8dbd78ab8f0c2be3a7385855bcbaf9f961fc28e863285c54fb4a9342ff640ddd17e1a94e59bfb5b6ffc8cdf8c8189e0718a79031cc4b62de53556c08100b21522713799e4375b19b05782f28146cc621476fd1f35d8aded1d99a6f871f1190cf7f61cca19cfa5cb372aef644f83a26709445c7f2e77a6f3eb3e1cfa7442f1b"}]}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x25, 0x1, "92c751e3b0eabde15ec2e5ae5039c798aab0303f8a854190356bd34a731478c8ca"}, @NFTA_DATA_VALUE={0xac, 0x1, "e7eb14c5dfc4b5fbe10d81ec4b94c9495dece686bd771e8152c660d8354dfb0bab3e7c8013da829a8ed02a011217a2e79d57c5f8a26091398e2325638fa7bc8fcd05143caaecd7c9c468bb99f872b3841ae21f42df6c0584abb7d9611b8fac1e5d1421a005228f3dabc69a3478d9c4ea8e3a31bdc479490eaa8681679ef31afd74f112415ebb9c64590d78ca0b5fc719b134d12a17bf916771087c7880485264f052cfe36aff89ba"}, @NFTA_DATA_VALUE={0x1c, 0x1, "bbd71c2e97e709f81a1c0fb56a7e914bf23e776a5109bd71"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd8, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x4c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x26}]}}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0xadc}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x6, 0x1, 0x6, 0x11204, 0x1, 0x10000, '\x00', r2, r1, 0x4, 0x2, 0x5, 0x0, @void, @value, @value=r4}, 0x50) 977.899645ms ago: executing program 2 (id=18087): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000100039040000000004000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100060000000800130005000000"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) close(r3) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={r5, 0x200, 0x4, 0xd4f4}) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) r7 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_PIM(r7, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 976.392373ms ago: executing program 4 (id=18088): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000ec336dda14709360146739bacff92cebea5482c4bc562a90e177ecfd1005cabb59a43c542f29be2ddcbf453cdac849282224f91adc964cb4f015f838b419c88d137a87837f75614806c6a54ce7ba49fd93b0824f6b2dfe6bc66747b15db5cd42f9ad0b02fe4feb0a65397bf0c50b234bbeac16baa76f0b644e0e3e15c721446fd0089b5a1a1832bdb98fccc9e16f082e813ac920ef4ad37edb"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 962.746352ms ago: executing program 3 (id=18089): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0xf00, @dev, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000300)='Y', 0x1}], 0x1}}], 0x1, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000380)={0x80}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x6, 0x7, 0x4, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x8ccd, 0x3}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001800020026bd7000fddbdf25021480fd0000ff00000000000c00090004001609", @ANYRES32=r3, @ANYBLOB="080005000000000016001d004e22000008000f007f000000080006000a000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x30000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000690000/0x2000)=nil, 0x2000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r9, 0xfffffffc}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 962.158796ms ago: executing program 0 (id=18090): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0xd1, 0x8, 0x0, 0x91a283ca9407eb96, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x700, 0x8000, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x67, 0x700, 0x6, 0x419d, {{0x1a, 0x4, 0x3, 0x1, 0x68, 0x65, 0x0, 0x41, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xa}, {[@lsrr={0x83, 0xb, 0x44, [@loopback, @multicast1]}, @ra={0x94, 0x4, 0xfffe}, @lsrr={0x83, 0xb, 0x46, [@loopback, @empty]}, @rr={0x7, 0xb, 0x78, [@remote, @private=0xa010101]}, @lsrr={0x83, 0x2b, 0x84, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @local, @rand_addr=0x64010101, @remote, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @ra={0x94, 0x4}]}}}}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0xffff, @broadcast}, {0x0, @local}, 0x38, {0x2, 0x0, @rand_addr=0x64010101}, 'veth0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="30002dbd7000fbdbdf25060000000800040004000000080004008100000024000680080006000b00000008000600100000000800060000000000060001000000000008000200060000002400018008000700", @ANYRES32=r3, @ANYBLOB="060001000200000008000300ff15000009000700", @ANYRES32=r4, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x400c000) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) 721.654804ms ago: executing program 4 (id=18091): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="450829bd7000fcdbdf2503000000"], 0x14}}, 0x4004050) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78) (async) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78) 720.71752ms ago: executing program 0 (id=18092): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000a45ca312dc"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}, 0x40020000) (async) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="dfbbc728e801c3cc0a54630dbe1c8a0904960f98e68961cb6b9a3c32d4d2d7c476819f9b9b815eba43e318e6fa807ad1a3f048a7239c74e33cd51492f1290fefa777dfbebb9b26869ad32f104fc4b857ed0607a28b6672c259d39ca73d5b8c419244182b4322f786812dd2d73c48b2b6a0faa0b5f477c9f6b31ca470b16273d1b54357635bd527c7c8b4577d330a1b2e4d55749e1ff2f97636231f038eb88fc3de9648d5fb8a9b98cd46aeb44740f65e408a7d23f36f2e7ddd1d22f4f77defbff9ac6690d5bb19154f2eae60dcf3fa023284a5271014edf23bc02d0315f4bc372ed26345ad432f4365", 0xe9}, {&(0x7f0000000280)="39d8cd36ba397f9731acb2f36b8f29", 0xf}, {&(0x7f0000000e00)="5a4ce644230e1c53939feb4bd877536a852a278f35c5724cfb6752df1b96d04654f267dc103459187c8a0bd6f6226020d75760558d290c4336ddeae48fee6cb6e6d3f33aac887bf581eaf6ecc026240f512a5cd8eb7e04a6d02b080b88064aaac4e562bf670731d60806c3ddb013cbb84795760e36eabd57e5c4379933ba34d67bf7900a0c9fd444a6ff0402837fa0f885a66f38a236119ac1c1c6df", 0x9c}, {&(0x7f0000000840)="05ce83d64cf8bec0aed03484cd410c5fae8dcc8a7366681fdd56", 0x1a}, {&(0x7f0000000ec0)="4e044cf84412afd3f21fe2687827fc567e4759045b717532d8f7a4608a08e2d16a20dc03aee67db2380c870f2cdf9e6058fad01540ef02463f6ed77a5d45b37b15dfd9965ee88ca8e2d6d47758ba0463357a5d562258db1c529c06b21cff8c8a19ffa1029f94fea4e0d628073c435df4b21a6394551dcac3007945c91bcf300b08dcdd430320d25e1ec7f88a4f71ec7c15f83c6e66e12ce8e84568a6ac468d6403aa8910f830e62400d37fc872da806b194723d5b4c87b72574e9092a174a0000f85e6a27dbe1616aad16b", 0xcb}, {&(0x7f0000000fc0)="a84f802e3baea81fe8d8b22f3c4828e3d4199474a8b0e72c1e4ff65dd137215b95f6f002da", 0x25}, {&(0x7f0000002d00)="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", 0xd63}], 0x7}, 0x0) 506.465199ms ago: executing program 4 (id=18093): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xe5eb, 0x0, 0x531, 0xfffffffffffffc00}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 487.534016ms ago: executing program 2 (id=18094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='ethtool\x00', 0x20001, &(0x7f00000000c0)={@align=0x24ae, {0x8, 0xad, 0x8, 0x4}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3d6}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="e80a0000", @ANYRES16=0x0, @ANYBLOB="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"/2786], 0xae8}, 0x1, 0x0, 0x0, 0x4810}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x88, r2, 0x1, 0x70bd27, 0x1, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xd2ea}, @ETHTOOL_A_COALESCE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc015}, 0x20000000) 369.317633ms ago: executing program 3 (id=18095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x38}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) close(r1) 326.805857ms ago: executing program 4 (id=18096): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x10}}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x170, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x60000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x6}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1c}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000c00)=0x7fffffff) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000740)={r1, &(0x7f0000000240)='\xd11\x00', 0x40000, &(0x7f0000000280)={@align=0x9, {0x2, 0x9, 0x0, 0x100000000}}, 0xe45, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000500)=0x101}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000001d80)={0x0, 0x8001}, &(0x7f0000001dc0)=0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@ifindex, 0xf, 0x1, 0x660, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0}, 0x40) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r11, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) (async) listen(r11, 0x0) (async) listen(r11, 0x7) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0000ba775ab356fb9fc9646bf9265bf08d9849f060fddbdb9cb42800259da404000000000000000000000000000000000012278df73314eca2c054790ebb0423c9aa51a6ad3540844fe9826812afbadbc612cefaf2217f176ffd5220dc5a3e067a062c1f29a050b105500a47bf7991cecfa69524b87953f4b5bfee17846a61293baf84d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r12}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000dc0)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@map=r12, r6, 0x2, 0x20, r8, @void, @void, @void, @value=r13, r10}, 0x20) (async) r14 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000d00)=ANY=[@ANYBLOB="0a00000016000000b3001d007f000000000000009005606b17b84d66cddcbb4cffad088cb9f75a2d49dc42675612b7f2a80cedb6ccee16a0663184b7ad5c1917dbf9a72edc51c1e5c3", @ANYRES32, @ANYBLOB="c60d859d7c99f900000800000406588db7b30000ffffffffffffffff0000000000fa9500fb4d89f380138ffd0a9120702339912e9b6ab6507d00365605c7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r14, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 310.582375ms ago: executing program 2 (id=18097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8000000004080108001e0000000000000a00000305000300840000000900010073797a310000000044000480080001400000000808000140000000060800014000000004080001400000000e080001400000000508000140ffffffc50800014000000008080001400000040105000300210000000900010073797a3000000000"], 0x80}}, 0x20004044) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x400000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80006200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x20048005) 137.305829ms ago: executing program 4 (id=18098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000008d0d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0xd, 0xffffff81, 0x51, @mcast2, @empty, 0x7, 0x700, 0x6, 0x1ff}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000010000000000000c03d000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085000000a500000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000010850000000c000000b7000000000000001844000006fffffffff800000000000005f70500ff00000085000000c6000000bf91000000000000b7020000010000008500004be4f1f01c43c58b00000000009500000000000000efa5504b906216bad1186dc81b58e85092c682a98f79c1f80dd5a814bceb9766a1d5"], &(0x7f0000000980)='GPL\x00', 0x7, 0x59, &(0x7f0000000b40)=""/89, 0x0, 0x54, '\x00', r5, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x15068, r2, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xffff0001}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x80000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x52, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r9, r8, 0x5}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@const={0xc, 0x0, 0x0, 0xa, 0x3}, @var={0x9, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000001b00)=""/4096, 0x37, 0x1000, 0x1, 0x10, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x6, '\x00', r10, r11, 0x0, 0x1, 0x5}, 0x50) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="010003000000000006000000000000000780"], 0x18}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r12) sendmsg$IEEE802154_ASSOCIATE_REQ(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC, @ANYBLOB="110c3a443000"], 0x1c}}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x93ce8ceaef98e8bf}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x60, r13, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8c0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r16, 0x84, 0x22, &(0x7f0000000240)={0xf, 0x2, 0x7, 0x590}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r15) r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r15) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r15, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3cb13b9a", @ANYRES16=r17, @ANYBLOB="20002bbd7000fddbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000802}, 0x810) 131.719272ms ago: executing program 3 (id=18099): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x20, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 0s ago: executing program 2 (id=18100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x100000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800a3bf", @ANYRES16=r1, @ANYBLOB="010026bd7000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000700000051000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): : 212368 bytes leftover after parsing attributes in process `syz.1.16314'. [ 1763.436329][T32545] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16316'. [ 1763.578492][T32550] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1763.614879][T32555] netlink: zone id is out of range [ 1763.623431][T32555] netlink: get zone limit has 4 unknown bytes [ 1763.633646][T32554] netlink: 'syz.0.16322': attribute type 9 has an invalid length. [ 1763.645025][T32558] sctp: [Deprecated]: syz.2.16323 (pid 32558) Use of int in max_burst socket option deprecated. [ 1763.645025][T32558] Use struct sctp_assoc_value instead [ 1763.691392][T32555] macvtap1: entered promiscuous mode [ 1763.696861][T32555] macvtap1: entered allmulticast mode [ 1763.702640][T32555] veth1_vlan: entered allmulticast mode [ 1763.731339][T32555] macvtap2: entered promiscuous mode [ 1763.736715][T32555] macvtap2: entered allmulticast mode [ 1763.743105][T32558] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16323'. [ 1763.766493][T32560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16323'. [ 1763.816012][T32563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1763.838179][T32565] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1763.861712][T32563] Bluetooth: MGMT ver 1.23 [ 1764.009268][T32572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1764.251524][T32589] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1764.636100][T14991] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1764.678789][T32611] netlink: 'syz.4.16340': attribute type 1 has an invalid length. [ 1764.911708][T32629] netlink: 'syz.2.16346': attribute type 2 has an invalid length. [ 1765.217068][T32655] netlink: 'syz.0.16352': attribute type 5 has an invalid length. [ 1765.234166][T32655] geneve2: entered promiscuous mode [ 1765.249087][T32655] geneve2: entered allmulticast mode [ 1765.266892][ T2615] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1765.276617][T32651] netlink: 'syz.0.16352': attribute type 5 has an invalid length. [ 1765.317012][ T2615] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1765.343040][ T2615] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1765.373206][ T2624] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1765.626772][T32682] syzkaller1: entered promiscuous mode [ 1765.652580][T32682] syzkaller1: entered allmulticast mode [ 1765.689849][T32681] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1766.127459][T32705] __nla_validate_parse: 18 callbacks suppressed [ 1766.127482][T32705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16366'. [ 1766.216619][T32714] mac80211_hwsim hwsim188 ÿ: renamed from wlan1 [ 1766.368408][T32721] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1766.438646][T32730] block nbd0: NBD_DISCONNECT [ 1766.451769][T32730] block nbd0: Send disconnect failed -32 [ 1766.457749][T32730] block nbd0: shutting down sockets [ 1766.635769][ T5140] block nbd4: Possible stuck request ffff888058f42200: control (read@0,1024B). Runtime 180 seconds [ 1766.647346][ T5140] block nbd4: Possible stuck request ffff888058f42400: control (read@1024,1024B). Runtime 180 seconds [ 1766.661467][ T5140] block nbd4: Possible stuck request ffff888058f42600: control (read@2048,1024B). Runtime 180 seconds [ 1766.670752][T32742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16378'. [ 1766.676513][ T5140] block nbd4: Possible stuck request ffff888058f42800: control (read@3072,1024B). Runtime 180 seconds [ 1766.702953][T32743] netlink: 'syz.0.16377': attribute type 1 has an invalid length. [ 1766.724331][T32743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16377'. [ 1766.772282][T32744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16378'. [ 1766.810126][T32744] netlink: 'syz.4.16378': attribute type 7 has an invalid length. [ 1766.818174][T32744] netlink: 'syz.4.16378': attribute type 8 has an invalid length. [ 1766.870732][T32744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16378'. [ 1767.214325][T32753] netlink: 'syz.3.16379': attribute type 1 has an invalid length. [ 1767.222780][T32753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16379'. [ 1767.291137][T32754] netlink: 'syz.3.16379': attribute type 8 has an invalid length. [ 1767.627021][T32762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16382'. [ 1767.633412][T32759] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1767.660056][ T2615] bridge_slave_1: left allmulticast mode [ 1767.662631][T32763] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1767.665756][ T2615] bridge_slave_1: left promiscuous mode [ 1767.720218][ T2615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.792443][T32767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16383'. [ 1767.837540][ T300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16383'. [ 1767.877324][ T302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16384'. [ 1768.016263][ T2615] bridge_slave_0: left allmulticast mode [ 1768.022611][ T2615] bridge_slave_0: left promiscuous mode [ 1768.028491][ T2615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.177634][ T314] nbd: must specify an index to disconnect [ 1768.462165][ T2615] dvmrp0 (unregistering): left allmulticast mode [ 1768.885788][ T2615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.895612][ T2615] bond_slave_0: left allmulticast mode [ 1768.903899][ T2615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.914960][ T2615] bond_slave_1: left allmulticast mode [ 1768.924804][ T2615] bond0 (unregistering): Released all slaves [ 1768.941153][ T2615] bond1 (unregistering): Released all slaves [ 1768.957420][ T2615] bond2 (unregistering): Released all slaves [ 1768.973308][ T2615] bond3 (unregistering): Released all slaves [ 1768.998218][ T2615] bond4 (unregistering): Released all slaves [ 1769.017246][ T2615] bond5 (unregistering): Released all slaves [ 1769.033306][ T2615] bond6 (unregistering): Released all slaves [ 1769.052081][ T2615] bond7 (unregistering): (slave veth3): Releasing active interface [ 1769.068630][ T2615] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1769.079050][ T2615] bond7 (unregistering): (slave veth5): Releasing active interface [ 1769.089495][ T2615] bond7 (unregistering): Released all slaves [ 1769.105034][ T2615] bond8 (unregistering): Released all slaves [ 1769.121171][ T2615] bond9 (unregistering): Released all slaves [ 1769.136198][ T2615] bond10 (unregistering): Released all slaves [ 1769.153969][ T2615] bond11 (unregistering): Released all slaves [ 1769.172800][ T2615] bond12 (unregistering): Released all slaves [ 1769.312521][ T324] tipc: Enabling of bearer rejected, failed to enable media [ 1769.379262][ T324] IPv6: sit2: Disabled Multicast RS [ 1769.434489][ T2615] : left promiscuous mode [ 1769.553231][ T2615] : left promiscuous mode [ 1769.565293][ T5188] udevd[5188]: worker [24910] /devices/virtual/block/nbd4 timeout; kill it [ 1769.599805][ T5188] udevd[5188]: seq 58554 '/devices/virtual/block/nbd4' killed [ 1769.780700][ T2615] tipc: Disabling bearer [ 1769.804589][ T2615] tipc: Left network mode [ 1770.178989][ T370] º: renamed from veth1_vlan (while UP) [ 1770.202908][ T372] netlink: 'syz.3.16401': attribute type 3 has an invalid length. [ 1770.225596][ T372] netlink: 'syz.3.16401': attribute type 1 has an invalid length. [ 1770.244082][ T372] NCSI netlink: No device for ifindex 813332851 [ 1770.302077][ T379] netlink: 'syz.0.16402': attribute type 21 has an invalid length. [ 1770.330107][ T379] IPv6: NLM_F_CREATE should be specified when creating new route [ 1770.436639][ T2615] hsr_slave_0: left promiscuous mode [ 1770.460424][ T2615] hsr_slave_1: left promiscuous mode [ 1770.471187][ T2615] veth1_macvtap: left promiscuous mode [ 1770.476995][ T2615] : left promiscuous mode [ 1770.482887][ T2615] veth0_vlan: left promiscuous mode [ 1770.605750][ T2615] pim6reg (unregistering): left allmulticast mode [ 1770.628983][ T2615] pim6reg527 (unregistering): left allmulticast mode [ 1770.803732][ T2615] team0 (unregistering): Port device team_slave_1 removed [ 1770.828858][ T2615] team0 (unregistering): Port device team_slave_0 removed [ 1771.107708][ T404] netlink: 'syz.0.16411': attribute type 1 has an invalid length. [ 1771.178571][ T404] bond4: entered promiscuous mode [ 1771.192810][ T404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1771.206305][ T407] netlink: 'syz.2.16412': attribute type 16 has an invalid length. [ 1771.243522][ T408] bond4: (slave bridge4): making interface the new active one [ 1771.253932][ T408] bridge4: entered promiscuous mode [ 1771.268132][ T408] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1771.297902][ T407] ip_vti0: left promiscuous mode [ 1771.332934][ T407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1771.386849][ T410] lo: entered promiscuous mode [ 1771.422181][ T410] tunl0: entered promiscuous mode [ 1771.428247][ T410] gre0: left allmulticast mode [ 1771.447419][ T410] gretap0: entered promiscuous mode [ 1771.456281][ T410] erspan0: entered promiscuous mode [ 1771.464928][ T410] ip_vti0: entered promiscuous mode [ 1771.557121][ T416] __nla_validate_parse: 5 callbacks suppressed [ 1771.557142][ T416] netlink: 288 bytes leftover after parsing attributes in process `syz.3.16415'. [ 1771.587898][ T418] x_tables: duplicate underflow at hook 1 [ 1771.599033][ T416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16415'. [ 1771.686157][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16418'. [ 1771.690730][ T2615] IPVS: stop unused estimator thread 0... [ 1771.707952][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16418'. [ 1771.818561][ T431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.908460][ T442] nbd: illegal input index 2958377 [ 1771.935077][ T442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16420'. [ 1771.979182][ T442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16420'. [ 1772.006207][ T446] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16423'. [ 1772.053205][ T451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1772.332307][ T472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16430'. [ 1772.346638][ T469] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16433'. [ 1772.361847][ T469] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16433'. [ 1772.407209][ T474] mac80211_hwsim hwsim173 syzkaller0: left promiscuous mode [ 1772.434410][ T474] mac80211_hwsim hwsim173 syzkaller0: left allmulticast mode [ 1772.665648][ T490] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1772.892834][ T495] xt_l2tp: invalid flags combination: 0 [ 1773.024161][ T509] mac80211_hwsim hwsim173 syzkaller0: entered promiscuous mode [ 1773.033762][ T509] mac80211_hwsim hwsim173 syzkaller0: entered allmulticast mode [ 1773.046132][ T509] sctp: [Deprecated]: syz.0.16444 (pid 509) Use of int in maxseg socket option. [ 1773.046132][ T509] Use struct sctp_assoc_value instead [ 1773.201970][ T523] validate_nla: 1 callbacks suppressed [ 1773.201990][ T523] netlink: 'syz.0.16449': attribute type 11 has an invalid length. [ 1773.258338][ T527] netlink: 'syz.4.16452': attribute type 5 has an invalid length. [ 1773.262850][ T517] veth5: entered promiscuous mode [ 1773.275852][ T530] netlink: 'syz.4.16452': attribute type 5 has an invalid length. [ 1773.280256][ T517] veth5: entered allmulticast mode [ 1773.289275][ T527] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1773.299939][ T523] netlink: 'syz.0.16449': attribute type 11 has an invalid length. [ 1773.336467][ T526] veth7: entered promiscuous mode [ 1773.341829][ T526] veth7: entered allmulticast mode [ 1773.868418][ T570] xt_cgroup: xt_cgroup: no path or classid specified [ 1774.021560][ T577] syzkaller1: entered promiscuous mode [ 1774.027243][ T577] syzkaller1: entered allmulticast mode [ 1774.617319][ T614] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1774.643334][ T614] bond5: (slave lo): Enslaving as an active interface with an up link [ 1774.662585][ T614] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1774.691590][T26811] lec:lec_start_xmit: lec0:No lecd attached [ 1774.857570][ T605] netlink: 'syz.2.16477': attribute type 24 has an invalid length. [ 1775.229496][ T651] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1775.317138][ T656] netlink: 'syz.2.16493': attribute type 1 has an invalid length. [ 1775.419071][ T665] bond6: (slave ip6gretap2): making interface the new active one [ 1775.427942][ T665] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1775.442449][ T665] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1775.450495][ T665] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1775.761956][T28942] udevd[28942]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1775.835738][T25749] udevd[25749]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1775.962645][ T699] openvswitch: netlink: Tunnel attr 61 out of range max 16 [ 1776.022885][ T707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1776.062875][ T708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1776.530872][ T731] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1776.612757][ T735] __nla_validate_parse: 22 callbacks suppressed [ 1776.612781][ T735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16513'. [ 1776.639787][ T735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16513'. [ 1776.649005][ T735] netlink: 'syz.2.16513': attribute type 12 has an invalid length. [ 1776.669211][ T735] netlink: 'syz.2.16513': attribute type 11 has an invalid length. [ 1776.751578][ T744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16516'. [ 1776.799486][ T744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16516'. [ 1777.125888][ T768] netlink: 10 bytes leftover after parsing attributes in process `syz.4.16522'. [ 1777.166671][ T773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16524'. [ 1777.176053][ T771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16524'. [ 1777.185661][ T772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16523'. [ 1777.444406][ T794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16530'. [ 1777.578504][ T799] tipc: Enabling of bearer rejected, media not registered [ 1777.891405][ T822] netlink: 'syz.2.16538': attribute type 2 has an invalid length. [ 1777.900506][ T822] openvswitch: netlink: Multiple metadata blocks provided [ 1777.927679][ T825] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.16539'. [ 1778.004156][ T831] netlink: 'syz.0.16540': attribute type 1 has an invalid length. [ 1778.387094][ T853] veth0: entered promiscuous mode [ 1778.399976][ T853] veth0: left promiscuous mode [ 1778.424242][ T853] validate_nla: 2 callbacks suppressed [ 1778.424305][ T853] netlink: 'syz.2.16544': attribute type 7 has an invalid length. [ 1778.582969][ T850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1778.590264][ T850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1778.816215][ T881] netlink: 'syz.3.16554': attribute type 12 has an invalid length. [ 1778.853451][ T881] bond2: option primary_reselect: invalid value (255) [ 1778.864336][ T881] bond2 (unregistering): Released all slaves [ 1779.221458][ T896] Bluetooth: MGMT ver 1.23 [ 1779.235263][ T896] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1779.448857][ T908] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1779.749633][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1779.757977][ C0] lec:lec_tx_timeout: lec0 [ 1779.824416][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1779.911383][ T950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1779.941691][ T29] audit: type=1107 audit(1771481257.432:15): pid=954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1780.515285][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1780.636584][ T980] pim6reg1: entered promiscuous mode [ 1780.642571][ T980] pim6reg1: entered allmulticast mode [ 1780.755999][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1780.767736][ T995] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1780.809675][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1781.270162][ T6002] Bluetooth: hci2: command 0x0401 tx timeout [ 1781.274174][T21364] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1781.361828][ T1026] nbd: must specify a size in bytes for the device [ 1781.421894][ T1029] erspan0: entered allmulticast mode [ 1781.429145][ T975] infiniband syz2: set down [ 1781.443752][T24807] ip6_vti0 speed is unknown, defaulting to 1000 [ 1781.456053][ T975] infiniband syz2: added ip6_vti0 [ 1781.473856][ T975] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1781.477939][ T975] infiniband syz2: Couldn't open port 1 [ 1781.556087][ T975] RDS/IB: syz2: added [ 1781.578898][ T975] smc: adding ib device syz2 with port count 1 [ 1781.595326][ T975] smc: ib device syz2 port 1 has no pnetid [ 1781.610264][ T1208] ip6_vti0 speed is unknown, defaulting to 1000 [ 1781.618073][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1781.797552][ T1069] __nla_validate_parse: 14 callbacks suppressed [ 1781.797575][ T1069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16600'. [ 1781.948866][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16600'. [ 1781.958227][ T1069] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16600'. [ 1781.968269][ T1069] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16600'. [ 1782.187912][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1782.369100][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1782.543975][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1782.722243][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1782.894173][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1783.066386][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1783.228264][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1783.402611][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1783.566101][ T975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1784.613800][ T1056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1784.639760][ T1095] netlink: 'syz.3.16605': attribute type 1 has an invalid length. [ 1784.674709][ T1095] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16605'. [ 1784.750064][ T1095] netlink: 'syz.3.16605': attribute type 1 has an invalid length. [ 1784.758046][ T1095] netlink: 'syz.3.16605': attribute type 8 has an invalid length. [ 1784.808150][ T1095] netlink: 606 bytes leftover after parsing attributes in process `syz.3.16605'. [ 1784.870303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.879397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.887802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.895927][ T1100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16606'. [ 1784.895967][ T1100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16606'. [ 1784.895984][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16606'. [ 1784.905578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.989349][ T1110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16608'. [ 1785.524043][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1785.544446][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.963019][ T1162] nbd: nbd2 already in use [ 1785.978231][ T1162] block nbd2: NBD_DISCONNECT [ 1785.989141][ T1162] block nbd2: Send disconnect failed -32 [ 1786.008045][ T1162] block nbd2: shutting down sockets [ 1786.120572][ T1166] netlink: 'syz.4.16625': attribute type 2 has an invalid length. [ 1786.382105][ T2609] bond5 (unregistering): (slave vti0): Releasing backup interface [ 1786.414165][ T2609] vti0 (unregistering): left promiscuous mode [ 1786.460982][ T2609] gretap0 (unregistering): left promiscuous mode [ 1786.501208][ T2609] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1786.844717][ T2609] bond0 (unregistering): left promiscuous mode [ 1786.851793][ T2609] bond0 (unregistering): Released all slaves [ 1786.863013][ T2609] bond1 (unregistering): Released all slaves [ 1786.883885][ T2609] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 1786.892741][ T2609] bond2 (unregistering): Released all slaves [ 1786.910356][ T2609] bond3 (unregistering): Released all slaves [ 1786.928520][ T2609] bond4 (unregistering): Released all slaves [ 1786.947778][ T2609] bond5 (unregistering): Released all slaves [ 1786.967947][ T2609] bond6 (unregistering): Released all slaves [ 1786.986952][ T2609] bond7 (unregistering): Released all slaves [ 1787.030795][ T1186] __nla_validate_parse: 13 callbacks suppressed [ 1787.030815][ T1186] netlink: 240 bytes leftover after parsing attributes in process `syz.0.16632'. [ 1787.048977][ T1190] netlink: 240 bytes leftover after parsing attributes in process `syz.0.16632'. [ 1787.174219][ T1200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16631'. [ 1787.303775][ T2609] : left promiscuous mode [ 1787.308690][ T1211] openvswitch: netlink: IP tunnel TTL not specified. [ 1787.331568][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16635'. [ 1787.429266][ T1218] tipc: Enabled bearer , priority 0 [ 1787.525958][ T2609] tipc: Left network mode [ 1787.597657][ T1218] tipc: Disabling bearer [ 1787.647929][ T1232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16641'. [ 1787.736805][ T1237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16643'. [ 1787.763968][ T1237] tipc: Invalid UDP bearer configuration [ 1787.764027][ T1237] tipc: Enabling of bearer rejected, failed to enable media [ 1788.070053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.078979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.087388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.178695][ T1258] netlink: 'syz.4.16649': attribute type 21 has an invalid length. [ 1788.200065][ T1258] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16649'. [ 1788.449497][ T1271] netlink: 'syz.4.16653': attribute type 10 has an invalid length. [ 1788.557619][ T1271] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1788.579303][ T1279] netlink: 'syz.2.16655': attribute type 11 has an invalid length. [ 1788.666530][ T2609] bond_slave_0: left promiscuous mode [ 1788.707442][ T1288] x_tables: duplicate underflow at hook 3 [ 1788.771612][ T2609] hsr_slave_0: left promiscuous mode [ 1788.790646][ T2609] hsr_slave_1: left promiscuous mode [ 1788.833857][ T2609] pimreg3 (unregistering): left allmulticast mode [ 1788.897405][ T2609] pimreg (unregistering): left allmulticast mode [ 1789.707271][ T1326] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.16669'. [ 1789.925657][ T1342] bridge0: entered allmulticast mode [ 1789.950186][ T1343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1789.995256][ T2609] IPVS: stop unused estimator thread 0... [ 1790.054530][ T1348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16674'. [ 1790.064524][ T1348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16674'. [ 1790.197221][ T1353] netlink: 'syz.4.16675': attribute type 29 has an invalid length. [ 1790.228969][ T1353] netlink: 'syz.4.16675': attribute type 29 has an invalid length. [ 1790.242353][ T1356] netlink: 'syz.4.16675': attribute type 29 has an invalid length. [ 1790.276324][ T1358] netlink: 'syz.2.16676': attribute type 1 has an invalid length. [ 1790.574957][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032465400: rx timeout, send abort [ 1790.583711][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032464c00: rx timeout, send abort [ 1790.592540][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032465400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1790.608689][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032464c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1790.835882][ T1383] netlink: 'syz.2.16683': attribute type 1 has an invalid length. [ 1790.847520][ T1383] netlink: 'syz.2.16683': attribute type 2 has an invalid length. [ 1790.942418][ T1383] netlink: 'syz.2.16683': attribute type 1 has an invalid length. [ 1790.967468][ T1383] netlink: 'syz.2.16683': attribute type 2 has an invalid length. [ 1791.190083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.198539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.206971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.215686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.592475][ T5826] block nbd5: Receive control failed (result -110) [ 1791.691470][ T1437] geneve2: entered promiscuous mode [ 1791.699062][ T2632] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 45707 - 0 [ 1791.721948][ T2632] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 45707 - 0 [ 1791.756298][ T2632] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 45707 - 0 [ 1791.784326][ T2632] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 45707 - 0 [ 1791.798207][ T1444] syz_tun: entered allmulticast mode [ 1791.809995][ T1444] netlink: 'syz.4.16698': attribute type 1 has an invalid length. [ 1792.011185][ T1455] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 1792.148709][ T1460] vlan2: entered promiscuous mode [ 1792.155767][ T1460] vlan2: entered allmulticast mode [ 1792.161278][ T1460] hsr_slave_1: entered allmulticast mode [ 1792.375151][ T1470] syzkaller1: entered promiscuous mode [ 1792.386168][ T1470] syzkaller1: entered allmulticast mode [ 1792.554672][ T1478] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1792.592977][ T1478] syzkaller0: entered promiscuous mode [ 1792.598605][ T1478] syzkaller0: entered allmulticast mode [ 1792.704541][ T1482] netlink: 'syz.0.16711': attribute type 1 has an invalid length. [ 1792.888809][ T1494] __nla_validate_parse: 13 callbacks suppressed [ 1792.888829][ T1494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16715'. [ 1792.912736][ T1494] chnl_net:caif_netlink_parms(): no params data found [ 1792.974144][ T1499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16716'. [ 1792.983946][ T1499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16716'. [ 1793.012802][ T1499] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16716'. [ 1793.098403][ T1505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16717'. [ 1793.218636][ T1517] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1793.239289][ T1521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1793.798312][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16728'. [ 1793.943024][ T1543] team0: Port device team_slave_0 removed [ 1794.309990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.318952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.327470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.336129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.402892][ T1594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16741'. [ 1794.441849][ T1594] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16741'. [ 1794.970489][ T1582] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1795.124737][ T1619] x_tables: duplicate underflow at hook 1 [ 1795.165458][ T1581] lec:lec_atm_close: lec0: Shut down! [ 1795.339431][ T5826] Bluetooth: hci5: link tx timeout [ 1795.346043][ T5826] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1795.389878][ T1630] validate_nla: 1 callbacks suppressed [ 1795.389896][ T1630] netlink: 'syz.1.16752': attribute type 1 has an invalid length. [ 1795.451927][ T1637] netlink: 'syz.4.16751': attribute type 4 has an invalid length. [ 1795.473782][ T1637] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16751'. [ 1795.605623][ T1630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1795.626543][T21364] Bluetooth: hci5: link tx timeout [ 1795.639165][T21364] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1795.654767][ T1637] `: renamed from bond0 [ 1795.680547][T21364] Bluetooth: hci5: link tx timeout [ 1795.685726][T21364] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1795.750585][ T1651] wg1 speed is unknown, defaulting to 1000 [ 1795.758315][ T1651] ip6_vti0 speed is unknown, defaulting to 1000 [ 1795.790487][ T1653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16756'. [ 1795.819753][T21364] Bluetooth: hci5: link tx timeout [ 1795.825101][T21364] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1796.390419][T21364] Bluetooth: hci5: link tx timeout [ 1796.395730][T21364] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1796.719013][ T5140] block nbd4: Possible stuck request ffff888058f42200: control (read@0,1024B). Runtime 210 seconds [ 1796.730287][ T5140] block nbd4: Possible stuck request ffff888058f42400: control (read@1024,1024B). Runtime 210 seconds [ 1796.741699][ T5140] block nbd4: Possible stuck request ffff888058f42600: control (read@2048,1024B). Runtime 210 seconds [ 1796.745140][ T1298] net_ratelimit: 1 callbacks suppressed [ 1796.745184][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1796.753715][ T5140] block nbd4: Possible stuck request ffff888058f42800: control (read@3072,1024B). Runtime 210 seconds [ 1796.974889][T21364] Bluetooth: hci5: link tx timeout [ 1796.980498][T21364] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1797.091463][ T1701] veth1_to_bond: entered promiscuous mode [ 1797.148828][ T1701] netlink: 'syz.0.16765': attribute type 29 has an invalid length. [ 1797.159610][T21364] Bluetooth: hci5: link tx timeout [ 1797.164780][T21364] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1797.190224][ T1705] netlink: 'syz.0.16765': attribute type 29 has an invalid length. [ 1797.213795][ T1711] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1797.345544][ T1710] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1797.413586][ T1701] netlink: 'syz.0.16765': attribute type 29 has an invalid length. [ 1797.430023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.430893][T21364] Bluetooth: hci5: command 0x0406 tx timeout [ 1797.439182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.453793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.500249][ T1701] netlink: 'syz.0.16765': attribute type 29 has an invalid length. [ 1797.508550][T21364] Bluetooth: hci5: link tx timeout [ 1797.520688][ T1701] netlink: 'syz.0.16765': attribute type 29 has an invalid length. [ 1797.569135][ T1701] netlink: 'syz.0.16765': attribute type 29 has an invalid length. [ 1797.711063][ T1701] netlink: 'syz.0.16765': attribute type 29 has an invalid length. [ 1798.129788][ T1763] vlan3: entered allmulticast mode [ 1798.135150][ T1763] hsr0: entered allmulticast mode [ 1798.160720][ T1763] hsr_slave_0: entered allmulticast mode [ 1798.171038][ T1763] hsr_slave_1: entered allmulticast mode [ 1798.200552][ T1763] __nla_validate_parse: 5 callbacks suppressed [ 1798.200575][ T1763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16783'. [ 1798.486731][ T1789] syzkaller1: entered promiscuous mode [ 1798.499988][ T1789] syzkaller1: entered allmulticast mode [ 1798.636749][ T1795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1798.973395][ T1819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16801'. [ 1799.191075][ T1829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16805'. [ 1799.926723][ T1873] Bluetooth: MGMT ver 1.23 [ 1799.931580][ T1873] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1800.028322][ T1882] netlink: 'syz.1.16817': attribute type 3 has an invalid length. [ 1800.071714][ T1882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16817'. [ 1800.193475][ T1891] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16821'. [ 1800.347929][ T1903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16826'. [ 1800.378990][ T1913] tipc: Enabled bearer , priority 0 [ 1800.391405][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.436668][ T1903] bond7: entered promiscuous mode [ 1800.442390][ T1903] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1800.505486][ T1913] syzkaller0: MTU too low for tipc bearer [ 1800.514606][ T1903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16826'. [ 1800.526399][ T1913] tipc: Disabling bearer [ 1800.550307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.626450][ T1903] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1800.646252][ T1903] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 1800.659084][ T1903] bond7: (slave sit1): Error -95 calling set_mac_address [ 1800.699823][ T1928] validate_nla: 3 callbacks suppressed [ 1800.699844][ T1928] netlink: 'syz.2.16832': attribute type 29 has an invalid length. [ 1800.724988][ T1931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1800.789557][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 1800.797722][ C0] lec:lec_tx_timeout: lec0 [ 1800.802820][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1800.841467][ T1934] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.16835'. [ 1800.962474][ T1936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16836'. [ 1801.275023][ T1960] tipc: Enabled bearer , priority 0 [ 1801.316573][ T1962] tipc: Enabling of bearer rejected, already enabled [ 1801.347629][ T1960] mac80211_hwsim hwsim183 +: renamed from syzkaller0 [ 1801.371664][ T1960] tipc: Disabling bearer [ 1801.430515][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.637773][ T1982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16853'. [ 1801.734113][ T1982] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1802.141397][ T2011] netlink: 'syz.2.16863': attribute type 25 has an invalid length. [ 1802.493707][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.990803][ T2064] xt_connbytes: Forcing CT accounting to be enabled [ 1803.060651][ T2072] netlink: 'syz.4.16879': attribute type 2 has an invalid length. [ 1803.107444][ T2072] 9: entered promiscuous mode [ 1803.236702][ T2071] syzkaller0: entered promiscuous mode [ 1803.242875][ T2071] syzkaller0: entered allmulticast mode [ 1803.253342][ T2071] tipc: Enabled bearer , priority 0 [ 1803.288837][ T2070] tipc: Resetting bearer [ 1803.354571][ T2070] tipc: Disabling bearer [ 1803.404402][ T2082] netlink: 'syz.2.16885': attribute type 1 has an invalid length. [ 1803.436918][ T2080] geneve3: entered promiscuous mode [ 1803.450069][ T2080] geneve3: entered allmulticast mode [ 1803.502656][T13122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.530707][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.566995][ T2094] __nla_validate_parse: 6 callbacks suppressed [ 1803.567019][ T2094] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.16887'. [ 1803.599870][ T2094] netlink: Unknown conntrack attr (0) [ 1803.631576][ T2094] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16887'. [ 1803.678878][ T2101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16888'. [ 1803.700540][ T2632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.822591][ T2103] bond8: entered promiscuous mode [ 1803.844866][ T2110] openvswitch: netlink: Invalid VLAN frame [ 1803.852176][ T2110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16892'. [ 1803.927678][ T2114] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16895'. [ 1804.355549][ T2143] tipc: Started in network mode [ 1804.368506][ T2143] tipc: Node identity da154de2269d, cluster identity 4711 [ 1804.386213][ T2143] tipc: Enabled bearer , priority 0 [ 1804.393599][T13122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.403818][ T2143] syzkaller0: entered promiscuous mode [ 1804.409801][ T2143] syzkaller0: entered allmulticast mode [ 1804.455136][ T2143] tipc: Resetting bearer [ 1804.474834][ T2142] tipc: Resetting bearer [ 1804.509491][ T2142] tipc: Disabling bearer [ 1804.559264][ T2128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.608853][ T2155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16905'. [ 1804.632478][ T2632] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.645742][ T2155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16905'. [ 1804.655311][ T2632] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.681104][ T2632] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.699801][ T2632] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.754532][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.767839][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.895054][ T2169] netlink: 'syz.3.16911': attribute type 58 has an invalid length. [ 1804.912803][ T2169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16911'. [ 1805.383767][ T2201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16916'. [ 1805.412357][ T2197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16916'. [ 1805.534000][ T2205] syzkaller0: entered promiscuous mode [ 1805.546618][ T2205] syzkaller0: entered allmulticast mode [ 1805.678268][ T2216] tipc: Enabled bearer , priority 0 [ 1805.707391][ T2216] syzkaller0: entered promiscuous mode [ 1805.734400][ T2216] syzkaller0: entered allmulticast mode [ 1805.809725][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1805.817852][ C0] lec:lec_tx_timeout: lec0 [ 1805.886317][ T2219] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1805.992531][ T2230] tipc: Resetting bearer [ 1806.016840][ T2215] tipc: Resetting bearer [ 1806.046051][ T2239] IPv6: NLM_F_CREATE should be specified when creating new route [ 1806.085772][ T2215] tipc: Disabling bearer [ 1806.284802][ T2253] netlink: 'syz.0.16930': attribute type 20 has an invalid length. [ 1806.300075][ T2253] IPv6: NLM_F_CREATE should be specified when creating new route [ 1806.428369][ T2265] netlink: 'syz.2.16934': attribute type 11 has an invalid length. [ 1806.545921][ T2258] syzkaller0: entered promiscuous mode [ 1806.556253][ T2273] netlink: 'syz.0.16935': attribute type 1 has an invalid length. [ 1806.565343][ T2258] syzkaller0: entered allmulticast mode [ 1806.655185][ T2273] bond9: entered promiscuous mode [ 1806.660797][ T2273] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1808.471108][ C0] net_ratelimit: 41 callbacks suppressed [ 1808.471129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.744090][ T2279] bridge0: entered promiscuous mode [ 1808.750178][ T2279] macsec1: entered promiscuous mode [ 1808.755603][ T2279] macsec1: entered allmulticast mode [ 1808.761681][ T2279] bridge0: entered allmulticast mode [ 1808.767570][ T2279] bridge0: port 1(macsec1) entered blocking state [ 1808.774505][ T2279] bridge0: port 1(macsec1) entered disabled state [ 1808.786947][ T2279] bridge0: left allmulticast mode [ 1808.794344][ T2279] bridge0: left promiscuous mode [ 1808.834757][ T2281] netlink: 'syz.2.16938': attribute type 3 has an invalid length. [ 1809.035870][T21364] Bluetooth: hci2: command 0x0401 tx timeout [ 1809.043235][ T2312] netlink: 'syz.2.16945': attribute type 39 has an invalid length. [ 1809.122910][ T2321] netlink: 'syz.2.16945': attribute type 10 has an invalid length. [ 1809.138898][ T2318] __nla_validate_parse: 4 callbacks suppressed [ 1809.138917][ T2318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16947'. [ 1809.261806][ T2321] dummy0: entered promiscuous mode [ 1809.270501][ T2321] dummy0: entered allmulticast mode [ 1809.276996][ T2321] team0: Port device dummy0 added [ 1809.633109][ T2353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16953'. [ 1809.685790][ T2354] netlink: 'syz.4.16953': attribute type 3 has an invalid length. [ 1809.704823][ T2354] netlink: 'syz.4.16953': attribute type 3 has an invalid length. [ 1810.116971][ T2375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.186660][ T2379] xt_CONNSECMARK: invalid mode: 0 [ 1810.369170][ T2385] wg1 speed is unknown, defaulting to 1000 [ 1810.412216][ T2385] ip6_vti0 speed is unknown, defaulting to 1000 [ 1810.538088][ T2409] xt_hashlimit: size too large, truncated to 1048576 [ 1811.164057][ T2430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1811.173289][ T2438] xt_hashlimit: size too large, truncated to 1048576 [ 1811.227664][ T2445] tipc: Started in network mode [ 1811.247458][ T2445] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1811.281142][ T2445] tipc: Enabled bearer , priority 0 [ 1811.598141][ T2466] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16976'. [ 1811.647328][ T2466] netlink: 'syz.3.16976': attribute type 1 has an invalid length. [ 1811.697338][ T2466] netlink: 'syz.3.16976': attribute type 1 has an invalid length. [ 1811.727670][ T2466] netlink: 184 bytes leftover after parsing attributes in process `syz.3.16976'. [ 1811.976140][ T2484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16978'. [ 1812.005931][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16978'. [ 1812.062607][ T2484] bond10: entered promiscuous mode [ 1812.067886][ T2484] bond10: entered allmulticast mode [ 1812.075398][ T2484] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1812.104718][ T2495] macvlan3: entered promiscuous mode [ 1812.140784][ T2493] Can't find ip_set type bitmap:ip,mac [ 1812.153402][ T2495] macvlan3: entered allmulticast mode [ 1812.182591][ T2495] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1812.293463][T13122] tipc: Node number set to 10070698 [ 1812.359790][ T2510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16982'. [ 1812.374015][ T2511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16982'. [ 1812.656004][ T2530] netlink: 'syz.2.16988': attribute type 23 has an invalid length. [ 1812.816445][ T2544] netlink: 'syz.4.16989': attribute type 9 has an invalid length. [ 1813.297790][ T2573] netlink: 'syz.0.16995': attribute type 1 has an invalid length. [ 1813.337496][ T2579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16997'. [ 1813.358874][ T2580] netlink: 'syz.0.16995': attribute type 16 has an invalid length. [ 1813.375402][ T2574] netlink: 'syz.0.16995': attribute type 16 has an invalid length. [ 1813.389449][ T2574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16995'. [ 1813.447407][ T2579] macvtap2: entered promiscuous mode [ 1813.453692][ T2579] vlan0: entered promiscuous mode [ 1813.459066][ T2579] macvtap2: entered allmulticast mode [ 1813.465711][ T2579] vlan0: entered allmulticast mode [ 1813.482301][ T2579] veth0_vlan: entered allmulticast mode [ 1813.586709][ T2590] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1813.757194][ T2597] netlink: 'syz.0.17004': attribute type 1 has an invalid length. [ 1814.109321][ T2627] syzkaller0: entered promiscuous mode [ 1814.126328][ T2627] syzkaller0: entered allmulticast mode [ 1814.760678][ T2679] __nla_validate_parse: 5 callbacks suppressed [ 1814.760699][ T2679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17023'. [ 1814.777292][ T2680] IPv6: Can't replace route, no match found [ 1814.838115][ T2679] netlink: 'syz.2.17023': attribute type 2 has an invalid length. [ 1814.877936][ T2686] syzkaller0: entered promiscuous mode [ 1814.901891][ T2686] syzkaller0: entered allmulticast mode [ 1815.025379][ T2696] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.17028'. [ 1815.133983][ T2706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1815.258159][ T2703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17029'. [ 1815.271207][ T2718] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1815.330487][ T2718] bond1: (slave lo): Enslaving as an active interface with an up link [ 1815.340947][ T2727] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17029'. [ 1815.373650][ T2718] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1815.416472][ T2703] team0 (unregistering): Port device team_slave_1 removed [ 1815.433074][ T2703] team0 (unregistering): Port device batadv1 removed [ 1815.497909][ T2701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1815.653029][ T2739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17038'. [ 1815.945061][ T2758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17044'. [ 1815.954718][ T2758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17044'. [ 1816.017475][ T2615] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.049780][ T2615] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.058666][ T2615] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.151233][ T2615] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.301619][ T2781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17053'. [ 1816.330927][ T2786] netlink: 'syz.2.17054': attribute type 12 has an invalid length. [ 1816.513033][ T2799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17056'. [ 1816.576208][ T2802] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17056'. [ 1817.331891][ T2802] bond3: entered promiscuous mode [ 1817.339658][ T2802] bond3: entered allmulticast mode [ 1817.346387][ T2802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1817.415987][ T2817] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1817.902286][ T2862] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1818.295892][ T2890] gretap0: entered promiscuous mode [ 1818.375692][ T2894] netlink: 'syz.4.17080': attribute type 3 has an invalid length. [ 1818.389415][ T2894] syzkaller0: entered allmulticast mode [ 1818.466576][ T2899] netlink: 'syz.0.17082': attribute type 7 has an invalid length. [ 1818.500480][ T2899] netlink: 'syz.0.17082': attribute type 7 has an invalid length. [ 1818.608092][ T2902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1818.629280][ T2903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.695950][ T2907] netlink: 'syz.4.17086': attribute type 1 has an invalid length. [ 1818.980557][ T2926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1819.020519][ T2928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1819.559475][ T2962] netlink: 'syz.1.17099': attribute type 1 has an invalid length. [ 1819.582099][ T2962] netlink: 'syz.1.17099': attribute type 1 has an invalid length. [ 1819.685352][ T2962] bond5: entered promiscuous mode [ 1819.710056][ T2962] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1819.821202][ T2962] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1819.843520][ T2962] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 1819.858660][ T2962] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1819.876508][ T2962] bond5: (slave vti0): making interface the new active one [ 1819.888335][ T2962] vti0: entered promiscuous mode [ 1819.896214][ T2962] bond5: (slave vti0): Enslaving as an active interface with an up link [ 1819.907317][ T2980] netlink: 'syz.0.17107': attribute type 29 has an invalid length. [ 1819.940958][ T2987] netlink: 'syz.0.17107': attribute type 29 has an invalid length. [ 1820.026528][ T2990] tipc: Resetting bearer [ 1820.205888][ T2990] tipc: Disabling bearer [ 1820.459948][ T3024] netlink: 'syz.1.17113': attribute type 3 has an invalid length. [ 1820.670839][ T3036] __nla_validate_parse: 18 callbacks suppressed [ 1820.670860][ T3036] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17119'. [ 1821.072382][ T3059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17127'. [ 1821.236047][ T3079] rdma_op ffff888029ce59f0 conn xmit_rdma 0000000000000000 [ 1821.485664][ T3085] syzkaller0: entered promiscuous mode [ 1821.492614][ T3085] syzkaller0: entered allmulticast mode [ 1821.500923][ T3084] netlink: 'syz.0.17134': attribute type 1 has an invalid length. [ 1821.514691][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17136'. [ 1821.635969][ T3094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17137'. [ 1822.141734][ T3109] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 1822.263331][ T3115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1822.273311][ T3115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1823.754645][ T3123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17145'. [ 1823.763876][ T3123] netlink: 'syz.2.17145': attribute type 8 has an invalid length. [ 1823.774528][ T3124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17145'. [ 1823.819271][ T3124] netlink: 'syz.2.17145': attribute type 8 has an invalid length. [ 1823.862540][ T3132] xt_hashlimit: size too large, truncated to 1048576 [ 1823.973180][ T3138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17148'. [ 1824.021358][ T3143] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1824.272941][ T3145] tipc: Enabled bearer , priority 0 [ 1824.294884][ T3160] netlink: 'syz.1.17153': attribute type 13 has an invalid length. [ 1824.311381][ T3153] syzkaller0: entered promiscuous mode [ 1824.316782][ T3160] netlink: 'syz.1.17153': attribute type 17 has an invalid length. [ 1824.316915][ T3153] syzkaller0: entered allmulticast mode [ 1824.352132][ T3161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17153'. [ 1824.370740][ T3145] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1824.450066][ T3145] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1824.538330][ T3160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1824.598596][ T3153] tipc: Resetting bearer [ 1824.635004][ T3171] veth0: entered promiscuous mode [ 1824.645571][ T3167] netlink: 'syz.3.17155': attribute type 1 has an invalid length. [ 1824.653868][ T3144] tipc: Resetting bearer [ 1824.682281][ T3144] tipc: Disabling bearer [ 1824.699991][ T3166] veth0: left promiscuous mode [ 1824.770874][ T3175] netlink: 'syz.0.17156': attribute type 4 has an invalid length. [ 1824.942183][ T3177] bond0: entered allmulticast mode [ 1825.511798][ T3235] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1825.805389][ T3251] netlink: 'syz.0.17173': attribute type 17 has an invalid length. [ 1825.831528][ T3251] __nla_validate_parse: 7 callbacks suppressed [ 1825.831550][ T3251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17173'. [ 1825.890240][ T3251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17173'. [ 1826.102027][ T3271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17177'. [ 1826.117523][ T3271] netlink: 6 bytes leftover after parsing attributes in process `syz.3.17177'. [ 1826.405951][ T3285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1826.472806][ T3287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17182'. [ 1826.521561][ T3287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17182'. [ 1826.535171][ T3289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1826.790819][ T5140] block nbd4: Possible stuck request ffff888058f42200: control (read@0,1024B). Runtime 240 seconds [ 1826.810277][ T5140] block nbd4: Possible stuck request ffff888058f42400: control (read@1024,1024B). Runtime 240 seconds [ 1826.821943][ T5140] block nbd4: Possible stuck request ffff888058f42600: control (read@2048,1024B). Runtime 240 seconds [ 1826.834871][ T5140] block nbd4: Possible stuck request ffff888058f42800: control (read@3072,1024B). Runtime 240 seconds [ 1827.005474][ T3319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17194'. [ 1827.265800][ T3329] Cannot find del_set index 3 as target [ 1827.536693][ T3347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17200'. [ 1827.677203][ T3352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17202'. [ 1827.844651][T21181] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1827.868217][ T3302] lec:lec_atm_close: lec0: Shut down! [ 1827.893604][T21181] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1827.996751][T21181] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1828.039754][T21181] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1828.226548][ T3380] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.17208'. [ 1828.360937][ T3384] netlink: 'syz.2.17210': attribute type 39 has an invalid length. [ 1828.416016][ T3399] netlink: 'syz.2.17210': attribute type 39 has an invalid length. [ 1828.702068][ T3368] lec:lec_atm_close: lec0: Shut down! [ 1828.958530][ T3425] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1829.095250][ T3430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1829.108409][ T3430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.121992][ T3430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1829.261098][ T3430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1829.282171][ T3430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.301411][ T3430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1829.385020][ T3453] xt_l2tp: wrong L2TP version: 0 [ 1829.484195][ T3430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1829.518295][ T3430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.541341][ T3430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1829.698135][ T3430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1829.713680][ T3430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.726348][ T3430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1829.791272][ T3461] syzkaller0: entered promiscuous mode [ 1829.797199][ T3461] syzkaller0: entered allmulticast mode [ 1829.827343][ T3477] netlink: 'syz.4.17230': attribute type 1 has an invalid length. [ 1829.916609][ T3477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1830.107538][ T2609] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1830.122542][ T2609] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1830.131131][ T2609] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1830.152049][ T3490] netlink: 'syz.3.17233': attribute type 1 has an invalid length. [ 1830.160518][ T3490] netlink: 'syz.3.17233': attribute type 1 has an invalid length. [ 1830.172354][ T2609] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1830.181796][ T3490] netlink: 'syz.3.17233': attribute type 1 has an invalid length. [ 1830.181951][ T2609] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1830.199037][ T2609] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1830.326579][ T3490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1830.335734][ T2609] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1830.349736][ T2609] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1830.358326][ T2609] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1830.414677][ T2609] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1830.459862][ T2609] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1830.498484][ T2609] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1830.579852][ T3509] netlink: 'syz.2.17239': attribute type 1 has an invalid length. [ 1830.725087][ T3515] bond5: entered promiscuous mode [ 1830.741499][ T3515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1830.844569][ T3515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1830.855682][ T3515] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 1830.876355][ T3515] bond5: (slave sit1): Error -95 calling set_mac_address [ 1830.964898][ T3535] __nla_validate_parse: 7 callbacks suppressed [ 1830.964913][ T3535] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.17244'. [ 1830.986834][ T3534] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.17244'. [ 1831.129855][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17246'. [ 1831.150823][ T3543] mac80211_hwsim hwsim194 wlan1: entered promiscuous mode [ 1831.366586][ T3563] netlink: 300 bytes leftover after parsing attributes in process `syz.3.17250'. [ 1831.446726][ T3568] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17254'. [ 1831.457901][ T3568] netlink: Unknown conntrack attr (0) [ 1831.476677][ T3570] FAULT_INJECTION: forcing a failure. [ 1831.476677][ T3570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.490742][ T3570] CPU: 1 UID: 0 PID: 3570 Comm: syz.2.17255 Not tainted syzkaller #0 PREEMPT(full) [ 1831.490764][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1831.490775][ T3570] Call Trace: [ 1831.490781][ T3570] [ 1831.490788][ T3570] dump_stack_lvl+0xe8/0x150 [ 1831.490814][ T3570] should_fail_ex+0x412/0x560 [ 1831.490840][ T3570] _copy_to_user+0x31/0xb0 [ 1831.490859][ T3570] simple_read_from_buffer+0xe1/0x170 [ 1831.490887][ T3570] proc_fail_nth_read+0x1bb/0x230 [ 1831.490910][ T3570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.490934][ T3570] ? rw_verify_area+0x2a6/0x4d0 [ 1831.490954][ T3570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.490976][ T3570] vfs_read+0x20c/0xa70 [ 1831.490992][ T3570] ? fdget_pos+0x246/0x320 [ 1831.491011][ T3570] ? __pfx___mutex_lock+0x10/0x10 [ 1831.491034][ T3570] ? __pfx_vfs_read+0x10/0x10 [ 1831.491054][ T3570] ? __fget_files+0x2a/0x420 [ 1831.491072][ T3570] ? __fget_files+0x3a0/0x420 [ 1831.491086][ T3570] ? __fget_files+0x2a/0x420 [ 1831.491109][ T3570] ksys_read+0x150/0x270 [ 1831.491129][ T3570] ? __pfx_ksys_read+0x10/0x10 [ 1831.491156][ T3570] do_syscall_64+0x14d/0xf80 [ 1831.491175][ T3570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.491190][ T3570] ? trace_irq_disable+0x37/0x100 [ 1831.491208][ T3570] ? clear_bhb_loop+0x40/0x90 [ 1831.491226][ T3570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.491242][ T3570] RIP: 0033:0x7f464135cece [ 1831.491257][ T3570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1831.491271][ T3570] RSP: 002b:00007f46422c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1831.491287][ T3570] RAX: ffffffffffffffda RBX: 00007f46422c26c0 RCX: 00007f464135cece [ 1831.491298][ T3570] RDX: 000000000000000f RSI: 00007f46422c20a0 RDI: 0000000000000006 [ 1831.491308][ T3570] RBP: 00007f46422c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.491317][ T3570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.491326][ T3570] R13: 00007f4641616038 R14: 00007f4641615fa0 R15: 00007ffe5c149578 [ 1831.491351][ T3570] [ 1831.845456][ T3575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17257'. [ 1831.945316][ T3580] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1831.961888][ T3580] bond4 (unregistering): Released all slaves [ 1832.135826][ T3590] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17262'. [ 1832.154656][ T3589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17262'. [ 1832.470701][ T3605] xt_hashlimit: size too large, truncated to 1048576 [ 1832.943618][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17274'. [ 1833.304526][ T3641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17280'. [ 1833.567435][ T3650] netlink: 'syz.1.17283': attribute type 25 has an invalid length. [ 1833.581482][ T3666] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1833.597586][ T3666] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1833.612597][ T3666] gretap1: entered promiscuous mode [ 1833.618541][ T3666] gretap1: entered allmulticast mode [ 1833.749799][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 1833.757895][ C0] lec:lec_tx_timeout: lec0 [ 1834.458331][ T3713] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1834.468305][ T3713] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1834.478855][ T3713] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1834.718656][ T3721] netlink: 'syz.1.17309': attribute type 8 has an invalid length. [ 1835.231539][ T29] audit: type=1800 audit(1771481312.732:16): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17318" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2476 res=0 errno=0 [ 1835.340993][ T3761] netlink: 'syz.2.17320': attribute type 5 has an invalid length. [ 1835.394972][ T3761] geneve3: entered promiscuous mode [ 1835.414262][ T3761] geneve3: entered allmulticast mode [ 1835.443996][T21181] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 2] type 2 family 0 port 256 - 0 [ 1835.471112][T21181] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1835.488559][ T3767] netlink: 'syz.0.17321': attribute type 30 has an invalid length. [ 1835.503981][T21181] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1835.529795][T21181] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1835.666942][ T3778] openvswitch: netlink: IP tunnel dst address not specified [ 1835.962720][ T3792] vlan0: entered promiscuous mode [ 1835.968472][ T3792] geneve1: entered promiscuous mode [ 1835.974955][ T3792] vlan0: entered allmulticast mode [ 1835.991684][ T3792] geneve1: entered allmulticast mode [ 1835.997531][ T3799] tipc: Enabling of bearer rejected, failed to enable media [ 1836.170515][ T3800] syzkaller0: entered promiscuous mode [ 1836.176171][ T3800] syzkaller0: entered allmulticast mode [ 1836.237458][ T3815] __nla_validate_parse: 7 callbacks suppressed [ 1836.237479][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17335'. [ 1836.344255][ T2632] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1836.360237][ T2632] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1836.386066][ T2632] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1836.427899][ T2632] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1836.471915][ T3816] syzkaller0: entered promiscuous mode [ 1836.482956][ T3816] syzkaller0: entered allmulticast mode [ 1836.544917][ T3828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17338'. [ 1836.684357][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17339'. [ 1837.000871][ T3859] netlink: 'syz.0.17346': attribute type 1 has an invalid length. [ 1838.687410][ T3851] vlan4: entered promiscuous mode [ 1838.692981][ T3851] vlan4: entered allmulticast mode [ 1838.698116][ T3851] bridge0: entered allmulticast mode [ 1838.934159][ T3882] netlink: 72 bytes leftover after parsing attributes in process `syz.4.17353'. [ 1839.048345][ T3889] x_tables: unsorted entry at hook 1 [ 1839.193472][ T3887] xt_CT: No such helper "syz1" [ 1839.308729][ T3903] netlink: 'syz.3.17360': attribute type 1 has an invalid length. [ 1839.339750][T26811] lec:lec_start_xmit: lec0:No lecd attached [ 1839.443644][ T3912] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1839.470233][ T3912] bond4: option arp_ip_target: invalid value (0) [ 1839.496837][ T3912] bond4 (unregistering): Released all slaves [ 1839.565707][ T3916] team0: Device ip6gre2 is of different type [ 1839.612981][ T3918] lo speed is unknown, defaulting to 1000 [ 1839.641665][ T3918] lo speed is unknown, defaulting to 1000 [ 1839.661287][ T3918] lo speed is unknown, defaulting to 1000 [ 1839.805214][ T3928] netlink: 160 bytes leftover after parsing attributes in process `syz.0.17366'. [ 1839.818195][ T3896] lec:lec_atm_close: lec0: Shut down! [ 1839.831640][ T3922] ip6gre1: entered allmulticast mode [ 1839.963311][ T3922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.052777][ T3922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.100015][ T3922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1840.293476][ T3949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1840.372242][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17372'. [ 1840.383590][ T3922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.409988][ T3922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.442257][ T3922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1840.453581][ T3958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1840.500518][ T3918] infiniband syz0: set down [ 1840.506396][ T3918] infiniband syz0: added lo [ 1840.515422][ T3918] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1840.518332][ T3918] infiniband syz0: Couldn't open port 1 [ 1840.545439][ T3954] mac80211_hwsim hwsim172 wlan0: entered promiscuous mode [ 1840.577278][ T2127] lo speed is unknown, defaulting to 1000 [ 1840.609329][ T3918] RDS/IB: syz0: added [ 1840.627868][ T3918] smc: adding ib device syz0 with port count 1 [ 1840.642873][ T3922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.656704][ T3918] smc: ib device syz0 port 1 has no pnetid [ 1840.669895][ T3922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.694707][ T3922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1840.747810][ T3969] x_tables: unsorted underflow at hook 3 [ 1840.756891][ T3971] x_tables: unsorted underflow at hook 3 [ 1840.799228][ T3918] lo speed is unknown, defaulting to 1000 [ 1840.853658][ T3922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.869293][ T3922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.883191][ T3922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1840.931337][ T2127] lo speed is unknown, defaulting to 1000 [ 1840.972194][ T3976] netlink: 'syz.2.17376': attribute type 63 has an invalid length. [ 1841.002768][ T3975] netlink: 'syz.2.17376': attribute type 63 has an invalid length. [ 1841.049256][ T3980] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1841.081851][T21181] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1841.101007][T21181] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1841.109344][T21181] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1841.121508][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17377'. [ 1841.156950][T21181] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1841.181681][T21181] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1841.209752][T21181] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1841.248819][T21181] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1841.265652][T21181] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1841.280117][T21181] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1841.317212][ T3982] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1841.318210][ T3982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17378'. [ 1841.347313][ T2632] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1841.370736][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17379'. [ 1841.380884][ T2632] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1841.389197][ T2632] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1841.644661][ T3918] lo speed is unknown, defaulting to 1000 [ 1841.697235][ T4012] netlink: 'syz.2.17387': attribute type 1 has an invalid length. [ 1841.908093][ T4012] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1842.218297][ T4039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1842.271120][ T4046] IPv6: NLM_F_CREATE should be specified when creating new route [ 1842.298012][ T3918] lo speed is unknown, defaulting to 1000 [ 1842.308106][ T4046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17392'. [ 1842.435978][ T4056] xt_cgroup: invalid path, errno=-2 [ 1842.631316][ T4058] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1842.827161][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17398'. [ 1842.854017][ T3918] lo speed is unknown, defaulting to 1000 [ 1842.864249][ T4066] syzkaller0: entered promiscuous mode [ 1842.872035][ T4066] syzkaller0: entered allmulticast mode [ 1842.974149][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17399'. [ 1842.990016][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17399'. [ 1843.285016][ T3918] lo speed is unknown, defaulting to 1000 [ 1843.676014][ T4098] netlink: 'syz.1.17404': attribute type 10 has an invalid length. [ 1843.713271][ T4098] team0: Port device dummy0 added [ 1843.866565][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17407'. [ 1843.956051][ T3918] lo speed is unknown, defaulting to 1000 [ 1844.066305][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17410'. [ 1844.133923][ T4118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17411'. [ 1844.492952][ T3918] lo speed is unknown, defaulting to 1000 [ 1844.571277][ T4141] IPVS: set_ctl: invalid protocol: 115 172.20.20.11:20000 [ 1844.617977][ T4143] pimreg: entered allmulticast mode [ 1844.659456][ T4146] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1844.780561][ T4151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17421'. [ 1844.819639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1844.827760][ C0] lec:lec_tx_timeout: lec0 [ 1844.876500][ T3918] lo speed is unknown, defaulting to 1000 [ 1845.165235][ T4174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1845.409963][ T3918] lo speed is unknown, defaulting to 1000 [ 1845.530706][ T4193] netlink: 'syz.4.17431': attribute type 1 has an invalid length. [ 1845.552287][ T4193] netlink: 'syz.4.17431': attribute type 1 has an invalid length. [ 1845.646711][ T4204] vlan2: entered allmulticast mode [ 1845.678802][ T4204] geneve1: entered allmulticast mode [ 1845.877656][ T4217] syzkaller1: entered promiscuous mode [ 1845.912049][ T4217] syzkaller1: entered allmulticast mode [ 1846.155705][ T4228] sctp: [Deprecated]: syz.1.17440 (pid 4228) Use of int in max_burst socket option. [ 1846.155705][ T4228] Use struct sctp_assoc_value instead [ 1846.728723][ T4254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1846.744262][ T4254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.858169][ T4277] __nla_validate_parse: 13 callbacks suppressed [ 1846.858189][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17454'. [ 1846.947147][ T4277] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1847.064802][ T4254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1847.093115][ T4254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.352453][ T4254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1847.363802][ T4254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.385166][ T4296] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.17461'. [ 1847.399758][ T4296] bridge_slave_1: default FDB implementation only supports local addresses [ 1847.484977][ T4310] x_tables: duplicate underflow at hook 3 [ 1847.506374][ T4254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1847.519325][ T4311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17466'. [ 1847.528504][ T4254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.642978][ T4317] bond5: (slave lo): Releasing backup interface [ 1847.651714][ T4317] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1847.720997][ T4317] bridge_slave_0: left allmulticast mode [ 1847.726798][ T4317] bridge_slave_0: left promiscuous mode [ 1847.733867][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.763713][ T4317] bond0: (slave bridge_slave_1): Releasing backup interface [ 1847.787578][ T4317] bond0: (slave bond_slave_0): Releasing backup interface [ 1847.812206][ T4317] bond0: (slave bond_slave_1): Releasing backup interface [ 1847.845081][ T4317] team0: Port device team_slave_0 removed [ 1847.901175][ T4317] team0: Port device team_slave_1 removed [ 1847.924252][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1847.932337][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.947503][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1847.968879][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1847.985483][ T4317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1848.011520][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17472'. [ 1848.082373][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17472'. [ 1848.137024][T21181] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1848.163107][T21181] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.241985][T21181] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1848.259730][T21181] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.279922][T21181] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1848.288175][T21181] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.333241][ T4344] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1848.346532][ T4342] bond14: entered allmulticast mode [ 1848.414067][ T4342] bridge7: entered promiscuous mode [ 1848.420674][ T4342] bridge7: entered allmulticast mode [ 1848.441851][ T4342] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 1848.462276][T21181] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1848.497504][T21181] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.675113][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17480'. [ 1848.701622][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17481'. [ 1848.976075][ T4376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.984068][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1849.531152][ T4412] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17494'. [ 1849.551139][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17494'. [ 1849.556241][ T4414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17495'. [ 1849.648481][ T4416] bridge5: entered promiscuous mode [ 1849.655135][ T4416] bridge5: entered allmulticast mode [ 1849.885662][ T4431] netlink: 'syz.4.17500': attribute type 1 has an invalid length. [ 1849.940513][ T4431] bond4: Unable to set up delay as MII monitoring is disabled [ 1849.951406][ T4431] bond4 (unregistering): Released all slaves [ 1850.202664][ T4455] syzkaller0: entered promiscuous mode [ 1850.209258][ T4455] syzkaller0: entered allmulticast mode [ 1850.221096][ T4455] tipc: Enabled bearer , priority 0 [ 1850.252738][ T4454] tipc: Resetting bearer [ 1850.316222][ T4454] tipc: Disabling bearer [ 1850.649400][ T4487] netlink: 'syz.2.17515': attribute type 2 has an invalid length. [ 1851.081733][ T4476] lec:lec_atm_close: lec0: Shut down! [ 1851.200233][ T4514] netlink: 'syz.4.17524': attribute type 21 has an invalid length. [ 1851.229201][ T4514] IPv6: NLM_F_CREATE should be specified when creating new route [ 1851.240320][ T4514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1851.247572][ T4514] IPv6: NLM_F_CREATE should be set when creating new route [ 1851.254964][ T4514] IPv6: NLM_F_CREATE should be set when creating new route [ 1851.262267][ T4514] IPv6: NLM_F_CREATE should be set when creating new route [ 1851.283813][ T4514] netlink: 'syz.4.17524': attribute type 21 has an invalid length. [ 1851.302660][ T4514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1851.357140][ T4514] netlink: 'syz.4.17524': attribute type 21 has an invalid length. [ 1851.365884][ T4514] netlink: 'syz.4.17524': attribute type 6 has an invalid length. [ 1851.542530][ T4533] sctp: [Deprecated]: syz.2.17530 (pid 4533) Use of int in max_burst socket option. [ 1851.542530][ T4533] Use struct sctp_assoc_value instead [ 1851.687678][T31217] IPVS: starting estimator thread 0... [ 1851.771757][ T4542] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 1851.790091][ T4546] IPVS: using max 29 ests per chain, 69600 per kthread [ 1851.818823][ T4558] netlink: 'syz.3.17536': attribute type 1 has an invalid length. [ 1851.881970][ T4560] __nla_validate_parse: 7 callbacks suppressed [ 1851.881990][ T4560] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17536'. [ 1851.985791][ T4558] xt_recent: Unsupported userspace flags (000000b1) [ 1852.225381][ T4575] netlink: 'syz.2.17542': attribute type 1 has an invalid length. [ 1852.247612][ T4575] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1852.798376][ T4617] xt_cgroup: xt_cgroup: no path or classid specified [ 1852.835362][ T4617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17552'. [ 1853.121869][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17556'. [ 1853.426865][ T4649] netlink: 'syz.0.17562': attribute type 1 has an invalid length. [ 1853.446570][ T4651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1853.490905][ T4649] netlink: 'syz.0.17562': attribute type 1 has an invalid length. [ 1853.499099][ T4649] netlink: 172 bytes leftover after parsing attributes in process `syz.0.17562'. [ 1853.508816][ T4649] NCSI netlink: No device for ifindex 813332851 [ 1853.517771][ T4649] netlink: 256 bytes leftover after parsing attributes in process `syz.0.17562'. [ 1853.620022][ T4634] lec:lec_atm_close: lec0: Shut down! [ 1853.888086][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17570'. [ 1853.947720][ T4672] bond16: option coupled_control: invalid value (52) [ 1853.966376][ T4672] bond16 (unregistering): Released all slaves [ 1853.996009][ T4677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17571'. [ 1854.096588][ T4677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17571'. [ 1854.119032][ T4684] netlink: 332 bytes leftover after parsing attributes in process `syz.3.17574'. [ 1854.419854][ T4701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17580'. [ 1854.710334][ T4723] xt_hashlimit: invalid interval [ 1854.815590][ T4727] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 1855.000056][ T4741] validate_nla: 2 callbacks suppressed [ 1855.000076][ T4741] netlink: 'syz.0.17590': attribute type 4 has an invalid length. [ 1855.056360][ T4744] netlink: 'syz.0.17590': attribute type 4 has an invalid length. [ 1855.083193][ T4702] lec:lec_atm_close: lec0: Shut down! [ 1855.288809][ T4761] syzkaller1: entered promiscuous mode [ 1855.294714][ T4761] syzkaller1: entered allmulticast mode [ 1855.629840][ T4784] bridge0: Device is already in use. [ 1855.658035][ T4785] xt_l2tp: invalid flags combination: 8 [ 1855.659352][ T4784] xt_l2tp: invalid flags combination: 8 [ 1855.757449][ T4795] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1856.078905][ T4819] netlink: 'syz.0.17611': attribute type 10 has an invalid length. [ 1856.093909][ T4819] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1856.209716][ T4826] netlink: 'syz.0.17612': attribute type 1 has an invalid length. [ 1856.381152][ T4828] netlink: 'syz.0.17615': attribute type 21 has an invalid length. [ 1856.581095][ T4842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1856.682235][ T4848] netlink: 'syz.3.17620': attribute type 1 has an invalid length. [ 1856.873782][ T5140] block nbd4: Possible stuck request ffff888058f42200: control (read@0,1024B). Runtime 270 seconds [ 1856.884994][ T5140] block nbd4: Possible stuck request ffff888058f42400: control (read@1024,1024B). Runtime 270 seconds [ 1856.896772][ T5140] block nbd4: Possible stuck request ffff888058f42600: control (read@2048,1024B). Runtime 270 seconds [ 1856.908835][ T5140] block nbd4: Possible stuck request ffff888058f42800: control (read@3072,1024B). Runtime 270 seconds [ 1857.120576][ T4872] IPVS: length: 8 != 1152 [ 1857.216763][ T4880] __nla_validate_parse: 13 callbacks suppressed [ 1857.216785][ T4880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17631'. [ 1857.387064][ T4839] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1857.576037][ T4899] netlink: 'syz.0.17636': attribute type 64 has an invalid length. [ 1857.584698][ T4900] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17638'. [ 1857.607943][ T4900] nbd: illegal input index -8454144 [ 1857.608308][ T4899] netlink: 5 bytes leftover after parsing attributes in process `syz.0.17636'. [ 1857.708160][ T4901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17634'. [ 1857.736941][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17642'. [ 1857.820697][ T4907] veth9: entered promiscuous mode [ 1857.827732][ T4907] veth9: entered allmulticast mode [ 1857.931763][ T4918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1857.997513][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17647'. [ 1858.118274][ T4918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1858.162603][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1858.266686][ T4908] lec:lec_atm_close: lec0: Shut down! [ 1858.525052][ T4936] 8021q: VLANs not supported on lo [ 1858.635443][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 1858.783268][ T2313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1858.796020][ T2313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1858.814376][ T2313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1858.831162][ T2313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1858.845246][ T2313] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1858.922079][ T4943] wg1 speed is unknown, defaulting to 1000 [ 1858.931418][ T4943] ip6_vti0 speed is unknown, defaulting to 1000 [ 1858.944717][ T4952] netlink: 184 bytes leftover after parsing attributes in process `syz.4.17658'. [ 1858.991981][ T4954] xt_cgroup: path and classid specified [ 1858.997735][ T4954] xt_cgroup: path and classid specified [ 1859.010449][ T4954] xt_cgroup: path and classid specified [ 1859.024813][ T4954] xt_cgroup: path and classid specified [ 1859.046044][ T4954] xt_cgroup: path and classid specified [ 1859.065163][ T4954] xt_cgroup: path and classid specified [ 1859.086175][ T4954] xt_cgroup: path and classid specified [ 1859.108282][ T4954] xt_cgroup: path and classid specified [ 1859.130707][ T4954] xt_cgroup: path and classid specified [ 1859.145478][ T4954] xt_cgroup: path and classid specified [ 1859.509675][ T4943] lo speed is unknown, defaulting to 1000 [ 1859.564273][ T4975] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.17664'. [ 1859.578533][ T2313] Bluetooth: hci5: link tx timeout [ 1859.585323][ T2313] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1859.723648][ T4975] netlink: 'syz.4.17664': attribute type 1 has an invalid length. [ 1859.766110][ T4975] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17664'. [ 1859.797207][ T4975] netlink: 658 bytes leftover after parsing attributes in process `syz.4.17664'. [ 1859.856621][ T4988] netlink: 'syz.0.17668': attribute type 1 has an invalid length. [ 1859.866187][ T4988] netlink: 'syz.0.17668': attribute type 1 has an invalid length. [ 1860.143204][ T4998] validate_nla: 1 callbacks suppressed [ 1860.143226][ T4998] netlink: 'syz.3.17673': attribute type 23 has an invalid length. [ 1860.208386][ T4998] siw: device registration error -23 [ 1860.208512][ T4973] lec:lec_atm_close: lec0: Shut down! [ 1860.572796][ T4943] chnl_net:caif_netlink_parms(): no params data found [ 1860.743832][ T5019] netlink: 'syz.3.17679': attribute type 4 has an invalid length. [ 1860.841272][ T4943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.859820][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.868381][ T4943] bridge_slave_0: entered allmulticast mode [ 1860.875425][ T5826] Bluetooth: hci4: command tx timeout [ 1860.878976][ T4943] bridge_slave_0: entered promiscuous mode [ 1860.891328][ T4943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.898584][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.908022][ T4943] bridge_slave_1: entered allmulticast mode [ 1860.916171][ T4943] bridge_slave_1: entered promiscuous mode [ 1861.070197][ T4943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1861.095041][ T4943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.152067][ T4943] team0: Port device team_slave_0 added [ 1861.166422][ T4943] team0: Port device team_slave_1 added [ 1861.247034][ T4943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.267969][ T4943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1861.322624][ T4943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.339949][ T4943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1861.348152][ T4943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1861.377812][ T4943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.391303][ T5045] 8021q: VLANs not supported on gre0 [ 1861.576828][ T4943] hsr_slave_0: entered promiscuous mode [ 1861.584200][ T4943] hsr_slave_1: entered promiscuous mode [ 1861.591415][ T4943] debugfs: 'hsr0' already exists in 'hsr' [ 1861.597205][ T4943] Cannot create hsr debugfs directory [ 1861.675523][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 1861.752217][ T2609] wlan1: Trigger new scan to find an IBSS to join [ 1862.552953][ T4943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1862.581663][ T4943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.592990][ T4943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45707 - 0 [ 1862.605778][ T4943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1862.745856][ T4943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1862.778811][ T4943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.803470][ T4943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45707 - 0 [ 1862.862536][ T4943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1862.877523][ T5097] netlink: 'syz.4.17694': attribute type 1 has an invalid length. [ 1862.949798][ T2313] Bluetooth: hci4: command tx timeout [ 1863.104874][ T4943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1863.118805][ T4943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.128463][ T5113] netlink: 'syz.1.17698': attribute type 1 has an invalid length. [ 1863.142347][ T4943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45707 - 0 [ 1863.160965][ T4943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1863.393482][ T5119] bond6: (slave bridge0): making interface the new active one [ 1863.403297][ T5119] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 1863.455464][ T5121] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 1863.688834][ T4943] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1863.709949][ T4943] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.732229][ T4943] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 45707 - 0 [ 1863.754304][ T4943] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1863.904746][ T5134] syzkaller0: entered promiscuous mode [ 1863.929922][ T5134] syzkaller0: entered allmulticast mode [ 1863.977843][ T5134] tipc: Enabled bearer , priority 0 [ 1864.221150][ T5153] __nla_validate_parse: 10 callbacks suppressed [ 1864.221171][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17703'. [ 1864.243038][ T5131] tipc: Resetting bearer [ 1864.280482][ T5131] tipc: Disabling bearer [ 1864.508427][ T4943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1864.541464][ T4943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1864.555087][ T4943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1864.581284][ T4943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1864.773233][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17709'. [ 1864.793548][ T2615] wlan1: Trigger new scan to find an IBSS to join [ 1864.846580][ T5198] netlink: 'syz.0.17709': attribute type 1 has an invalid length. [ 1864.865376][ T5198] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17709'. [ 1864.972695][ T4943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1865.030667][ T2313] Bluetooth: hci4: command tx timeout [ 1865.041192][ T4943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1865.080343][ T5210] smc: net device team0 applied user defined pnetid SYZ2 [ 1865.127023][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.134255][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.164806][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.172074][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.379020][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17718'. [ 1865.678297][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17722'. [ 1865.759910][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 1865.768281][ C0] lec:lec_tx_timeout: lec0 [ 1865.785337][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17724'. [ 1865.912660][ T5258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17725'. [ 1865.918486][ T4943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1866.003372][ T5258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17725'. [ 1866.105662][ T4943] veth0_vlan: entered promiscuous mode [ 1866.161907][ T5269] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1866.274929][ T4943] veth1_vlan: entered promiscuous mode [ 1866.417256][ T4943] veth0_macvtap: entered promiscuous mode [ 1866.432501][ T5282] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.448373][ T5282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1866.486844][ T5282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1866.518213][ T4943] veth1_macvtap: entered promiscuous mode [ 1866.547942][ T4943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1866.574981][ T5282] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.599275][ T5282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1866.627998][ T5282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1866.706605][ T5290] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1866.753528][ T5290] syzkaller1: linktype set to 823 [ 1866.784433][ T5282] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.812586][ T5282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1866.845872][ T5282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1866.872938][ T4943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1866.925728][ T5282] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.944135][ T5282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1866.972052][ T5282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1867.111725][ T2313] Bluetooth: hci4: command tx timeout [ 1867.157474][ T5984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.206761][ T5984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.229176][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17734'. [ 1867.245073][ T5984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.272718][ T5984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.324092][ T4234] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1867.332585][ T4234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1867.363596][ T4234] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1867.474645][ T4234] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1867.485199][ T4234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1867.494328][ T4234] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1867.668709][ T2609] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1867.692781][ T2609] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1867.709993][ T2609] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1867.746577][ T5328] syzkaller0: entered promiscuous mode [ 1867.756173][T21181] wlan1: Trigger new scan to find an IBSS to join [ 1867.766478][ T5328] syzkaller0: entered allmulticast mode [ 1867.787900][ T2609] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1867.805984][ T2609] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1867.825216][ T2609] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1867.944917][ T5336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17738'. [ 1868.004117][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.016060][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.083987][ T5336] netlink: 'syz.0.17738': attribute type 1 has an invalid length. [ 1868.100694][ T5336] netlink: 'syz.0.17738': attribute type 1 has an invalid length. [ 1868.109250][ T2609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.127155][ T5336] netlink: 'syz.0.17738': attribute type 8 has an invalid length. [ 1868.138239][ T2609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.520986][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.848856][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1868.881340][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1868.897176][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1868.911855][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1868.922433][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1869.141540][ T5383] wg1 speed is unknown, defaulting to 1000 [ 1869.263566][ T5383] ip6_vti0 speed is unknown, defaulting to 1000 [ 1869.555421][ T5408] __nla_validate_parse: 9 callbacks suppressed [ 1869.555444][ T5408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17753'. [ 1869.950806][ T5383] lo speed is unknown, defaulting to 1000 [ 1870.001794][ T2609] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.029157][ T2609] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1870.051918][ T2609] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1870.068075][ T2615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.157463][ T5442] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1870.185807][ T2609] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.208304][ T2609] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1870.236250][ T2609] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1870.285626][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17760'. [ 1870.441466][ T2609] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.466832][ T2609] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1870.496454][ T2609] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1870.582050][ T5447] dvmrp8: entered allmulticast mode [ 1870.597415][ T5448] dvmrp0: left allmulticast mode [ 1870.617394][ T5448] dvmrp8: left allmulticast mode [ 1870.641648][ T5462] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1870.697448][ T2609] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.735254][ T2609] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1870.755318][ T2609] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1871.030386][ T5826] Bluetooth: hci1: command tx timeout [ 1871.297483][ T5491] netlink: 80 bytes leftover after parsing attributes in process `syz.4.17769'. [ 1872.545822][ T2609] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 1872.554485][ T2609] bridge4 (unregistering): left promiscuous mode [ 1872.717142][ T2609] bond14 (unregistering): (slave bridge7): Releasing backup interface [ 1872.784302][ T2609] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1872.798702][ T2609] bond0 (unregistering): Released all slaves [ 1872.820015][ T2609] bond1 (unregistering): Released all slaves [ 1872.842572][ T2609] bond2 (unregistering): Released all slaves [ 1872.864463][ T2609] bond3 (unregistering): Released all slaves [ 1872.900502][ T2609] bond4 (unregistering): Released all slaves [ 1872.922728][ T2609] bond5 (unregistering): Released all slaves [ 1872.945464][ T2609] bond6 (unregistering): Released all slaves [ 1872.972794][ T2609] bond7 (unregistering): Released all slaves [ 1872.994520][ T2609] bond8 (unregistering): Released all slaves [ 1873.018468][ T2609] bond9 (unregistering): Released all slaves [ 1873.042467][ T2609] bond10 (unregistering): Released all slaves [ 1873.067928][ T2609] bond11 (unregistering): Released all slaves [ 1873.092904][ T2609] bond12 (unregistering): Released all slaves [ 1873.112906][ T5826] Bluetooth: hci1: command tx timeout [ 1873.121766][ T2609] bond13 (unregistering): Released all slaves [ 1873.144348][ T2609] bond14 (unregistering): Released all slaves [ 1873.168944][ T2609] bond15 (unregistering): Released all slaves [ 1873.194123][ T2609] bond16 (unregistering): Released all slaves [ 1873.468751][ T2609] : left promiscuous mode [ 1873.564562][ T2609] tipc: Left network mode [ 1873.565215][ T5512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17774'. [ 1873.786382][ T5383] chnl_net:caif_netlink_parms(): no params data found [ 1874.011706][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17779'. [ 1874.350126][ T5548] netlink: 'syz.2.17780': attribute type 12 has an invalid length. [ 1874.620463][ T5383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.627741][ T5383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.659269][ T5383] bridge_slave_0: entered allmulticast mode [ 1874.697368][ T5383] bridge_slave_0: entered promiscuous mode [ 1874.722360][ T5383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.761035][ T5383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.781641][ T5383] bridge_slave_1: entered allmulticast mode [ 1874.806398][ T5383] bridge_slave_1: entered promiscuous mode [ 1874.878363][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17782'. [ 1875.082602][ T5568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17782'. [ 1875.189916][ T5826] Bluetooth: hci1: command tx timeout [ 1875.205078][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17782'. [ 1875.314973][ T5383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1875.431123][ T5383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1875.683187][ T5383] team0: Port device team_slave_0 added [ 1875.726848][ T5607] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17789'. [ 1875.765200][ T5383] team0: Port device team_slave_1 added [ 1876.137202][ T5383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1876.161161][ T5383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.269843][ T5383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1876.348515][ T5383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1876.366344][ T5383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.458778][ T5383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1876.797103][ T2609] hsr_slave_0: left promiscuous mode [ 1876.831469][ T2609] hsr_slave_1: left promiscuous mode [ 1876.856816][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17802'. [ 1876.872560][ T2609] veth1_macvtap: left promiscuous mode [ 1877.104683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803abe6c00: rx timeout, send abort [ 1877.279889][ T5826] Bluetooth: hci1: command tx timeout [ 1877.604832][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac86c00: rx timeout, send abort [ 1877.613616][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803abe6c00: abort rx timeout. Force session deactivation [ 1877.778906][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17804'. [ 1877.850030][ T2609] smc: removing net device team0 with user defined pnetid SYZ2 [ 1877.922931][ T5383] hsr_slave_0: entered promiscuous mode [ 1877.940854][ T5383] hsr_slave_1: entered promiscuous mode [ 1877.947387][ T5383] debugfs: 'hsr0' already exists in 'hsr' [ 1877.961421][ T5383] Cannot create hsr debugfs directory [ 1877.993681][ T5674] netlink: 'syz.3.17805': attribute type 5 has an invalid length. [ 1878.113472][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805ac86c00: abort rx timeout. Force session deactivation [ 1878.153959][T21181] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1878.189987][T21181] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1878.217665][T21181] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1878.276574][T21181] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1878.423014][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17808'. [ 1878.767163][ T2609] IPVS: stop unused estimator thread 0... [ 1878.948448][ T5711] netlink: 'syz.1.17816': attribute type 1 has an invalid length. [ 1879.026217][ T5713] netlink: 'syz.1.17816': attribute type 1 has an invalid length. [ 1879.170504][ T5710] syzkaller0: entered promiscuous mode [ 1879.182383][ T5710] syzkaller0: entered allmulticast mode [ 1879.424258][ T5736] x_tables: duplicate entry at hook 2 [ 1879.634396][ T5740] netlink: 'syz.2.17822': attribute type 1 has an invalid length. [ 1879.717466][ T5749] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1879.775165][ T5740] bond1: entered promiscuous mode [ 1879.780778][ T5740] bond1: entered allmulticast mode [ 1879.786346][ T5740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1879.862060][ T5748] erspan1: entered allmulticast mode [ 1879.938604][ T5748] bond1: (slave erspan1): making interface the new active one [ 1879.958017][ T5748] erspan1: entered promiscuous mode [ 1879.975456][ T5748] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1880.118787][ T5383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1880.182885][ T5383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1880.232681][ T5383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1880.289619][ T5383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1880.455054][ T5788] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17831'. [ 1880.512815][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17831'. [ 1880.540775][T20965] IPVS: starting estimator thread 0... [ 1880.557046][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17833'. [ 1880.657940][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17833'. [ 1880.667885][ T5792] IPVS: using max 30 ests per chain, 72000 per kthread [ 1880.927807][ T5383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1881.054476][ T5820] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1881.141725][ T5383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1881.202304][ T2609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.209603][ T2609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1881.318553][ T2615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.325802][ T2615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1881.466021][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17839'. [ 1881.692045][ T5854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17844'. [ 1882.092787][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17850'. [ 1882.102624][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17850'. [ 1882.210756][ T5885] netlink: 'syz.2.17853': attribute type 1 has an invalid length. [ 1882.457553][ T5383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1882.498009][ T5894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1882.524487][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17856'. [ 1882.536685][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17855'. [ 1882.703590][ T5383] veth0_vlan: entered promiscuous mode [ 1882.745223][ T5383] veth1_vlan: entered promiscuous mode [ 1882.878009][ T5383] veth0_macvtap: entered promiscuous mode [ 1882.917746][ T5383] veth1_macvtap: entered promiscuous mode [ 1882.975153][ T5383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1883.017805][ T5383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1883.071362][ T2624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.090645][ T2624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.135138][ T2624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.160824][ T2624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.251391][ T5925] netlink: 'syz.1.17861': attribute type 1 has an invalid length. [ 1883.470529][ T5925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1883.577814][ T5928] bond7: (slave geneve3): making interface the new active one [ 1883.611300][ T5928] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1883.717833][ T5984] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1883.762740][ T5984] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1883.817618][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1883.849883][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1883.877532][ T2624] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1883.914636][ T2624] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1884.033495][ T5947] ip6gre1: entered promiscuous mode [ 1884.148849][T21187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.176971][T21187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.463607][ T5976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1884.605846][ T5989] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1885.084637][ T6022] xt_hashlimit: overflow, try lower: 3/0 [ 1885.223081][ T6027] pimreg: entered allmulticast mode [ 1885.588403][ T6040] syzkaller0: entered promiscuous mode [ 1885.630159][ T6040] syzkaller0: entered allmulticast mode [ 1885.660296][ T6040] __nla_validate_parse: 9 callbacks suppressed [ 1885.660316][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17890'. [ 1885.700303][ T6040] bridge_slave_1: left allmulticast mode [ 1885.729802][ T6040] bridge_slave_1: left promiscuous mode [ 1885.757691][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1885.802654][ T6053] x_tables: duplicate underflow at hook 3 [ 1885.841264][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17894'. [ 1885.873117][ T6040] bridge_slave_0: left allmulticast mode [ 1885.879103][ T6040] bridge_slave_0: left promiscuous mode [ 1885.911916][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1885.947887][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17896'. [ 1886.167775][ T6074] vlan1: entered allmulticast mode [ 1886.605998][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17907'. [ 1886.752835][ T6096] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1886.773140][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17907'. [ 1886.784841][ T6096] bond8 (unregistering): Released all slaves [ 1886.950337][ T5140] block nbd4: Possible stuck request ffff888058f42200: control (read@0,1024B). Runtime 300 seconds [ 1886.961831][ T5140] block nbd4: Possible stuck request ffff888058f42400: control (read@1024,1024B). Runtime 300 seconds [ 1886.973041][ T5140] block nbd4: Possible stuck request ffff888058f42600: control (read@2048,1024B). Runtime 300 seconds [ 1886.985626][ T5140] block nbd4: Possible stuck request ffff888058f42800: control (read@3072,1024B). Runtime 300 seconds [ 1887.093403][ T6110] netlink: 'syz.4.17910': attribute type 1 has an invalid length. [ 1887.225581][ T6110] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1887.321440][ T6117] bond6: (slave gretap1): making interface the new active one [ 1887.343706][ T6117] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1887.381333][ T6123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1887.621887][ T6130] veth0: entered promiscuous mode [ 1887.650705][ T6129] veth0: left promiscuous mode [ 1887.795801][ T6136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1887.836039][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17921'. [ 1888.205788][ T6159] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1888.590502][ T6183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17935'. [ 1888.665174][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17938'. [ 1888.695867][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17936'. [ 1888.805950][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.884858][ T6187] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1888.973136][ T6200] syzkaller0: entered promiscuous mode [ 1888.978803][ T6200] syzkaller0: entered allmulticast mode [ 1891.086465][ T6216] tipc: Started in network mode [ 1891.094929][ T6216] tipc: Node identity 52f616487bff, cluster identity 4711 [ 1891.103172][ T6216] tipc: Enabled bearer , priority 0 [ 1891.209000][ T6216] tipc: Disabling bearer [ 1891.437451][ T6250] IPv6: sit1: Disabled Multicast RS [ 1891.469970][ T6254] nbd: must specify a size in bytes for the device [ 1891.515601][ T6260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1891.600603][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17957'. [ 1891.616839][ T6260] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1891.972415][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17965'. [ 1892.047316][ T6289] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1892.302549][ T6296] netlink: 576 bytes leftover after parsing attributes in process `syz.0.17966'. [ 1892.329110][ T6297] netlink: 576 bytes leftover after parsing attributes in process `syz.0.17966'. [ 1892.423077][ T6310] macvtap1: entered promiscuous mode [ 1892.429059][ T6310] macvtap1: entered allmulticast mode [ 1892.451716][ T6310] veth1_vlan: entered allmulticast mode [ 1892.494928][ T6311] macvtap2: entered promiscuous mode [ 1892.509091][ T6311] macvtap2: entered allmulticast mode [ 1892.555968][ T6310] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 1892.697179][ T6327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17974'. [ 1892.724435][ T6331] netlink: 'syz.3.17976': attribute type 24 has an invalid length. [ 1892.808031][ T6333] netlink: 9 bytes leftover after parsing attributes in process `syz.2.17977'. [ 1892.820993][ T6333] 0·: renamed from hsr_slave_1 (while UP) [ 1892.831848][ T6333] 0·: entered allmulticast mode [ 1892.837157][ T6333] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1892.884353][ T6334] bond0: (slave gre0): Error: Device type is different from other slaves [ 1892.916941][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17980'. [ 1893.261695][ T6364] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17985'. [ 1893.814889][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17996'. [ 1893.837621][ T6406] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.17997'. [ 1894.011544][ T6419] delete_channel: no stack [ 1894.091910][ T6425] netlink: 'syz.1.18003': attribute type 13 has an invalid length. [ 1894.092778][ T6427] netlink: 'syz.1.18003': attribute type 13 has an invalid length. [ 1894.135993][ T6425] syz_tun: refused to change device tx_queue_len [ 1894.144424][ T6429] netlink: 'syz.2.18004': attribute type 6 has an invalid length. [ 1894.156210][ T6427] syz_tun: refused to change device tx_queue_len [ 1894.488883][ T6456] netlink: 'syz.1.18014': attribute type 1 has an invalid length. [ 1894.504672][ T6459] netlink: 'syz.1.18014': attribute type 1 has an invalid length. [ 1895.386601][ T6508] wg1 speed is unknown, defaulting to 1000 [ 1895.401697][ T6508] ip6_vti0 speed is unknown, defaulting to 1000 [ 1895.415132][ T6514] netlink: 'syz.3.18029': attribute type 1 has an invalid length. [ 1895.808355][ T6508] lo speed is unknown, defaulting to 1000 [ 1896.134958][ T6539] tipc: Enabled bearer , priority 0 [ 1896.144407][ T6541] syzkaller0: entered promiscuous mode [ 1896.170311][ T6541] syzkaller0: entered allmulticast mode [ 1896.220002][ T6550] netlink: 'syz.4.18038': attribute type 3 has an invalid length. [ 1896.231775][ T6544] netlink: 'syz.2.18039': attribute type 1 has an invalid length. [ 1896.342810][ T6539] tipc: Resetting bearer [ 1896.422902][ T6539] tipc: Disabling bearer [ 1896.989761][ T6587] vcan0: tx address claim with dlc 1 [ 1897.022465][ T6588] __nla_validate_parse: 14 callbacks suppressed [ 1897.022484][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18049'. [ 1897.069336][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18049'. [ 1897.091375][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18049'. [ 1897.528166][ T6613] netlink: 276 bytes leftover after parsing attributes in process `syz.2.18051'. [ 1897.553404][ T6614] netlink: 92 bytes leftover after parsing attributes in process `syz.2.18051'. [ 1897.601046][ T6603] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1897.637024][ T6599] syzkaller1: entered promiscuous mode [ 1897.649688][ T6599] syzkaller1: entered allmulticast mode [ 1897.778995][ T6619] netlink: 'syz.1.18053': attribute type 1 has an invalid length. [ 1897.864920][ T6619] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1897.957667][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18054'. [ 1898.047036][ T6630] x_tables: unsorted underflow at hook 1 [ 1898.370409][ T6642] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1898.407216][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18063'. [ 1898.553032][ T6650] tipc: Enabling of bearer rejected, failed to enable media [ 1898.860937][ T6668] syzkaller0: entered promiscuous mode [ 1898.877375][ T6668] syzkaller0: entered allmulticast mode [ 1898.972452][ T6672] tipc: Enabled bearer , priority 0 [ 1899.015335][ T6668] tipc: Resetting bearer [ 1899.035536][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.044439][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.170300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.179025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.223155][ T6667] tipc: Resetting bearer [ 1899.264549][ T6667] tipc: Disabling bearer [ 1899.356455][ T6691] xt_hashlimit: overflow, try lower: 3/0 [ 1899.364471][ T6691] netlink: 'syz.3.18078': attribute type 10 has an invalid length. [ 1899.406895][ T6691] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1899.539283][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18080'. [ 1899.630736][ T6704] bridge0: port 3(syz_tun) entered blocking state [ 1899.637318][ T6704] bridge0: port 3(syz_tun) entered disabled state [ 1899.659116][ T6704] syz_tun: entered allmulticast mode [ 1899.720689][ T6704] syz_tun: entered promiscuous mode [ 1899.891421][ T6706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1899.897406][ T6706] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1900.030317][ T6706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1900.036285][ T6706] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1900.183608][ T6739] sctp: [Deprecated]: syz.3.18089 (pid 6739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1900.183608][ T6739] Use struct sctp_sack_info instead [ 1900.264381][ T6706] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1900.302938][ T6706] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1900.578775][ T6706] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1900.586297][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18095'. [ 1900.619102][ T6706] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1900.743367][ T6706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1900.762527][ T6706] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1900.813413][ T6706] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1900.825379][ T6706] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1900.833930][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.1.18083 Not tainted syzkaller #0 PREEMPT(full) [ 1900.843368][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1900.853457][ T6706] RIP: 0010:klist_remove+0x156/0x340 [ 1900.858807][ T6706] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 3d e2 98 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1e e2 98 f6 49 8b 44 24 58 48 89 44 24 08 [ 1900.878629][ T6706] RSP: 0018:ffffc90004b97820 EFLAGS: 00010202 [ 1900.884834][ T6706] RAX: 000000000000000b RBX: ffff88807d593c80 RCX: 0000000000000000 [ 1900.892837][ T6706] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1900.900996][ T6706] RBP: ffffc90004b97920 R08: ffffffff8ff713e3 R09: 1ffffffff1fee27c [ 1900.908986][ T6706] R10: dffffc0000000000 R11: fffffbfff1fee27d R12: 0000000000000000 [ 1900.917072][ T6706] R13: 1ffff1100b33090c R14: ffff888059984860 R15: dffffc0000000000 [ 1900.925322][ T6706] FS: 00007f5870ab76c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1900.934267][ T6706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1900.940864][ T6706] CR2: 000000110c30fe8d CR3: 000000006e084000 CR4: 00000000003526f0 [ 1900.948864][ T6706] Call Trace: [ 1900.952164][ T6706] [ 1900.955114][ T6706] ? __pfx_klist_remove+0x10/0x10 [ 1900.960166][ T6706] ? kobject_move+0x5de/0x720 [ 1900.964875][ T6706] ? __pfx_kobject_move+0x10/0x10 [ 1900.970033][ T6706] ? do_raw_spin_unlock+0xf5/0x210 [ 1900.975363][ T6706] ? get_device_parent+0x366/0x3a0 [ 1900.980496][ T6706] device_move+0x193/0x730 [ 1900.984938][ T6706] hci_conn_del_sysfs+0xb8/0x1a0 [ 1900.989908][ T6706] hci_conn_del+0xc36/0x1230 [ 1900.994526][ T6706] hci_conn_hash_flush+0x191/0x260 [ 1900.999664][ T6706] hci_dev_close_sync+0x821/0x10e0 [ 1901.004809][ T6706] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1901.010375][ T6706] ? do_raw_spin_lock+0x12b/0x2f0 [ 1901.015434][ T6706] hci_dev_do_close+0x30/0xc0 [ 1901.020129][ T6706] hci_rfkill_set_block+0x1f4/0x290 [ 1901.025359][ T6706] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 1901.031113][ T6706] rfkill_set_block+0x1d2/0x440 [ 1901.035996][ T6706] rfkill_fop_write+0x461/0x5a0 [ 1901.040870][ T6706] ? apparmor_file_permission+0x17f/0x1f0 [ 1901.046612][ T6706] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1901.052017][ T6706] ? security_kernfs_init_security+0x220/0x270 [ 1901.058204][ T6706] ? rw_verify_area+0x255/0x4d0 [ 1901.063106][ T6706] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1901.068620][ T6706] vfs_write+0x29a/0xb90 [ 1901.072898][ T6706] ? __pfx_vfs_write+0x10/0x10 [ 1901.077687][ T6706] ? __fget_files+0x2a/0x420 [ 1901.082307][ T6706] ? __fget_files+0x2a/0x420 [ 1901.086915][ T6706] ? __fget_files+0x3a0/0x420 [ 1901.091622][ T6706] ? __fget_files+0x2a/0x420 [ 1901.096234][ T6706] ksys_write+0x150/0x270 [ 1901.100590][ T6706] ? __pfx_ksys_write+0x10/0x10 [ 1901.105636][ T6706] do_syscall_64+0x14d/0xf80 [ 1901.110286][ T6706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.116384][ T6706] ? trace_irq_disable+0x37/0x100 [ 1901.121433][ T6706] ? clear_bhb_loop+0x40/0x90 [ 1901.126142][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.132214][ T6706] RIP: 0033:0x7f586fb9c629 [ 1901.136735][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.156361][ T6706] RSP: 002b:00007f5870ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1901.164803][ T6706] RAX: ffffffffffffffda RBX: 00007f586fe15fa0 RCX: 00007f586fb9c629 [ 1901.172800][ T6706] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1901.180788][ T6706] RBP: 00007f586fc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1901.188785][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1901.196782][ T6706] R13: 00007f586fe16038 R14: 00007f586fe15fa0 R15: 00007fff898af0c8 [ 1901.204785][ T6706] [ 1901.207829][ T6706] Modules linked in: [ 1901.215444][ T6706] ---[ end trace 0000000000000000 ]--- [ 1901.257576][ T6706] RIP: 0010:klist_remove+0x156/0x340 [ 1901.263209][ T6706] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 3d e2 98 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1e e2 98 f6 49 8b 44 24 58 48 89 44 24 08 [ 1901.303470][ T6706] RSP: 0018:ffffc90004b97820 EFLAGS: 00010202 [ 1901.310000][ T6706] RAX: 000000000000000b RBX: ffff88807d593c80 RCX: 0000000000000000 [ 1901.318236][ T6706] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1901.327882][ T6706] RBP: ffffc90004b97920 R08: ffffffff8ff713e3 R09: 1ffffffff1fee27c [ 1901.336493][ T6706] R10: dffffc0000000000 R11: fffffbfff1fee27d R12: 0000000000000000 [ 1901.345892][ T6706] R13: 1ffff1100b33090c R14: ffff888059984860 R15: dffffc0000000000 [ 1901.355608][ T6706] FS: 00007f5870ab76c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1901.366354][ T6706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1901.373577][ T6706] CR2: 00007f0329f87500 CR3: 000000006e084000 CR4: 00000000003526f0 [ 1901.382291][ T6706] Kernel panic - not syncing: Fatal exception [ 1901.388990][ T6706] Kernel Offset: disabled [ 1901.393323][ T6706] Rebooting in 86400 seconds..