last executing test programs: 6.571448703s ago: executing program 4 (id=7002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="8400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @local}, &(0x7f00000005c0)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000600)=0x4, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xdb, 0x9, {{0x3d, 0x4, 0x0, 0x2, 0xf4, 0x66, 0x0, 0x6b, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x45, 0x1, [{0x1, 0xf, "3c643e864056e674b90873366c"}, {0x1, 0x8, "da69a5b2c69f"}, {0x7, 0x2}, {0x5, 0x7, "debb7e214e"}, {0x5, 0x10, "a1b3c2ccb2cc8fc707fdead7f94c"}, {0x4004d1943dda7608, 0xf, "a0eecc69aef3ecf7dc6686fc0f"}]}, @timestamp_prespec={0x44, 0xc, 0xa8, 0x3, 0x0, [{@loopback, 0x7f}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0x92, 0x1, 0x6, [{@broadcast, 0x3}, {@empty, 0x9}, {@empty, 0x1}, {@remote, 0x3}, {@broadcast, 0x10000}, {@multicast1, 0xd4}, {@local}, {@multicast1, 0x9}, {@multicast2, 0x800}]}, @timestamp_prespec={0x44, 0x3c, 0x6e, 0x3, 0xb, [{@empty, 0xfffeffff}, {@broadcast, 0x3}, {@rand_addr=0x64010100}, {@local, 0xfffffff8}, {@private=0xa010102, 0x2}, {@empty, 0xf3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xc0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44094}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a3c000000120a010200000000000000000200000009000200737905000000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x44884}, 0x0) 5.146679633s ago: executing program 4 (id=7014): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x1, 0x3, 0x207, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x20040017) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0xf) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001b80)={0x0, @remote, @multicast2}, &(0x7f0000001bc0)=0xc) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x4) close(r7) (async) close(r7) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) socket$inet6_tcp(0xa, 0x1, 0x0) 3.962362096s ago: executing program 4 (id=7019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2000) gettid() r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x44}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r10) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="000015e7b7d7000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) socket$inet(0x2, 0x2, 0x0) 3.183545473s ago: executing program 0 (id=7029): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffdfb, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20048000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x26) (async) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2040, 0x0) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000300)='@', 0x1}], 0x1, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x7fff, 0xb20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) 3.132582702s ago: executing program 2 (id=7030): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, @link_local}]}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000630000000000000040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x84, r3, 0x11, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000800}, 0x17) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) r5 = socket$inet6(0xa, 0x3, 0x84) (async) r6 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r6}, {0xfffffffffffffffd, 0x15000000000000, 0x4, 0x1ff, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x7fffffff, 0x1, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c19, 0x10000}}, 0xe8) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x671, 0x0, 0x20}, {0xc00000, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xe8) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x6be2d36d33b90382) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r11, 0x1, 0x10, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000180), 0x2ae, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r10, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0xfffffdde, 0xb, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe701}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200040c8}, 0x8014) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x9, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, {[@ssrr={0x89, 0xb, 0xbe, [@private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x1c, 0x76, 0x1, 0xb, [{@multicast1, 0x3}, {@multicast1, 0x26ab}, {@empty, 0x6}]}, @end]}}}}}) (rerun: 32) 2.968015616s ago: executing program 4 (id=7031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 2.843746504s ago: executing program 2 (id=7033): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4044001}, 0x1) 2.635837606s ago: executing program 2 (id=7034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x4, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x6, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x1, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x4, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0x9, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0x4, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x4, 0xb3000, 0xf, 0x7, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0xb, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x85cb, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x800002, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffe, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x149002, 0x0) close(r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r10 = accept4(r9, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000080)=[{&(0x7f00000019c0)="879fd24e10df", 0x6}], 0x1, 0x9) splice(r11, 0x0, r10, 0x0, 0x8000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x27}, 0x62) listen(r13, 0x0) r14 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(r14, &(0x7f0000000000)={0x27}, 0x74) socket$inet6_tcp(0xa, 0x1, 0x0) 2.611768897s ago: executing program 4 (id=7035): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x1c, &(0x7f0000001000), &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @multicast1}, &(0x7f0000000140)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xacee, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x7, 0x1, 0xf, 0x9, 0x3, 0x40, 0x1}, @map_fd={0x18, 0x4}, @generic={0x5, 0x2, 0x3, 0x21, 0x7f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x1, 0x2, 0xa, 0x7, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0x5, 0xf}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x3, 0x2, 0xd}, {0x5, 0x4, 0xe, 0x3}, {0x1, 0x1, 0x7, 0x9}, {0x0, 0x1, 0x0, 0x2}, {0x1, 0x3, 0x3, 0x4}, {0x1, 0x3, 0xa, 0x4}], 0x10, 0x10001}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=@deltfilter={0x1b9c, 0x2d, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x8}, {0x1, 0x2}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x80}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x61c1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1b00, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1230, 0x1, [@m_nat={0x107c, 0xa, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xc81, 0x3, 0xffffffff, 0x97ef}, @local, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x0, 0x5, 0x40}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x70, 0x6, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x37, 0x6, "bfd4c2551b7c3aa420aed7e86f4c282dec5b8d984c9cdc7c61eabd1b9ce143f29eec834fb97e075d9977a8669b50a324a49f08"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x8c, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffff80}]}, {0x46, 0x6, "228b3ba3dba13b0ca8cfc7ebeaffb081e663109b288e32beff6128af04d7dcf18a8d638786b9f3c7e2acb264666f37dcb5f2334541b5bad32cae3d7cdf9a55bd252f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xb4, 0x16, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x38, 0x8, 0x5, 0x813}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffff, 0x5, 0x5, 0x7, 0x4}}]}, {0x4e, 0x6, "613c84d556e53a7807245fa9016119a79a9ce04b607e2ef7f2e563f84bf26873a4776f7b69b6522e18fe9b7c3e61a90c6510ff179b336e01ffeaa05734131df54452c65269fcc3daca68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x888, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffff42ed}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0xd43c, 0x6c, 0x8000, 0x3, 0xfffff8e5, 0x80000001, 0xa20a88c, 0x7, 0x7f2d, 0x8, 0x9, 0x3, 0x81, 0x8, 0xffffffff, 0x3, 0xfffffffb, 0x0, 0x4, 0x5f, 0x5, 0x4, 0x7, 0x0, 0x8, 0x6, 0x0, 0x7, 0xc, 0xa, 0x37d, 0x0, 0x5, 0x40, 0x1ff, 0x1, 0x3, 0x2, 0x4, 0x6, 0x5, 0xe, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbb, 0x40, 0x1, 0xa, 0x8001, 0x10000, 0x3, 0x2, 0x8001, 0xb, 0xb, 0xd08, 0x8, 0x3, 0x3, 0x941a, 0x1ff, 0x7fff, 0xfffffff8, 0x6, 0x4, 0x2, 0x65b0, 0x7, 0x7, 0x0, 0x800, 0x7, 0xf40, 0x9, 0x5, 0xdc28, 0xffffffff, 0xffffffff, 0x2, 0x0, 0x8, 0x400, 0x0, 0x0, 0x8, 0x4, 0x7, 0x4, 0x81, 0x4, 0x80, 0x401, 0x2, 0x7, 0x8, 0x356f2748, 0xce47, 0xff, 0x1, 0x99f, 0xe80, 0xc, 0x7, 0x5, 0x0, 0x2, 0x20, 0x8, 0x893, 0xffffff7f, 0xfffffff7, 0x4, 0x6, 0xc12, 0x81, 0x4, 0xe030, 0xd69, 0x1, 0x3, 0xfffffff7, 0x0, 0x7, 0x6, 0xd5, 0x3, 0x5, 0xe5, 0xfffffffe, 0x0, 0x9, 0x200, 0x37a3, 0x6, 0x8, 0x401, 0x578, 0x3, 0x2, 0x3, 0xc, 0x6, 0x6fb1, 0x808, 0x200, 0x1, 0x3, 0x3, 0x400, 0x1, 0x9, 0x0, 0x400, 0x4, 0x2, 0x4, 0x200, 0x32, 0x0, 0xa17, 0x9, 0x9b0, 0x0, 0xec, 0x9, 0x1, 0x80000000, 0x1, 0x80000000, 0x101, 0x1000, 0x1a0, 0x9, 0x3, 0x2, 0x83, 0x8, 0xa3, 0x2, 0x4, 0xa19, 0x4188, 0x2988, 0x9, 0x8, 0xcb2, 0x1f, 0x0, 0xfffffffe, 0x1, 0x7, 0x810, 0x8e0, 0x2, 0x975, 0x9, 0x10001, 0x5, 0x7, 0x2, 0x1c64, 0x2, 0x7fffffff, 0xc, 0x8, 0x8, 0xfffffffd, 0x8f95, 0xfffffff9, 0x0, 0x9, 0x9f, 0xf, 0xe76, 0xc2d2, 0x1, 0x7, 0x3, 0x9, 0x3, 0x3, 0x0, 0x6590, 0x7, 0x6, 0x5, 0xfffffffe, 0x8, 0x5, 0xfffffffe, 0x9, 0x8, 0x2, 0x0, 0x9, 0x5, 0x4, 0x80, 0x6, 0x40, 0x8, 0x4, 0x6, 0x6, 0xffffff01, 0x3, 0xd43, 0x9, 0x3, 0x2, 0x10001, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x287}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3ff, 0x5, 0x7, 0x6, 0x4, 0x9, 0x5, 0x80, 0x4, 0xe, 0x7, 0x1, 0xb0, 0x4e2b, 0x200, 0xfffffffd, 0x80000, 0x5, 0xfffffffb, 0x5, 0x4, 0xfffffffd, 0x9a3, 0x40, 0xfffffff3, 0x4, 0x80000001, 0x80000000, 0x80000000, 0x3, 0x6, 0x1, 0x80, 0x7, 0x1, 0x7, 0x0, 0x8, 0x401, 0x6, 0x3, 0x4, 0x4, 0x9, 0xff, 0x2, 0x23b, 0xfffffff2, 0x1000, 0xff, 0x10, 0xacf, 0x9, 0x1, 0x8, 0x7, 0x1, 0x6fa1, 0x3, 0x9fc, 0x7, 0x2, 0x6, 0x100, 0x9, 0xa6, 0xda2, 0x4, 0xe0e14f0, 0xfffffffe, 0xfffffffd, 0x0, 0x0, 0x40, 0xb2, 0x2, 0xc000, 0x8, 0x9, 0x3, 0x5, 0x1000000, 0x6, 0x3, 0x8, 0x8, 0x7fff, 0x401, 0x9, 0x10, 0x1, 0x3, 0xd3a4, 0x4, 0x4, 0x2, 0x1, 0x74, 0x8, 0x4, 0x7, 0xa, 0x100, 0x9ea5, 0x4, 0xfffffffc, 0xb84, 0x7, 0x1, 0x3, 0x1f, 0xf7e5, 0x40, 0x3ff, 0xf, 0x9, 0x100, 0x1000, 0x0, 0x7, 0x9, 0x5, 0x2, 0x6, 0x8, 0x2, 0xfffffffd, 0x3, 0xf14, 0x4, 0x7, 0x9, 0x2, 0x284, 0x8, 0x36c, 0xf, 0x800, 0x5d6e, 0x9, 0xfffffff8, 0x392, 0x8, 0xc015, 0xf, 0x5b, 0x6, 0x64, 0xe578, 0x8, 0x6, 0x100, 0x5, 0x9, 0x0, 0x6, 0x5, 0x800, 0x5, 0x2, 0x73, 0x7, 0x4, 0x10, 0x8001, 0x2a, 0xffffffff, 0x1ff, 0x895, 0x0, 0x1, 0xe4f, 0x6, 0x101, 0x3477, 0x5643, 0x400000, 0x5, 0x6, 0x4, 0x4, 0x101, 0xfffffe01, 0x3, 0x0, 0x8, 0x8, 0x0, 0x6, 0x4, 0x7, 0x4, 0x2, 0x5, 0xfffffffd, 0x2, 0x401, 0x5, 0x3, 0x9c5a, 0x2, 0x3, 0x4, 0x401, 0xf1, 0x100, 0x7d29, 0x0, 0x537e, 0xc, 0x100, 0x2, 0x1e, 0x8e, 0x3ff, 0x5, 0x8, 0x8000, 0x10, 0x9, 0x5, 0x0, 0x8, 0x68, 0x7f, 0x7, 0x800, 0x38, 0x7ff, 0x40, 0x101, 0x6, 0x6000000, 0x6, 0x3, 0xa1c7, 0x80000000, 0x3, 0x8, 0x0, 0x4, 0x4, 0x3, 0x7, 0x7, 0xa, 0x100, 0x401, 0x81, 0xfffffffc, 0x82, 0xa00, 0xfffffff8, 0x7, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x5, 0x9, 0x7, 0x4, {0x2, 0x1, 0x7, 0x8000, 0x4, 0x1}, {0xfc, 0x1, 0x38, 0x0, 0x5, 0x5}, 0x7fffffff, 0x0, 0x2}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xd}}, @TCA_BPF_FD={0x8, 0x6, r3}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x48d}]}, 0x1b9c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.584350529s ago: executing program 1 (id=7036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x7fc0000000000000, 0x1, 0x1ff9, 0x100000001, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'pim6reg1\x00'}) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6a53d2e37b2350c6737dba3aa1e66932b29b74c4f5584503e5e8e6c81cfd2009e3f51d80b6aaf866a85560a28dc97eb19f1b874b4e11369bfec049761237b35913acfce9e85e0af9eb014aa6b99903eb449879aa3a16919cd059e56282c70221a03d75d81bee28f16b2dfe79ad78cfa4cc493ab0ca50a7fd4ea8364dc5c6e36788f9d44b4c4ff2fb42b9e52dbeb5fc7fd6bfa49b5be245b42e73bca8e8fda8261badaaf15b3f1f886c151a909080ea4fa0f660fda385", 0xb6}], 0x1, &(0x7f0000000540)=[{0xb8, 0x88, 0xa1c, "8dea69423cf1bbfb6d6fbef8854c24177a6e451faec08dabc093290dbc62ed1f31a900ac9e0ad491f0f53cdcae22b9aa7621a29882c90341c11e702e378ba3d2c704ae990939438fcc6b1e348b55df487bd62261f535887c488d1d8a8be1826189405cf9b5d5a0ca14fda62ba2d444448d4d89416c61e5cae24ca21dc64988dd93c724ec82396e15402ab1a54adec3d073b7e62d018a5b0f9943572107262b4e9c97d7f6df"}], 0xb8}, 0x4040060) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.347524554s ago: executing program 2 (id=7037): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="d4"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000740)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r6, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xfffffff5}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x352}]}, 0x3c}}, 0x0) 2.140424459s ago: executing program 2 (id=7038): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'veth1_to_bridge\x00', {0x5}, 0xf5d}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2a, 0x3501}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0x88}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001f0000000004001300000000e6ff0000fd38ede867a7312dbaaed599a11a8c0bfa836ef8e8d7bfec49b24c795268aa48b611a064d9ffb49c65"], 0x14}], 0x1}, 0x18) 2.094461586s ago: executing program 0 (id=7039): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)='z]', 0x2}, {&(0x7f0000000700)="8566", 0x2}], 0x2}, 0x20040891) r2 = socket$packet(0x11, 0x3, 0x300) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x8, 0x3, 0x3, 0x882e, 0x8, 0x6, 0x4, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x3fc, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x20d5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x5, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffffe, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x1, 0x0, 0x8, 0x5, 0x8001, 0x4, 0x1, 0xfff, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x4, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0x200, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0xd06, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xa, 0x7, 0x6, 0x4, 0x7ff, 0xfe, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x8, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x6b2, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x80000000, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x2, 0xa, 0x6, 0x2, 0x6, 0x8, 0x8000048, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x1, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.583618961s ago: executing program 1 (id=7042): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x4, 'caif0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x16, &(0x7f0000000480)=[{&(0x7f0000000000)="b0", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x7}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x10000200, 0xb, 0x40, 0x9, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000300)=0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x8c, 0x65, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0xa}, {0xa, 0xfffb}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9f}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0x7}}, @TCA_FLOW_MODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x86c}, 0x20004804) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x2, 0x20000000, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f00000000c0)=0x23) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000011144b002800"/24], 0x18}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r11, 0xff, 0x1, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 1.231551484s ago: executing program 1 (id=7046): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x1, {0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4800081}}}, 0x80, 0x0}, 0x20048010) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.230322579s ago: executing program 0 (id=7047): r0 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2}}}}}}, 0x0) (rerun: 64) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0xfd, 0x0}}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @remote}], 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, 0x0, 0x0}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000200)={@private2, @mcast1}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="1229480c9fca45c285a9d32943f828155f873d617096a59ec846b5c03cfbb906e3afca8522b6378380955c1e272d07ae1857d76f0ad0437ece9a46e10c7a5c4918978733f5a63664fe42c541922990633df0a09e4df4dd6f76aec567cab2177eecaea80089577cffec509663d67d28e6"], 0x14}}, 0x0) (rerun: 32) 1.09989345s ago: executing program 3 (id=7048): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 1.085376923s ago: executing program 0 (id=7049): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/70, 0x8000, 0x1000, 0xfffffff7, 0x6}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/70, 0x8000, 0x1000, 0xfffffff7, 0x6}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 980.393886ms ago: executing program 4 (id=7050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000051a736e6d010000000024000180140001"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) unshare(0x2c020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x31, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0xf, 0x0, @opaque="927b93040d7bc9"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1}, 0x4) 979.250356ms ago: executing program 3 (id=7051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x2090, 0xffffffffffffffff, 0x3}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendto$unix(r1, &(0x7f00000000c0)="970e5fd7450e0b60add9bbb485d0456f08bbb6f20a50c9bfcc61026995e91c54474dbef8f0583276124472da3826a3", 0x2f, 0x40, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000)="8823a5586a", &(0x7f0000000100)=""/7}, 0x20) pipe(&(0x7f00000018c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r0}, &(0x7f0000001880), &(0x7f0000001900)=r3}, 0x20) 941.088286ms ago: executing program 0 (id=7052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0xfffffffffffffedd, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYRES8], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="1c1000000a08040228bd7000fbdbdf25000000010800e2", @ANYRES32, @ANYBLOB], 0x101c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r4, 0x0, 0x9}, 0x18) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) (async) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448df, &(0x7f0000000b40)) (async) preadv(r1, &(0x7f0000000040), 0x0, 0x5b3d2934, 0x7fffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd70003c02000002000000", @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="9614bea52557000309e6b41c79b4362536eee225912a8f4f0a0d7da4399d781359badf49fe9ffb55b8a90c28d138c2c7e6c83c5192b6518ad73189979785ada09e8fa61056b692f023cfd2e9efd13106134762186ff7afa4f905234313122e9b4704b33545dcf9772b4fadee39ff4378f8cda76ae03fb7213c1ec7ff0bee8725675f9a5dccbafdf2d0605350b526871253ef4f7635377f9d48e1b31f19", @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf253000000005e4eb0596003500010000000508230002000000050033099cd444769415440000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c084) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'virt_wifi0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}}) 907.075489ms ago: executing program 3 (id=7053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd29, 0x1, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x40}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) (async) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'w\x00'}, 0x8) r2 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181400, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040015}, 0xc0050) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x808, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000e0}, 0x44880) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r11 = socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x10, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) (async, rerun: 64) r14 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 757.005885ms ago: executing program 1 (id=7055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r3, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) socket(0x28, 0x5, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2001) (async) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000540012800b00010065727370616e000044000280060010004e230000040012000600030000f800000600180091d6000008000100", @ANYBLOB="04001200080005"], 0x7c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x11}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) connect$bt_rfcomm(r13, &(0x7f0000000240)={0x1f, @any, 0xff}, 0xa) (async) connect$bt_rfcomm(r13, &(0x7f0000000240)={0x1f, @any, 0xff}, 0xa) 727.737323ms ago: executing program 2 (id=7056): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r11, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 553.287293ms ago: executing program 0 (id=7057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000180)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r5, 0x0) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d8, 0x0) close(0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8800) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 544.889444ms ago: executing program 1 (id=7058): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "b4fb7e9010149344", "5cd36ea65cd78ea1ec4189fa6c88b619", "a69c21b5", "7294db67181e77fb"}, 0x28) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) 395.181336ms ago: executing program 3 (id=7059): r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x1) listen(r2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r2], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x68010) (async) bind$inet(r0, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_sfeatures={0x3b, 0x3, [{0x3, 0x80}, {0x8001, 0xc7b4}, {0xe, 0x4}]}}) 342.576541ms ago: executing program 1 (id=7060): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1d, 0x802, 0x7, &(0x7f0000004740)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000a0501f48b21f5e00000500000000000000"], 0x28}}, 0x4) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1d, 0x802, 0x7, &(0x7f0000004740)) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000a0501f48b21f5e00000500000000000000"], 0x28}}, 0x4) (async) 246.150002ms ago: executing program 3 (id=7061): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/176, 0xb0}], 0x4, &(0x7f00000003c0)=""/84, 0x54}, 0x665a}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/255, 0xff}, {&(0x7f0000000540)=""/231, 0xe7}], 0x2, &(0x7f0000000680)=""/229, 0xe5}, 0x5}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/105, 0x69}], 0x1, &(0x7f0000000840)=""/248, 0xf8}, 0x5}, {{&(0x7f0000000940)=@sco, 0x80, &(0x7f0000001e40)=[{&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/215, 0xd7}, {&(0x7f0000000b80)=""/152, 0x98}, {&(0x7f0000000c40)=""/176, 0xb0}, {&(0x7f0000000d00)=""/4096, 0xffffffffffffffef}, {&(0x7f0000001d00)=""/45, 0x2d}, {&(0x7f0000001d40)=""/57, 0x39}, {&(0x7f0000001d80)=""/166, 0xb6}], 0x8}, 0x3}, {{&(0x7f0000001ec0)=@vsock, 0x80, &(0x7f0000002180)=[{&(0x7f0000001f40)=""/4, 0x4}, {&(0x7f0000001f80)=""/240, 0xf0}, {&(0x7f0000002080)=""/197, 0xc5}], 0x3, &(0x7f00000021c0)=""/123, 0x7b}, 0x7}, {{&(0x7f0000002240)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000022c0)=""/95, 0x5f}, {&(0x7f0000002340)=""/91, 0x5b}, {&(0x7f00000023c0)=""/162, 0xa2}, {&(0x7f0000002480)=""/79, 0x4f}], 0x4, &(0x7f0000002540)=""/63, 0x3f}, 0x7}], 0x6, 0x20, &(0x7f0000002740)={r1, r2+60000000}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x5, 0xa) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x2, &(0x7f0000002700)=[{0x5, 0xff}, {0x5, 0x9, 0x1, 0x9}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 0s ago: executing program 3 (id=7062): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a010400000000000000000a0000050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028008000140000000090800034000000000080002400000008408000140000000000900020073797a32000000000900010073797a31000000001d0007"], 0xd4}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x1e}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffbfffb, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0xf4, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5da2}, @NFCTH_TUPLE={0xa0, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) kernel console output (not intermixed with test programs): llmulticast mode [ 846.932860][T28113] batadv0: entered promiscuous mode [ 847.076890][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 847.095720][T28131] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 847.213688][T28140] bridge0: entered promiscuous mode [ 847.225114][T28140] bridge0: port 3(macvtap1) entered blocking state [ 847.257549][T28140] bridge0: port 3(macvtap1) entered disabled state [ 847.264345][T28140] macvtap1: entered allmulticast mode [ 847.297193][T28140] bridge0: entered allmulticast mode [ 847.304837][T28140] macvtap1: left allmulticast mode [ 847.348569][T28140] bridge0: left allmulticast mode [ 847.369114][T28140] bridge0: left promiscuous mode [ 847.516323][T28160] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5676'. [ 847.641985][T28172] tipc: Resetting bearer [ 847.650440][T28172] netlink: 'syz.2.5681': attribute type 2 has an invalid length. [ 847.659083][T28172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5681'. [ 847.739776][T28175] C: renamed from lo (while UP) [ 847.755951][T28175] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 847.778270][T28177] netlink: 1728 bytes leftover after parsing attributes in process `syz.2.5683'. [ 847.949098][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5686'. [ 848.167788][T28196] netlink: 'syz.0.5689': attribute type 5 has an invalid length. [ 848.281631][T28204] netlink: 'syz.1.5690': attribute type 2 has an invalid length. [ 848.304047][T28204] netlink: 'syz.1.5690': attribute type 1 has an invalid length. [ 848.380925][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 848.393216][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 848.403334][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 848.417880][T28211] xt_bpf: check failed: parse error [ 848.418816][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 848.431738][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 848.487929][T28209] wg1 speed is unknown, defaulting to 1000 [ 848.528336][T28215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5693'. [ 848.590106][T28215] netlink: 'syz.0.5693': attribute type 30 has an invalid length. [ 848.665291][T14208] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.685173][T14208] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.707523][T14208] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.732982][T14208] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.834153][T28224] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.5695'. [ 848.899621][T28226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5696'. [ 848.950146][T28228] siw: device registration error -23 [ 849.140443][T28234] bridge0: entered promiscuous mode [ 849.149320][T28234] bridge0: port 1(macvtap1) entered blocking state [ 849.156285][T28234] bridge0: port 1(macvtap1) entered disabled state [ 849.163939][T28234] macvtap1: entered allmulticast mode [ 849.171945][T28234] bridge0: entered allmulticast mode [ 849.183660][T28234] macvtap1: left allmulticast mode [ 849.189299][T28234] bridge0: left allmulticast mode [ 849.198727][T28234] bridge0: left promiscuous mode [ 849.404102][T28245] batman_adv: batadv0: Adding interface: dummy0 [ 849.411086][T28245] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.438186][T28245] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 849.573354][T28209] chnl_net:caif_netlink_parms(): no params data found [ 849.624664][T28258] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 849.723630][T28209] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.749000][T28209] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.764977][T28209] bridge_slave_0: entered allmulticast mode [ 849.783096][T28209] bridge_slave_0: entered promiscuous mode [ 849.801825][T28209] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.810363][T28209] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.818869][T28209] bridge_slave_1: entered allmulticast mode [ 849.830385][T28209] bridge_slave_1: entered promiscuous mode [ 849.930809][T28209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.965049][T28209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.976303][T28282] tc_dump_action: action bad kind [ 850.044035][T28209] team0: Port device team_slave_0 added [ 850.053796][T28209] team0: Port device team_slave_1 added [ 850.105722][T28209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.113236][T28209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.148911][T28209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.163918][T28291] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5711'. [ 850.173893][T28291] netlink: 'syz.1.5711': attribute type 9 has an invalid length. [ 850.174787][T28209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.184013][T28291] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5711'. [ 850.189707][T28209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.189755][T28209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.241605][T28291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5711'. [ 850.265795][T28289] syzkaller0: entered promiscuous mode [ 850.272004][T28289] syzkaller0: entered allmulticast mode [ 850.288593][T28209] hsr_slave_0: entered promiscuous mode [ 850.295748][T28209] hsr_slave_1: entered promiscuous mode [ 850.303585][T28209] debugfs: 'hsr0' already exists in 'hsr' [ 850.309718][T28209] Cannot create hsr debugfs directory [ 850.518245][ T5833] Bluetooth: hci0: command tx timeout [ 850.652091][T28312] x_tables: duplicate underflow at hook 2 [ 850.847738][T28325] openvswitch: netlink: Flow key attr not present in new flow. [ 850.872576][T28322] openvswitch: netlink: Flow key attr not present in new flow. [ 851.241603][T28209] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 851.253000][T28209] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 851.263431][T28209] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 851.273849][T28209] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 851.342968][T28209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.363764][T28209] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.379058][T14208] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.386234][T14208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.401585][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.408999][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.590318][T28209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.634635][T28209] veth0_vlan: entered promiscuous mode [ 851.646198][T28209] veth1_vlan: entered promiscuous mode [ 851.675181][T28209] veth0_macvtap: entered promiscuous mode [ 851.685142][T28209] veth1_macvtap: entered promiscuous mode [ 851.703081][T28209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.720297][T28209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.734775][ T1005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.744922][ T1005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.754819][ T1005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.764811][ T1005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.828245][T12414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.836421][T12414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.858840][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.867979][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.599977][ T5833] Bluetooth: hci0: command tx timeout [ 854.677649][ T5833] Bluetooth: hci0: command tx timeout [ 856.757847][ T5833] Bluetooth: hci0: command tx timeout [ 864.358667][ T1005] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 870.120503][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 896.358544][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 928.358399][ T8735] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 931.560003][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 960.356706][ T8735] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 974.596727][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 992.357725][ T1005] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 993.000618][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1016.689336][T28364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.779074][T28374] netlink: 'syz.2.5726': attribute type 3 has an invalid length. [ 1016.817144][T28374] netlink: 'syz.2.5726': attribute type 16 has an invalid length. [ 1016.842360][T28374] __nla_validate_parse: 9 callbacks suppressed [ 1016.842386][T28374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5726'. [ 1016.843025][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5730'. [ 1016.927057][T28365] wg1 speed is unknown, defaulting to 1000 [ 1017.146507][T28388] wg1 speed is unknown, defaulting to 1000 [ 1017.272662][T28397] tipc: Enabled bearer , priority 0 [ 1017.289664][T28397] syzkaller0: entered promiscuous mode [ 1017.297794][T28397] syzkaller0: entered allmulticast mode [ 1017.359666][T28397] tipc: Resetting bearer [ 1017.383710][T28397] syzkaller0: tun_net_xmit 90 [ 1017.468577][T28396] tipc: Resetting bearer [ 1017.522374][T28396] tipc: Disabling bearer [ 1017.725301][T28410] netlink: 'syz.3.5737': attribute type 31 has an invalid length. [ 1017.761873][T28418] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1018.073719][T28431] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1018.108221][ T30] audit: type=1804 audit(1767465290.472:16): pid=28435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5740" name="/newroot/313/memory.events" dev="tmpfs" ino=1617 res=1 errno=0 [ 1018.192559][T28431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1018.824749][T28458] netlink: 408 bytes leftover after parsing attributes in process `syz.1.5749'. [ 1019.218016][T28474] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 1019.245276][T28476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5755'. [ 1019.247887][T28474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.264086][T28478] netlink: 'syz.0.5756': attribute type 4 has an invalid length. [ 1019.276289][T28479] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 1019.294964][T28479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.357256][T14208] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.377838][T14208] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.396163][T14208] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.408833][T14208] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.435156][T28487] netlink: 'syz.3.5758': attribute type 1 has an invalid length. [ 1019.472308][T28483] wg1 speed is unknown, defaulting to 1000 [ 1019.869514][T28492] wg1 speed is unknown, defaulting to 1000 [ 1019.947079][T28508] netlink: 'syz.1.5761': attribute type 13 has an invalid length. [ 1019.956130][T28508] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5761'. [ 1019.993620][T28508] syz_tun: refused to change device tx_queue_len [ 1020.019494][T28508] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1020.065320][T28493] wg1 speed is unknown, defaulting to 1000 [ 1020.076376][T28508] openvswitch: netlink: Multiple metadata blocks provided [ 1020.114142][T28508] netlink: 'syz.1.5761': attribute type 1 has an invalid length. [ 1020.533568][T28530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1020.551798][T28526] netlink: 'syz.4.5766': attribute type 13 has an invalid length. [ 1020.576937][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1020.936495][T28544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5771'. [ 1021.102561][T28546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1021.273389][T28556] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1021.398966][T28563] ip6erspan1: entered allmulticast mode [ 1021.617315][T28560] wg1 speed is unknown, defaulting to 1000 [ 1021.877847][T28584] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1022.445121][T28629] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1022.461028][T28629] __nla_validate_parse: 5 callbacks suppressed [ 1022.461047][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5790'. [ 1022.909244][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1022.987996][T28650] validate_nla: 6 callbacks suppressed [ 1022.988014][T28650] netlink: 'syz.1.5794': attribute type 6 has an invalid length. [ 1023.043854][T28654] netlink: 'syz.1.5794': attribute type 6 has an invalid length. [ 1023.093835][T28644] wg1 speed is unknown, defaulting to 1000 [ 1023.173665][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5794'. [ 1023.874206][T28683] netlink: 'syz.3.5802': attribute type 2 has an invalid length. [ 1024.085477][T28699] netlink: 'syz.0.5807': attribute type 15 has an invalid length. [ 1024.281032][T28716] netlink: 'syz.2.5808': attribute type 13 has an invalid length. [ 1024.297964][T28716] netlink: 'syz.2.5808': attribute type 17 has an invalid length. [ 1024.360917][ T8565] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1024.512985][T28716] tipc: Resetting bearer [ 1025.224574][T28752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1025.240215][T28752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1025.535213][T28764] netlink: 'syz.4.5824': attribute type 13 has an invalid length. [ 1025.568219][T28768] rdma_rxe: rxe_newlink: failed to add bond0 [ 1025.571876][T28764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5824'. [ 1025.648029][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1025.671846][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1025.685935][T28775] netlink: 'syz.4.5828': attribute type 1 has an invalid length. [ 1025.695746][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1025.706171][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1025.724341][T28771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1025.759997][T28775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1025.800119][T28784] bond1: entered allmulticast mode [ 1025.822443][T28775] veth9: entered promiscuous mode [ 1025.832634][T28775] bond1: (slave veth9): Enslaving as an active interface with a down link [ 1026.090981][T28797] Cannot find del_set index 4 as target [ 1026.327705][T28815] syzkaller0: entered promiscuous mode [ 1026.333273][T28815] syzkaller0: entered allmulticast mode [ 1026.355995][T28803] pim6reg: entered allmulticast mode [ 1026.491833][T28826] netlink: 'syz.4.5838': attribute type 1 has an invalid length. [ 1026.501208][T28826] netlink: 'syz.4.5838': attribute type 2 has an invalid length. [ 1026.519507][T28817] pim6reg: left allmulticast mode [ 1027.072727][T28854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1027.119496][T28867] IPVS: Scheduler module ip_vs_sip not found [ 1027.133637][T28871] IPVS: length: 8 != 289548905264 [ 1027.230912][T28878] tipc: Started in network mode [ 1027.245669][T28878] tipc: Node identity , cluster identity 4711 [ 1027.259697][T28878] tipc: Failed to set node id, please configure manually [ 1027.281984][T28878] tipc: Enabling of bearer rejected, failed to enable media [ 1027.410685][T28890] wg1 speed is unknown, defaulting to 1000 [ 1027.423579][T28885] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 1027.471883][T28894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.475705][T28892] openvswitch: netlink: IP tunnel dst address not specified [ 1027.493786][T28892] __nla_validate_parse: 32 callbacks suppressed [ 1027.493807][T28892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1028.079463][T28897] tipc: Trying to set illegal importance in message [ 1028.105243][T28929] syzkaller0: entered promiscuous mode [ 1028.111719][T28929] syzkaller0: entered allmulticast mode [ 1028.590008][T28945] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1028.795739][T28630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.806332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.824887][T28960] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5880'. [ 1028.852741][T28962] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1028.937788][T28967] geneve3: entered promiscuous mode [ 1028.943834][T28967] geneve3: entered allmulticast mode [ 1028.962983][T28971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1029.044989][T28969] wg1 speed is unknown, defaulting to 1000 [ 1029.488033][ T8850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.799387][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.808343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.854653][T29006] wg1 speed is unknown, defaulting to 1000 [ 1029.944337][T29008] wg1 speed is unknown, defaulting to 1000 [ 1030.029542][T28356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1030.040021][T28356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1030.053386][T28356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1030.064723][T28356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1030.072757][T28356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1030.447507][T29011] wg1 speed is unknown, defaulting to 1000 [ 1030.633596][T29028] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5896'. [ 1030.759502][T29038] validate_nla: 8 callbacks suppressed [ 1030.759521][T29038] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 1030.820392][T29040] bond10: (slave bridge6): making interface the new active one [ 1030.829092][T29040] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 1030.838719][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.847948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.864863][T29032] delete_channel: no stack [ 1031.412287][T29072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5907'. [ 1031.422577][T29072] netlink: 'syz.1.5907': attribute type 1 has an invalid length. [ 1031.629760][T29081] vlan0: entered allmulticast mode [ 1031.676421][T29083] bridge7: entered promiscuous mode [ 1031.682045][T29083] bridge7: entered allmulticast mode [ 1032.117014][ T5833] Bluetooth: hci3: command tx timeout [ 1032.528173][ T107] net_ratelimit: 2 callbacks suppressed [ 1032.528193][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.763100][T29011] chnl_net:caif_netlink_parms(): no params data found [ 1032.850585][T29116] tipc: Started in network mode [ 1032.855794][T29116] tipc: Node identity 4246, cluster identity 4711 [ 1032.863470][T29116] tipc: Node number set to 16966 [ 1032.872479][T29116] netlink: 'syz.3.5918': attribute type 9 has an invalid length. [ 1032.885610][T29116] netlink: 'syz.3.5918': attribute type 6 has an invalid length. [ 1032.918571][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.927436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.092362][T29011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.100203][T29011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.108127][T29011] bridge_slave_0: entered allmulticast mode [ 1033.123521][T29011] bridge_slave_0: entered promiscuous mode [ 1033.144362][T29011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.158704][T29011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.174304][T29011] bridge_slave_1: entered allmulticast mode [ 1033.182367][T29011] bridge_slave_1: entered promiscuous mode [ 1033.323097][T29011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.335905][T29011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.347370][T29141] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1033.356274][T29141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1033.385584][T29141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1033.439222][T29143] batadv_slave_0: entered allmulticast mode [ 1033.447737][T29011] team0: Port device team_slave_0 added [ 1033.453554][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 1033.466304][T29011] team0: Port device team_slave_1 added [ 1033.544663][T29011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.565946][T29011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.598246][T29011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.611943][T18139] IPVS: starting estimator thread 0... [ 1033.631793][T29011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.640128][T29011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.693586][T29011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.709942][T29156] wg1 speed is unknown, defaulting to 1000 [ 1033.737870][T29160] IPVS: using max 53 ests per chain, 127200 per kthread [ 1033.860417][T29011] hsr_slave_0: entered promiscuous mode [ 1033.867446][T29011] hsr_slave_1: entered promiscuous mode [ 1033.873982][T29011] debugfs: 'hsr0' already exists in 'hsr' [ 1033.881575][T29011] Cannot create hsr debugfs directory [ 1033.887381][T29166] wg1 speed is unknown, defaulting to 1000 [ 1033.959605][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.968490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.010455][T29167] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1034.022016][T29167] bond1 (unregistering): Released all slaves [ 1034.196991][ T5833] Bluetooth: hci3: command tx timeout [ 1034.299811][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1034.325108][T29178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1034.396232][T29178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1034.405955][T29178] netlink: 'syz.1.5933': attribute type 7 has an invalid length. [ 1034.413951][T29178] netlink: 'syz.1.5933': attribute type 8 has an invalid length. [ 1034.422830][T29178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1034.491470][T29178] team0: entered promiscuous mode [ 1034.502042][T29178] bridge0: entered promiscuous mode [ 1034.511794][T29178] team0: left promiscuous mode [ 1034.529934][T29178] bridge0: left promiscuous mode [ 1034.996816][T28630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.005137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.073629][T29205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1035.098532][T29011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1035.208287][T29011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1035.242169][T29205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1035.286656][T29204] geneve2: entered promiscuous mode [ 1035.292093][T29204] geneve2: entered allmulticast mode [ 1035.324239][T29011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1035.349206][T29011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1035.557250][ T8850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.709593][T29011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.740436][T29011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.765586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.772794][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.811322][T29239] openvswitch: netlink: VXLAN extension 50 out of range max 1 [ 1035.830181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.837383][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.039194][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.258412][T29260] wg1 speed is unknown, defaulting to 1000 [ 1036.276950][ T5833] Bluetooth: hci3: command tx timeout [ 1036.344944][T29266] wg1 speed is unknown, defaulting to 1000 [ 1036.434226][T29011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.497109][T29275] syzkaller0: entered promiscuous mode [ 1036.503828][T29275] syzkaller0: entered allmulticast mode [ 1036.569541][T29011] veth0_vlan: entered promiscuous mode [ 1036.584000][T29011] veth1_vlan: entered promiscuous mode [ 1036.630829][T29011] veth0_macvtap: entered promiscuous mode [ 1036.653745][T29011] veth1_macvtap: entered promiscuous mode [ 1036.720047][T29011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.737354][T29011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.777904][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.793443][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.830300][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.842217][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.065700][T29289] wg1 speed is unknown, defaulting to 1000 [ 1037.384884][T29297] tipc: Enabling of bearer rejected, already enabled [ 1037.405261][T14207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.433223][T14207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.524273][T29302] netlink: 'syz.3.5964': attribute type 1 has an invalid length. [ 1037.618720][ T8735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.633829][ T8735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.117611][ T6457] net_ratelimit: 5 callbacks suppressed [ 1038.117630][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.132211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.165399][T29336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.345626][T29342] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1038.366154][ T5833] Bluetooth: hci3: command tx timeout [ 1038.378949][T29342] batman_adv: batadv0: Adding interface: gretap1 [ 1038.385444][T29342] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.411869][T29342] batman_adv: batadv0: Interface activated: gretap1 [ 1038.599116][T18148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.857187][T29368] __nla_validate_parse: 10 callbacks suppressed [ 1038.857207][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5979'. [ 1038.911198][T29356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1039.059050][T29374] wg1 speed is unknown, defaulting to 1000 [ 1039.200678][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.209568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.384963][T29387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5983'. [ 1039.390395][T29388] Cannot find add_set index 2 as target [ 1039.408120][T29388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5984'. [ 1039.930354][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1039.963224][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1039.982229][T29405] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1040.008568][T29405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1040.065559][T29405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1040.208353][T29416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5993'. [ 1040.283460][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.292998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.391390][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1040.457990][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1040.609930][T29440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1040.657221][T29447] netlink: 'syz.4.5996': attribute type 7 has an invalid length. [ 1040.672760][T29447] netlink: 'syz.4.5996': attribute type 8 has an invalid length. [ 1040.799205][T29447] bond0: entered promiscuous mode [ 1040.804486][T29447] bond_slave_0: entered promiscuous mode [ 1040.814946][T29447] bond_slave_1: entered promiscuous mode [ 1040.836435][T29447] gretap0: entered promiscuous mode [ 1040.850169][T29447] bond0: left promiscuous mode [ 1040.854969][T29447] bond_slave_0: left promiscuous mode [ 1040.876502][T29447] bond_slave_1: left promiscuous mode [ 1040.884906][T29447] gretap0: left promiscuous mode [ 1041.094287][T29470] syzkaller1: entered promiscuous mode [ 1041.109329][T29470] syzkaller1: entered allmulticast mode [ 1041.141155][T29481] netlink: 'syz.3.6010': attribute type 33 has an invalid length. [ 1041.172281][T29481] team0: entered allmulticast mode [ 1041.178335][T29481] team_slave_0: entered allmulticast mode [ 1041.184199][T29481] team_slave_1: entered allmulticast mode [ 1041.230368][T29473] syzkaller0: entered promiscuous mode [ 1041.246349][T29473] syzkaller0: entered allmulticast mode [ 1041.284271][T29473] netlink: 'syz.3.6010': attribute type 3 has an invalid length. [ 1041.305867][T29473] netlink: 'syz.3.6010': attribute type 3 has an invalid length. [ 1041.459956][T29495] netlink: 'syz.0.6015': attribute type 11 has an invalid length. [ 1041.573647][T29503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 1041.633794][T29501] wg1 speed is unknown, defaulting to 1000 [ 1041.722854][T29511] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1042.003812][T29520] netlink: 'syz.4.6024': attribute type 33 has an invalid length. [ 1042.019482][T29520] `: renamed from team0 [ 1042.283812][T29531] geneve2: entered promiscuous mode [ 1042.320207][ T8735] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1042.343315][T29533] tipc: Enabling of bearer rejected, failed to enable media [ 1042.375617][ T8735] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1042.394789][ T8735] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1042.413881][ T8735] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1042.882833][T29560] tipc: Enabled bearer , priority 10 [ 1042.981413][T29557] Bluetooth: MGMT ver 1.23 [ 1043.062537][T29566] wg1 speed is unknown, defaulting to 1000 [ 1043.183055][T29572] net_ratelimit: 8 callbacks suppressed [ 1043.183073][T29572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.197570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.378493][T29579] wg1 speed is unknown, defaulting to 1000 [ 1043.397554][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.405905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.535020][T29564] ipt_ECN: cannot use operation on non-tcp rule [ 1043.751605][T29600] netlink: 'syz.1.6045': attribute type 7 has an invalid length. [ 1043.759784][T29600] netlink: 'syz.1.6045': attribute type 8 has an invalid length. [ 1043.782493][T29599] netlink: 'syz.3.6046': attribute type 11 has an invalid length. [ 1044.437651][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.446075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.545596][T29639] openvswitch: netlink: VXLAN extension 50 out of range max 1 [ 1044.691315][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.939011][T29660] tipc: Enabling of bearer rejected, already enabled [ 1045.212666][T29671] __nla_validate_parse: 12 callbacks suppressed [ 1045.212686][T29671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6066'. [ 1045.258798][T29677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.268479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.312511][T29677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 1045.333378][T29677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 1045.512398][T29684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6071'. [ 1045.539481][T29686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'. [ 1045.598359][T29686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.612822][T29692] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6073'. [ 1045.638359][T29692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6073'. [ 1045.705080][T29686] bridge_slave_1 (unregistering): left allmulticast mode [ 1045.724686][T29702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1045.743168][T29686] bridge_slave_1 (unregistering): left promiscuous mode [ 1045.768361][T29705] netlink: 'syz.2.6067': attribute type 3 has an invalid length. [ 1045.776354][T29686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.793468][T29694] netlink: 'syz.2.6067': attribute type 5 has an invalid length. [ 1045.947289][T29702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1046.012487][T29711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6076'. [ 1046.097280][T29711] vlan0: entered allmulticast mode [ 1046.102449][T29711] bridge_slave_0: entered allmulticast mode [ 1046.453134][T29724] batadv_slave_1: entered promiscuous mode [ 1046.553099][T29724] batadv_slave_1: left promiscuous mode [ 1046.658966][T29734] wg1 speed is unknown, defaulting to 1000 [ 1046.700299][T29735] wg1 speed is unknown, defaulting to 1000 [ 1046.728041][T29740] netlink: 'syz.0.6085': attribute type 10 has an invalid length. [ 1046.828867][T29740] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1046.915785][T29744] wg1 speed is unknown, defaulting to 1000 [ 1047.841257][T29785] sctp: [Deprecated]: syz.3.6098 (pid 29785) Use of int in maxseg socket option. [ 1047.841257][T29785] Use struct sctp_assoc_value instead [ 1048.357302][ T5833] Bluetooth: hci3: command tx timeout [ 1048.597574][ T6457] net_ratelimit: 14 callbacks suppressed [ 1048.597593][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.612212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.621148][T29810] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1048.639200][T29810] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1048.652368][T29810] openvswitch: netlink: Message has 8 unknown bytes. [ 1048.799529][T29810] wg1 speed is unknown, defaulting to 1000 [ 1049.114715][T29824] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1049.187056][T29825] block nbd1: NBD_DISCONNECT [ 1049.202812][T29825] block nbd1: Send disconnect failed -32 [ 1049.655065][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.664472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.421186][T29867] ipt_ECN: cannot use operation on non-tcp rule [ 1050.682341][T29293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.690817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.846399][T29875] __nla_validate_parse: 3 callbacks suppressed [ 1050.846427][T29875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6121'. [ 1050.953377][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.119341][ T36] bond6 (unregistering): (slave gre3): Releasing backup interface [ 1051.128536][ T36] gre3 (unregistering): left promiscuous mode [ 1051.410819][ T36] bond3 (unregistering): (slave bridge5): Releasing active interface [ 1051.567142][ T36] bond0 (unregistering): Released all slaves [ 1051.692208][ T36] bond1 (unregistering): Released all slaves [ 1051.706376][ T36] bond2 (unregistering): (slave veth7): Releasing backup interface [ 1051.715698][ T36] bond2 (unregistering): Released all slaves [ 1051.724156][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.733376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.841428][ T36] bond3 (unregistering): Released all slaves [ 1051.955995][ T36] bond4 (unregistering): Released all slaves [ 1052.074441][ T36] bond5 (unregistering): Released all slaves [ 1052.194483][ T36] bond6 (unregistering): Released all slaves [ 1052.309514][ T36] bond7 (unregistering): Released all slaves [ 1052.342450][T29858] wg1 speed is unknown, defaulting to 1000 [ 1052.479308][ T36] : left promiscuous mode [ 1052.559275][ T36] : left promiscuous mode [ 1052.665353][T29897] netlink: 'syz.1.6126': attribute type 21 has an invalid length. [ 1052.697932][T29897] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1052.698074][T29901] netlink: 'syz.4.6127': attribute type 13 has an invalid length. [ 1052.716720][T29897] netlink: 'syz.1.6126': attribute type 5 has an invalid length. [ 1052.724478][T29897] netlink: 'syz.1.6126': attribute type 6 has an invalid length. [ 1052.747412][T29901] netlink: 'syz.4.6127': attribute type 17 has an invalid length. [ 1052.757544][T29897] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1052.844778][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1052.865173][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1052.889095][ T36] tipc: Disabling bearer [ 1052.907763][ T36] tipc: Disabling bearer [ 1052.922090][ T36] tipc: Left network mode [ 1052.978310][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1052.994826][ T36] IPVS: stopping master sync thread 13259 ... [ 1053.009046][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1053.026260][ T36] IPVS: stopping backup sync thread 13233 ... [ 1053.046382][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1053.175875][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1053.195089][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1053.495165][T29920] syzkaller0: entered promiscuous mode [ 1053.503030][T29920] syzkaller0: entered allmulticast mode [ 1053.603762][T29927] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1053.663358][T29930] wg1 speed is unknown, defaulting to 1000 [ 1053.785266][T29293] hid-generic 0005:0C45:1013.0002: ignoring exceeding usage max [ 1053.798432][T18139] net_ratelimit: 2 callbacks suppressed [ 1053.798452][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.814762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.839711][T29935] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1053.852913][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x4 [ 1053.867357][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x5 [ 1053.879965][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 1053.901022][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 1053.922472][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 1053.965217][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 1053.966859][ T8850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.973572][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 1053.990002][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 1054.001866][T29293] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 1054.010964][ T36] hsr_slave_0: left promiscuous mode [ 1054.021842][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 1054.030984][T29293] hid-generic 0005:0C45:1013.0002: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1054.036597][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 1054.187715][T29940] netlink: 'syz.2.6139': attribute type 8 has an invalid length. [ 1054.348063][T29948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.357024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.450060][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.842001][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.851169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.065210][T29935] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1055.153767][T29935] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1055.631014][T29963] erspan0: refused to change device tx_queue_len [ 1055.658277][T29963] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1055.680470][T28356] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1055.690919][T28356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1055.699554][T28356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1055.710132][T28356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1055.718886][T28356] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1055.729802][T29935] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1055.877586][T29293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.885924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.948082][ T36] IPVS: stop unused estimator thread 0... [ 1056.096156][T14205] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1056.096652][T29973] wg1 speed is unknown, defaulting to 1000 [ 1056.202326][T17823] bond0: (slave syz_tun): Releasing backup interface [ 1056.219252][T14205] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1056.271173][T14205] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1056.391236][ T8735] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1056.638430][T29993] __nla_validate_parse: 2 callbacks suppressed [ 1056.638449][T29993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6152'. [ 1057.351143][T29973] chnl_net:caif_netlink_parms(): no params data found [ 1057.398517][T30031] netlink: 'syz.0.6160': attribute type 33 has an invalid length. [ 1057.410814][T30031] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6160'. [ 1057.527387][T30033] wg1 speed is unknown, defaulting to 1000 [ 1057.592696][T29973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.627737][T29973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.635017][T29973] bridge_slave_0: entered allmulticast mode [ 1057.645360][T29973] bridge_slave_0: entered promiscuous mode [ 1057.654215][T29973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.661696][T29973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.668987][T29973] bridge_slave_1: entered allmulticast mode [ 1057.677052][T29973] bridge_slave_1: entered promiscuous mode [ 1057.733225][T30045] netlink: 'syz.4.6163': attribute type 21 has an invalid length. [ 1057.735135][T29973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.761802][T30045] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6163'. [ 1057.782189][T29973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.810016][T30045] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6163'. [ 1057.836194][T30045] netlink: 'syz.4.6163': attribute type 1 has an invalid length. [ 1057.845127][T30045] netlink: 'syz.4.6163': attribute type 3 has an invalid length. [ 1057.853032][T30045] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6163'. [ 1057.862289][T30045] NCSI netlink: No device for ifindex 813332851 [ 1057.877013][ T5833] Bluetooth: hci4: command tx timeout [ 1057.963239][T29973] team0: Port device team_slave_0 added [ 1057.982224][T29973] team0: Port device team_slave_1 added [ 1058.128701][T30059] netlink: 'syz.4.6167': attribute type 1 has an invalid length. [ 1058.169022][T29973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.175986][T29973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.215036][T30064] netlink: 'syz.3.6169': attribute type 8 has an invalid length. [ 1058.227747][T29973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.303697][T30061] bond2: (slave bridge7): making interface the new active one [ 1058.312364][T30061] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 1058.342447][T29973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.352641][T29973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.397373][T29973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.556070][T30083] netlink: 'syz.3.6173': attribute type 1 has an invalid length. [ 1058.790975][T30087] x_tables: duplicate underflow at hook 1 [ 1058.850537][T30065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.007347][T29293] net_ratelimit: 7 callbacks suppressed [ 1059.007367][T29293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.022271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.094491][T30065] tipc: Resetting bearer [ 1059.209280][T30069] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1059.378206][T30096] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1059.382422][T30083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1059.433625][T30084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1059.441253][T30084] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1059.467919][T30084] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1059.511520][T30085] gretap1: entered promiscuous mode [ 1059.521534][T30085] bond1: (slave gretap1): making interface the new active one [ 1059.530081][T30085] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1059.549307][T30086] macvlan2: entered promiscuous mode [ 1059.555102][T30086] macvlan2: entered allmulticast mode [ 1059.564919][T30086] bond1: entered promiscuous mode [ 1059.573743][T30086] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1059.585581][T30086] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1059.600013][T30086] bond1: left promiscuous mode [ 1059.619524][T14204] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.628710][T14204] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.638155][T14204] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.647864][T14204] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.664136][T30096] netlink: 'syz.4.6176': attribute type 22 has an invalid length. [ 1059.687553][T30096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1059.697543][T14204] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.719544][T14204] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.760338][T30106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6179'. [ 1059.804359][T14204] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.813596][T14204] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.816391][T30096] netlink: 'syz.4.6176': attribute type 22 has an invalid length. [ 1059.831820][T30096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1059.872375][T29973] hsr_slave_0: entered promiscuous mode [ 1059.881652][T29973] hsr_slave_1: entered promiscuous mode [ 1059.889124][T29973] debugfs: 'hsr0' already exists in 'hsr' [ 1059.902411][T29973] Cannot create hsr debugfs directory [ 1059.929276][ T8735] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.938339][T12414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.952170][T12414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.967929][ T5833] Bluetooth: hci4: command tx timeout [ 1060.002292][ T8735] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1060.038244][T18148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.046397][T29293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.055312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.095814][ T8735] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1060.104323][ T8735] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1060.113346][T30119] netlink: 'syz.0.6183': attribute type 14 has an invalid length. [ 1060.165262][T30123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1060.237269][T30122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1060.520672][T30134] gretap2: entered promiscuous mode [ 1060.738061][T30137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6189'. [ 1060.767250][T30137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6189'. [ 1061.079998][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.089442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.453316][T30170] netlink: 'syz.3.6193': attribute type 33 has an invalid length. [ 1061.465268][T29973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1061.520165][T29973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1061.549310][T30174] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1061.557290][T29973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1061.618228][T29973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1061.659150][T30173] wg1 speed is unknown, defaulting to 1000 [ 1061.890069][T29973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.942276][T29973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.973009][T30168] sctp: [Deprecated]: syz.0.6195 (pid 30168) Use of int in maxseg socket option. [ 1061.973009][T30168] Use struct sctp_assoc_value instead [ 1061.974081][T14204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.994588][T14204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.037053][T28356] Bluetooth: hci4: command tx timeout [ 1062.078917][T14204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.086081][T14204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.123300][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.132351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.182675][T30200] __nla_validate_parse: 2 callbacks suppressed [ 1062.182694][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6202'. [ 1062.200722][T30201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6202'. [ 1062.215100][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6202'. [ 1062.254706][T30201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6202'. [ 1062.495495][T30180] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1062.792394][T30226] validate_nla: 5 callbacks suppressed [ 1062.792412][T30226] netlink: 'syz.4.6206': attribute type 4 has an invalid length. [ 1062.802941][T29973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.951278][T30226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.992078][T29973] veth0_vlan: entered promiscuous mode [ 1063.039605][T29973] veth1_vlan: entered promiscuous mode [ 1063.083776][T29973] veth0_macvtap: entered promiscuous mode [ 1063.195698][T30240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1063.251240][T29973] veth1_macvtap: entered promiscuous mode [ 1063.294327][T29973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.330797][T29973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.372549][T14204] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.395973][T14204] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.416192][T14204] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.422066][T30248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1063.425968][T14204] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.444066][T30247] netlink: 'syz.3.6211': attribute type 10 has an invalid length. [ 1063.471090][T30247] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1063.485059][T30247] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1063.684226][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.703625][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.782696][T30267] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1063.803013][T28356] Bluetooth: hci1: command 0x0406 tx timeout [ 1063.815054][T30267] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1063.850478][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.863651][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.879549][T30271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6217'. [ 1064.117730][T28356] Bluetooth: hci4: command 0x0419 tx timeout [ 1064.177606][T30289] IPv6: Can't replace route, no match found [ 1064.198607][ T6457] net_ratelimit: 5 callbacks suppressed [ 1064.198626][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.213069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.238077][T30288] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6223'. [ 1064.307632][T30297] netlink: 'syz.0.6226': attribute type 1 has an invalid length. [ 1064.354540][T30289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6224'. [ 1064.388966][T30307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6228'. [ 1064.395501][T30302] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1064.410391][T30302] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1064.445916][T30304] syzkaller1: entered promiscuous mode [ 1064.451814][T30304] syzkaller1: entered allmulticast mode [ 1064.614465][T30320] tipc: Started in network mode [ 1064.662778][T30320] tipc: Node identity 3a0412634648, cluster identity 4711 [ 1064.687368][T30320] tipc: Enabled bearer , priority 0 [ 1064.712484][T30321] syzkaller0: entered promiscuous mode [ 1064.719061][T30321] syzkaller0: entered allmulticast mode [ 1064.838804][T30321] tipc: Resetting bearer [ 1064.854653][T30319] tipc: Resetting bearer [ 1064.928083][T30319] tipc: Disabling bearer [ 1065.168371][T30336] syz_tun: entered allmulticast mode [ 1065.280619][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.289620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.317235][T30341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1065.599510][T30358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1065.644582][T30358] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1065.685246][T30358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1065.718215][T30358] bond3: (slave lo): Enslaving as an active interface with an up link [ 1065.731508][T30336] syz_tun: left allmulticast mode [ 1065.910248][T30367] bond3 (unregistering): (slave lo): Releasing backup interface [ 1065.919920][T30367] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1065.937669][T30367] bond3 (unregistering): Released all slaves [ 1065.959280][T30370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1066.103407][T30381] netlink: 'syz.4.6246': attribute type 2 has an invalid length. [ 1066.115421][T30377] bond1: option arp_interval: invalid value (18446744073709551615) [ 1066.124490][T18148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.133471][T30377] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1066.145246][T30377] bond1 (unregistering): Released all slaves [ 1066.184800][T30379] gre1: entered allmulticast mode [ 1066.196847][T28356] Bluetooth: hci4: command 0x0419 tx timeout [ 1066.210291][T30381] !: entered promiscuous mode [ 1066.328547][T30391] netlink: 'syz.1.6248': attribute type 6 has an invalid length. [ 1066.339550][T30391] netlink: 'syz.1.6248': attribute type 6 has an invalid length. [ 1066.368090][T29293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.376768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.476065][T30405] wg1 speed is unknown, defaulting to 1000 [ 1066.639715][T30417] batadv0: entered promiscuous mode [ 1066.646160][T30417] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1066.666466][T30415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.698439][T30414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.740431][T30413] tipc: Started in network mode [ 1066.745334][T30413] tipc: Node identity def291a15592, cluster identity 4711 [ 1066.783376][T30413] tipc: Enabled bearer , priority 0 [ 1066.818882][T30418] syzkaller0: entered promiscuous mode [ 1066.834104][T30418] syzkaller0: entered allmulticast mode [ 1066.848266][T30424] SET target dimension over the limit! [ 1066.868041][T30426] SET target dimension over the limit! [ 1066.910723][T30413] tipc: Resetting bearer [ 1066.939431][T30412] tipc: Resetting bearer [ 1067.012101][T30429] netlink: 'syz.3.6259': attribute type 10 has an invalid length. [ 1067.024238][T30412] tipc: Disabling bearer [ 1067.070865][T30429] bond0: entered promiscuous mode [ 1067.076358][T30429] bond_slave_0: entered promiscuous mode [ 1067.083405][T30429] bond_slave_1: entered promiscuous mode [ 1067.090337][T30429] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1067.101054][T30429] bridge0: port 3(bond0) entered blocking state [ 1067.108329][T30429] bridge0: port 3(bond0) entered disabled state [ 1067.115048][T30429] bond0: entered allmulticast mode [ 1067.122919][T30429] bond_slave_0: entered allmulticast mode [ 1067.130571][T30429] bond_slave_1: entered allmulticast mode [ 1067.136388][T30429] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1067.202146][T30429] bridge0: port 3(bond0) entered blocking state [ 1067.208558][T30429] bridge0: port 3(bond0) entered forwarding state [ 1068.747499][T30502] __nla_validate_parse: 13 callbacks suppressed [ 1068.747523][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 1068.767177][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 1068.846630][T30504] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20002 [ 1069.006381][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6281'. [ 1069.037161][T30517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6282'. [ 1069.108460][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6281'. [ 1069.189760][T30523] wg1 speed is unknown, defaulting to 1000 [ 1069.208060][T30498] net_ratelimit: 741 callbacks suppressed [ 1069.208080][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.223588][T30524] wg1 speed is unknown, defaulting to 1000 [ 1069.246778][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.255525][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.275784][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.295703][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.306932][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.315773][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.328410][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.339442][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.350206][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.518690][T30537] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 1070.350022][T30575] netlink: 'syz.2.6294': attribute type 15 has an invalid length. [ 1074.468390][T30585] netlink: 'syz.4.6296': attribute type 29 has an invalid length. [ 1074.493142][T30591] pim6reg1: entered promiscuous mode [ 1074.513923][T30591] pim6reg1: entered allmulticast mode [ 1074.634329][T30599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6301'. [ 1074.690487][T18139] net_ratelimit: 289 callbacks suppressed [ 1074.690534][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.705281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.815423][T30599] macvlan2: entered promiscuous mode [ 1074.832301][T30599] macvlan2: entered allmulticast mode [ 1074.837903][T30599] mac80211_hwsim hwsim78 wlan0: entered allmulticast mode [ 1074.839934][T30608] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6305'. [ 1074.915986][T30610] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6304'. [ 1075.184404][T30613] wg1 speed is unknown, defaulting to 1000 [ 1075.249035][T18146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.483402][T30627] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6309'. [ 1075.565066][T30088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.573883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.739509][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.748471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.210648][T30653] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1076.221979][T30653] dvmrp1: linktype set to 270 [ 1076.237441][T30650] netlink: 'syz.2.6316': attribute type 36 has an invalid length. [ 1076.297207][T30652] wg1 speed is unknown, defaulting to 1000 [ 1076.297695][T30655] netlink: 'syz.1.6318': attribute type 2 has an invalid length. [ 1076.461087][T30664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1076.503125][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1076.530537][T30655] : entered promiscuous mode [ 1076.535657][T30657] wg1 speed is unknown, defaulting to 1000 [ 1076.759869][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.768866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.860538][T30672] wg1 speed is unknown, defaulting to 1000 [ 1076.914859][T30678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1077.360404][T30691] tipc: Enabled bearer , priority 0 [ 1077.574794][T30691] syzkaller0: entered promiscuous mode [ 1077.588430][T30691] syzkaller0: entered allmulticast mode [ 1077.616163][T30695] tipc: Resetting bearer [ 1077.632939][T30698] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1077.713397][T30691] tipc: Resetting bearer [ 1077.757870][T30691] tipc: Disabling bearer [ 1078.104624][T30711] lo: entered allmulticast mode [ 1078.502369][T30718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6335'. [ 1078.545969][T30718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6335'. [ 1078.735914][T30723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'. [ 1078.814187][T30712] lo: left allmulticast mode [ 1078.972291][T30724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.980023][T30724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.111802][T30724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.125518][T30724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.379707][T14210] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.403469][T14210] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.416961][T14210] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.456443][T14210] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.474001][T30742] netlink: 'syz.1.6341': attribute type 4 has an invalid length. [ 1079.515378][T30742] netlink: 'syz.1.6341': attribute type 4 has an invalid length. [ 1079.768757][T30751] __nla_validate_parse: 152 callbacks suppressed [ 1079.768777][T30751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6343'. [ 1079.882098][ T6457] net_ratelimit: 1029 callbacks suppressed [ 1079.882118][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.897899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.912155][T30753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6345'. [ 1080.091505][T30777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1080.158088][T30776] af_packet: tpacket_rcv: packet too big, clamped from 1500 to 4294967272. macoff=96 [ 1080.230706][T30782] syzkaller0: entered promiscuous mode [ 1080.242106][T30782] syzkaller0: entered allmulticast mode [ 1080.249878][T30781] tipc: Enabled bearer , priority 0 [ 1080.272842][T30781] tipc: Resetting bearer [ 1080.298722][T30781] tipc: Disabling bearer [ 1080.595783][T30797] bridge1: entered allmulticast mode [ 1080.792603][T30805] batadv1: entered promiscuous mode [ 1080.822928][T30808] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6361'. [ 1080.919236][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.927899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.052977][T30823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1081.133372][T30828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1081.184184][T30832] dummy0: entered promiscuous mode [ 1081.207426][T30832] macsec1: entered allmulticast mode [ 1081.212985][T30832] dummy0: entered allmulticast mode [ 1081.223648][T30832] dummy0: left allmulticast mode [ 1081.229595][T30832] dummy0: left promiscuous mode [ 1081.308024][T30828] wg1 speed is unknown, defaulting to 1000 [ 1081.334761][T30088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.422711][T30836] wg1 speed is unknown, defaulting to 1000 [ 1081.509217][T30840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6371'. [ 1081.564326][T30840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6371'. [ 1081.957602][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.966734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.049114][T30857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6377'. [ 1082.287599][T30864] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6379'. [ 1082.391291][T30860] bridge0: port 3(bond0) entered disabled state [ 1082.397958][T30860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.406025][T30860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.584474][T30860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.606303][T30860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.699174][T30880] tipc: Enabling of bearer rejected, failed to enable media [ 1082.710519][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.738813][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.840623][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.862643][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.892419][T30888] vlan0: mtu greater than device maximum [ 1083.378603][T30909] netlink: 'syz.0.6392': attribute type 1 has an invalid length. [ 1083.548101][T30909] bond4: entered promiscuous mode [ 1083.564530][T30909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1084.003497][T30930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.095598][T30934] sch_fq: defrate 4294967293 ignored. [ 1084.333898][T30930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.559252][T30930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.695314][T30930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.878496][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.919259][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.956224][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.014493][T14205] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.239896][T30963] __nla_validate_parse: 2 callbacks suppressed [ 1085.239914][T30963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6406'. [ 1085.618447][T30974] tipc: Enabled bearer , priority 0 [ 1085.718575][T30981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1085.743949][T30981] ip6gretap1: entered promiscuous mode [ 1085.760561][T30981] ip6gretap1: entered allmulticast mode [ 1086.171341][T31004] x_tables: duplicate underflow at hook 1 [ 1086.187999][T31004] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6419'. [ 1086.737605][T18139] tipc: Node number set to 1621282911 [ 1086.827254][T31028] wg1 speed is unknown, defaulting to 1000 [ 1086.909534][T31034] bond5: entered promiscuous mode [ 1086.915020][T31034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1086.967665][T31040] netlink: 'syz.2.6427': attribute type 1 has an invalid length. [ 1087.704499][T31060] syzkaller0: entered promiscuous mode [ 1087.711855][T31068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 1087.755535][T31060] syzkaller0: entered allmulticast mode [ 1088.030753][T31092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1088.897312][T31112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6448'. [ 1090.071227][T31082] wg1 speed is unknown, defaulting to 1000 [ 1090.232393][T31118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1090.280369][T31121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1090.282897][T31118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1090.317840][T31118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1090.449473][T31129] netlink: 'syz.1.6453': attribute type 5 has an invalid length. [ 1090.657724][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1090.669116][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1090.679042][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1090.681887][T31140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6456'. [ 1090.718124][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1090.729680][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1091.021561][T31136] wg1 speed is unknown, defaulting to 1000 [ 1091.239915][T31158] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6461'. [ 1091.301748][T31163] sctp: [Deprecated]: syz.3.6462 (pid 31163) Use of int in maxseg socket option. [ 1091.301748][T31163] Use struct sctp_assoc_value instead [ 1091.463179][T31170] bridge0: entered promiscuous mode [ 1091.496949][T31170] macsec2: entered promiscuous mode [ 1091.510386][T31170] bridge0: port 2(macsec2) entered blocking state [ 1091.540587][T31170] bridge0: port 2(macsec2) entered disabled state [ 1091.547773][T31170] macsec2: entered allmulticast mode [ 1091.553129][T31170] bridge0: entered allmulticast mode [ 1091.585340][T31170] macsec2: left allmulticast mode [ 1091.614504][T31170] bridge0: left allmulticast mode [ 1091.644154][T31170] bridge0: left promiscuous mode [ 1091.697540][T31172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6466'. [ 1091.807869][T31194] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1091.828945][T31194] netlink: 269 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1092.015307][T31203] netlink: 4124 bytes leftover after parsing attributes in process `syz.3.6470'. [ 1092.019693][T31136] chnl_net:caif_netlink_parms(): no params data found [ 1092.027233][T31203] openvswitch: netlink: Flow key attr not present in new flow. [ 1092.232333][T31136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.242556][T31136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.250737][T31136] bridge_slave_0: entered allmulticast mode [ 1092.261517][T31136] bridge_slave_0: entered promiscuous mode [ 1092.274056][T31218] netlink: 'syz.0.6474': attribute type 10 has an invalid length. [ 1092.274665][T31136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.290678][T31136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.315353][T31136] bridge_slave_1: entered allmulticast mode [ 1092.337798][T31136] bridge_slave_1: entered promiscuous mode [ 1092.422245][T31224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6476'. [ 1092.449378][T31136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.468047][T31136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.622252][T31136] team0: Port device team_slave_0 added [ 1092.637694][T31229] wg1 speed is unknown, defaulting to 1000 [ 1092.648119][T31136] team0: Port device team_slave_1 added [ 1092.757497][T28356] Bluetooth: hci2: command tx timeout [ 1092.779008][T31136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.785980][T31136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1092.863952][T31136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.883630][T31237] bridge_slave_0: left allmulticast mode [ 1092.891302][T31237] bridge_slave_0: left promiscuous mode [ 1092.898256][T31237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.963596][T31243] netlink: 'syz.3.6481': attribute type 6 has an invalid length. [ 1093.018440][T31136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.025611][T31136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.052503][T31136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.192221][T31136] hsr_slave_0: entered promiscuous mode [ 1093.202517][T31136] hsr_slave_1: entered promiscuous mode [ 1093.212477][T31136] debugfs: 'hsr0' already exists in 'hsr' [ 1093.221607][T31136] Cannot create hsr debugfs directory [ 1094.275055][T31136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1094.299032][T31136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1094.450154][T31295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.509247][T31136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1094.553731][T31136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1094.812469][T31136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.837482][T28356] Bluetooth: hci2: command tx timeout [ 1094.943514][T31136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.962482][T30361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.969709][T30361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.068592][T30361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.075797][T30361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.129463][T31325] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1095.629850][T31362] __nla_validate_parse: 9 callbacks suppressed [ 1095.629868][T31362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6510'. [ 1095.671097][T31136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.859745][T31136] veth0_vlan: entered promiscuous mode [ 1095.889455][T31371] wg1 speed is unknown, defaulting to 1000 [ 1095.897600][T31383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1095.912425][T31136] veth1_vlan: entered promiscuous mode [ 1095.938916][T31383] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1096.003877][T31136] veth0_macvtap: entered promiscuous mode [ 1096.031910][T31136] veth1_macvtap: entered promiscuous mode [ 1096.109869][T31392] netlink: 'syz.0.6515': attribute type 4 has an invalid length. [ 1096.158471][T31136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.208802][T31136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.208913][T31393] nbd4: detected capacity change from 0 to 63 [ 1096.235681][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.245596][T31392] wg1 speed is unknown, defaulting to 1000 [ 1096.263643][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.275286][T28356] block nbd4: Receive control failed (result -32) [ 1096.288957][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.323617][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.524279][T31400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6517'. [ 1096.544399][T31396] wg1 speed is unknown, defaulting to 1000 [ 1096.591698][T31400] hsr_slave_0: left promiscuous mode [ 1096.621564][T31400] hsr_slave_1: left promiscuous mode [ 1096.671407][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.697494][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.849663][T31402] wg1 speed is unknown, defaulting to 1000 [ 1096.852615][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.856868][T31409] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6519'. [ 1096.879007][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.927010][T28356] Bluetooth: hci2: command tx timeout [ 1097.012115][T31412] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1097.024539][T31416] x_tables: duplicate entry at hook 2 [ 1097.048873][T31412] bond2 (unregistering): Released all slaves [ 1097.468331][T31433] netlink: 'syz.3.6525': attribute type 10 has an invalid length. [ 1097.476281][T31433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6525'. [ 1097.517512][T31433] dummy0: entered promiscuous mode [ 1097.538836][T31433] bridge0: port 4(dummy0) entered blocking state [ 1097.545492][T31433] bridge0: port 4(dummy0) entered disabled state [ 1097.552732][T31433] dummy0: entered allmulticast mode [ 1098.852128][T31462] pim6reg: entered allmulticast mode [ 1098.996641][T28356] Bluetooth: hci2: command tx timeout [ 1099.369481][T31476] wg1 speed is unknown, defaulting to 1000 [ 1099.516683][T31480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6535'. [ 1099.917111][T31496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6538'. [ 1100.168960][T31511] xt_hashlimit: max too large, truncated to 1048576 [ 1100.190281][T31511] xt_bpf: check failed: parse error [ 1100.420153][T31523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'. [ 1100.730885][T31540] wg1 speed is unknown, defaulting to 1000 [ 1100.980656][T31552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6554'. [ 1101.184030][T31552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6554'. [ 1101.251662][T31552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.415449][T31552] bridge_slave_1 (unregistering): left allmulticast mode [ 1101.430846][T31552] bridge_slave_1 (unregistering): left promiscuous mode [ 1101.438779][T31552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.482158][T31533] tipc: New replicast peer: 255.255.255.255 [ 1101.491661][T31533] tipc: Enabled bearer , priority 10 [ 1101.537128][T31537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1102.124018][T31595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6563'. [ 1102.134428][T29293] IPVS: starting estimator thread 0... [ 1102.174125][T31595] netlink: 'syz.2.6563': attribute type 29 has an invalid length. [ 1102.328028][T31597] IPVS: using max 37 ests per chain, 88800 per kthread [ 1102.607214][T29293] tipc: Node number set to 2338361761 [ 1102.751238][T31624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6570'. [ 1102.780172][T31624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.796194][T31624] batadv_slave_0: entered promiscuous mode [ 1102.855561][T31636] netlink: zone id is out of range [ 1102.861516][T31636] netlink: zone id is out of range [ 1102.868480][T31636] netlink: zone id is out of range [ 1102.873596][T31636] netlink: zone id is out of range [ 1102.880036][T31636] netlink: zone id is out of range [ 1102.885348][T31636] netlink: zone id is out of range [ 1102.891541][T31636] netlink: zone id is out of range [ 1102.897423][T31636] netlink: zone id is out of range [ 1102.902556][T31636] netlink: zone id is out of range [ 1102.908791][T31636] netlink: zone id is out of range [ 1103.657393][T31655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1103.683820][T31652] pimreg3: entered allmulticast mode [ 1103.699569][T31655] nbd: must specify a size in bytes for the device [ 1103.708898][T31655] netlink: 'syz.2.6579': attribute type 4 has an invalid length. [ 1103.746286][T31655] netlink: 'syz.2.6579': attribute type 4 has an invalid length. [ 1103.773249][T31655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1103.824047][T31667] lo speed is unknown, defaulting to 1000 [ 1103.832883][T31667] lo speed is unknown, defaulting to 1000 [ 1103.839686][T31667] lo speed is unknown, defaulting to 1000 [ 1103.857169][T31667] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1103.882585][T31667] lo speed is unknown, defaulting to 1000 [ 1103.908453][T31667] lo speed is unknown, defaulting to 1000 [ 1103.915289][T31667] lo speed is unknown, defaulting to 1000 [ 1103.930450][T31667] lo speed is unknown, defaulting to 1000 [ 1103.938147][T31667] lo speed is unknown, defaulting to 1000 [ 1103.945764][T31667] lo speed is unknown, defaulting to 1000 [ 1103.956242][T31667] lo speed is unknown, defaulting to 1000 [ 1103.965823][T31667] lo speed is unknown, defaulting to 1000 [ 1103.974475][T31667] lo speed is unknown, defaulting to 1000 [ 1104.121773][T31685] Bluetooth: MGMT ver 1.23 [ 1112.304363][T31702] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1112.368339][T31706] netlink: 'syz.4.6592': attribute type 3 has an invalid length. [ 1112.370678][T31707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1112.388326][T31708] netlink: 'syz.1.6590': attribute type 3 has an invalid length. [ 1112.428318][T31713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1112.560652][T31715] net_ratelimit: 7 callbacks suppressed [ 1112.560672][T31715] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 1112.753931][T31726] wg1 speed is unknown, defaulting to 1000 [ 1112.826398][T31734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6600'. [ 1112.856399][T31732] batadv1: entered allmulticast mode [ 1112.871962][T31732] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1112.891030][T31734] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1113.032598][T31747] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode [ 1113.067428][T31747] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode [ 1113.075668][T31751] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 1113.146196][T31751] bond6: entered promiscuous mode [ 1113.180054][T31751] bond6: entered allmulticast mode [ 1113.199878][T31751] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1113.220046][T31726] lo speed is unknown, defaulting to 1000 [ 1113.428174][T31773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6608'. [ 1113.472172][T31776] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6607'. [ 1113.612853][T31786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6610'. [ 1113.647710][T31786] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6610'. [ 1113.915000][T31798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6613'. [ 1114.287688][T31794] wg1 speed is unknown, defaulting to 1000 [ 1114.381109][T31814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6617'. [ 1114.456064][T31819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 1114.750148][T31794] lo speed is unknown, defaulting to 1000 [ 1115.139424][T31849] bridge0: port 2(erspan0) entered blocking state [ 1115.147248][T31849] bridge0: port 2(erspan0) entered disabled state [ 1115.154564][T31849] erspan0: entered allmulticast mode [ 1115.163622][T31849] erspan0: entered promiscuous mode [ 1115.169798][T31849] bridge0: port 2(erspan0) entered blocking state [ 1115.176272][T31849] bridge0: port 2(erspan0) entered forwarding state [ 1115.185684][T31849] erspan0: left allmulticast mode [ 1115.192102][T31849] erspan0: left promiscuous mode [ 1115.197900][T31849] bridge0: port 2(erspan0) entered disabled state [ 1115.318721][T31855] bridge4: entered allmulticast mode [ 1115.652264][T31860] xt_CONNSECMARK: invalid mode: 66 [ 1115.896713][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.917137][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.951138][T31871] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 1116.274312][T31896] wg1 speed is unknown, defaulting to 1000 [ 1116.491368][T31910] xt_hashlimit: max too large, truncated to 1048576 [ 1116.498568][T31910] xt_bpf: check failed: parse error [ 1116.521717][T31896] lo speed is unknown, defaulting to 1000 [ 1116.713429][T31922] netem: incorrect gi model size [ 1116.877959][T31931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.002340][T31935] wg1 speed is unknown, defaulting to 1000 [ 1117.387945][T31939] __nla_validate_parse: 8 callbacks suppressed [ 1117.387965][T31939] netlink: 356 bytes leftover after parsing attributes in process `syz.1.6650'. [ 1118.237204][T31935] lo speed is unknown, defaulting to 1000 [ 1118.490707][ T6457] IPVS: starting estimator thread 0... [ 1118.530553][T31988] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1118.557945][T31988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1118.584983][T31989] IPVS: using max 29 ests per chain, 69600 per kthread [ 1118.857593][T32001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6664'. [ 1118.879490][T31994] wg1 speed is unknown, defaulting to 1000 [ 1119.159063][T32010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6665'. [ 1119.687398][T32019] 8021q: VLANs not supported on nlmon0 [ 1119.710322][T32020] netlink: 'syz.3.6668': attribute type 11 has an invalid length. [ 1119.775402][T31994] lo speed is unknown, defaulting to 1000 [ 1119.999393][T32029] tipc: Enabled bearer , priority 0 [ 1120.231223][T32037] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1120.274463][T32037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1120.307175][T32037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1120.323172][T32037] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1120.802095][T32052] wg1 speed is unknown, defaulting to 1000 [ 1121.030706][T32063] gre0: entered promiscuous mode [ 1121.060525][T32063] gre0: entered allmulticast mode [ 1121.143534][T32068] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.6682'. [ 1121.341423][T32052] lo speed is unknown, defaulting to 1000 [ 1121.542769][T32082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1121.856931][T32095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6690'. [ 1122.043639][T32095] macvtap1: entered promiscuous mode [ 1122.067795][T32095] mac80211_hwsim hwsim62 wlan1: entered promiscuous mode [ 1122.358400][T32111] syzkaller1: entered promiscuous mode [ 1122.363907][T32111] syzkaller1: entered allmulticast mode [ 1122.672232][T32117] wg1 speed is unknown, defaulting to 1000 [ 1122.851966][T32127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1123.011137][T32133] __nla_validate_parse: 3 callbacks suppressed [ 1123.011156][T32133] netlink: 5448 bytes leftover after parsing attributes in process `syz.3.6702'. [ 1123.479686][T32119] netlink: 'syz.4.6697': attribute type 2 has an invalid length. [ 1123.552598][T32117] lo speed is unknown, defaulting to 1000 [ 1123.627947][T32150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1123.646736][T32150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1123.677643][T32152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1123.975639][T32166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6712'. [ 1124.301457][T32175] xt_socket: unknown flags 0x50 [ 1125.362362][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1125.554188][T32232] tipc: Started in network mode [ 1125.577518][T32232] tipc: Node identity aad60964bcf1, cluster identity 4711 [ 1125.589856][T32232] tipc: Enabled bearer , priority 0 [ 1125.609850][T32237] syzkaller0: entered promiscuous mode [ 1125.615548][T32237] syzkaller0: entered allmulticast mode [ 1125.753139][T32232] tipc: Resetting bearer [ 1125.799229][T32235] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.836555][T32235] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1125.878400][T32238] wg1 speed is unknown, defaulting to 1000 [ 1125.884573][T32231] tipc: Resetting bearer [ 1125.911249][T32231] tipc: Disabling bearer [ 1125.937888][T32235] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.957743][T32235] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1126.030470][T32260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6738'. [ 1126.113198][T32235] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.207165][T32235] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1126.418565][T32235] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.486568][T32235] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1126.527516][T32238] lo speed is unknown, defaulting to 1000 [ 1126.818031][T32270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1126.831886][T32271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1126.860402][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.869521][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1127.015422][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.054327][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1127.070640][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1127.183568][T14207] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.221671][T14207] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1127.284578][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.332338][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1127.519875][T32290] netlink: 'syz.0.6747': attribute type 4 has an invalid length. [ 1127.579265][T32290] syzkaller0: entered promiscuous mode [ 1127.587466][T32290] syzkaller0: entered allmulticast mode [ 1128.086446][T32316] tipc: Enabling of bearer rejected, already enabled [ 1128.681125][T32328] __nla_validate_parse: 4 callbacks suppressed [ 1128.681144][T32328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1128.717166][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1128.728707][T32328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1128.748631][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1128.766716][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1128.776310][T32328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1128.783964][T32340] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1128.816695][T32328] netlink: 6236 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1128.874380][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1128.900953][T32348] netlink: 42 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1128.995163][T32346] wg1 speed is unknown, defaulting to 1000 [ 1129.054950][T32342] wg1 speed is unknown, defaulting to 1000 [ 1129.235993][T32362] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1129.575903][T32349] wg1 speed is unknown, defaulting to 1000 [ 1129.804351][T32395] syzkaller0: entered promiscuous mode [ 1129.819320][T32395] syzkaller0: entered allmulticast mode [ 1130.066925][T32346] lo speed is unknown, defaulting to 1000 [ 1130.189586][T32417] netlink: 'syz.2.6775': attribute type 1 has an invalid length. [ 1130.512564][T32427] wg1 speed is unknown, defaulting to 1000 [ 1130.536433][T32342] lo speed is unknown, defaulting to 1000 [ 1130.934088][T32442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1130.947326][T32442] bridge0: port 1(bond3) entered blocking state [ 1130.953773][T32442] bridge0: port 1(bond3) entered disabled state [ 1130.961524][T32442] bond3: entered allmulticast mode [ 1130.969168][T32442] bond3: entered promiscuous mode [ 1130.975256][T32442] bridge0: port 1(bond3) entered blocking state [ 1130.981828][T32442] bridge0: port 1(bond3) entered forwarding state [ 1131.015798][T32444] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1131.025595][T32444] bridge0: port 2(bond4) entered blocking state [ 1131.046805][T32444] bridge0: port 2(bond4) entered disabled state [ 1131.053288][T32444] bond4: entered allmulticast mode [ 1131.070498][T32444] bond4: entered promiscuous mode [ 1131.083269][T32444] bridge0: port 2(bond4) entered blocking state [ 1131.089702][T32444] bridge0: port 2(bond4) entered forwarding state [ 1131.109725][T32427] lo speed is unknown, defaulting to 1000 [ 1131.206672][T32349] lo speed is unknown, defaulting to 1000 [ 1131.226412][T14207] bridge0: port 1(bond3) entered disabled state [ 1131.294155][T14207] bridge0: port 2(bond4) entered disabled state [ 1131.546108][T32464] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.585265][T32465] netlink: 'syz.4.6786': attribute type 11 has an invalid length. [ 1131.593237][T32465] netlink: 'syz.4.6786': attribute type 11 has an invalid length. [ 1132.111574][T32457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.289368][T32477] sctp: [Deprecated]: syz.2.6793 (pid 32477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1132.289368][T32477] Use struct sctp_sack_info instead [ 1132.361968][ C0] vcan0: j1939_tp_rxtimer: 0xffff888140eda000: rx timeout, send abort [ 1132.870249][ C0] vcan0: j1939_tp_rxtimer: 0xffff888140eda000: abort rx timeout. Force session deactivation [ 1133.516993][T32511] netlink: zone id is out of range [ 1133.522227][T32511] netlink: zone id is out of range [ 1133.527619][T32511] netlink: zone id is out of range [ 1133.532782][T32511] netlink: zone id is out of range [ 1133.538369][T32511] netlink: zone id is out of range [ 1133.543498][T32511] netlink: zone id is out of range [ 1133.548919][T32511] netlink: zone id is out of range [ 1133.554041][T32511] netlink: zone id is out of range [ 1133.564942][T32511] netlink: zone id is out of range [ 1133.570741][T32511] netlink: zone id is out of range [ 1134.433305][T32480] veth5: entered promiscuous mode [ 1134.453179][T32509] tipc: Enabling of bearer rejected, already enabled [ 1134.655410][T32529] __nla_validate_parse: 10 callbacks suppressed [ 1134.655429][T32529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1134.688549][T32529] pim6reg: entered allmulticast mode [ 1134.695111][T32529] pim6reg: left allmulticast mode [ 1134.748524][T32536] netlink: 'syz.2.6805': attribute type 6 has an invalid length. [ 1134.790480][T32538] bond2: option lacp_active: invalid value (8) [ 1134.799536][T32529] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1134.801509][T32536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1134.810297][T32538] bond2 (unregistering): Released all slaves [ 1134.863792][T32536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.019515][T32557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6813'. [ 1135.338730][T32581] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1135.658884][T32594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1135.775366][T32598] netlink: 'syz.2.6822': attribute type 1 has an invalid length. [ 1135.798584][T32598] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6822'. [ 1135.882506][T32609] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6820'. [ 1136.032658][T32614] macvlan2: entered promiscuous mode [ 1136.053493][T32614] batman_adv: batadv0: Adding interface: macvlan2 [ 1136.062255][T32614] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 1136.080544][T32625] tipc: Enabled bearer , priority 0 [ 1136.099786][T32613] wg1 speed is unknown, defaulting to 1000 [ 1136.108011][T32617] syzkaller0: entered promiscuous mode [ 1136.114066][T32617] syzkaller0: entered allmulticast mode [ 1136.140930][T32617] netlink: 'syz.1.6828': attribute type 1 has an invalid length. [ 1136.233275][T32629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1136.252502][T32631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1136.300916][T32631] mac80211_hwsim hwsim61 ªªªªª;: renamed from wlan0 [ 1136.452862][T32643] netlink: 'syz.0.6832': attribute type 5 has an invalid length. [ 1138.979879][T32613] lo speed is unknown, defaulting to 1000 [ 1139.012249][T32649] bond1: Unable to set down delay as MII monitoring is disabled [ 1139.023118][T32649] bond1 (unregistering): Released all slaves [ 1139.047945][T32615] tipc: Resetting bearer [ 1139.068049][T32655] nbd: must specify a size in bytes for the device [ 1139.075283][T32615] tipc: Disabling bearer [ 1139.109439][ T13] bridge_slave_1: left allmulticast mode [ 1139.126138][ T13] bridge_slave_1: left promiscuous mode [ 1139.134062][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.187631][ T13] bridge_slave_0: left allmulticast mode [ 1139.193313][ T13] bridge_slave_0: left promiscuous mode [ 1139.214780][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.311526][T32670] netlink: 'syz.0.6837': attribute type 13 has an invalid length. [ 1139.344322][ T13] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1139.452075][T32675] xt_HMARK: spi-set and port-set can't be combined [ 1139.565980][T32678] netlink: 'syz.1.6841': attribute type 1 has an invalid length. [ 1139.958941][ T13] bond3 (unregistering): (slave bridge5): Releasing active interface [ 1140.018534][ T13] bond3 (unregistering): (slave bridge6): Releasing active interface [ 1140.298467][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.308676][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.323325][ T13] bond0 (unregistering): Released all slaves [ 1140.342577][ T13] bond1 (unregistering): Released all slaves [ 1140.458949][ T13] bond2 (unregistering): Released all slaves [ 1140.471438][ T13] bond3 (unregistering): Released all slaves [ 1140.582555][ T13] bond4 (unregistering): Released all slaves [ 1140.594679][ T13] bond5 (unregistering): Released all slaves [ 1140.635561][T32669] bond0: (slave bond_slave_1): Releasing backup interface [ 1140.843571][ T13] : left promiscuous mode [ 1140.925208][ T13] tipc: Disabling bearer [ 1140.947036][ T13] tipc: Disabling bearer [ 1140.964641][T32685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1140.981470][T32690] __nla_validate_parse: 5 callbacks suppressed [ 1140.981491][T32690] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6845'. [ 1141.010017][ T13] tipc: Disabling bearer [ 1141.026766][ T13] tipc: Left network mode [ 1141.126394][T32694] x_tables: duplicate underflow at hook 2 [ 1141.288486][T32700] netlink: 'syz.0.6848': attribute type 3 has an invalid length. [ 1141.296961][T32700] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1141.316626][ T5833] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1141.517701][T32710] netlink: 'syz.0.6851': attribute type 1 has an invalid length. [ 1141.652593][T32719] bond7 (unregistering): Released all slaves [ 1141.678231][T32714] netlink: 'syz.1.6853': attribute type 1 has an invalid length. [ 1141.687426][T32710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6851'. [ 1141.763796][T32714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1141.897162][T32724] bond1: (slave gretap2): making interface the new active one [ 1141.918555][T32724] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1142.134222][T32731] netem: change failed [ 1142.277827][ T13] hsr_slave_0: left promiscuous mode [ 1142.309483][ T13] hsr_slave_1: left promiscuous mode [ 1142.328008][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.310396][T32751] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1143.346716][T32751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1143.397325][T32751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1143.631669][T32758] net_ratelimit: 35 callbacks suppressed [ 1143.631688][T32758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.678728][T32758] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6862'. [ 1143.817792][ T13] IPVS: stop unused estimator thread 0... [ 1143.947198][ T303] bridge0: port 5(macvtap1) entered blocking state [ 1143.978815][ T303] bridge0: port 5(macvtap1) entered disabled state [ 1143.988290][ T303] macvtap1: entered allmulticast mode [ 1144.008741][ T303] bridge0: entered allmulticast mode [ 1144.016266][ T303] macvtap1: left allmulticast mode [ 1144.046350][ T303] bridge0: left allmulticast mode [ 1144.175709][T32765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1144.194585][ T312] xt_CT: No such helper "syz0" [ 1144.242511][ T304] wg1 speed is unknown, defaulting to 1000 [ 1144.570463][ T304] lo speed is unknown, defaulting to 1000 [ 1144.670913][ T326] netlink: 'syz.2.6869': attribute type 1 has an invalid length. [ 1144.682569][ T326] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1144.990941][ T345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6872'. [ 1145.117700][ T345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6872'. [ 1145.166910][ T345] netlink: 'syz.3.6872': attribute type 12 has an invalid length. [ 1145.226891][ T345] netlink: 'syz.3.6872': attribute type 11 has an invalid length. [ 1145.647944][ T362] syzkaller1: entered promiscuous mode [ 1145.677612][ T362] syzkaller1: entered allmulticast mode [ 1145.914427][T18146] hid (null): unknown global tag 0x1d [ 1145.994183][ T360] wg1 speed is unknown, defaulting to 1000 [ 1146.451013][ T367] netlink: 'syz.3.6876': attribute type 2 has an invalid length. [ 1146.467070][ T367] netlink: 'syz.3.6876': attribute type 1 has an invalid length. [ 1146.649814][ T380] netlink: 'syz.0.6878': attribute type 11 has an invalid length. [ 1146.715969][ T360] lo speed is unknown, defaulting to 1000 [ 1147.035594][ T388] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6880'. [ 1147.036017][ T385] wg1 speed is unknown, defaulting to 1000 [ 1147.282125][ T390] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6881'. [ 1147.482337][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.500015][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.520100][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.537324][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.555007][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x4 [ 1147.562331][ T385] lo speed is unknown, defaulting to 1000 [ 1147.566552][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.585351][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.603431][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.623621][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.637250][T18146] hid-generic 0005:0B57:0401.0003: unknown main item tag 0x0 [ 1147.644972][T18146] hid-generic 0005:0B57:0401.0003: unexpected long global item [ 1147.653539][T18146] hid-generic 0005:0B57:0401.0003: probe with driver hid-generic failed with error -22 [ 1147.825634][ T400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1147.956008][ T400] nbd: socks must be embedded in a SOCK_ITEM attr [ 1148.593562][ T411] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.6886'. [ 1149.006715][ T5833] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1149.022148][ T431] x_tables: duplicate entry at hook 1 [ 1149.073663][ T433] netlink: 'syz.2.6893': attribute type 16 has an invalid length. [ 1149.088470][ T433] netlink: 'syz.2.6893': attribute type 15 has an invalid length. [ 1149.158176][T14210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.168805][T14210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.388301][ T459] netlink: 'syz.4.6900': attribute type 4 has an invalid length. [ 1149.803692][ T487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6909'. [ 1149.959894][ T497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1149.972689][ T497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1150.015315][ T497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1150.363556][ T510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1150.612997][ T515] wg1 speed is unknown, defaulting to 1000 [ 1150.632547][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6915'. [ 1150.661698][ T521] netlink: 'syz.2.6915': attribute type 19 has an invalid length. [ 1150.700280][ T521] netlink: 'syz.2.6915': attribute type 20 has an invalid length. [ 1150.856389][ T515] lo speed is unknown, defaulting to 1000 [ 1151.242349][ T540] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1151.902483][ T588] wg1 speed is unknown, defaulting to 1000 [ 1152.067814][ T588] lo speed is unknown, defaulting to 1000 [ 1152.268554][ T592] __nla_validate_parse: 6 callbacks suppressed [ 1152.268571][ T592] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6935'. [ 1152.313104][ T592] netlink: 'syz.0.6935': attribute type 1 has an invalid length. [ 1152.342153][ T592] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6935'. [ 1152.522201][ T605] netlink: 'syz.1.6937': attribute type 83 has an invalid length. [ 1152.760124][ T625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1152.804053][ T625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1152.838254][ T626] netlink: 'syz.4.6938': attribute type 1 has an invalid length. [ 1152.850970][ T627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1152.863290][ T627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1152.937504][ T627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1152.957602][ T627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1153.292670][ T636] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1153.333215][ T636] wg1 speed is unknown, defaulting to 1000 [ 1153.407874][ T648] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 1153.512844][ T651] bridge0: entered promiscuous mode [ 1153.520765][ T651] bridge0: port 3(macvtap2) entered blocking state [ 1153.528553][ T651] bridge0: port 3(macvtap2) entered disabled state [ 1153.535802][ T651] macvtap2: entered allmulticast mode [ 1153.542317][ T651] bridge0: entered allmulticast mode [ 1153.553348][ T651] macvtap2: left allmulticast mode [ 1153.559775][ T651] bridge0: left allmulticast mode [ 1153.567842][ T651] bridge0: left promiscuous mode [ 1153.664130][ T636] lo speed is unknown, defaulting to 1000 [ 1154.379468][ T664] lo: entered allmulticast mode [ 1154.403204][ T656] lo: left allmulticast mode [ 1154.545146][ T673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1154.844440][ T687] wg1 speed is unknown, defaulting to 1000 [ 1154.863687][ T685] wg1 speed is unknown, defaulting to 1000 [ 1155.030711][ T697] netlink: 'syz.4.6959': attribute type 2 has an invalid length. [ 1155.091753][ T697] : entered promiscuous mode [ 1155.108168][ T687] lo speed is unknown, defaulting to 1000 [ 1155.205122][ T697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6959'. [ 1155.792016][ T685] lo speed is unknown, defaulting to 1000 [ 1156.131462][ T709] wg1 speed is unknown, defaulting to 1000 [ 1156.145904][ T30] audit: type=1800 audit(1767465428.502:17): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6965" name="memory.events" dev="tmpfs" ino=3013 res=0 errno=0 [ 1156.237884][ T721] ip6gre2: entered promiscuous mode [ 1156.422656][ T709] lo speed is unknown, defaulting to 1000 [ 1156.855947][ T36] ip6gretap1: left allmulticast mode [ 1156.880353][ T36] ip6gretap1: left promiscuous mode [ 1156.885724][ T36] bridge2: port 1(ip6gretap1) entered disabled state [ 1157.417107][ T36] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1157.889557][ T36] bond10 (unregistering): (slave bridge6): Releasing active interface [ 1158.125499][ T36] bond0 (unregistering): Released all slaves [ 1158.231636][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 1158.240503][ T36] bond1 (unregistering): Released all slaves [ 1158.252500][ T36] bond2 (unregistering): Released all slaves [ 1158.361483][ T36] bond3 (unregistering): Released all slaves [ 1158.470469][ T36] bond4 (unregistering): Released all slaves [ 1158.577919][ T36] bond5 (unregistering): Released all slaves [ 1158.688653][ T36] bond6 (unregistering): Released all slaves [ 1158.700873][ T36] bond7 (unregistering): Released all slaves [ 1158.811594][ T36] bond8 (unregistering): Released all slaves [ 1158.823768][ T36] bond9 (unregistering): Released all slaves [ 1158.835720][ T36] bond10 (unregistering): Released all slaves [ 1158.852068][ T747] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1158.877148][ T747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1159.017777][ T753] netlink: 'syz.4.6974': attribute type 10 has an invalid length. [ 1159.092379][ T36] : left promiscuous mode [ 1159.243429][ T36] hmac(sha224): left promiscuous mode [ 1159.332296][ T36] : left promiscuous mode [ 1159.332886][ T761] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1159.381186][ T763] syzkaller0: entered promiscuous mode [ 1159.387546][ T763] syzkaller0: entered allmulticast mode [ 1159.426664][ T36] æÿîÿ: left promiscuous mode [ 1159.498521][ T36] m1Ie5n: left promiscuous mode [ 1159.579846][ T36] tipc: Left network mode [ 1159.817927][ T788] 8021q: adding VLAN 0 to HW filter on device ` [ 1159.829176][ T791] __nla_validate_parse: 1 callbacks suppressed [ 1159.829196][ T791] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6982'. [ 1159.844811][ T788] batman_adv: batadv0: Interface activated: dummy0 [ 1159.861516][ T788] batadv0: mtu less than device minimum [ 1159.906809][ T794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1159.920913][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1159.932702][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1159.943810][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1159.955491][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1159.967223][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1159.978919][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1159.990627][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.002305][ T788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.054368][T18146] lo speed is unknown, defaulting to 1000 [ 1160.055286][ T796] netlink: 63 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1160.066697][T18146] syz2: Port: 1 Link ACTIVE [ 1160.125269][ T799] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1160.337157][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6988'. [ 1160.345917][ T815] wg1 speed is unknown, defaulting to 1000 [ 1160.383496][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1160.394276][ T817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1160.791565][ T815] lo speed is unknown, defaulting to 1000 [ 1161.067435][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1161.097748][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1161.256703][ T36] hsr_slave_0: left promiscuous mode [ 1161.271447][ T36] hsr_slave_1: left promiscuous mode [ 1161.360685][ T873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7002'. [ 1161.474050][ T879] IPv6: Can't replace route, no match found [ 1161.674141][ T894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1162.417665][ T36] batadv0 (unregistering): left allmulticast mode [ 1163.244529][ T909] batman_adv: batadv0: Interface deactivated: dummy0 [ 1163.272736][ T909] veth1_to_hsr: left allmulticast mode [ 1163.289930][ T909] sit1: left promiscuous mode [ 1163.295349][ T909] sit1: left allmulticast mode [ 1163.302362][ T909] macsec1: left promiscuous mode [ 1163.307630][ T909] macsec1: left allmulticast mode [ 1163.314615][ T909] bond1: left allmulticast mode [ 1163.320729][ T909] veth9: left promiscuous mode [ 1163.326029][ T909] tipc: Resetting bearer [ 1163.330938][ T927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1163.339034][ T927] IPv6: NLM_F_CREATE should be set when creating new route [ 1163.346255][ T927] IPv6: NLM_F_CREATE should be set when creating new route [ 1163.385707][ T909] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 1163.393494][ T909] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 1163.417368][ T909] geneve2: left promiscuous mode [ 1163.598122][ T909] mac80211_hwsim hwsim62 wlan1: left promiscuous mode [ 1163.635489][ T909] macvtap1: left promiscuous mode [ 1163.734993][ T909] ip6gre2: left promiscuous mode [ 1163.766153][T29293] lo speed is unknown, defaulting to 1000 [ 1163.777809][T29293] syz2: Port: 1 Link DOWN [ 1163.843593][ T1005] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.866818][ T1005] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 1163.875351][ T1005] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.896792][ T1005] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 1163.939599][ T1005] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.989912][ T1005] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 1164.014249][ T1005] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1164.036744][ T1005] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 1164.173493][ T957] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1164.272199][ T36] IPVS: stop unused estimator thread 0... [ 1164.308291][ T967] team0: Port device bridge3 added [ 1164.332328][ T971] tipc: Enabled bearer , priority 0 [ 1164.345342][ T971] syzkaller0: entered promiscuous mode [ 1164.359176][ T971] syzkaller0: entered allmulticast mode [ 1164.375271][ T973] bridge0: port 2(team0) entered blocking state [ 1164.382276][ T973] bridge0: port 2(team0) entered disabled state [ 1164.388797][ T973] team0: entered allmulticast mode [ 1164.394112][ T973] team_slave_0: entered allmulticast mode [ 1164.400194][ T973] team_slave_1: entered allmulticast mode [ 1164.408541][ T973] bridge3: entered allmulticast mode [ 1164.418439][ T973] team0: entered promiscuous mode [ 1164.423496][ T973] team_slave_0: entered promiscuous mode [ 1164.429584][ T973] team_slave_1: entered promiscuous mode [ 1164.435763][ T973] bridge3: entered promiscuous mode [ 1164.475504][ T955] wg1 speed is unknown, defaulting to 1000 [ 1164.539159][ T970] tipc: Resetting bearer [ 1164.590635][ T970] tipc: Disabling bearer [ 1165.055280][ T995] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1165.081537][ T995] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1165.098715][ T995] tipc: Resetting bearer [ 1165.127447][ T955] lo speed is unknown, defaulting to 1000 [ 1165.626359][ T1007] wg1 speed is unknown, defaulting to 1000 [ 1165.997317][ T1007] lo speed is unknown, defaulting to 1000 [ 1166.205588][ T1021] pim6reg1: entered promiscuous mode [ 1166.211129][ T1021] pim6reg1: entered allmulticast mode [ 1166.343274][ T1021] __nla_validate_parse: 12 callbacks suppressed [ 1166.343293][ T1021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1166.372652][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7042'. [ 1166.668281][ T1039] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7046'. [ 1166.705990][ T1039] netlink: 'syz.1.7046': attribute type 10 has an invalid length. [ 1166.869803][ T1057] netlink: 'syz.4.7050': attribute type 1 has an invalid length. [ 1166.893938][ T1057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1167.167186][ T1078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7055'. [ 1167.176525][ T1078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7055'. [ 1167.199078][ T1078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 1167.228348][ T1078] erspan1: entered allmulticast mode [ 1167.285975][T28356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1167.331374][T28356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1167.340322][T28356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1167.350357][T28356] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1167.358769][T28356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1167.397925][ T1085] wg1 speed is unknown, defaulting to 1000 [ 1167.528647][ T1098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1167.634224][ T1103] wg1 speed is unknown, defaulting to 1000 [ 1167.709053][ T1085] lo speed is unknown, defaulting to 1000 [ 1167.928973][T27070] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1167.940906][T27070] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1167.949343][T27070] CPU: 1 UID: 0 PID: 27070 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 1167.958980][T27070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.969057][T27070] RIP: 0010:klist_del+0x49/0x110 [ 1167.974085][T27070] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 03 d7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 03 d7 f6 4d 8b 7e 58 4c 89 f7 e8 1f 11 [ 1167.993694][T27070] RSP: 0018:ffffc90004ddf7a8 EFLAGS: 00010202 [ 1167.999800][T27070] RAX: 000000000000000b RBX: ffff88802cd95860 RCX: ffff8880a4928000 [ 1168.007780][T27070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 1168.015762][T27070] RBP: ffffc90004ddf8d0 R08: ffff88803098d0f3 R09: 1ffff11006131a1e [ 1168.023739][T27070] R10: dffffc0000000000 R11: ffffed1006131a1f R12: dffffc0000000000 [ 1168.031702][T27070] R13: 1ffff110059b2b0c R14: 0000000000000000 R15: ffff88806c262758 [ 1168.039662][T27070] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1168.048580][T27070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.055235][T27070] CR2: 000000110c35f1ec CR3: 0000000058964000 CR4: 00000000003526f0 [ 1168.063194][T27070] Call Trace: [ 1168.066460][T27070] [ 1168.069381][T27070] device_del+0x280/0x8e0 [ 1168.073803][T27070] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1168.079050][T27070] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 1168.085154][T27070] ? __pfx_device_del+0x10/0x10 [ 1168.090009][T27070] ? netdev_unregister_kobject+0x344/0x450 [ 1168.095937][T27070] unregister_netdevice_many_notify+0x1ddd/0x2340 [ 1168.102404][T27070] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1168.109179][T27070] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1168.114253][T27070] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1168.119268][T27070] unregister_netdev+0x157/0x1f0 [ 1168.124202][T27070] ? __pfx_unregister_netdev+0x10/0x10 [ 1168.129672][T27070] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1168.135490][T27070] bnep_session+0x29a5/0x2bd0 [ 1168.140261][T27070] ? __lock_acquire+0x6b6/0x2cf0 [ 1168.145221][T27070] ? __pfx_bnep_session+0x10/0x10 [ 1168.150244][T27070] ? __pfx_woken_wake_function+0x10/0x10 [ 1168.155882][T27070] ? __kthread_parkme+0x7b/0x200 [ 1168.160825][T27070] ? __kthread_parkme+0x1a1/0x200 [ 1168.165852][T27070] kthread+0x711/0x8a0 [ 1168.169917][T27070] ? __pfx_bnep_session+0x10/0x10 [ 1168.174946][T27070] ? __pfx_kthread+0x10/0x10 [ 1168.179543][T27070] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.184744][T27070] ? __pfx_kthread+0x10/0x10 [ 1168.189333][T27070] ret_from_fork+0x510/0xa50 [ 1168.193919][T27070] ? __pfx_ret_from_fork+0x10/0x10 [ 1168.199020][T27070] ? __switch_to+0xc9e/0x1480 [ 1168.203730][T27070] ? __pfx_kthread+0x10/0x10 [ 1168.208318][T27070] ret_from_fork_asm+0x1a/0x30 [ 1168.213081][T27070] [ 1168.216089][T27070] Modules linked in: [ 1168.221151][T27070] ---[ end trace 0000000000000000 ]--- [ 1168.235183][T27070] RIP: 0010:klist_del+0x49/0x110 [ 1168.240200][T27070] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 03 d7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 03 d7 f6 4d 8b 7e 58 4c 89 f7 e8 1f 11 [ 1168.261400][T27070] RSP: 0018:ffffc90004ddf7a8 EFLAGS: 00010202 [ 1168.267537][T27070] RAX: 000000000000000b RBX: ffff88802cd95860 RCX: ffff8880a4928000 [ 1168.275543][T27070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 1168.283898][T27070] RBP: ffffc90004ddf8d0 R08: ffff88803098d0f3 R09: 1ffff11006131a1e [ 1168.291932][T27070] R10: dffffc0000000000 R11: ffffed1006131a1f R12: dffffc0000000000 [ 1168.300262][T27070] R13: 1ffff110059b2b0c R14: 0000000000000000 R15: ffff88806c262758 [ 1168.308317][T27070] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1168.317384][T27070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.324052][T27070] CR2: 000000110c36958c CR3: 000000008c724000 CR4: 00000000003526f0 [ 1168.332245][T27070] Kernel panic - not syncing: Fatal exception [ 1168.338892][T27070] Kernel Offset: disabled [ 1168.343217][T27070] Rebooting in 86400 seconds..