last executing test programs: 9.099104745s ago: executing program 3 (id=3325): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000cebd3a458481e1bbfbf8c2a0c5d9c9bb4d79f5715461583d1df603fee50eef", @ANYRES16=r2, @ANYBLOB="01000000000000000080110000001400098008000100000000000800020000000000"], 0x28}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8181000086dd60fec00000483a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b08800000000fe8000000000000000000000000000aafe8000000000000000000000000000aa1100000000000000fafb17c133d11e59bb99c35bdfcf89f5"], 0x0) clock_gettime(0x3, &(0x7f0000000000)) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=ANY=[@ANYBLOB="a15d0000", @ANYRES16=r5, @ANYBLOB="010000000000000000000e0000000a000e001c0401009d070000"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async, rerun: 32) socket(0x1, 0x6, 0x4000000) (rerun: 32) socket$rxrpc(0x21, 0x2, 0x2) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$isdn(0x22, 0x3, 0x26) (async) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000002880)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r9) (async, rerun: 32) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) (async, rerun: 32) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) 8.834760706s ago: executing program 3 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYBLOB], 0x48}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c00038004000400"], 0x38}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r11, 0x400442c8, &(0x7f0000000180)={r0, 0xa3c0, 0x4, "423257dc5b1a7c0d4aa51cdfc7aaaa75446ebe47c0e861593f855231a2aa5a90ccabc2f8d756973a4f7c6715cc85b4a1454b4f7720e473aea1bc289330fc9047bd3c7615844dd6a5083d6d2600726e54d8c3e4e5f3ca45a9df4ae00028310e4dec290f4f3d42cf5e32143803b3f2b9dbc1d8fb11e50251df75d2c757cd2b062c8f1f6cd9726786f535684080d73d9cbfdc999a71d508978e8de2afd146998f49dba5af8331e5ee4c53cda47d3ef49e7b2465029215b048d95ca2a48dde7de96eeaf7c5014da2ae26"}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x5}]}}]}, 0x38}}, 0x0) 8.239687524s ago: executing program 3 (id=3334): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec49acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec49acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) 7.895777393s ago: executing program 3 (id=3336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@empty]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) 7.674866324s ago: executing program 3 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x2, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0x16}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, r8, 0x1, 0x4}, 0x14) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r10, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 7.283753082s ago: executing program 3 (id=3342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) 5.077171714s ago: executing program 4 (id=3364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080013400000000108000640200000000500010006000000050005000200000405000400000000000900020073797a31000000001500030068"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r3) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r4, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) socket(0x1d, 0x2, 0x0) r7 = epoll_create1(0x80000) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x1a000201d}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r9, @ANYRESHEX=0x0], 0x34}}, 0x40801) socket$nl_crypto(0x10, 0x3, 0x15) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 2.496450047s ago: executing program 4 (id=3376): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async, rerun: 32) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @local, @mcast2, {[], @ndisc_ra}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f3680900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be08"], 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0)=0x400, 0x4) 2.043155051s ago: executing program 4 (id=3384): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x4, r4}, 0x14) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3000000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x400}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x9, 0xe, 0xe, 0x8, 0x2, 0xe, 0x1, 0x7, 0x0, 0x6, 0x5, 0x8, 0x0, 0xf, 0xa], 0x0, [0xb98, 0x1, 0x3, 0x81, 0x3, 0x7, 0x0, 0x800, 0x3, 0xfd, 0x3e, 0x3, 0x2, 0x9, 0x4, 0x7], [0x4, 0x100, 0x4, 0x7fff, 0x1ff, 0x7, 0x8, 0xc04, 0x800, 0xff, 0x8, 0x8, 0x9a22, 0x56, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x798}]}}]}, 0xb8}}, 0x0) 1.8280336s ago: executing program 0 (id=3386): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x800}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x49004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) 1.727607939s ago: executing program 4 (id=3387): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf30400000081"], 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x1b, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a300000000020000000060a01020000000000000000050000020900010073797a30000000002c000000060a010400000000000000000100000008000b4000000000040004800900010073797a300000000014000000110001000000000000000000000a0000"], 0x94}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 1.696135148s ago: executing program 2 (id=3388): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000ff07000000000000", @ANYRES32=r0, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000100000000000007fb466b5008000000000000000000000000087bcb97a21568ba69a02950b346e124dfee4da43d93476bcd41511cebe9bc342b0196a1163a7a6400640c654481072edd3227c83f5cfeb"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0004000000000000b7080000000000007b8af8ff00000000000000a6020000f8ff00000080000000000000b70400000000000085000000330002000000237b6db7797d91e4c8a33aa8923834d9c0a5a034c92d5f1420"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122'], 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r5, 0x0) ioctl$FIBMAP(r5, 0x1, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r2, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) 1.464441094s ago: executing program 2 (id=3390): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r9, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xfff2, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="100000001000010000000000000000000000000a38000000160a0108000000000035bc487cb255c60000020000000900020073797a32000000000903000073797a30000000000c0003800800024000000000140097d3b9e2f7b5000011000102000000000000"], 0x60}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3a, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4d3a46e177abbed5001ef11bd2f0c66301c685c93d118e7c89799c396822"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ipvlan0\x00', 'wg1\x00', {}, {}, 0x3a, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100}, 0x50) 1.302891617s ago: executing program 1 (id=3392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000000000005001b00000000fe83a3f85e4e8e59a622190bb6d36a0000000000000000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000006000000000001006140000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000006c9affff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x5c}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd4c", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.251664203s ago: executing program 2 (id=3393): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @empty}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002000000fd0000000031000008000400", @ANYRES32=0x0, @ANYBLOB="a7451b0006000000"], 0x2c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8954, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @random="996386d83c53"}, 0x5a, {0x2, 0x4e1d, @private=0x4}, 'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x1, 0xffff}, {0x0, 0x4}}, ["", ""]}, 0x24}}, 0x6008010) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) close(r1) 1.24380308s ago: executing program 0 (id=3394): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x2d, 0x0, &(0x7f0000000e40)) (async) getsockopt$sock_buf(r1, 0x1, 0x2d, 0x0, &(0x7f0000000e40)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x10, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e21, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7e7]}, 0xfffffffe, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) (async) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x28, 0x20, 0x1, 0x401}, &(0x7f0000000280)=0x18) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='rpcgss_svc_seqno_bad\x00', r3, 0x0, 0x1}, 0x18) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'gre0\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'gre0\x00', 0x200}) 811.460573ms ago: executing program 0 (id=3395): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async, rerun: 32) socket(0xb, 0x80000, 0x1) (async, rerun: 32) unshare(0x20020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 762.784802ms ago: executing program 2 (id=3396): unshare(0x22020400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05005600080054"], 0xfdef) 712.501252ms ago: executing program 1 (id=3397): accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) (async) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@delqdisc={0x24, 0x25, 0x310, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x19}, {0x0, 0xffe0}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000140)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000680)={'nat\x00', 0x0, [0x0, 0xf, 0xffffffc6, 0x6, 0xc]}, &(0x7f0000000600)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="61153000000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf590000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab69a000248e167253472dc89a57c10bb08395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb845129361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cbe8d23810052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b0679544"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x80}, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x80}, 0x8}, 0x94) 612.969014ms ago: executing program 0 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_init_net_socket$ax25(0x3, 0x2, 0x3) 611.55991ms ago: executing program 1 (id=3399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0x10}, {0x1, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0x10}, {0x1, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) 515.434446ms ago: executing program 4 (id=3400): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000b000000000000e6e2e99046dd9360f91a673ed8b33ee4d7efe0208d585cd3509656a897fd0019a295c39162a71a91af2fb1a84b014e23f797d4875ca86a7235012057926854dddcd0cb05a4fc4521325a15592d1f502b17a1aa32c507ca1c997c674790cea6b2cc9358e8b62059763e00f4eee76d6db108394a9cf63bb958def6df1162d3abbbe2abc81f5bbd8930c552bee683817c"], 0x0, 0x26, 0x0, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18df414acc6b6b0000040000000040000002000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r4, 0x4, 0x9a, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x8090) 403.650786ms ago: executing program 0 (id=3401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES8=r2, @ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 402.663387ms ago: executing program 4 (id=3402): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={&(0x7f0000000a00)="947fb024e77286227592b5ee8ce552756be82d52290c9e23c29603e68a832c0fe231002a06a9898daf13064eab28cab07e6d4f3b2ac44f7743b509f66b18f0602d9935f510d776142cf220e30b38d80f9be90a74733e7e81f194e57b28da56190a3dfb48a2e95dd54bb9b12113aa78fa7c0d4622ef0e9ac8d34b0284a2023d1df978ada47d3f142fbc6e9ec7ee8a8b843878c04f60de753bb046224c3699aab80bb9c22fd5bc9b53346f26e755f3bc423dcfd25e7875b72663090cdab00509ca234f89ef05769b9b", &(0x7f0000000b00)=""/172, &(0x7f0000000bc0)="28c2165f38ddcf30f1d3f5006b74b30e628d95433547f7470c6f89b8737322", &(0x7f0000000c00)="5e7725257003f986f34ead8a7604c2b2906da881b89a8327cb118e795fcb0dae9cf7fa0a4260a12423527bb07f7333cfc04bf6a34e493d855ce35173a4560249a3973aaab091e5afa2a89f55b79a54227127f0bb6394a8ec64950cab6f0f3169b087d3eb7002c3f867ee8a6878f344787d1244cddc5cd990ea1e987dc9a6777706a7d1f12420cfdc262addcfd2077874717ac92ee0c62b669bf4ad46470b9ac0", 0x2, 0xffffffffffffffff, 0xcc09c48075c2772f}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={&(0x7f0000000a00)="947fb024e77286227592b5ee8ce552756be82d52290c9e23c29603e68a832c0fe231002a06a9898daf13064eab28cab07e6d4f3b2ac44f7743b509f66b18f0602d9935f510d776142cf220e30b38d80f9be90a74733e7e81f194e57b28da56190a3dfb48a2e95dd54bb9b12113aa78fa7c0d4622ef0e9ac8d34b0284a2023d1df978ada47d3f142fbc6e9ec7ee8a8b843878c04f60de753bb046224c3699aab80bb9c22fd5bc9b53346f26e755f3bc423dcfd25e7875b72663090cdab00509ca234f89ef05769b9b", &(0x7f0000000b00)=""/172, &(0x7f0000000bc0)="28c2165f38ddcf30f1d3f5006b74b30e628d95433547f7470c6f89b8737322", &(0x7f0000000c00)="5e7725257003f986f34ead8a7604c2b2906da881b89a8327cb118e795fcb0dae9cf7fa0a4260a12423527bb07f7333cfc04bf6a34e493d855ce35173a4560249a3973aaab091e5afa2a89f55b79a54227127f0bb6394a8ec64950cab6f0f3169b087d3eb7002c3f867ee8a6878f344787d1244cddc5cd990ea1e987dc9a6777706a7d1f12420cfdc262addcfd2077874717ac92ee0c62b669bf4ad46470b9ac0", 0x2, 0xffffffffffffffff, 0xcc09c48075c2772f}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x34, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000cc0)={'wg1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) socket(0x2b, 0x1, 0x1) (async) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r7 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001080)={0x87, 0x4, 0x1, 0x0, 0x0, [@loopback, @empty]}, 0x28) (async) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001080)={0x87, 0x4, 0x1, 0x0, 0x0, [@loopback, @empty]}, 0x28) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x5, 0x6, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7, 0x7, 0x1}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0xf4, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x404c001}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0xf4, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x404c001}, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="052ca8b5c920b3ef10877e7a20f78834ce02e4d53f9f7e0a95ce06e93d4872fd84d6b27c2c8f928fb67c82bb6a2502e8d373d1616a18f6f4b5d4fbad931f570cb56f33442ff4a610a8ef00", 0x4b}, {0x0}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x0) unshare(0x62000000) socket$inet6(0xa, 0x80001, 0x0) (async) socket$inet6(0xa, 0x80001, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000001100)=""/4102, &(0x7f00000009c0)=0x1006) (async) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000001100)=""/4102, &(0x7f00000009c0)=0x1006) sendmsg$nl_route(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@ipv6_newaddr={0x28, 0x14, 0x2, 0x70bd2a, 0x25dfdbfc, {0xa, 0x38, 0x20, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x221}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) (async) sendmsg$nl_route(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@ipv6_newaddr={0x28, 0x14, 0x2, 0x70bd2a, 0x25dfdbfc, {0xa, 0x38, 0x20, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x221}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) 402.407772ms ago: executing program 2 (id=3403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x40002, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}}, 0x40c4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) pwrite64(r3, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x4, 0x7, 0x5, 0x6}, @ldst={0x3, 0x2, 0x1, 0x6, 0x3, 0x4, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, @generic={0x7f, 0x2, 0x9, 0x8, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0xcd, &(0x7f0000000380)=""/205, 0x41000, 0x10, '\x00', r5, 0x0, r3, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xf85c, r3, 0x0, &(0x7f0000000480)=[r3, r3], 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 342.508723ms ago: executing program 0 (id=3404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 323.754394ms ago: executing program 1 (id=3405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1e0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x601}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2da8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5dc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x95}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcbd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xdf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x603}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 127.623079ms ago: executing program 1 (id=3406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xaa, 0xa9, @random="c53dad75ce2f7e3a846196b7b3a2d221d95de6d3a2339fb2b39fc08970d5c495288bffc581d67be0fcc17c0293224215b1610551f8ef5b45fcc656a68ccf20347610e1635066de038f308cf91a1a49da0e394516b8e666f39cf98c811b6123f0af4a92afee8c116974f203a7122a479d9ba6ea05f027e46560433870758beb07b0351825f3c80ee12f71a3ba50c21a93a05b4b0b4ea4b7e5507d014dcc8b01b57489c9b28ebb"}, @handle=@pci={{0x8}, {0x11}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000807) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x14, 0x4, @remote}}}]}]}, 0x68}}, 0x20004044) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/ipc\x00') (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x1) (async) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x44880) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x84) (rerun: 32) bind$x25(r4, &(0x7f0000000640)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f00000006c0)=0xd7, 0x4) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r8, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) sendmsg$nl_xfrm(r9, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=@delpolicy={0x118, 0x14, 0x100, 0x70bd2b, 0x25dfdbfb, {{@in6=@private0, @in6=@mcast1, 0x4e24, 0x0, 0x4e23, 0xac9, 0x2, 0x20, 0xa0, 0x6c, r10, r11}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @coaddr={0x14, 0xe, @in6=@local}, @coaddr={0x14, 0xe, @in=@broadcast}, @algo_auth_trunc={0x8c, 0x14, {{'blake2s-224-x86\x00'}, 0x200, 0x180, "ac970584cdfca4939a624b5bad8eb09f206f4b41eb7e9ecf2bfbb269ab8ca3be886d27b7056c716fbc473a41a659d68fc6f052b477317d6bc25f3705b930b5ec"}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) recvmsg$unix(r9, &(0x7f0000000b00)={&(0x7f0000000a40), 0x6e, &(0x7f0000000ac0)}, 0x50) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c084}, 0xc011) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)=@getsadinfo={0x1b4, 0x23, 0x0, 0x70bd27, 0x25dfdbfd, 0x0, [@XFRMA_IF_ID={0x8, 0x1f, 0x100}, @srcaddr={0x14, 0xd, @in6=@remote}, @tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d5, 0xa305e670e48a8ce9}, 0x2, @in=@local, 0x3500, 0x1, 0x1, 0x1, 0xdd, 0x7, 0x4}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x2, 0x2, 0xe, 0x2, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0xff}, 0xa, @in6=@empty, 0x3503, 0x7, 0x2, 0x7, 0x7, 0x17362db1, 0x3300000}]}, @lifetime_val={0x24, 0x9, {0x1f, 0x3fdd, 0x10001, 0x4}}, @offload={0xc, 0x1c, {r10, 0x2}}, @algo_comp={0x5b, 0x3, {{'lzs\x00'}, 0x98, "1f623d0c42448f9cf71e910c065428c7ab795e"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd27, 0x70bd27, 0x70bd26, 0x70bd2d, 0xffffffff, [0xc, 0xffffffff, 0x8]}}, @mark={0xc, 0x15, {0x35075a, 0x7}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r2) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r13) (async) getsockname$packet(r9, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000f80)=0x14) sendmsg$nl_route(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@ipv4_delrule={0x4c, 0x21, 0x830, 0x70bd2d, 0x25dfdbfe, {0x2, 0x84, 0x80, 0x1, 0x35, 0x0, 0x0, 0x4, 0x2}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x1de}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x7}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffffe}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4) 75.656352ms ago: executing program 2 (id=3407): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x3, [{@empty, 0x8}, {@local, 0x5}, {@local, 0x8001}]}]}}, @redirect={0x8, 0x1, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x1, 0x64, 0xff, 0x0, 0x89, 0x0, @remote, @remote}, "b83f02fcdbd5a4d8"}}}}}, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e32eb2b75ab926e1c9aa78d6b98d21f745a0f46a3facf1db3dd29e99530f12b3643b9114f83c1517c08804bf647ef6c3b0892be5fed914dd8acdbf53808fb7ef14c2262bcfe84defa2c27932d0e8563a656c70b687b9fa090dc3edff5b4d99a43f759d94d8b1152299080438387ca858b06fca1b21478d83d838fdc2d2fe5477249f64b8c7015d875cf1cb82a04b052fc6e696b3dbd2ddf7bf489fa674d0afb42abbfed2f2f05706aa02b7779890", 0xae}, {&(0x7f0000000180)="ea1ff340df84aa0bfd5e27dac85b621a80e9d824873b77b822a3521fc6a9568200a678033f2530c4afbeb217c9", 0x2d}, {&(0x7f00000002c0)="5f872ad0048ba71a66ed8ca830687879ca25705b5da2dc5c4cc0b2b6e5016fecf41c4c6358ad29b7f08b688d583deb84bcbdeffee53286bba11a6982921087989bbd5eac3d1a6e885f751a5213b4d2ea4af8db45ea896e0524a52684f3e691a3b15050f2b51b94bf1e306f8bdfb28bd1cf3736e79e86ba8658ab35de2f03aa50fa", 0x81}, {&(0x7f0000000380)="e2bac528c90fd9fa6ec7e2c077041025416784579719c8bc537f2bb6d8f1562f1b1ede550d354988a43d7336913c7d2593a9a7e3d0858fae56a926f96d5a1b15bd36886b2f6fa6556acf84a0656c12f2aa65cec01c3af555edd318cf89b67e0bea6a0fb47fe5df12fc852e60fb2838cc468a28b2ce8ff3cef8d120f923989a994ce7b98bcb95d37d30297e5814fc27372baed7a69da5512d05df", 0x9a}], 0x4, &(0x7f0000000440)=[{0x48, 0x10b, 0xd, "56acf777ad5b4e5f3482cd8f0bf095a0798bb44136f3754418e62242e6d276834eb3127bc4a179a1b6fbe5ae9286d3ebdedf53"}, {0xf8, 0x114, 0x9, "22ca0868ba17d5a0f7d700ed22982758918d95b9838691f00e7f4f64fe2f64c2ff27494a4565084a8cbef898c66362e80c212c1e518cfc4c3b59270c5b577e47b21630b4e1bdf03043f9a9ac1561b5d8409352355dbc0b6572824c6a5c03557805910e936a24e2d510c7444b582ecaf3ef0f0efa3efa44c408cdffd7c5547272fd46838899a4d8c5996d4247b242b8dd6774aacec4b4ef3929cee6197e51303ed32898078fd7736c7644a7012a720aa42ce5543a56e7ef188f3159d95e153ee267840d255f7dbf9a8d1373288a830527b296712ce04fd1e28ad7eca571e12bb73ef7fb8b5ab93a"}, {0x28, 0x10f, 0x6ee, "99a595a50548d161d33a3ab73c6458aa78c5c8"}, {0x1010, 0x3c, 0x1, "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"}, {0xf8, 0x108, 0x4, "e7d8a78cc53aefc352257900e5a27cea067fe025fe8e4ccd257ea6eb7a66acb2c30736ad018cd29851d48dddb1247b97bec8054a540eeabccf9bf04193906a706a4a0f8bdec557798c44bad8d8503b6e4d2ba0e06745b075e3e4cee2eb0d5e2f17e2d474bf9b38200692b5294372edfc1d5e5a7ab15125306f0059ef006662a923a4c88e8155e63731ba3bedfa8a971603c120080fd26bcc5f362e03b33896dd4d2be99879389a4ff64ade874735a775986476b46661a866ce57ac23ae7a970f1fb3a1de5d621983d4013758a042392852f39a0c614c707cd687232ad9990cb9d136b0a3c3a7"}, {0xd8, 0x103, 0x6, "00707f9472bcb538b70a67fcd2867ba38e07b07ce9dd77915042aee5511c22a338d6e0dec33357715fedafbabfec157d63ad3d733531755e0592bb78b781746f1ebf795a7358416ef9cc683429faf337140e9ca4adb8ec1d86b81dde23e4ae36d85c616ba0d5d70e8588ede902eb0dbd4e9db797a3d48993ae446682968eac22849376ae509d6956fce7d00ef9584453e67437c1afaea68ada5a1a7817d568852049be8957128da965fd2b115075cf5db9fa86ec52656402b23831b9eca23af5a19434548084"}, {0xc8, 0x104, 0x9, "f4d18cb8e3fca743e40f37b6abcc23488516c7a39f03f6f0305d123d82c7809984db7a827af0ae8d82179ad7a192bab19a73cb6a27b6da9a55717bf6729b76e7e60a265d0823a4f88543bfbc5bdd1d27f2ca0021f3739d3a3e795d1e4fecabd07b9b2c555462bfe491786f7235bfcd09de65a00a4b5357ed20c2ad6d082db07632e41bcaad38da77c4b90212d15da2059696da4e592cc2c992de204464b8cb950f7fe927a58f982a34ff89d38c7ed6143c2ec2b525"}, {0x1010, 0x101, 0x7, "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"}], 0x2420}, 0x0) 0s ago: executing program 1 (id=3408): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0xc96d) (async) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0xc96d) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="e794cc407016f337ed7f041e694c508ca8d0fb72810ac6efb2dfb96eb9ac9d6e6897afee0e5b642e31098b61be232146b4b165135ad2d32f819f4b5ba0efe4a72d43653284a4f6b1750eb10aa72fb273f19fb3e7aa9dc7c429ca70e55929a19a63d7551c9ad30234e81cdda1d93b780c5aed47ab8abd2d6d8a6ce6d20dbcc67586bd816e8aecb41bc6f2505927e126ce79753a4c023456612f958d0adb799494dd52674b6478bbfbfbdb1033871f", 0xae}, {&(0x7f0000000200)="00f206000a000073", 0x8}, {&(0x7f0000000340)="1bb3a7116b5a320686ffc793c2fea66f69e64910b4efe7058a645010c239de772d2d304313a57b0894aa37f5f517cd239b62bf315757835db3486b944d288216137b04893ca816d5f915106c07db30e72d451a71e0e5bb67d2d39820c0c4b7d26b4d2f6ada2ec60ad0cf06354a1b75031a70d30b5dcdfc40e25d6cfc95fc624abb9512c98126bf3bd6f5ff019e9343225f0c55b5bfd209b3", 0x98}], 0x3, 0x0, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="6712010000000000fe8000000000000000000000000000bbfc010000000000000000000000000001fe800000000000000000000000000027fe880000000000000000000000000101fc010000000000000000020000000000000001ff020000000000000000000000000001fc020000000007000000000000000001eb000000000000000000ffffe0000001"], 0x98) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) kernel console output (not intermixed with test programs): 499': attribute type 1 has an invalid length. [ 234.748678][T11213] Unsupported ieee802154 address type: 0 [ 234.849582][T11211] bond15: (slave bridge3): making interface the new active one [ 234.862397][T11217] netlink: 'syz.1.1499': attribute type 10 has an invalid length. [ 234.887623][T11211] bond15: (slave bridge3): Enslaving as an active interface with an up link [ 236.202686][T11281] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1521'. [ 236.573548][T11300] syzkaller0: entered promiscuous mode [ 236.579165][T11300] syzkaller0: entered allmulticast mode [ 236.682330][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 236.711775][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 237.206121][T11340] tc_dump_action: action bad kind [ 237.218383][T11339] tc_dump_action: action bad kind [ 237.485201][T11356] netlink: 'syz.1.1541': attribute type 26 has an invalid length. [ 237.685009][T11366] netlink: 'syz.0.1544': attribute type 10 has an invalid length. [ 237.708208][T11366] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 237.734848][T11366] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 237.770774][T11371] netlink: 'syz.2.1545': attribute type 1 has an invalid length. [ 237.834145][T11371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1545'. [ 237.998919][T11384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.257309][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1550'. [ 238.279074][T11397] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 238.591114][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 238.729523][T11411] bond9: option lp_interval: invalid value (0) [ 238.771630][T11411] bond9: option lp_interval: allowed values 1 - 2147483647 [ 238.820936][T11411] bond9 (unregistering): Released all slaves [ 238.918644][T11410] bond9: option lp_interval: invalid value (0) [ 238.931163][T11410] bond9: option lp_interval: allowed values 1 - 2147483647 [ 238.941774][T11410] bond9 (unregistering): Released all slaves [ 238.968277][T11420] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 238.988442][T11416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1562'. [ 239.461206][T11449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1571'. [ 239.531491][T11445] netlink: 1120 bytes leftover after parsing attributes in process `syz.4.1568'. [ 239.541120][T11445] netlink: 1120 bytes leftover after parsing attributes in process `syz.4.1568'. [ 239.818354][T11455] bond9: option min_links: invalid value (18446744073709551614) [ 239.853837][T11455] bond9: option min_links: allowed values 0 - 2147483647 [ 239.870889][T11455] bond9 (unregistering): Released all slaves [ 239.970989][T11469] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.978378][T11469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.608937][T11490] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 241.565298][T11546] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 241.572850][T11546] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 241.658491][T11554] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 242.103567][T11561] bond5: option miimon: invalid value (18446744073709551585) [ 242.122655][T11561] bond5: option miimon: allowed values 0 - 2147483647 [ 242.150147][T11561] bond5 (unregistering): Released all slaves [ 242.156428][T11574] __nla_validate_parse: 3 callbacks suppressed [ 242.156457][T11574] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1611'. [ 242.231896][T11575] bridge0: port 3(team0) entered disabled state [ 242.350627][T11575] team0 (unregistering): left allmulticast mode [ 242.357397][T11575] team_slave_0: left allmulticast mode [ 242.363037][T11575] team_slave_1: left allmulticast mode [ 242.372818][T11575] team0 (unregistering): left promiscuous mode [ 242.379170][T11575] team_slave_0: left promiscuous mode [ 242.385187][T11575] team_slave_1: left promiscuous mode [ 242.390939][T11575] bridge0: port 3(team0) entered disabled state [ 242.414734][T11575] team0 (unregistering): Port device team_slave_0 removed [ 242.434676][T11575] team0 (unregistering): Port device team_slave_1 removed [ 242.449384][T11575] team0 (unregistering): Port device bridge2 removed [ 242.471571][T11547] lo speed is unknown, defaulting to 1000 [ 242.471637][T11571] netlink: 'syz.4.1611': attribute type 4 has an invalid length. [ 242.727426][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 242.793090][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 242.982183][ T3497] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.994113][T11597] netlink: 'syz.2.1618': attribute type 2 has an invalid length. [ 243.005312][ T3497] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.032077][ T3497] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.057550][ T3497] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.610870][T11621] RDS: rds_bind could not find a transport for ::ffff:172.30.255.5, load rds_tcp or rds_rdma? [ 243.645620][T11623] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 244.328378][T11645] Cannot find set identified by id 65534 to match [ 244.479522][T11650] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 244.555317][T11654] nbd: must specify an index to disconnect [ 244.626011][T11634] syz.4.1631 (11634) used greatest stack depth: 17656 bytes left [ 244.759877][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 244.884278][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1644'. [ 244.989338][T11671] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1645'. [ 244.998424][T11671] openvswitch: netlink: Flow key attr not present in new flow. [ 245.038332][T11676] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 245.060034][T11678] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 245.122880][T11678] bond9 (unregistering): Released all slaves [ 245.319085][T11691] 8021q: VLANs not supported on ip6tnl0 [ 245.471582][T11696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1655'. [ 245.483524][T11698] xt_hashlimit: max too large, truncated to 1048576 [ 245.681132][T11711] veth0_virt_wifi: mtu less than device minimum [ 245.776522][T11715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1659'. [ 246.059242][T11736] netlink: 'syz.1.1665': attribute type 9 has an invalid length. [ 246.094774][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 246.099708][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 246.123435][T11742] netlink: 'syz.2.1668': attribute type 10 has an invalid length. [ 246.359308][T11752] netlink: 'syz.2.1670': attribute type 2 has an invalid length. [ 246.595955][T11766] netlink: 'syz.4.1677': attribute type 4 has an invalid length. [ 246.762287][T11774] sctp: [Deprecated]: syz.2.1678 (pid 11774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.762287][T11774] Use struct sctp_sack_info instead [ 247.214824][T11810] __nla_validate_parse: 4 callbacks suppressed [ 247.214843][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 247.519812][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1695'. [ 247.590056][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 247.843115][T11834] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.981291][T11834] bridge_slave_0: left allmulticast mode [ 247.994235][T11834] bridge_slave_0: left promiscuous mode [ 248.000500][T11834] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.028689][T11834] bond0: (slave bridge_slave_1): Releasing backup interface [ 248.046984][T11834] bond3: (slave veth0_to_bond): Releasing active interface [ 248.062445][T11834] bond0: (slave bond_slave_0): Releasing backup interface [ 248.091504][T11834] bond0: (slave bond_slave_1): Releasing backup interface [ 248.130273][T11834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.152525][T11834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.174680][T11834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.190667][T11834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.216207][T11834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.261118][T11827] syzkaller1: entered promiscuous mode [ 248.272177][T11827] syzkaller1: entered allmulticast mode [ 248.870315][T11884] netlink: 'syz.1.1708': attribute type 1 has an invalid length. [ 248.878769][T11884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1708'. [ 248.929037][T11884] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1708'. [ 248.957657][T11884] sctp: [Deprecated]: syz.1.1708 (pid 11884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.957657][T11884] Use struct sctp_sack_info instead [ 249.166258][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 249.207316][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 249.415876][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 249.434718][T11865] lo speed is unknown, defaulting to 1000 [ 249.829322][T11929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1719'. [ 249.925734][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1721'. [ 250.259264][T11948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.271247][T11948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.408588][T11962] syzkaller1: entered promiscuous mode [ 250.416464][T11962] syzkaller1: entered allmulticast mode [ 250.463464][T11948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.474388][T11948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.599160][T11948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.622100][T11948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.662883][T11969] netlink: 'syz.3.1727': attribute type 3 has an invalid length. [ 250.678557][T11969] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 250.701770][T11969] NCSI netlink: No device for ifindex 813332851 [ 250.753339][T11948] bond0: (slave netdevsim0): Releasing backup interface [ 250.780730][T11948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.811166][T11948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.086550][ T192] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.100998][ T192] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.133128][T11983] sctp: [Deprecated]: syz.3.1732 (pid 11983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.133128][T11983] Use struct sctp_sack_info instead [ 251.178291][T11348] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.187203][T11348] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.367172][ T1145] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.392268][ T1145] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.414421][T11993] netlink: 'syz.3.1733': attribute type 3 has an invalid length. [ 251.462146][ T1145] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.490829][ T1145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.091986][T12021] xt_NFQUEUE: number of total queues is 0 [ 252.730510][T12051] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.742001][T12051] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.755322][T12051] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 253.141568][T12070] netlink: 'syz.1.1752': attribute type 12 has an invalid length. [ 253.150810][T12068] __nla_validate_parse: 3 callbacks suppressed [ 253.150830][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 253.175692][T12070] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 253.186694][T12070] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1752'. [ 253.205487][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 253.228525][T12078] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 253.320954][T12078] team1: entered promiscuous mode [ 253.326797][T12078] team1: entered allmulticast mode [ 253.336788][T12068] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 253.406492][T12068] team2: entered promiscuous mode [ 253.411857][T12068] team2: entered allmulticast mode [ 253.448442][T12087] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 253.477527][T12087] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 253.668860][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1758'. [ 253.935751][T12111] pim6reg1: entered promiscuous mode [ 253.941864][T12111] pim6reg1: entered allmulticast mode [ 254.072464][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1765'. [ 254.260581][ T24] IPVS: starting estimator thread 0... [ 254.367200][T12133] IPVS: using max 26 ests per chain, 62400 per kthread [ 254.404609][T12143] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1772'. [ 254.416991][T12142] netlink: 'syz.0.1771': attribute type 4 has an invalid length. [ 254.424019][T12144] netlink: 'syz.0.1771': attribute type 4 has an invalid length. [ 254.456872][T12146] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1773'. [ 254.706055][T12160] x_tables: unsorted entry at hook 2 [ 254.909300][T12170] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1780'. [ 254.944724][T12166] bond17: entered allmulticast mode [ 255.038994][T12167] ip6gretap1: entered allmulticast mode [ 255.069805][T12167] bond17: (slave ip6gretap1): Enslaving as an active interface with an up link [ 255.135411][ T9] IPVS: starting estimator thread 0... [ 255.233921][T12187] IPVS: using max 30 ests per chain, 72000 per kthread [ 255.559810][T12210] Cannot find add_set index 65532 as target [ 255.573683][T12208] syz_tun: entered allmulticast mode [ 255.593387][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1789'. [ 255.608474][T12206] syz_tun: left allmulticast mode [ 255.726222][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 255.767370][T12218] sctp: [Deprecated]: syz.1.1793 (pid 12218) Use of int in maxseg socket option. [ 255.767370][T12218] Use struct sctp_assoc_value instead [ 255.772882][T12223] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 255.808050][T12217] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 255.813228][T12223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.842887][T12227] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20002 [ 255.923998][T12230] netlink: 'syz.1.1798': attribute type 1 has an invalid length. [ 255.976453][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982978][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.244790][T12249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.254262][T12250] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 256.268411][T12252] netlink: 'syz.1.1804': attribute type 1 has an invalid length. [ 256.353664][T12252] 8021q: adding VLAN 0 to HW filter on device bond19 [ 256.370184][T12260] netlink: zone id is out of range [ 256.384814][T12260] netlink: zone id is out of range [ 256.394188][T12260] netlink: zone id is out of range [ 256.409782][T12260] netlink: get zone limit has 4 unknown bytes [ 256.476132][T12257] bond19: (slave geneve2): making interface the new active one [ 256.511155][T12257] bond19: (slave geneve2): Enslaving as an active interface with an up link [ 257.517884][T12309] sctp: [Deprecated]: syz.1.1820 (pid 12309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.517884][T12309] Use struct sctp_sack_info instead [ 257.606304][T12272] lo speed is unknown, defaulting to 1000 [ 257.797834][T12321] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 257.831892][T12317] gtp1: entered promiscuous mode [ 257.879125][T12317] gtp1: entered allmulticast mode [ 258.296861][T12349] __nla_validate_parse: 10 callbacks suppressed [ 258.296886][T12349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1828'. [ 258.324603][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 259.286582][T12362] vlan3: left promiscuous mode [ 259.291486][T12362] bridge0: left promiscuous mode [ 259.530147][ T42] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.567360][ T42] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.591123][ T42] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.618015][T12376] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1836'. [ 259.619270][ T42] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.651892][ T42] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.661324][ T42] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.671889][ T42] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.680911][ T42] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.851492][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 260.498446][T12413] SET target dimension over the limit! [ 260.525807][T12415] SET target dimension over the limit! [ 260.609949][T12421] xt_hashlimit: max too large, truncated to 1048576 [ 260.629032][T12420] xt_hashlimit: max too large, truncated to 1048576 [ 260.984304][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 261.022605][T12437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1856'. [ 261.248379][T12447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.492062][T12466] syzkaller1: entered promiscuous mode [ 261.520605][T12466] syzkaller1: entered allmulticast mode [ 261.538464][T12465] syzkaller0: entered promiscuous mode [ 261.547339][T12465] syzkaller0: entered allmulticast mode [ 261.817168][T12483] netlink: 'syz.1.1870': attribute type 10 has an invalid length. [ 261.835459][T12483] bond0: (slave wlan1): Opening slave failed [ 262.274762][T11341] tipc: Subscription rejected, illegal request [ 262.286654][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'. [ 262.301629][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'. [ 262.678807][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 262.691011][T12544] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1890'. [ 262.702122][T12541] netlink: 'syz.2.1888': attribute type 15 has an invalid length. [ 262.748280][T11940] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 262.767202][T11940] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 262.774023][T12541] netlink: 'syz.2.1888': attribute type 15 has an invalid length. [ 262.792167][T11940] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 262.803970][T11940] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 263.128469][T12570] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 263.383009][T12587] __nla_validate_parse: 4 callbacks suppressed [ 263.383031][T12587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1905'. [ 263.383912][T12586] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1904'. [ 263.414034][T12586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1904'. [ 263.560126][T12595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1906'. [ 263.588177][T12594] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 263.802043][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 263.869389][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 263.889491][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'. [ 264.113455][T12619] rdma_op ffff88807809e1f0 conn xmit_rdma 0000000000000000 [ 264.248281][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1918'. [ 264.446901][T12644] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1922'. [ 264.536716][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1923'. [ 264.555742][T12645] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 264.576323][T12650] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 264.712117][T12655] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 264.733757][T12662] ip6gre2: entered promiscuous mode [ 265.057182][T12685] netlink: 'syz.3.1932': attribute type 15 has an invalid length. [ 265.335328][T12700] ip6t_srh: unknown srh match flags 4000 [ 265.448847][T12704] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 265.459144][T12704] bond7: option packets_per_slave: allowed values 0 - 65535 [ 265.467945][T12708] netlink: 'syz.4.1941': attribute type 4 has an invalid length. [ 265.481310][T12704] bond7 (unregistering): Released all slaves [ 265.537505][T12710] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.554180][T12710] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 265.601478][T12712] netlink: 'syz.0.1943': attribute type 3 has an invalid length. [ 265.643377][T12710] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.676652][T12710] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 265.762061][T12710] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.800722][T12710] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 265.898727][T12710] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.925880][T12710] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 266.116974][T11946] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.137357][T11946] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 266.186467][T11946] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.210843][T11946] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 266.285058][T11341] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.303743][T11341] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 266.341576][T11341] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.371779][T11341] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 266.474738][T12749] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 266.607235][T12751] ip6gre1: entered promiscuous mode [ 266.612527][T12751] ip6gre1: entered allmulticast mode [ 267.233557][T12783] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 267.392033][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.663160][T12813] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 267.732656][T12813] bond5: (slave geneve2): Opening slave failed [ 267.962672][T12830] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 268.038084][T12832] Bluetooth: MGMT ver 1.23 [ 268.251619][T12844] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 268.637038][T12872] __nla_validate_parse: 21 callbacks suppressed [ 268.637061][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1994'. [ 268.656799][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 268.952118][T12886] netlink: 'syz.2.1997': attribute type 8 has an invalid length. [ 269.126466][T12895] netlink: 'syz.1.2001': attribute type 4 has an invalid length. [ 269.153170][T12895] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2001'. [ 269.176394][T12895] nbd: couldn't find a device at index 0 [ 269.182530][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 269.225493][T12900] bond0: entered promiscuous mode [ 269.237066][T12900] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 269.249611][T12900] bond0: left promiscuous mode [ 269.264247][T12900] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 269.458410][T12908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.543068][T12911] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2004'. [ 269.614604][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2006'. [ 269.766138][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 269.805090][T12928] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 269.813065][T12928] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 269.900839][T12939] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2010'. [ 269.928883][T12939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2010'. [ 269.945545][T12932] netlink: 'syz.1.2010': attribute type 32 has an invalid length. [ 269.953587][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 270.043273][T12932] bond20: option coupled_control: invalid value (64) [ 270.061549][T12932] bond20 (unregistering): Released all slaves [ 270.481701][T12968] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 270.585677][T12968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.970989][T12995] IPVS: Unknown mcast interface: vcan0 [ 271.219666][T13017] Bluetooth: MGMT ver 1.23 [ 271.701378][T13033] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 272.078416][T13044] bridge_slave_1: left allmulticast mode [ 272.104164][T13044] bridge_slave_1: left promiscuous mode [ 272.122550][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.135087][T13044] bridge_slave_0: left allmulticast mode [ 272.151136][T13044] bridge_slave_0: left promiscuous mode [ 272.164317][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.344380][T13056] ip6_vti0: mtu less than device minimum [ 272.355537][T13059] veth0_virt_wifi: mtu less than device minimum [ 272.379017][T13056] 8021q: VLANs not supported on vcan0 [ 272.385478][T13055] 8021q: VLANs not supported on vcan0 [ 272.729949][ T5841] block nbd2: Receive control failed (result -32) [ 273.273215][T13112] netlink: 'syz.3.2066': attribute type 3 has an invalid length. [ 273.417866][T13123] netlink: 'syz.1.2067': attribute type 1 has an invalid length. [ 273.458050][T13128] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 273.489381][T13128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.716286][T13144] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 273.802612][T13153] __nla_validate_parse: 25 callbacks suppressed [ 273.802634][T13153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2076'. [ 273.905562][T13161] netlink: 'syz.3.2078': attribute type 5 has an invalid length. [ 273.914052][T13161] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2078'. [ 274.052656][T13164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2079'. [ 274.080396][T13164] netlink: 'syz.0.2079': attribute type 12 has an invalid length. [ 274.155699][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 274.188349][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 274.645268][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 274.697530][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2093'. [ 274.708867][T13209] netlink: 'syz.2.2093': attribute type 7 has an invalid length. [ 274.720785][T13205] veth0_macvtap: left promiscuous mode [ 274.758993][T13209] netlink: 'syz.2.2093': attribute type 8 has an invalid length. [ 274.778508][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'. [ 274.879041][T13216] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 274.892263][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 275.034716][T13222] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2096'. [ 275.243458][T13239] bridge0: entered promiscuous mode [ 275.264254][T13239] macsec1: entered promiscuous mode [ 275.269721][T13239] macsec1: entered allmulticast mode [ 275.275540][T13239] bridge0: entered allmulticast mode [ 275.282126][T13239] bridge0: port 2(macsec1) entered blocking state [ 275.289401][T13239] bridge0: port 2(macsec1) entered disabled state [ 275.302970][T13239] bridge0: left allmulticast mode [ 275.314228][T13239] bridge0: left promiscuous mode [ 275.716636][T13260] : renamed from bridge_slave_0 [ 276.118907][T13248] lec:lec_atm_close: lec0: Shut down! [ 276.449112][T13301] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 276.607542][T13302] bond21: (slave bridge6): making interface the new active one [ 276.616324][T13302] bond21: (slave bridge6): Enslaving as an active interface with an up link [ 276.640517][T13310] veth0: entered promiscuous mode [ 276.656180][T13309] veth0: left promiscuous mode [ 276.804112][T13312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.175973][T13334] netlink: 'syz.4.2135': attribute type 3 has an invalid length. [ 277.194132][T13334] netlink: 'syz.4.2135': attribute type 3 has an invalid length. [ 277.246309][T13345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.288516][T13346] netlink: 'syz.1.2139': attribute type 11 has an invalid length. [ 277.299395][T13346] netlink: 'syz.1.2139': attribute type 11 has an invalid length. [ 277.434244][T13354] team0: entered promiscuous mode [ 277.441218][T13354] team_slave_0: entered promiscuous mode [ 277.454122][T13354] team_slave_1: entered promiscuous mode [ 277.460489][T13354] bridge0: port 3(team0) entered blocking state [ 277.501850][T13354] bridge0: port 3(team0) entered disabled state [ 277.534064][T13354] team0: entered allmulticast mode [ 277.544422][T13354] team_slave_0: entered allmulticast mode [ 277.560632][T13354] team_slave_1: entered allmulticast mode [ 277.597843][T13354] bridge0: port 3(team0) entered blocking state [ 277.604417][T13354] bridge0: port 3(team0) entered forwarding state [ 278.828751][T13419] __nla_validate_parse: 19 callbacks suppressed [ 278.828772][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'. [ 278.998640][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2161'. [ 279.127021][T13430] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2163'. [ 279.273319][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 279.309665][T13450] openvswitch: netlink: IP tunnel dst address not specified [ 279.354273][T13452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2170'. [ 279.394217][T13452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2170'. [ 279.411909][T13450] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2170'. [ 279.427021][T13450] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2170'. [ 279.530816][T13461] syzkaller1: entered promiscuous mode [ 279.539546][T13461] syzkaller1: entered allmulticast mode [ 279.839193][T13479] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2180'. [ 279.987663][T13494] validate_nla: 2 callbacks suppressed [ 279.987683][T13494] netlink: 'syz.4.2183': attribute type 19 has an invalid length. [ 280.007414][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 280.027602][T13495] netlink: 'syz.4.2183': attribute type 19 has an invalid length. [ 280.057659][T13495] netlink: 'syz.4.2183': attribute type 19 has an invalid length. [ 280.072224][T13494] netlink: 'syz.4.2183': attribute type 19 has an invalid length. [ 280.091865][T13501] pimreg3: entered allmulticast mode [ 280.134915][T13500] openvswitch: netlink: Key type 132 is out of range max 32 [ 280.396926][T13521] openvswitch: netlink: IP tunnel dst address not specified [ 281.201873][T13566] netlink: zone id is out of range [ 281.236070][T13566] netlink: zone id is out of range [ 281.241336][T13566] netlink: zone id is out of range [ 281.302993][T13566] netlink: zone id is out of range [ 281.316784][T13566] netlink: zone id is out of range [ 281.342789][T13566] netlink: zone id is out of range [ 281.353008][T13566] netlink: zone id is out of range [ 281.585385][T13583] netlink: 'syz.3.2209': attribute type 11 has an invalid length. [ 281.889166][T13610] lo: entered allmulticast mode [ 281.919218][T13610] lo: left allmulticast mode [ 282.928976][T13643] bridge_slave_0: left allmulticast mode [ 282.948171][T13643] bridge_slave_0: left promiscuous mode [ 282.964237][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.977706][T13643] bond0: (slave bond_slave_0): Releasing backup interface [ 282.996758][T13643] bond0: (slave bond_slave_1): Releasing backup interface [ 283.017492][T13643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.035401][T13643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.153332][T13648] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 283.557667][T13672] netlink: 'syz.1.2232': attribute type 9 has an invalid length. [ 283.719657][T13678] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 283.736081][T13678] bond10: (slave vcan1): Error -95 calling set_mac_address [ 283.896937][T13690] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 283.932546][T13693] __nla_validate_parse: 23 callbacks suppressed [ 283.932566][T13693] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2237'. [ 283.957646][T13696] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2237'. [ 283.978240][T13698] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 283.990018][T13694] bond7: Removing last arp target with arp_interval on [ 284.195809][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2242'. [ 284.752338][T13747] netlink: 'syz.4.2253': attribute type 10 has an invalid length. [ 284.765225][T13737] can: request_module (can-proto-5) failed. [ 284.794504][T13747] bridge0: port 3(team0) entered disabled state [ 284.801173][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.830723][T13737] can: request_module (can-proto-5) failed. [ 284.939754][T13758] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 284.947155][T13737] can: request_module (can-proto-5) failed. [ 284.997933][T13758] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.050213][T13737] can: request_module (can-proto-5) failed. [ 285.060239][T13764] bond8: (slave geneve2): making interface the new active one [ 285.072275][T13764] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 285.095146][T13766] wg1: entered promiscuous mode [ 285.110907][T13766] wg1: entered allmulticast mode [ 285.114396][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2258'. [ 285.129906][T13737] can: request_module (can-proto-5) failed. [ 285.193712][T13737] can: request_module (can-proto-5) failed. [ 285.267055][T13775] netlink: 'syz.3.2259': attribute type 2 has an invalid length. [ 285.274894][T13737] can: request_module (can-proto-5) failed. [ 285.296157][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2259'. [ 285.354225][T13737] can: request_module (can-proto-5) failed. [ 285.455286][T13737] can: request_module (can-proto-5) failed. [ 285.484611][T13737] can: request_module (can-proto-5) failed. [ 285.624330][T13787] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 285.694990][T13787] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.703710][T13789] tipc: Enabled bearer , priority 0 [ 285.825696][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2266'. [ 285.828249][T13809] netlink: 'syz.0.2268': attribute type 1 has an invalid length. [ 285.844230][T13809] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2268'. [ 285.856015][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 285.898234][T13802] bond9: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 285.966902][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 285.979343][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 286.037108][T13821] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 286.579023][T13846] net_ratelimit: 2 callbacks suppressed [ 286.579048][T13846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.816263][ T9] tipc: Node number set to 71909145 [ 287.208871][T13886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.243455][T13890] bridge0: Device is already in use. [ 287.809407][T13918] bond6: entered promiscuous mode [ 287.816024][T13918] bond6: entered allmulticast mode [ 287.821850][T13918] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.898778][T13926] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 288.133395][T13941] netlink: 'syz.3.2314': attribute type 6 has an invalid length. [ 288.147991][T13941] netlink: 'syz.3.2314': attribute type 6 has an invalid length. [ 288.561011][T13969] SET target dimension over the limit! [ 288.750583][T13975] netlink: 'syz.4.2324': attribute type 58 has an invalid length. [ 288.906123][T13984] netlink: 'syz.2.2326': attribute type 12 has an invalid length. [ 288.940491][T13983] syzkaller0: entered promiscuous mode [ 288.946295][T13983] syzkaller0: entered allmulticast mode [ 289.027661][T13984] bond11: option primary_reselect: invalid value (255) [ 289.100531][T13984] bond11 (unregistering): Released all slaves [ 289.448750][T14001] __nla_validate_parse: 10 callbacks suppressed [ 289.448771][T14001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2332'. [ 289.940205][T14041] xt_l2tp: wrong L2TP version: 0 [ 289.972140][T14043] nbd: socks must be embedded in a SOCK_ITEM attr [ 290.074157][T14048] lo: MTU too low for tipc bearer [ 290.079462][T14048] tipc: Enabling of bearer rejected, failed to enable media [ 290.184660][T14059] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 290.280722][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2353'. [ 290.478898][T14068] tipc: Enabled bearer , priority 0 [ 290.510490][T14068] syzkaller0: MTU too low for tipc bearer [ 290.523918][T14068] tipc: Disabling bearer [ 290.698094][T14078] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 290.909800][T14087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2360'. [ 290.945992][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 291.045166][T14098] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2364'. [ 291.799732][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 292.308538][T14130] bridge0: port 3(team0) entered blocking state [ 292.315083][T14130] bridge0: port 3(team0) entered forwarding state [ 292.322049][T14130] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.329332][T14130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.368067][T14130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.610663][T14175] netlink: 'syz.0.2386': attribute type 30 has an invalid length. [ 292.749703][T14175] bond7: option arp_missed_max: invalid value (0) [ 292.762166][T14180] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2388'. [ 292.797284][T14175] bond7: option arp_missed_max: allowed values 1 - 255 [ 292.811044][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'. [ 292.837980][T14175] bond7 (unregistering): Released all slaves [ 292.957855][T14184] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 292.967853][T14184] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 293.040509][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 293.064635][T14196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2393'. [ 293.176389][T14205] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 293.195843][T14205] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 293.265634][T14208] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 293.409534][T14216] netlink: 'syz.1.2399': attribute type 4 has an invalid length. [ 293.854402][T14238] netlink: 'syz.3.2406': attribute type 33 has an invalid length. [ 293.900391][T14238] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 293.946618][T14238] bond10 (unregistering): Released all slaves [ 294.703650][T14288] raw_sendmsg: syz.3.2422 forgot to set AF_INET. Fix it! [ 294.707570][T14280] ip6gre1: entered allmulticast mode [ 294.716303][ T30] audit: type=1800 audit(1765629226.182:5): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2422" name="memory.events" dev="tmpfs" ino=2495 res=0 errno=0 [ 294.930398][T14300] x_tables: duplicate underflow at hook 2 [ 295.079014][T14306] __nla_validate_parse: 8 callbacks suppressed [ 295.079038][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 295.217234][T14312] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.248544][T14312] bond7: (slave lo): Enslaving as a backup interface with an up link [ 295.263611][T14312] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 295.308735][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 295.385972][T14328] bond7: Removing last arp target with arp_interval on [ 295.423155][T14318] veth0: entered promiscuous mode [ 295.471511][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2434'. [ 295.505414][T14339] tipc: Enabling of bearer rejected, failed to enable media [ 295.564718][T14341] block nbd3: Unsupported socket: should be TCP or UNIX. [ 295.625920][T14332] siw: device registration error -23 [ 295.721969][T14341] syzkaller0: entered promiscuous mode [ 295.749875][T14341] syzkaller0: entered allmulticast mode [ 295.764641][T14324] veth0: left promiscuous mode [ 295.889448][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 297.640127][T14385] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2444'. [ 297.755839][T14391] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2446'. [ 297.825971][T14395] netlink: zone id is out of range [ 297.837633][T14395] netlink: zone id is out of range [ 297.852610][T14395] netlink: zone id is out of range [ 297.862735][T14395] netlink: zone id is out of range [ 297.874261][T14400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2449'. [ 297.886737][T14395] netlink: zone id is out of range [ 297.893311][T14395] netlink: zone id is out of range [ 297.898753][T14400] openvswitch: netlink: Flow key attr not present in new flow. [ 297.907907][T14395] netlink: zone id is out of range [ 297.913587][T14350] lo speed is unknown, defaulting to 1000 [ 297.940791][T14395] netlink: zone id is out of range [ 297.946860][T14395] netlink: zone id is out of range [ 297.954945][T14403] Cannot find del_set index 49151 as target [ 298.023420][T14409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2451'. [ 298.054067][T14409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2451'. [ 298.063073][T14409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2451'. [ 298.692730][T14440] team0: left allmulticast mode [ 298.698011][T14440] team_slave_0: left allmulticast mode [ 298.703709][T14440] team_slave_1: left allmulticast mode [ 298.713439][T14440] team0: left promiscuous mode [ 298.719463][T14440] team_slave_0: left promiscuous mode [ 298.728443][T14440] team_slave_1: left promiscuous mode [ 298.740373][T14440] bridge0: port 3(team0) entered disabled state [ 298.757660][T14440] team0: Cannot enslave team device to itself [ 299.206891][T14458] netlink: 'syz.4.2467': attribute type 2 has an invalid length. [ 299.830563][T14490] x_tables: duplicate underflow at hook 2 [ 300.393980][T14523] netlink: 'syz.3.2486': attribute type 4 has an invalid length. [ 300.404723][T14524] netlink: 'syz.3.2486': attribute type 4 has an invalid length. [ 300.440155][ T10] lo speed is unknown, defaulting to 1000 [ 300.458342][ T10] syz2: Port: 1 Link ACTIVE [ 300.639654][T14534] __nla_validate_parse: 4 callbacks suppressed [ 300.639675][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 300.759443][T14545] tipc: Enabled bearer , priority 0 [ 300.792240][T14545] syzkaller0: entered promiscuous mode [ 300.814283][T14545] syzkaller0: entered allmulticast mode [ 300.853253][T14545] tipc: Resetting bearer [ 300.876061][T14543] tipc: Resetting bearer [ 300.932662][T14543] tipc: Disabling bearer [ 300.957343][T14553] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2494'. [ 300.970135][T14556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2496'. [ 300.981440][T14556] nbd: must specify at least one socket [ 301.066625][T14561] netlink: 'syz.4.2498': attribute type 1 has an invalid length. [ 301.199005][T14563] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.215100][T14568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2497'. [ 301.228359][T14563] bond8: (slave bond9): making interface the new active one [ 301.238085][T14563] bond8: (slave bond9): Enslaving as an active interface with an up link [ 301.265032][T14561] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 301.285140][T14561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2498'. [ 301.298779][T14561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.498799][T14584] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 301.529925][T14583] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 301.984168][T14614] IPVS: set_ctl: invalid protocol: 109 100.1.1.2:20000 [ 302.162638][T14619] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2515'. [ 302.187457][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'. [ 302.881393][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 302.971485][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2524'. [ 303.047179][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2524'. [ 303.139345][T14656] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 303.426384][ T2936] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.446469][ T2936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.454910][ T2936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.463742][ T2936] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.542435][T14683] pimreg: entered allmulticast mode [ 303.572142][T14685] net_ratelimit: 112 callbacks suppressed [ 303.572164][T14685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.769957][T14700] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 304.191997][T14727] bond7: (slave lo): Releasing backup interface [ 304.247012][T14727] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 304.300185][T14727] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 304.319741][T14736] veth0_to_team: entered promiscuous mode [ 304.352810][T14739] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 304.598413][T14751] netlink: 'syz.0.2555': attribute type 29 has an invalid length. [ 304.660222][T14756] netlink: 'syz.0.2555': attribute type 29 has an invalid length. [ 304.927140][T14770] C: renamed from lo (while UP) [ 304.952351][T14770] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 305.009247][T14773] netlink: 'syz.1.2565': attribute type 4 has an invalid length. [ 305.020771][T14773] netlink: 'syz.1.2565': attribute type 4 has an invalid length. [ 305.042326][T14773] C speed is unknown, defaulting to 1000 [ 305.171771][T14776] tipc: Enabled bearer , priority 0 [ 305.179893][T14776] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 305.195387][T14776] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 305.246311][T14776] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 305.638624][T14807] block nbd2: NBD_DISCONNECT [ 305.643444][T14807] block nbd2: Send disconnect failed -32 [ 305.666795][T14807] block nbd2: shutting down sockets [ 305.708339][T14810] __nla_validate_parse: 5 callbacks suppressed [ 305.708361][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 305.716947][T14815] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2577'. [ 305.727473][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'. [ 305.818518][T14815] bond11 (unregistering): Released all slaves [ 305.900499][T14827] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2578'. [ 306.402810][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'. [ 306.512598][T14847] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 306.544663][T14847] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 306.575447][T14847] gretap4: entered promiscuous mode [ 306.586234][T14847] gretap4: entered allmulticast mode [ 306.777392][T14871] netem: change failed [ 306.838019][T14877] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 307.003059][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2599'. [ 307.008809][T14884] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2598'. [ 307.027922][T14883] tipc: Enabled bearer , priority 10 [ 307.056647][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2599'. [ 307.109571][T14886] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 307.134251][T14886] bond11 (unregistering): Released all slaves [ 307.248983][T14892] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 307.297420][T14892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.558076][T14914] geneve4: entered promiscuous mode [ 307.563349][T14914] geneve4: entered allmulticast mode [ 307.570768][T11943] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.579584][T11943] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.601259][T11943] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.666122][T11943] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.721155][T14917] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 307.775775][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 307.984102][T14929] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2612'. [ 308.196082][T14940] syzkaller0: entered promiscuous mode [ 308.225235][T14940] syzkaller0: entered allmulticast mode [ 308.471831][T14948] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.593099][T14956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.707269][T14956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.183395][T14986] veth0: entered promiscuous mode [ 309.333524][T14999] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 309.341786][T14999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.524623][T15004] netlink: 'syz.4.2633': attribute type 1 has an invalid length. [ 309.602047][T15011] tipc: Enabling of bearer rejected, already enabled [ 309.611364][T15011] veth1_to_team: entered allmulticast mode [ 309.855833][T15021] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 311.055573][T15098] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 311.137974][T15104] __nla_validate_parse: 9 callbacks suppressed [ 311.137994][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2659'. [ 311.165241][T15104] netlink: 'syz.4.2659': attribute type 7 has an invalid length. [ 311.173254][T15104] netlink: 'syz.4.2659': attribute type 8 has an invalid length. [ 311.188408][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2659'. [ 311.204998][T15107] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2661'. [ 311.224969][T15107] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2661'. [ 311.236138][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2661'. [ 311.345038][T15113] netlink: 'syz.1.2663': attribute type 12 has an invalid length. [ 311.691383][T15132] SET target dimension over the limit! [ 312.360234][T15178] netlink: 'syz.1.2681': attribute type 39 has an invalid length. [ 312.432514][T15178] syz_tun (unregistering): left allmulticast mode [ 312.570961][T15185] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2683'. [ 312.665572][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 312.746247][T15191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2685'. [ 312.790458][T15191] IPv6: sit3: Disabled Multicast RS [ 312.809917][T15191] sit3: entered allmulticast mode [ 313.178525][T15212] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 313.195721][T15212] bond11 (unregistering): Released all slaves [ 313.244977][T15218] syzkaller1: entered promiscuous mode [ 313.254637][T15218] syzkaller1: entered allmulticast mode [ 313.295002][T15218] netlink: 294 bytes leftover after parsing attributes in process `syz.0.2693'. [ 313.328030][T15218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.546951][T15225] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2695'. [ 313.944474][T15263] x_tables: duplicate underflow at hook 2 [ 314.061676][T15261] geneve3: entered promiscuous mode [ 314.105482][T15273] veth0: entered promiscuous mode [ 314.115602][T15272] veth0: left promiscuous mode [ 314.145742][T15276] netlink: 'syz.0.2712': attribute type 32 has an invalid length. [ 314.213909][T15279] netlink: 'syz.0.2712': attribute type 32 has an invalid length. [ 314.241424][T15276] bond8: option coupled_control: invalid value (52) [ 314.261036][T15276] bond8 (unregistering): Released all slaves [ 314.421583][T15279] bond8: option coupled_control: invalid value (52) [ 314.434559][T15279] bond8 (unregistering): Released all slaves [ 314.606096][T15303] sctp: [Deprecated]: syz.0.2720 (pid 15303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.606096][T15303] Use struct sctp_sack_info instead [ 314.692146][T15306] bond11: option miimon: invalid value (18446744073709551585) [ 314.725195][T15306] bond11: option miimon: allowed values 0 - 2147483647 [ 314.775137][T15306] bond11 (unregistering): Released all slaves [ 315.379790][T15340] netem: unknown loss type 0 [ 315.390315][T15340] netem: change failed [ 315.508726][T15346] tipc: Enabling of bearer rejected, failed to enable media [ 315.618114][T15356] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 315.628528][T15356] netlink: 'syz.3.2738': attribute type 16 has an invalid length. [ 315.637356][T15356] netlink: 'syz.3.2738': attribute type 3 has an invalid length. [ 315.663306][T15358] siw: device registration error -23 [ 315.688566][T15361] siw: device registration error -23 [ 315.696620][T15363] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 315.707344][T15358] sit0: entered promiscuous mode [ 315.723027][T15356] netlink: 'syz.3.2738': attribute type 16 has an invalid length. [ 315.726714][T15358] netlink: 'syz.1.2739': attribute type 1 has an invalid length. [ 315.766044][T15365] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 316.292952][T15402] sctp: [Deprecated]: syz.4.2753 (pid 15402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.292952][T15402] Use struct sctp_sack_info instead [ 316.348285][T15402] sctp: [Deprecated]: syz.4.2753 (pid 15402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.348285][T15402] Use struct sctp_sack_info instead [ 316.470847][T15413] __nla_validate_parse: 13 callbacks suppressed [ 316.470871][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 316.552198][T15415] validate_nla: 2 callbacks suppressed [ 316.552219][T15415] netlink: 'syz.4.2758': attribute type 6 has an invalid length. [ 316.624564][T15421] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2758'. [ 316.701795][T15428] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2762'. [ 316.723273][T15425] tipc: Enabled bearer , priority 10 [ 316.748765][T15425] bond_slave_1: mtu less than device minimum [ 316.923373][T15441] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2765'. [ 316.966125][T15441] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 316.981338][T15443] xt_hashlimit: invalid rate [ 317.411948][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.419018][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.789701][T15480] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 317.829059][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 317.846927][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 317.897970][T15485] bond11: (slave gretap2): making interface the new active one [ 317.919530][T15485] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 317.935204][T15487] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 317.975244][T15493] netlink: 'syz.2.2784': attribute type 33 has an invalid length. [ 318.187009][T15500] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 318.316381][T15519] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 318.338855][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2793'. [ 318.369337][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2793'. [ 318.438339][T15528] bond0: Error: Cannot enslave bond to itself. [ 318.447999][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2793'. [ 318.454861][T15530] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 318.516063][T15530] bond7: (slave lo): Enslaving as a backup interface with an up link [ 318.525490][T15530] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 318.720482][T15546] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2801'. [ 318.729981][T15546] 0ªî{X¹¦: renamed from gretap0 [ 318.741216][T15546] 0ªî{X¹¦: entered allmulticast mode [ 318.770288][T15546] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 318.783027][T15553] netlink: 'syz.3.2803': attribute type 83 has an invalid length. [ 318.856302][T15556] ip6t_srh: unknown srh invflags 4000 [ 319.028421][T15567] netem: change failed [ 319.083468][T15572] netlink: 'syz.3.2808': attribute type 10 has an invalid length. [ 319.732167][T15584] veth0: entered promiscuous mode [ 319.867218][T15605] netlink: 'syz.3.2815': attribute type 7 has an invalid length. [ 320.059091][T15583] veth0: left promiscuous mode [ 320.209178][T15622] netlink: 'syz.4.2821': attribute type 4 has an invalid length. [ 320.390827][T15639] netlink: 'syz.4.2825': attribute type 23 has an invalid length. [ 321.529860][T15708] batadv0: entered allmulticast mode [ 321.773475][T15733] __nla_validate_parse: 11 callbacks suppressed [ 321.773496][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 321.869960][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2854'. [ 321.886588][T15733] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.930376][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 321.972556][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'. [ 321.988964][T15741] bond8: invalid ARP target 0.0.0.0 specified for addition [ 322.006045][T15741] bond8: option arp_ip_target: invalid value (0) [ 322.018157][T15741] bond8 (unregistering): Released all slaves [ 322.066609][T15740] netlink: 'syz.4.2854': attribute type 10 has an invalid length. [ 322.118097][T15746] bond11: option miimon: invalid value (18446744073709551585) [ 322.127627][T15746] bond11: option miimon: allowed values 0 - 2147483647 [ 322.141097][T15746] bond11 (unregistering): Released all slaves [ 322.220695][T15740] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.376618][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 322.442284][T15767] netlink: 'syz.4.2862': attribute type 2 has an invalid length. [ 322.448202][T15775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2864'. [ 322.459276][T15767] : entered promiscuous mode [ 322.488940][T15773] netlink: 5544 bytes leftover after parsing attributes in process `syz.2.2863'. [ 322.547903][T15773] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2863'. [ 322.596332][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2864'. [ 322.624587][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2864'. [ 322.687298][T15791] RDS: rds_bind could not find a transport for 400:0:1200:8:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 322.726272][T15791] dvmrp6: entered allmulticast mode [ 322.882319][T15802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.066021][T15818] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 323.244648][T15828] netlink: 'syz.1.2879': attribute type 21 has an invalid length. [ 323.276746][T15828] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 324.132251][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.143024][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.151422][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.159578][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.168166][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.194626][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.202232][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.210611][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.220837][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.231319][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.300951][T15876] xt_l2tp: v2 sid > 0xffff: 1114112 [ 324.366477][T15876] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 324.712100][T15864] C speed is unknown, defaulting to 1000 [ 325.651146][T15864] chnl_net:caif_netlink_parms(): no params data found [ 325.770863][T15942] netlink: 'syz.4.2917': attribute type 1 has an invalid length. [ 325.890515][T15864] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.930247][T15864] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.938894][T15864] bridge_slave_0: entered allmulticast mode [ 325.953205][T15864] bridge_slave_0: entered promiscuous mode [ 325.970308][T15942] bond13 (unregistering): Released all slaves [ 326.032332][T15864] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.041110][T15864] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.055011][T15864] bridge_slave_1: entered allmulticast mode [ 326.062407][T15864] bridge_slave_1: entered promiscuous mode [ 326.161524][T15864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.186664][T15864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.283990][ T5839] Bluetooth: hci4: command tx timeout [ 326.289160][T15864] team0: Port device team_slave_0 added [ 326.312846][T15864] team0: Port device team_slave_1 added [ 326.456595][T15864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.463603][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.502188][T15864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.525185][T15864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.532299][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.558960][T15864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.668611][T15994] nbd: couldn't find a device at index 0 [ 326.804097][T15998] netlink: 'syz.3.2933': attribute type 2 has an invalid length. [ 326.826495][T15864] hsr_slave_0: entered promiscuous mode [ 326.835483][T15864] hsr_slave_1: entered promiscuous mode [ 326.845571][T15864] debugfs: 'hsr0' already exists in 'hsr' [ 326.851571][T16003] __nla_validate_parse: 17 callbacks suppressed [ 326.851594][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'. [ 326.873876][T15864] Cannot create hsr debugfs directory [ 326.874131][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2934'. [ 326.891228][T16003] netlink: 'syz.0.2934': attribute type 14 has an invalid length. [ 326.965097][T16004] !€ÿ: renamed from bond_slave_0 [ 327.042174][T16009] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 327.350205][T16015] macvlan0: entered promiscuous mode [ 327.373959][T16015] macvlan0: entered allmulticast mode [ 327.380509][T16015] bond8: entered promiscuous mode [ 327.396493][T16015] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 327.755145][T16015] bond8: left promiscuous mode [ 327.994320][T16000] C speed is unknown, defaulting to 1000 [ 328.168522][T15864] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.204659][T15864] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 328.215786][T15864] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.290014][T16032] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2942'. [ 328.351975][T15864] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.373944][ T5839] Bluetooth: hci4: command tx timeout [ 328.379555][T15864] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 328.386188][T16039] netlink: 'syz.0.2944': attribute type 11 has an invalid length. [ 328.393833][T15864] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.424799][T16036] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2942'. [ 328.438746][T16042] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 328.473376][T16042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.541134][T15864] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.566811][T15864] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 328.577543][T15864] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.727656][T15864] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.744671][T15864] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 328.762206][T15864] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.197795][T16079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.232059][T16072] tipc: Enabled bearer , priority 0 [ 329.247419][T16078] xt_bpf: check failed: parse error [ 329.279706][T16072] syzkaller0: entered promiscuous mode [ 329.290694][T16072] syzkaller0: entered allmulticast mode [ 329.319218][T15864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.392957][T15864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.433350][T16072] tipc: Resetting bearer [ 329.447771][T15864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.476217][T15864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.689813][T16071] tipc: Resetting bearer [ 329.745186][T16071] tipc: Disabling bearer [ 329.922607][T16105] netlink: 'syz.0.2964': attribute type 16 has an invalid length. [ 329.959887][T16105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 330.067181][T15864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.156199][T15864] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.217936][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.225285][T11946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.316244][T11950] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.323482][T11950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.330787][T16130] netlink: 'syz.4.2972': attribute type 30 has an invalid length. [ 330.346913][T16130] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 330.445458][ T5839] Bluetooth: hci4: command tx timeout [ 330.790011][T15864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.923490][T16158] netlink: 'syz.1.2978': attribute type 10 has an invalid length. [ 330.937694][T15864] veth0_vlan: entered promiscuous mode [ 331.041588][T15864] veth1_vlan: entered promiscuous mode [ 331.155686][T15864] veth0_macvtap: entered promiscuous mode [ 331.187604][T15864] veth1_macvtap: entered promiscuous mode [ 331.246438][T15864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.279187][T16164] netlink: zone id is out of range [ 331.284940][T16164] netlink: zone id is out of range [ 331.289770][T15864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.290076][T16164] netlink: zone id is out of range [ 331.303435][T16164] netlink: zone id is out of range [ 331.310389][T16164] netlink: zone id is out of range [ 331.324943][T16164] netlink: zone id is out of range [ 331.330113][T16164] netlink: zone id is out of range [ 331.350927][T11344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.361867][T11344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.384779][T11344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.393731][T11344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.403150][T16164] netlink: zone id is out of range [ 331.635192][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 331.657311][T11347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.680887][T11347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.752412][T16184] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2987'. [ 331.762377][T11344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.787009][T11344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.825857][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2990'. [ 331.943306][T16197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2991'. [ 332.171165][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'. [ 332.190061][T16206] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2994'. [ 332.524439][ T5839] Bluetooth: hci4: command tx timeout [ 332.645938][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.656607][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.665252][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.673593][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.682887][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.698058][T16221] netlink: 'syz.0.3000': attribute type 10 has an invalid length. [ 332.725308][T16221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3000'. [ 332.804585][T16221] team0: Port device geneve0 added [ 333.045115][T16224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.063022][T16224] bond0: (slave rose0): Enslaving as an active interface with an up link [ 333.083677][T16218] C speed is unknown, defaulting to 1000 [ 333.475461][T16247] geneve4: entered promiscuous mode [ 333.510684][T11950] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.545679][T11950] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.588748][T11950] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.624510][T11950] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.739061][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 333.743986][T16253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3009'. [ 333.873278][T16263] bridge0: entered promiscuous mode [ 333.913527][T16263] bridge0: entered allmulticast mode [ 334.000004][ T42] net_ratelimit: 54 callbacks suppressed [ 334.000038][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.014345][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.044403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.170326][T16268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.182587][T16268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 334.216445][T16278] bridge0: Device is already in use. [ 334.295478][T16268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.306263][T16268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 334.383478][T16291] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20004 [ 334.418025][T16268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.431027][T16268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 334.532306][T16268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.546337][T16268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 334.645959][T16303] netlink: 'syz.2.3023': attribute type 2 has an invalid length. [ 334.654587][T16303] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3023'. [ 334.674612][ T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.708591][T11940] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 334.719630][T11940] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 334.764635][ T5841] Bluetooth: hci1: command tx timeout [ 334.777717][T16218] chnl_net:caif_netlink_parms(): no params data found [ 334.789116][ T42] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 334.799188][ T42] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 334.830308][T15257] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 334.840324][T15257] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 334.895873][T16307] IPv6: sit1: Disabled Multicast RS [ 334.912797][T16309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.938293][T15257] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 334.948969][T15257] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 335.049672][T16218] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.057489][T16218] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.065074][T16218] bridge_slave_0: entered allmulticast mode [ 335.073633][T16218] bridge_slave_0: entered promiscuous mode [ 335.082979][T16319] netlink: 'syz.4.3027': attribute type 4 has an invalid length. [ 335.094802][T16218] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.102382][T16218] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.110561][T16218] bridge_slave_1: entered allmulticast mode [ 335.119329][T16218] bridge_slave_1: entered promiscuous mode [ 335.201527][T16218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.229248][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3028'. [ 335.258760][T16218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.346783][T16218] team0: Port device team_slave_0 added [ 335.360711][T16218] team0: Port device team_slave_1 added [ 335.467013][T16218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.500100][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.537149][T16218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.549705][T16338] netlink: 'syz.0.3032': attribute type 4 has an invalid length. [ 335.570430][T16218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.580536][T16338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3032'. [ 335.590106][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.612793][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 335.625599][T16218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.875960][T16218] hsr_slave_0: entered promiscuous mode [ 335.897882][T16218] hsr_slave_1: entered promiscuous mode [ 335.911438][T16218] debugfs: 'hsr0' already exists in 'hsr' [ 335.926821][T16218] Cannot create hsr debugfs directory [ 335.951567][T16354] netlink: 'syz.0.3036': attribute type 10 has an invalid length. [ 336.522420][T16218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.571171][T16218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.625223][T16388] syz_tun: entered allmulticast mode [ 336.707966][T16218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.721825][T16218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.745007][T16395] netlink: 'syz.0.3048': attribute type 1 has an invalid length. [ 336.825871][T16395] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.844633][ T5841] Bluetooth: hci1: command tx timeout [ 336.851074][T16393] bridge_slave_0: invalid flags given to default FDB implementation [ 336.894287][T16218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.904913][T16218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.998184][T16408] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 337.053920][T16218] bond0: (slave netdevsim0): Releasing backup interface [ 337.079016][T16218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.114524][T16218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.141450][T16417] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 337.285008][T16423] __nla_validate_parse: 3 callbacks suppressed [ 337.285039][T16423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3058'. [ 337.323602][T16429] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 337.349436][T16426] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 337.375757][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'. [ 337.478445][T16423] openvswitch: netlink: Missing key (keys=40, expected=100) [ 337.549246][T16218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.582706][T16218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.615821][T16218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.643437][T16437] syzkaller0: entered promiscuous mode [ 337.651340][T16437] syzkaller0: entered allmulticast mode [ 337.668107][T16218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 337.905127][T16465] v: renamed from vlan0 (while UP) [ 338.070153][T16218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.106468][T16218] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.140291][T15257] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.147653][T15257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.205615][T15257] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.212975][T15257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.322151][T16484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3073'. [ 338.368682][T16484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3073'. [ 338.474469][T16484] gretap0: entered promiscuous mode [ 338.493442][T16484] gretap0: left promiscuous mode [ 338.551769][T16490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.569520][T16493] netlink: 'syz.4.3075': attribute type 17 has an invalid length. [ 338.587625][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'. [ 338.595523][T16495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.609507][T16493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3075'. [ 338.656514][T16493] gretap0: entered promiscuous mode [ 338.665519][T16493] gretap0: left promiscuous mode [ 338.847916][T16506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3078'. [ 338.924119][ T5841] Bluetooth: hci1: command tx timeout [ 339.077677][T16518] openvswitch: netlink: IP tunnel TTL not specified. [ 339.171589][T16218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.267544][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 339.290347][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3085'. [ 339.325259][T16218] veth0_vlan: entered promiscuous mode [ 339.367058][T16218] veth1_vlan: entered promiscuous mode [ 339.447576][T16538] pim6reg1: entered promiscuous mode [ 339.464068][T16538] pim6reg1: entered allmulticast mode [ 339.487051][T16538] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3087'. [ 339.536498][T16218] veth0_macvtap: entered promiscuous mode [ 339.654273][T16218] veth1_macvtap: entered promiscuous mode [ 339.691775][T16218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.741402][T16218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.883301][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.914638][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.923427][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.980061][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.196663][T11946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.241626][T11946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.308088][T11942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.325886][T11942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.370706][T16587] netlink: 'syz.4.3100': attribute type 29 has an invalid length. [ 340.841535][T16611] netlink: 'syz.1.3108': attribute type 32 has an invalid length. [ 340.917932][T16611] bond1: Setting coupled_control to off (0) [ 341.005532][ T5841] Bluetooth: hci1: command tx timeout [ 341.354171][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.367005][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.375773][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.394514][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.410799][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.525752][ T5831] syz_tun (unregistering): left allmulticast mode [ 341.717399][T16627] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 341.725719][T16625] IPVS: Unknown mcast interface: lo [ 341.879229][T11342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 341.902763][T11342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.229182][T11342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 342.253612][T11342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.295763][T16619] C speed is unknown, defaulting to 1000 [ 342.396698][T11342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 342.428043][T11342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.948984][T11342] bridge_slave_1: left allmulticast mode [ 342.957075][T11342] bridge_slave_1: left promiscuous mode [ 342.964425][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.979616][T11342] bridge_slave_0: left allmulticast mode [ 342.986261][T11342] bridge_slave_0: left promiscuous mode [ 342.991972][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.097438][T16688] __nla_validate_parse: 3 callbacks suppressed [ 343.097459][T16688] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3128'. [ 343.312805][T11342] ip6gretap0 (unregistering): left promiscuous mode [ 343.429570][T16702] xt_hashlimit: max too large, truncated to 1048576 [ 343.485248][ T5839] Bluetooth: hci5: command tx timeout [ 343.537388][T11342] bond8 (unregistering): (slave gretap1): Releasing backup interface [ 343.572823][T11342] bond11 (unregistering): (slave gretap2): Releasing active interface [ 343.711893][T11342] bridge0 (unregistering): left promiscuous mode [ 344.219555][T11342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.231120][T11342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.241751][T11342] bond0 (unregistering): Released all slaves [ 344.257187][T11342] bond1 (unregistering): Released all slaves [ 344.370047][T11342] bond2 (unregistering): Released all slaves [ 344.479576][T11342] bond3 (unregistering): Released all slaves [ 344.493007][T11342] bond4 (unregistering): Released all slaves [ 344.602466][T11342] bond5 (unregistering): Released all slaves [ 344.720282][T11342] bond6 (unregistering): Released all slaves [ 344.734803][T11342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.744379][T11342] bond7 (unregistering): (slave lo): Releasing backup interface [ 344.752473][T11342] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 344.765356][T11342] bond7 (unregistering): Released all slaves [ 344.874741][T11342] bond8 (unregistering): (slave bond9): Releasing backup interface [ 344.883434][T11342] bond8 (unregistering): Released all slaves [ 344.993315][T11342] bond9 (unregistering): Released all slaves [ 345.008826][T11342] bond10 (unregistering): Released all slaves [ 345.022131][T11342] bond11 (unregistering): Released all slaves [ 345.135336][T11342] bond12 (unregistering): Released all slaves [ 345.398980][T11342] : left promiscuous mode [ 345.436612][T16716] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 345.513973][T16716] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 345.565766][ T5839] Bluetooth: hci5: command tx timeout [ 345.606241][T11342] tipc: Left network mode [ 345.685288][T11342] IPVS: stopping backup sync thread 16429 ... [ 345.737240][T16619] chnl_net:caif_netlink_parms(): no params data found [ 346.043704][T16731] bond10: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 346.093549][T16731] bond10 (unregistering): Released all slaves [ 346.138547][T16750] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 346.151122][T16750] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 346.319303][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3150'. [ 346.328155][T16753] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 346.518059][T16746] can: request_module (can-proto-4) failed. [ 346.532668][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.548585][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.556253][T16619] bridge_slave_0: entered allmulticast mode [ 346.566320][T16619] bridge_slave_0: entered promiscuous mode [ 346.589161][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.601220][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.629067][T16619] bridge_slave_1: entered allmulticast mode [ 346.648956][T16619] bridge_slave_1: entered promiscuous mode [ 346.655143][T16780] TCP: TCP_TX_DELAY enabled [ 346.661145][T16778] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 346.671702][T16778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3154'. [ 346.893233][T16619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.913022][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3157'. [ 346.924167][T16789] netlink: 'syz.0.3157': attribute type 7 has an invalid length. [ 346.932107][T16789] netlink: 'syz.0.3157': attribute type 8 has an invalid length. [ 346.951540][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'. [ 346.970818][T16619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.998760][T16794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3159'. [ 347.045678][T16792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3157'. [ 347.269702][T16619] team0: Port device team_slave_0 added [ 347.303727][T16619] team0: Port device team_slave_1 added [ 347.384661][T16802] syz.3.3161: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 347.431765][T16802] CPU: 0 UID: 0 PID: 16802 Comm: syz.3.3161 Not tainted syzkaller #0 PREEMPT(full) [ 347.431795][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.431807][T16802] Call Trace: [ 347.431815][T16802] [ 347.431824][T16802] dump_stack_lvl+0x189/0x250 [ 347.431856][T16802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.431877][T16802] ? __pfx__printk+0x10/0x10 [ 347.431902][T16802] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 347.431931][T16802] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 347.431961][T16802] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 347.431990][T16802] warn_alloc+0x214/0x310 [ 347.432022][T16802] ? __pfx_warn_alloc+0x10/0x10 [ 347.432058][T16802] ? __get_vm_area_node+0x28f/0x300 [ 347.432080][T16802] ? packet_set_ring+0x6f3/0x2120 [ 347.432106][T16802] __vmalloc_node_range_noprof+0x690/0x12d0 [ 347.432165][T16802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.432188][T16802] ? alloc_pages_mpol+0x3cd/0x4a0 [ 347.432214][T16802] ? packet_set_ring+0x6f3/0x2120 [ 347.432233][T16802] vzalloc_noprof+0xb2/0xf0 [ 347.432254][T16802] ? packet_set_ring+0x6f3/0x2120 [ 347.432275][T16802] packet_set_ring+0x6f3/0x2120 [ 347.432319][T16802] ? __pfx_packet_set_ring+0x10/0x10 [ 347.432364][T16802] ? _copy_from_user+0x94/0xb0 [ 347.432394][T16802] packet_setsockopt+0xc5a/0x12c0 [ 347.432418][T16802] ? __pfx_packet_setsockopt+0x10/0x10 [ 347.432451][T16802] ? do_futex+0x333/0x420 [ 347.432467][T16802] ? aa_sk_perm+0x15f/0x920 [ 347.432496][T16802] ? aa_sk_perm+0x7ee/0x920 [ 347.432528][T16802] ? __pfx_aa_sk_perm+0x10/0x10 [ 347.432556][T16802] ? aa_sock_opt_perm+0xff/0x1a0 [ 347.432580][T16802] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 347.432603][T16802] ? __pfx_packet_setsockopt+0x10/0x10 [ 347.432636][T16802] do_sock_setsockopt+0x17c/0x1b0 [ 347.432671][T16802] __x64_sys_setsockopt+0x13f/0x1b0 [ 347.432704][T16802] do_syscall_64+0xfa/0xf80 [ 347.432730][T16802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.432749][T16802] ? clear_bhb_loop+0x60/0xb0 [ 347.432773][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.432792][T16802] RIP: 0033:0x7f4cd1f8f749 [ 347.432810][T16802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.432826][T16802] RSP: 002b:00007f4cd2e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.432846][T16802] RAX: ffffffffffffffda RBX: 00007f4cd21e6090 RCX: 00007f4cd1f8f749 [ 347.432859][T16802] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000006 [ 347.432870][T16802] RBP: 00007f4cd2013f91 R08: 000000000000001c R09: 0000000000000000 [ 347.432881][T16802] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 347.432892][T16802] R13: 00007f4cd21e6128 R14: 00007f4cd21e6090 R15: 00007fff886454f8 [ 347.432926][T16802] [ 347.432934][T16802] Mem-Info: [ 347.671151][ T5839] Bluetooth: hci5: command tx timeout [ 347.740230][T16802] active_anon:7875 inactive_anon:0 isolated_anon:0 [ 347.740230][T16802] active_file:2572 inactive_file:39979 isolated_file:0 [ 347.740230][T16802] unevictable:768 dirty:129 writeback:0 [ 347.740230][T16802] slab_reclaimable:12699 slab_unreclaimable:118113 [ 347.740230][T16802] mapped:30197 shmem:1367 pagetables:1032 [ 347.740230][T16802] sec_pagetables:0 bounce:0 [ 347.740230][T16802] kernel_misc_reclaimable:0 [ 347.740230][T16802] free:1303629 free_pcp:13463 free_cma:0 [ 347.788560][T16802] Node 0 active_anon:31500kB inactive_anon:0kB active_file:10288kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120788kB dirty:512kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15268kB pagetables:3996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 347.791485][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.830363][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.837595][T16802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 347.860137][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.904827][T16802] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.936706][T16802] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 347.963963][T16802] Node 0 DMA32 free:1303952kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31400kB inactive_anon:0kB active_file:10288kB inactive_file:159720kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:38560kB local_pcp:15324kB free_cma:0kB [ 347.999895][T16802] lowmem_reserve[]: 0 0 0 0 0 [ 348.008531][T16802] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.013508][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.047428][T16802] lowmem_reserve[]: 0 0 0 0 0 [ 348.066788][T16802] Node 1 Normal free:3895204kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18328kB local_pcp:8704kB free_cma:0kB [ 348.110686][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.138943][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.149981][T16802] lowmem_reserve[]: 0 0 0 0 0 [ 348.162461][T16802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 348.225578][T16802] Node 0 DMA32: 2*4kB (E) 2*8kB (ME) 89*16kB (ME) 127*32kB (M) 22*64kB (UM) 28*128kB (UME) 18*256kB (UME) 12*512kB (UME) 6*1024kB (UM) 1*2048kB (M) 311*4096kB (UM) = 1303304kB [ 348.274537][T16815] x_tables: duplicate entry at hook 3 [ 348.333190][T16802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 348.395304][T16802] Node 1 Normal: 189*4kB (UME) 63*8kB (UME) 45*16kB (UME) 132*32kB (UME) 32*64kB (UME) 11*128kB (UME) 3*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 0*2048kB 947*4096kB (M) = 3895484kB [ 348.429771][T16802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.451131][T16802] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 348.487936][T16802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.508241][T16619] hsr_slave_0: entered promiscuous mode [ 348.529660][T16802] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 348.534270][T16619] hsr_slave_1: entered promiscuous mode [ 348.540099][T16802] 43915 total pagecache pages [ 348.550491][T16802] 0 pages in swap cache [ 348.565775][T16820] netlink: 'syz.1.3166': attribute type 1 has an invalid length. [ 348.588286][T16802] Free swap = 124996kB [ 348.592704][T16802] Total swap = 124996kB [ 348.600289][T16619] debugfs: 'hsr0' already exists in 'hsr' [ 348.606185][T16802] 2097051 pages RAM [ 348.614781][T16820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3166'. [ 348.635459][T16802] 0 pages HighMem/MovableOnly [ 348.640191][T16802] 424280 pages reserved [ 348.654297][T16619] Cannot create hsr debugfs directory [ 348.673957][T16802] 0 pages cma reserved [ 349.025751][T16834] xt_hashlimit: invalid rate [ 349.053379][T11342] hsr_slave_0: left promiscuous mode [ 349.068512][T11342] hsr_slave_1: left promiscuous mode [ 349.079186][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.092445][T11342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.101536][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.114070][T11342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.165234][T11342] veth1_macvtap: left promiscuous mode [ 349.171330][T11342] veth0_macvtap: left promiscuous mode [ 349.204622][T16845] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3173'. [ 349.324739][T11342] pim6reg (unregistering): left allmulticast mode [ 349.630910][T11342] team0 (unregistering): Port device team_slave_1 removed [ 349.654495][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3174'. [ 349.677087][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 349.687162][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 349.698156][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 349.707805][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 349.717774][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 349.718309][T11342] team0 (unregistering): Port device team_slave_0 removed [ 349.727633][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 349.734483][ T5839] Bluetooth: hci5: command tx timeout [ 349.749505][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 350.248307][T16856] syzkaller1: entered promiscuous mode [ 350.257515][T16856] syzkaller1: entered allmulticast mode [ 350.578508][T16869] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 350.750661][T11342] IPVS: stop unused estimator thread 0... [ 350.867595][T16881] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 350.936590][T16884] netlink: 'syz.0.3183': attribute type 10 has an invalid length. [ 351.101811][T16891] openvswitch: netlink: Missing key (keys=40, expected=80) [ 351.165808][T16619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.192331][T16619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.260108][T16898] netlink: 'syz.0.3187': attribute type 33 has an invalid length. [ 351.272908][T16619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.432446][T16898] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 351.507225][T16898] bond10 (unregistering): Released all slaves [ 351.631381][T16619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.368545][T16956] xfrm1: entered promiscuous mode [ 352.373979][T16956] xfrm1: entered allmulticast mode [ 352.426242][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.496910][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.532789][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.540058][T11342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.596778][T15257] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.604060][T15257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.629182][T16977] syzkaller0: entered promiscuous mode [ 352.674263][T16977] syzkaller0: entered allmulticast mode [ 352.723604][T16983] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 352.734348][T16984] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.741524][T16984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.827593][T16992] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 353.115899][T17008] delete_channel: no stack [ 353.340645][T17018] netlink: 'syz.0.3215': attribute type 63 has an invalid length. [ 353.389967][T17018] netlink: 'syz.0.3215': attribute type 63 has an invalid length. [ 353.523633][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.720584][T17026] syzkaller0: entered promiscuous mode [ 353.730485][T17026] syzkaller0: entered allmulticast mode [ 355.450894][T17007] C speed is unknown, defaulting to 1000 [ 355.724505][T17053] IPv6: sit2: Disabled Multicast RS [ 355.741516][T17053] sit2: entered allmulticast mode [ 355.836480][T16619] veth0_vlan: entered promiscuous mode [ 355.882212][T16619] veth1_vlan: entered promiscuous mode [ 356.007825][T16619] veth0_macvtap: entered promiscuous mode [ 356.015678][T17066] netlink: zone id is out of range [ 356.021013][T17066] netlink: zone id is out of range [ 356.037226][T16619] veth1_macvtap: entered promiscuous mode [ 356.045073][T17066] netlink: zone id is out of range [ 356.057182][T17066] netlink: zone id is out of range [ 356.070752][T17066] netlink: zone id is out of range [ 356.092896][T16619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.107476][T17066] netlink: zone id is out of range [ 356.132673][T17066] netlink: zone id is out of range [ 356.163675][T17066] netlink: zone id is out of range [ 356.193553][T17066] netlink: zone id is out of range [ 356.228256][T17066] netlink: zone id is out of range [ 356.243841][T17067] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.270473][T16619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.363969][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.385044][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.403586][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.463267][T17082] __nla_validate_parse: 13 callbacks suppressed [ 356.463291][T17082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3230'. [ 356.494637][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.832306][T17097] netlink: 'syz.2.3233': attribute type 2 has an invalid length. [ 356.922866][ T5084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.935796][ T5084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.939695][T17103] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3235'. [ 357.196523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.226682][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.259883][T17109] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3236'. [ 357.332276][T17111] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3238'. [ 357.346087][T17111] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3238'. [ 358.226746][T17145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3248'. [ 358.279244][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.291874][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.304760][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.313095][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.334511][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.568399][T17164] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3252'. [ 358.828495][T17172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3254'. [ 358.843035][T17146] C speed is unknown, defaulting to 1000 [ 359.688362][T17209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3263'. [ 359.797572][T17146] chnl_net:caif_netlink_parms(): no params data found [ 360.118946][T17146] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.158198][T17146] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.176095][T17146] bridge_slave_0: entered allmulticast mode [ 360.211430][T17146] bridge_slave_0: entered promiscuous mode [ 360.226585][T17146] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.236003][T17146] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.243434][T17146] bridge_slave_1: entered allmulticast mode [ 360.260498][T17146] bridge_slave_1: entered promiscuous mode [ 360.367242][ T5841] Bluetooth: hci0: command tx timeout [ 360.400984][T17146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.419971][T17146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.512966][T17146] team0: Port device team_slave_0 added [ 360.547020][T17146] team0: Port device team_slave_1 added [ 360.570124][T17260] netlink: 'syz.1.3280': attribute type 1 has an invalid length. [ 360.758781][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3279'. [ 360.783427][T17146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.803591][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.813954][T17274] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 360.831001][T17146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.855343][T17277] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 360.871669][T17146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.895100][T17277] ksmbd: Unknown IPC event: 3, ignore. [ 360.901117][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.933359][T17146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.942278][T17283] netlink: 'syz.1.3285': attribute type 1 has an invalid length. [ 360.999698][T17283] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 361.041538][T17289] net_ratelimit: 44 callbacks suppressed [ 361.041561][T17289] openvswitch: netlink: Missing key (keys=40, expected=100) [ 361.052146][T17146] hsr_slave_0: entered promiscuous mode [ 361.092234][T17146] hsr_slave_1: entered promiscuous mode [ 361.099971][T17146] debugfs: 'hsr0' already exists in 'hsr' [ 361.136898][T17146] Cannot create hsr debugfs directory [ 361.372175][T17300] netlink: 'syz.4.3289': attribute type 10 has an invalid length. [ 361.424316][T17300] team0: Port device geneve0 added [ 361.512551][T17146] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.594327][T17313] __nla_validate_parse: 3 callbacks suppressed [ 361.594347][T17313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3293'. [ 361.634720][T17316] netlink: 'syz.3.3294': attribute type 10 has an invalid length. [ 361.642809][T17316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3294'. [ 361.654129][T17316] dummy0: entered promiscuous mode [ 361.685487][T17316] bridge0: port 2(dummy0) entered blocking state [ 361.697722][T17316] bridge0: port 2(dummy0) entered disabled state [ 361.706869][T17316] dummy0: entered allmulticast mode [ 361.722837][T17146] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.768697][T17320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3296'. [ 361.797889][T17146] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.919068][T17146] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.257662][T17146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.300805][T17346] syzkaller0: entered promiscuous mode [ 362.333873][T17346] syzkaller0: entered allmulticast mode [ 362.342075][T17146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.382294][T17146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.411366][T17146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.413354][T17337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3301'. [ 362.438774][T17337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3301'. [ 362.455910][ T5841] Bluetooth: hci0: command tx timeout [ 362.807038][T17379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3309'. [ 362.830185][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3311'. [ 362.958621][T17146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.011247][T17146] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.034895][T17390] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 363.055649][T17391] vlan2: entered promiscuous mode [ 363.068622][T17394] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3315'. [ 363.082641][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.090012][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.115960][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.117397][T17394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3315'. [ 363.123289][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.443524][T17407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.813732][T17434] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3323'. [ 363.964685][T17146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.252593][T17146] veth0_vlan: entered promiscuous mode [ 364.303141][T17456] x_tables: unsorted underflow at hook 2 [ 364.334750][T17146] veth1_vlan: entered promiscuous mode [ 364.357688][T17452] netlink: 'syz.3.3328': attribute type 4 has an invalid length. [ 364.510651][T17146] veth0_macvtap: entered promiscuous mode [ 364.524089][ T5841] Bluetooth: hci0: command tx timeout [ 364.547075][T17146] veth1_macvtap: entered promiscuous mode [ 364.578967][T17146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.685533][T17463] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 364.698410][T17463] bond2 (unregistering): Released all slaves [ 364.730981][T17468] netlink: 'syz.3.3334': attribute type 10 has an invalid length. [ 364.778708][T17146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.819138][T17469] netlink: 'syz.3.3334': attribute type 10 has an invalid length. [ 364.840657][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.867784][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.901135][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.936017][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.012955][T17471] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 365.021045][T17471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.275229][T11943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.307086][T11943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.460928][T11341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.489378][T11341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.622494][T17497] sctp: [Deprecated]: syz.3.3342 (pid 17497) Use of int in max_burst socket option. [ 365.622494][T17497] Use struct sctp_assoc_value instead [ 365.642030][T17501] IPVS: Error connecting to the multicast addr [ 365.643130][T17502] netlink: 'syz.1.3341': attribute type 1 has an invalid length. [ 365.673200][T17502] netlink: 'syz.1.3341': attribute type 7 has an invalid length. [ 365.703412][T17502] netlink: 'syz.1.3341': attribute type 8 has an invalid length. [ 365.851936][T17515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.146748][T17524] ipt_REJECT: TCP_RESET invalid for non-tcp [ 366.604348][T17531] bond1: option miimon: invalid value (18446744073709551585) [ 366.612098][T17531] bond1: option miimon: allowed values 0 - 2147483647 [ 366.619325][ T5841] Bluetooth: hci0: command tx timeout [ 366.631446][T17531] bond1 (unregistering): Released all slaves [ 366.903283][ T5842] syz_tun (unregistering): left allmulticast mode [ 366.917616][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.929529][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.948698][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.961508][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.962123][ T5842] syz_tun (unregistering): left promiscuous mode [ 366.976266][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.000297][ T5842] bridge0: port 1(syz_tun) entered disabled state [ 367.194584][T17558] sctp: [Deprecated]: syz.0.3356 (pid 17558) Use of int in maxseg socket option. [ 367.194584][T17558] Use struct sctp_assoc_value instead [ 367.449428][T17563] __nla_validate_parse: 8 callbacks suppressed [ 367.449457][T17563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3359'. [ 367.552210][T17565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.552875][T17573] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 367.598714][T17573] bond1 (unregistering): Released all slaves [ 367.668312][T17579] ip_vti0: entered promiscuous mode [ 367.801227][T17547] C speed is unknown, defaulting to 1000 [ 367.877623][T17593] tipc: Enabling of bearer rejected, media not registered [ 367.887161][ T30] audit: type=1800 audit(1765629299.362:6): pid=17590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3364" name="memory.events" dev="tmpfs" ino=196 res=0 errno=0 [ 367.934463][ T30] audit: type=1804 audit(1765629299.362:7): pid=17590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3364" name="/newroot/35/memory.events" dev="tmpfs" ino=196 res=1 errno=0 [ 368.028366][T17590] syzkaller0: entered promiscuous mode [ 368.043724][T17590] syzkaller0: entered allmulticast mode [ 368.077259][T17601] can: request_module (can-proto-0) failed. [ 368.082647][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 368.179627][T17600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.212782][T17606] netlink: 'syz.2.3368': attribute type 1 has an invalid length. [ 368.227832][T17601] bond0: entered promiscuous mode [ 368.232921][T17601] bond_slave_0: entered promiscuous mode [ 368.240492][T17601] bond_slave_1: entered promiscuous mode [ 368.502296][T17617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.007532][ T5839] Bluetooth: hci2: command tx timeout [ 370.242547][T17600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.422196][T17600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.565022][T17600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.865668][T17647] syzkaller0: entered promiscuous mode [ 370.871802][T17647] syzkaller0: entered allmulticast mode [ 370.889913][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3383'. [ 370.923205][T17651] syz_tun: entered allmulticast mode [ 370.961277][T17650] syz_tun: left allmulticast mode [ 370.974374][T11342] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.031827][T15257] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.090956][ T5839] Bluetooth: hci2: command tx timeout [ 371.149905][T15257] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.166562][ T1145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.185891][T17547] chnl_net:caif_netlink_parms(): no params data found [ 371.596469][T17679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3392'. [ 371.663201][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'. [ 371.716861][T17679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.726941][T17547] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.742213][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 371.751406][T17547] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.762592][T17547] bridge_slave_0: entered allmulticast mode [ 371.775415][T17547] bridge_slave_0: entered promiscuous mode [ 371.793531][T17547] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.801587][T17547] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.815788][T17547] bridge_slave_1: entered allmulticast mode [ 371.859902][T17547] bridge_slave_1: entered promiscuous mode [ 372.131008][T17547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.166195][T17547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.296628][T17547] team0: Port device team_slave_0 added [ 372.336692][T17547] team0: Port device team_slave_1 added [ 372.346938][T17710] netlink: 'syz.0.3398': attribute type 1 has an invalid length. [ 372.553601][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 372.555960][T17547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.582233][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 372.582589][T17547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.624945][T17547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.665377][T17547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.692027][T17547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.722772][T17730] Cannot find add_set index 0 as target [ 372.732827][T17547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.984773][T17547] hsr_slave_0: entered promiscuous mode [ 372.992058][T17547] hsr_slave_1: entered promiscuous mode Connection to 10.128.0.10 closed by remote host. [ 373.044926][T17547] debugfs: 'hsr0' already exists in 'hsr' [ 373.083929][T17547] Cannot create hsr debugfs directory [ 373.166557][ T5839] Bluetooth: hci2: command tx timeout [ 373.892925][T16109] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 373.904992][T16109] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 373.913577][T16109] CPU: 1 UID: 0 PID: 16109 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 373.923112][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.933165][T16109] RIP: 0010:klist_del+0x49/0x110 [ 373.938117][T16109] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 69 e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 69 e7 f6 4d 8b 7e 58 4c 89 f7 e8 9f 14 [ 373.957903][T16109] RSP: 0018:ffffc90004a1f768 EFLAGS: 00010202 [ 373.964236][T16109] RAX: 000000000000000b RBX: ffff88805ca7fc60 RCX: ffff8880798b5b80 [ 373.972223][T16109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 373.980193][T16109] RBP: ffffc90004a1f890 R08: ffff88805ff63d23 R09: 1ffff1100bfec7a4 [ 373.988251][T16109] R10: dffffc0000000000 R11: ffffed100bfec7a5 R12: dffffc0000000000 [ 373.996354][T16109] R13: 1ffff1100b94ff8c R14: 0000000000000000 R15: ffff888026848758 [ 374.004406][T16109] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 374.013413][T16109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.019998][T16109] CR2: 00007ffc2162bbd4 CR3: 0000000075e82000 CR4: 00000000003526f0 [ 374.028055][T16109] Call Trace: [ 374.031444][T16109] [ 374.034477][T16109] device_del+0x280/0x8e0 [ 374.039069][T16109] ? _raw_spin_unlock_irq+0x2e/0x50 [ 374.044261][T16109] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 374.050320][T16109] ? __pfx_device_del+0x10/0x10 [ 374.055181][T16109] ? netdev_unregister_kobject+0x344/0x450 [ 374.061117][T16109] unregister_netdevice_many_notify+0x1da6/0x2310 [ 374.067637][T16109] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 374.074606][T16109] ? rtnl_net_dev_lock+0x36/0x2f0 [ 374.079660][T16109] ? rtnl_net_dev_lock+0x36/0x2f0 [ 374.084800][T16109] unregister_netdev+0x157/0x1f0 [ 374.089736][T16109] ? __pfx_unregister_netdev+0x10/0x10 [ 374.095972][T16109] ? remove_wait_queue+0x33/0x120 [ 374.101010][T16109] bnep_session+0x294d/0x2b40 [ 374.106033][T16109] ? rcu_is_watching+0x15/0xb0 [ 374.110822][T16109] ? trace_sched_exit_tp+0x36/0xf0 [ 374.115940][T16109] ? __schedule+0x14d2/0x5000 [ 374.120824][T16109] ? __pfx_bnep_session+0x10/0x10 [ 374.125961][T16109] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 374.131965][T16109] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.138301][T16109] ? __pfx_woken_wake_function+0x10/0x10 [ 374.143949][T16109] ? __kthread_parkme+0x7b/0x200 [ 374.148957][T16109] ? __kthread_parkme+0x1a1/0x200 [ 374.153994][T16109] kthread+0x711/0x8a0 [ 374.158077][T16109] ? __pfx_bnep_session+0x10/0x10 [ 374.163131][T16109] ? __pfx_kthread+0x10/0x10 [ 374.167896][T16109] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.173093][T16109] ? lockdep_hardirqs_on+0x98/0x140 [ 374.178283][T16109] ? __pfx_kthread+0x10/0x10 [ 374.182903][T16109] ret_from_fork+0x599/0xb30 [ 374.187604][T16109] ? __pfx_ret_from_fork+0x10/0x10 [ 374.192807][T16109] ? __switch_to_asm+0x39/0x70 [ 374.197657][T16109] ? __switch_to_asm+0x33/0x70 [ 374.202592][T16109] ? __pfx_kthread+0x10/0x10 [ 374.207188][T16109] ret_from_fork_asm+0x1a/0x30 [ 374.212048][T16109] [ 374.215321][T16109] Modules linked in: [ 374.220781][T16109] ---[ end trace 0000000000000000 ]--- [ 374.227670][T16109] RIP: 0010:klist_del+0x49/0x110 [ 374.232848][T16109] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 69 e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 69 e7 f6 4d 8b 7e 58 4c 89 f7 e8 9f 14 [ 374.253153][T16109] RSP: 0018:ffffc90004a1f768 EFLAGS: 00010202 [ 374.259538][T16109] RAX: 000000000000000b RBX: ffff88805ca7fc60 RCX: ffff8880798b5b80 [ 374.268958][T16109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 374.277961][T16109] RBP: ffffc90004a1f890 R08: ffff88805ff63d23 R09: 1ffff1100bfec7a4 [ 374.286291][T16109] R10: dffffc0000000000 R11: ffffed100bfec7a5 R12: dffffc0000000000 [ 374.294375][T16109] R13: 1ffff1100b94ff8c R14: 0000000000000000 R15: ffff888026848758 [ 374.302498][T16109] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 374.311676][T16109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.318597][T16109] CR2: 00007ffc2162bbd4 CR3: 0000000075e82000 CR4: 00000000003526f0 [ 374.326812][T16109] Kernel panic - not syncing: Fatal exception [ 374.333043][T16109] Kernel Offset: disabled [ 374.337500][T16109] Rebooting in 86400 seconds..