last executing test programs: 26.719659964s ago: executing program 3 (id=3114): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)=""/41, 0x29}], 0x2}, 0x40004) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x700, 0x80, 0x2, 0x80000001, {{0xe, 0x4, 0x3, 0x4, 0x38, 0x64, 0x0, 0xb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xce, 0x3, 0x5, [{@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffb}]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x1, 0x5, "d77b1b"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000ffdbdf25150000003800018008000300010000000800030001000000140002007665746831000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000100000030000180080003000200000008000100", @ANYRES32=r4, @ANYBLOB="1400020064756d6d793000000000000000000000080003000100000018000180140002007866726d3000000000000000000000002800018014000200726f736530000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="c630e47d0220647b53309e366dccfe457c5192c3730f904a6bcbecfebcd3354e44c891ca90b3e16f4a10283b5fbd3c5d91e8af8905c396bb9f86eab78fa8d0ffee60dc01df8988a50de67c5c33", @ANYRES32=r6, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4044041) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88001}, 0x4000000) 26.522008931s ago: executing program 3 (id=3116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}], 0x2) 23.997995725s ago: executing program 3 (id=3124): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 23.488548585s ago: executing program 3 (id=3129): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000000)=0xffff2652, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x80802, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) sendmsg$inet(r1, 0x0, 0x51) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x54}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 23.061988115s ago: executing program 3 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/13, 0xc}], 0x100000000000004b, 0x4, 0xfffffffe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001800010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040000000090a01040008000a40000000000900020073797a30000000000900010073797a3073562a3e98992df0fe128ae700000000080005400000002f04001280140000f50500010000000000000000000084000a00"/148], 0x88}}, 0x20050800) 22.890815491s ago: executing program 3 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140013001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 5.928447028s ago: executing program 4 (id=3198): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e22, @broadcast}, 0x10, &(0x7f00000001c0)=[{0x0, 0x27}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r4, 0x2f20}, &(0x7f0000000180)=0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000640), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0x27}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f712a325c987", 0x15}], 0x3) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xc, [@float={0x10, 0x0, 0x0, 0x10, 0x4}, @enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0xc, [{0x9, 0xb, 0xfffffffb}]}, @struct={0x0, 0x5, 0x0, 0x4, 0x1, 0x9b6, [{0x9, 0x4, 0x13f}, {0x0, 0x1, 0xfffffff7}, {0x8, 0x2, 0xd958}, {0x10, 0x3, 0x2e9501ec}, {0x6, 0x2, 0x6}]}, @enum={0x6, 0xa, 0x0, 0x6, 0x4, [{0xd, 0x800}, {0xa, 0x7f}, {}, {0xe, 0x80000001}, {0xc, 0x8}, {0x8, 0x1}, {0x2, 0x6}, {0x4, 0xfa}, {0xc, 0x7}, {0x3, 0x3}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x61, 0x30, 0x5f, 0x5f, 0x4f, 0x2e]}}, &(0x7f0000000940)=""/186, 0xf8, 0xba, 0x1, 0x7}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x16, &(0x7f0000000a80)=@raw=[@jmp={0x5, 0x1, 0xd, 0x6, 0x4, 0x10, 0x4}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000b40)='GPL\x00', 0x100, 0x96, &(0x7f0000000b80)=""/150, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0xc, 0x0, 0x20000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x1], &(0x7f0000000d00)=[{0x3, 0x3, 0x9, 0x5}, {0x2, 0x3, 0x5, 0x4}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 5.431561428s ago: executing program 1 (id=3202): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x200, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x8c, 0x1, [@m_mirred={0x58, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xa, 0x6, "d527360c37d8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x118, 0x1, [@m_ctinfo={0x114, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xdd, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.446293162s ago: executing program 2 (id=3206): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@generic="db155d"]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2.383213992s ago: executing program 2 (id=3207): socket(0x2d, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0x84, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}}}}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20005}, 0x4000894) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4008014) socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x48}}, 0x3000c000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=0xffffffffffffffff], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000306047da85768bbe2d207df550525f3885be1703df82f9d7583d657d5dada47e3f0e8ab7d69cc44e63ffffe3a7cceca1f0c4b77e965927d9fe27f9982d27a9f74ef5"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.260268027s ago: executing program 2 (id=3208): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000d873006111740000000000060e9a5eab11916d6c99be21234649000000000800009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x4, 0x1, [0xa]}, 0xa) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x3, 0x10}, 0xc) 2.174759549s ago: executing program 2 (id=3209): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f7", 0x10}], 0x3) 1.615488666s ago: executing program 1 (id=3210): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x98, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x8c, 0x1, [@m_mirred={0x58, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xb, 0x6, "d527360c37d81b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.544868939s ago: executing program 0 (id=3211): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x28, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000", @ANYRES32=r0], 0x24}}, 0x40850) syz_genetlink_get_family_id$mptcp(0x0, r0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000000000000100000d0a000000000000007da4c27a1b260d2e020000060400000002000000000000000e0000000100000000005f00"], &(0x7f0000000f40)=""/4089, 0x4c, 0xff9, 0x1}, 0x28) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) unshare(0x2c020400) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x37df697b}, 0x1c) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x145c22579e905f19, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000480)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRES32=0x1, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x15, &(0x7f0000000080)=0x100, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000002940), &(0x7f0000000500)=""/145}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="18170000", @ANYRES32=r5, @ANYBLOB="000000000000000018480000fdffffff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000007f378000fcffffff18370000030000000000000000000000180000000104000000000000fdffffff8500000078000000"], &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x9e, &(0x7f0000000600)=""/158, 0x41000, 0x34, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f00000006c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x10, 0x5642, 0x7f}, 0x10, 0x1f160, r2, 0x1, 0x0, &(0x7f0000000740)=[{0x0, 0x1, 0xc, 0xc}], 0x10, 0x800}, 0x94) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1.543537111s ago: executing program 4 (id=3212): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000640)=0x80000000, 0xc86) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}], 0x18}}], 0x1, 0x880) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, 0x0, 0x30, 0x0, @val=@iter={0x0}}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'rose0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYRES64, @ANYRES8=r0, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8008002) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000005c0)=0x1000004, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) 1.357303076s ago: executing program 2 (id=3213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r3, 0x5, 0x9, 0x17}) accept$unix(r4, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0x10}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2bdc, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x39e3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) 1.294156947s ago: executing program 1 (id=3214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x74, 0x1, [@m_mirred={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x118, 0x1, [@m_ctinfo={0x114, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xdd, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.293826482s ago: executing program 0 (id=3215): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1b8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x40, 0x1, [@m_mirred={0x3c, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0xe, 0x6, "d527360c37d81b077c36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x11c, 0x1, [@m_ctinfo={0x118, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xe1, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a04"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.16701691s ago: executing program 1 (id=3216): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@generic="db155d"]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1.037126908s ago: executing program 0 (id=3217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x11c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xd4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x84, 0x1, [@m_mirred={0x50, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x3c, 0x1, [@m_ctinfo={0x38, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.032449052s ago: executing program 4 (id=3218): syz_emit_ethernet(0x2e, &(0x7f0000001080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x40, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0xf, 0x2}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, &(0x7f0000001180)={0x0, 0x1, [0xbf2, 0xa00, 0x33a, 0xb59]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000004c0), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000046c0012800b00010062726964676500005c00028008000500010000000c002e00feff000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 943.002644ms ago: executing program 2 (id=3219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 942.720374ms ago: executing program 1 (id=3220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="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", 0x166}, {&(0x7f0000001600)="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", 0x5ca}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) 807.899597ms ago: executing program 1 (id=3221): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e22, @broadcast}, 0x10, &(0x7f00000001c0)=[{0x0, 0x27}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r4, 0x2f20}, &(0x7f0000000180)=0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000640), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0x27}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f712a325c987", 0x15}], 0x3) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xc, [@float={0x10, 0x0, 0x0, 0x10, 0x4}, @enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0xc, [{0x9, 0xb, 0xfffffffb}]}, @struct={0x0, 0x5, 0x0, 0x4, 0x1, 0x9b6, [{0x9, 0x4, 0x13f}, {0x0, 0x1, 0xfffffff7}, {0x8, 0x2, 0xd958}, {0x10, 0x3, 0x2e9501ec}, {0x6, 0x2, 0x6}]}, @enum={0x6, 0xa, 0x0, 0x6, 0x4, [{0xd, 0x800}, {0xa, 0x7f}, {}, {0xe, 0x80000001}, {0xc, 0x8}, {0x8, 0x1}, {0x2, 0x6}, {0x4, 0xfa}, {0xc, 0x7}, {0x3, 0x3}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x61, 0x30, 0x5f, 0x5f, 0x4f, 0x2e]}}, &(0x7f0000000940)=""/186, 0xf8, 0xba, 0x1, 0x7}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x16, &(0x7f0000000a80)=@raw=[@jmp={0x5, 0x1, 0xd, 0x6, 0x4, 0x10, 0x4}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000b40)='GPL\x00', 0x100, 0x96, &(0x7f0000000b80)=""/150, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0xc, 0x0, 0x20000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x1], &(0x7f0000000d00)=[{0x3, 0x3, 0x9, 0x5}, {0x2, 0x3, 0x5, 0x4}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 629.018514ms ago: executing program 0 (id=3222): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 551.262907ms ago: executing program 4 (id=3223): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x98, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x8c, 0x1, [@m_mirred={0x58, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xb, 0x6, "d527360c37d81b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 230.141834ms ago: executing program 0 (id=3224): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x28, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000", @ANYRES32=r0], 0x24}}, 0x40850) syz_genetlink_get_family_id$mptcp(0x0, r0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000000000000100000d0a000000000000007da4c27a1b260d2e020000060400000002000000000000000e0000000100000000005f00"], &(0x7f0000000f40)=""/4089, 0x4c, 0xff9, 0x1}, 0x28) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) unshare(0x2c020400) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x37df697b}, 0x1c) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x145c22579e905f19, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000480)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRES32=0x1, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x15, &(0x7f0000000080)=0x100, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000002940), &(0x7f0000000500)=""/145}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="18170000", @ANYRES32=r5, @ANYBLOB="000000000000000018480000fdffffff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000007f378000fcffffff18370000030000000000000000000000180000000104000000000000fdffffff8500000078000000"], &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x9e, &(0x7f0000000600)=""/158, 0x41000, 0x34, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f00000006c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x10, 0x5642, 0x7f}, 0x10, 0x1f160, r2, 0x1, 0x0, &(0x7f0000000740)=[{0x0, 0x1, 0xc, 0xc}], 0x10, 0x800}, 0x94) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 207.017265ms ago: executing program 4 (id=3225): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x74, 0x1, [@m_mirred={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x118, 0x1, [@m_ctinfo={0x114, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xdd, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 55.671498ms ago: executing program 4 (id=3226): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'}) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 0s ago: executing program 0 (id=3227): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) kernel console output (not intermixed with test programs): 236.884459][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 236.924010][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1050'. [ 236.973996][ T9256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1050'. [ 237.224509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.283189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.357909][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1059'. [ 237.523200][ T9287] syzkaller0: entered promiscuous mode [ 237.540841][ T9287] syzkaller0: entered allmulticast mode [ 237.834320][ T9308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.853374][ T9308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.944815][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 237.956550][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1070'. [ 237.969806][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 237.979209][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1070'. [ 238.244968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.707940][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.756804][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.806727][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.856372][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.871895][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.909916][ T9353] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 239.025733][ T9353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.292771][ T9368] syzkaller0: entered promiscuous mode [ 239.305472][ T9368] syzkaller0: entered allmulticast mode [ 239.445156][ T1330] wlan1: Trigger new scan to find an IBSS to join [ 239.749462][ T9388] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 239.840906][ T9393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.872585][ T9393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.389808][ T9415] syzkaller0: entered promiscuous mode [ 240.415999][ T9415] syzkaller0: entered allmulticast mode [ 240.455335][ T9415] tipc: Enabling of bearer rejected, failed to enable media [ 240.890504][ T9438] syzkaller0: entered promiscuous mode [ 240.915701][ T9438] syzkaller0: entered allmulticast mode [ 240.929846][ T9440] Illegal XDP return value 69374008 on prog (id 128) dev syz_tun, expect packet loss! [ 241.024889][ T9445] tipc: Enabled bearer , priority 0 [ 241.131336][ T9444] syzkaller0: entered promiscuous mode [ 241.141860][ T9444] syzkaller0: entered allmulticast mode [ 241.152689][ T9444] tipc: Resetting bearer [ 241.224035][ T9443] tipc: Resetting bearer [ 241.279584][ T9455] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 241.455817][ T9464] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 241.593367][ T9470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.601321][ T9470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.265999][ C1] net_ratelimit: 3 callbacks suppressed [ 242.266020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.495344][ T141] wlan1: Trigger new scan to find an IBSS to join [ 243.127130][ T9443] tipc: Disabling bearer [ 243.144134][ T9464] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 243.170463][ T9470] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 243.232144][ T10] tipc: Node number set to 847090761 [ 243.283882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.360441][ T9495] syzkaller0: entered promiscuous mode [ 243.377500][ T9495] syzkaller0: entered allmulticast mode [ 243.740643][ T9510] netlink: 'syz.0.1147': attribute type 4 has an invalid length. [ 243.755818][ T9510] __nla_validate_parse: 15 callbacks suppressed [ 243.755838][ T9510] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1147'. [ 243.777931][ T9512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1149'. [ 243.875671][ T9520] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 243.940216][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 243.995720][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1151'. [ 244.072400][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 244.108524][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'. [ 244.140342][ T9520] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.280758][ T9534] netlink: 'syz.0.1157': attribute type 25 has an invalid length. [ 244.323278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.344492][ T9535] syzkaller0: entered promiscuous mode [ 244.364333][ T9535] syzkaller0: entered allmulticast mode [ 244.591633][ T9547] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1162'. [ 244.682069][ T9553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 244.811030][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 245.079896][ T9566] netlink: 'syz.1.1171': attribute type 25 has an invalid length. [ 245.092004][ T9569] syzkaller0: entered promiscuous mode [ 245.102833][ T9569] syzkaller0: entered allmulticast mode [ 245.106958][ T9570] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1172'. [ 245.162765][ T9569] tipc: Enabled bearer , priority 0 [ 245.202781][ T9568] tipc: Resetting bearer [ 245.316687][ T9568] tipc: Disabling bearer [ 245.523570][ T1116] wlan1: Trigger new scan to find an IBSS to join [ 245.943079][ T9608] syzkaller0: entered promiscuous mode [ 245.948748][ T9608] syzkaller0: entered allmulticast mode [ 246.475980][ T1330] wlan1: Creating new IBSS network, BSSID 3e:8d:27:0c:42:8e [ 246.558867][ T9634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.566862][ T9634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.729345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.172709][ T9657] netlink: 'syz.3.1206': attribute type 13 has an invalid length. [ 247.194266][ T9657] netlink: 'syz.3.1206': attribute type 17 has an invalid length. [ 247.236772][ T9657] gretap0: refused to change device tx_queue_len [ 247.254961][ T9657] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.303253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.323653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.633622][ T9721] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 248.663541][ T9721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.718748][ T9724] tipc: Enabled bearer , priority 0 [ 248.790103][ T9724] syzkaller0: entered promiscuous mode [ 248.801609][ T9724] syzkaller0: entered allmulticast mode [ 248.809807][ T9724] tipc: Resetting bearer [ 248.821862][ T9723] tipc: Resetting bearer [ 249.363500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.876908][ T9766] __nla_validate_parse: 10 callbacks suppressed [ 250.876931][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 251.089752][ T9723] tipc: Disabling bearer [ 251.125676][ T9747] erspan0: left allmulticast mode [ 251.187842][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.294034][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.305585][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.394737][ T9750] tipc: Enabled bearer , priority 0 [ 251.518326][ T9753] syzkaller0: entered promiscuous mode [ 251.524131][ T9753] syzkaller0: entered allmulticast mode [ 251.530693][ T9753] tipc: Resetting bearer [ 251.537510][ T5776] tipc: Node number set to 593341792 [ 251.553834][ T9743] tipc: Resetting bearer [ 251.669352][ T9782] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1252'. [ 251.756820][ T9785] netlink: 'syz.3.1252': attribute type 13 has an invalid length. [ 251.783078][ T9785] netlink: 'syz.3.1252': attribute type 17 has an invalid length. [ 251.972275][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.982292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.349181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.363662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.730836][ T9743] tipc: Disabling bearer [ 253.740295][ T1330] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.749684][ T1330] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.758965][ T1330] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.768173][ T1330] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.777438][ T1330] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.786906][ T1330] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.797458][ T1330] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.807051][ T1330] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.830178][ T9785] gretap0: refused to change device tx_queue_len [ 253.839118][ T9785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 253.865411][ T5776] tipc: Node number set to 86227937 [ 254.075454][ T9825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.084470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.112922][ T9828] netlink: 'syz.3.1267': attribute type 25 has an invalid length. [ 254.260875][ T1330] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 254.289111][ T1330] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 254.320247][ T1330] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 254.329678][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 254.352325][ T1330] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 254.403409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.437197][ T9841] tipc: Enabled bearer , priority 0 [ 254.503091][ T9845] nft_compat: unsupported protocol 0 [ 254.579010][ T9841] syzkaller0: entered promiscuous mode [ 254.597171][ T9841] syzkaller0: entered allmulticast mode [ 254.606372][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 254.614614][ T9841] tipc: Resetting bearer [ 254.647840][ T9840] tipc: Resetting bearer [ 255.194226][ T9872] netlink: 'syz.3.1284': attribute type 25 has an invalid length. [ 256.007743][ T9879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1285'. [ 256.325881][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.332297][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.639149][ T9840] tipc: Disabling bearer [ 256.708075][ T6249] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.730738][ T6249] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.756581][ T6249] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.793066][ T6249] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.999254][ T9886] tipc: Enabled bearer , priority 0 [ 257.046840][ T9886] syzkaller0: entered promiscuous mode [ 257.077516][ T9886] syzkaller0: entered allmulticast mode [ 257.157219][ T9886] tipc: Resetting bearer [ 257.221268][ T9895] syzkaller0: entered promiscuous mode [ 257.228152][ T9895] syzkaller0: entered allmulticast mode [ 257.241509][ T9885] tipc: Resetting bearer [ 257.298591][ T9885] tipc: Disabling bearer [ 257.383467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.229995][ T9943] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1302'. [ 258.282213][ T9946] netlink: 'syz.1.1302': attribute type 13 has an invalid length. [ 258.290701][ T9946] netlink: 'syz.1.1302': attribute type 17 has an invalid length. [ 258.403564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.445706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.610659][ T9922] tipc: Enabling of bearer rejected, failed to enable media [ 259.795554][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1304'. [ 259.909618][ T9946] gretap0: refused to change device tx_queue_len [ 259.939532][ T9946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 260.023323][ T9956] syzkaller0: entered promiscuous mode [ 260.052029][ T9956] syzkaller0: entered allmulticast mode [ 260.490337][ T9980] tipc: Enabled bearer , priority 0 [ 260.584117][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'. [ 260.601588][ T9980] syzkaller0: entered promiscuous mode [ 260.614231][ T9980] syzkaller0: entered allmulticast mode [ 260.621202][ T9980] tipc: Resetting bearer [ 260.666478][ T9978] tipc: Resetting bearer [ 260.719482][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 262.151188][T10016] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1326'. [ 262.208826][T10017] netlink: 'syz.2.1326': attribute type 13 has an invalid length. [ 262.217420][T10017] netlink: 'syz.2.1326': attribute type 17 has an invalid length. [ 262.428959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.858280][ T9978] tipc: Disabling bearer [ 262.906817][T10017] gretap0: refused to change device tx_queue_len [ 262.924546][T10017] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 263.164703][T10023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1329'. [ 263.317529][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 263.354659][T10031] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 263.364614][T10031] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1332'. [ 263.443754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.454196][T10039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.461474][T10039] IPv6: NLM_F_CREATE should be set when creating new route [ 263.469129][T10039] IPv6: NLM_F_CREATE should be set when creating new route [ 263.510389][T10039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.646557][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 263.826317][T10051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.047113][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'. [ 264.064762][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 264.093656][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1338'. [ 264.116442][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 264.140698][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1338'. [ 264.179834][T10066] tipc: Enabled bearer , priority 0 [ 264.225640][T10074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.234586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.266089][T10066] syzkaller0: entered promiscuous mode [ 264.271626][T10066] syzkaller0: entered allmulticast mode [ 264.296539][T10066] tipc: Resetting bearer [ 264.375975][T10074] batadv_slave_1: left promiscuous mode [ 264.389613][T10074] bond4: left promiscuous mode [ 264.467235][T10062] tipc: Resetting bearer [ 266.352251][T10062] tipc: Disabling bearer [ 266.361748][ T6253] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.370945][ T6253] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.463113][ T6253] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.503440][ T6253] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.823500][T10122] tipc: Enabled bearer , priority 0 [ 266.970520][T10122] syzkaller0: entered promiscuous mode [ 266.976497][T10122] syzkaller0: entered allmulticast mode [ 266.982756][T10122] tipc: Resetting bearer [ 267.030501][T10118] tipc: Resetting bearer [ 267.155301][T10138] __nla_validate_parse: 6 callbacks suppressed [ 267.155315][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 267.766861][T10147] netlink: 'syz.2.1363': attribute type 13 has an invalid length. [ 267.776529][T10147] netlink: 'syz.2.1363': attribute type 17 has an invalid length. [ 268.615164][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1364'. [ 268.771075][T10118] tipc: Disabling bearer [ 268.812415][T10147] gretap0: refused to change device tx_queue_len [ 268.834520][T10147] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 269.125806][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 269.144495][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 269.272014][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 269.316662][ T6249] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.318038][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 269.354006][ T6249] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.384255][T10169] syzkaller0: entered promiscuous mode [ 269.400046][T10169] syzkaller0: entered allmulticast mode [ 269.416471][ T6249] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.431740][ T6249] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.524588][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 269.637387][T10181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1377'. [ 269.757144][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1380'. [ 270.033206][T10200] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 270.128231][T10200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.149693][T10200] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1387'. [ 270.200824][ T1330] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.220180][ T1330] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.270289][ T1330] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.282096][ T1330] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.009761][T10231] team0: Port device team_slave_0 removed [ 271.830556][T10261] tipc: Enabled bearer , priority 0 [ 271.939969][T10261] syzkaller0: entered promiscuous mode [ 271.953364][T10261] syzkaller0: entered allmulticast mode [ 271.970393][T10261] tipc: Resetting bearer [ 272.082683][ T1330] tipc: Resetting bearer [ 272.102515][T10260] tipc: Resetting bearer [ 272.745703][T10285] __nla_validate_parse: 6 callbacks suppressed [ 272.745725][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 273.911692][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 274.029055][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 274.129289][T10260] tipc: Disabling bearer [ 274.257552][T10291] syzkaller0: entered promiscuous mode [ 274.270512][T10291] syzkaller0: entered allmulticast mode [ 274.510944][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1422'. [ 274.660760][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'. [ 275.624306][T10329] netlink: 'syz.2.1425': attribute type 2 has an invalid length. [ 275.633161][T10329] netlink: 'syz.2.1425': attribute type 2 has an invalid length. [ 276.368498][T10335] netlink: 'syz.0.1427': attribute type 13 has an invalid length. [ 276.392983][T10335] netlink: 'syz.0.1427': attribute type 17 has an invalid length. [ 276.723265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.755341][T10335] gretap0: refused to change device tx_queue_len [ 276.780480][T10335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 276.883147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.184401][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 277.193765][T10352] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1434'. [ 277.213212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.420638][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1437'. [ 277.586455][T10367] netlink: 'syz.2.1436': attribute type 2 has an invalid length. [ 277.624625][T10367] netlink: 'syz.2.1436': attribute type 2 has an invalid length. [ 277.981942][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 278.025430][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 278.039547][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 278.051195][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'. [ 278.053280][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 278.069077][T10384] xt_nat: multiple ranges no longer supported [ 278.070038][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 278.086834][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 278.096236][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1443'. [ 278.703923][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1451'. [ 278.720262][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 279.111896][T10411] xt_l2tp: invalid flags combination: 8 [ 280.299691][T10459] syzkaller0: entered promiscuous mode [ 280.313020][T10459] syzkaller0: entered allmulticast mode [ 282.835955][T10575] syzkaller0: entered promiscuous mode [ 282.876366][T10575] syzkaller0: entered allmulticast mode [ 283.182763][T10593] __nla_validate_parse: 13 callbacks suppressed [ 283.182785][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 283.718764][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 283.804772][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 283.818246][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1505'. [ 283.838124][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 283.859024][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1505'. [ 283.885653][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1505'. [ 284.011587][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 284.068260][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1498'. [ 285.110759][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 285.363969][T10670] syz_tun: left allmulticast mode [ 285.382002][T10670] dvmrp6: left allmulticast mode [ 286.527781][T10712] team0: Port device team_slave_0 removed [ 287.932358][T10764] xt_l2tp: invalid flags combination: 8 [ 288.466653][T10774] __nla_validate_parse: 17 callbacks suppressed [ 288.466675][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 288.545348][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 288.548417][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 288.610945][T10776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 288.653422][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 288.690745][T10776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 288.714394][T10776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1553'. [ 289.058402][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.088945][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.117427][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.129829][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'. [ 289.155143][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.174241][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.213246][T10793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.222403][T10793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.244251][T10785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.719087][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 289.729358][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1563'. [ 289.742718][T10808] xt_nat: multiple ranges no longer supported [ 289.780958][T10809] syzkaller0: entered promiscuous mode [ 289.797424][T10809] syzkaller0: entered allmulticast mode [ 290.231338][T10821] syzkaller0: entered promiscuous mode [ 290.237427][T10821] syzkaller0: entered allmulticast mode [ 292.972572][T10867] xt_nat: multiple ranges no longer supported [ 293.204325][T10880] netlink: 'syz.3.1580': attribute type 2 has an invalid length. [ 293.243427][T10880] netlink: 'syz.3.1580': attribute type 2 has an invalid length. [ 293.449068][T10892] xt_nat: multiple ranges no longer supported [ 293.735806][T10901] tipc: Enabled bearer , priority 0 [ 293.848393][T10901] syzkaller0: entered promiscuous mode [ 293.854177][T10901] syzkaller0: entered allmulticast mode [ 293.861184][T10901] tipc: Resetting bearer [ 293.884122][T10906] erspan0: left allmulticast mode [ 293.889462][T10906] batadv_slave_1: left promiscuous mode [ 293.896589][T10906] bond1: left promiscuous mode [ 293.901515][T10906] bond2: left promiscuous mode [ 293.906816][T10906] bond5: left promiscuous mode [ 293.917909][T10900] tipc: Resetting bearer [ 294.041016][T10913] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 294.181197][T10917] __nla_validate_parse: 13 callbacks suppressed [ 294.181219][T10917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1592'. [ 294.507346][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 296.077085][T10900] tipc: Disabling bearer [ 296.127721][T10904] syzkaller0: entered promiscuous mode [ 296.138892][T10904] syzkaller0: entered allmulticast mode [ 296.150801][T10913] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 296.296431][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1597'. [ 299.011916][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 299.059153][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1607'. [ 299.116011][T10959] xt_nat: multiple ranges no longer supported [ 299.170727][T10966] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 299.340067][T10966] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.413206][T10966] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1608'. [ 299.707618][T10987] xt_l2tp: invalid flags combination: 8 [ 299.747450][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 300.281417][T11019] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 300.426772][T11019] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.429624][T11030] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1626'. [ 300.897546][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 301.053140][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 301.063334][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 301.112354][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 301.174879][T11061] netlink: 'syz.1.1638': attribute type 2 has an invalid length. [ 301.184485][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 301.205392][T11061] netlink: 'syz.1.1638': attribute type 2 has an invalid length. [ 301.234181][T11057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1639'. [ 301.258391][T11064] netlink: 'syz.2.1642': attribute type 1 has an invalid length. [ 301.298112][T11064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.312253][T11064] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1642'. [ 301.872249][T11087] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 301.949564][T11087] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 303.975162][T11149] tipc: Enabled bearer , priority 0 [ 304.137121][T11149] syzkaller0: entered promiscuous mode [ 304.153078][T11149] syzkaller0: entered allmulticast mode [ 304.163742][T11149] tipc: Resetting bearer [ 304.267833][T11148] tipc: Resetting bearer [ 305.942031][T11148] tipc: Disabling bearer [ 305.952166][T11168] __nla_validate_parse: 8 callbacks suppressed [ 305.952186][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 305.967747][T11168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'. [ 305.976932][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 305.986944][T11168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'. [ 305.996561][T11168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1672'. [ 306.071494][T11153] batadv_slave_0: entered promiscuous mode [ 306.078978][T11170] batadv_slave_0: left promiscuous mode [ 306.136180][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 306.310981][T11183] syzkaller0: entered promiscuous mode [ 306.318277][T11183] syzkaller0: entered allmulticast mode [ 306.594337][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 308.771324][T11232] tipc: Enabled bearer , priority 0 [ 308.878766][T11232] syzkaller0: entered promiscuous mode [ 308.897816][T11232] syzkaller0: entered allmulticast mode [ 308.917738][T11232] tipc: Resetting bearer [ 308.987574][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 309.009917][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1684'. [ 309.034397][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 309.060407][T11231] tipc: Resetting bearer [ 309.082217][T11247] netlink: 'syz.3.1686': attribute type 2 has an invalid length. [ 309.098906][T11247] netlink: 'syz.3.1686': attribute type 2 has an invalid length. [ 309.404872][T11259] netlink: 'syz.1.1690': attribute type 13 has an invalid length. [ 309.413320][T11259] netlink: 'syz.1.1690': attribute type 17 has an invalid length. [ 310.845180][T11231] tipc: Disabling bearer [ 310.868261][T11259] gretap0: refused to change device tx_queue_len [ 310.875122][T11259] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 310.894173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.953233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.036814][T11261] __nla_validate_parse: 2 callbacks suppressed [ 311.036834][T11261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1691'. [ 311.197585][T11268] tipc: Enabled bearer , priority 0 [ 311.214620][T11268] syzkaller0: entered promiscuous mode [ 311.221835][T11268] syzkaller0: entered allmulticast mode [ 311.267842][T11268] tipc: Resetting bearer [ 311.292685][T11273] netlink: 'syz.2.1693': attribute type 2 has an invalid length. [ 311.336566][T11273] netlink: 'syz.2.1693': attribute type 2 has an invalid length. [ 311.354379][T11270] syzkaller0: entered promiscuous mode [ 311.364197][T11270] syzkaller0: entered allmulticast mode [ 311.380456][T11267] tipc: Resetting bearer [ 311.424001][T11267] tipc: Disabling bearer [ 311.678422][T11284] netlink: 'syz.0.1697': attribute type 25 has an invalid length. [ 311.819464][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 313.406694][T11276] syzkaller0: entered promiscuous mode [ 313.412207][T11276] syzkaller0: entered allmulticast mode [ 313.549006][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 314.105749][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 316.061553][T11316] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1705'. [ 316.080657][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 316.103464][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 316.140712][T11317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.276427][T11330] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1708'. [ 316.319867][T11329] netlink: 'syz.2.1709': attribute type 25 has an invalid length. [ 316.409863][T11321] batadv_slave_0: entered promiscuous mode [ 316.428358][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 316.623964][T11320] batadv_slave_0: left promiscuous mode [ 316.819235][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 317.045482][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1716'. [ 317.469282][T11365] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1720'. [ 317.568555][ T1330] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 317.595390][ T1330] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 317.611535][ T1330] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 317.624478][ T1330] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 317.654953][T11369] netlink: 'syz.3.1722': attribute type 25 has an invalid length. [ 317.766619][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.067667][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1728'. [ 318.306536][T11397] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1732'. [ 318.419763][T11403] netlink: 'syz.1.1735': attribute type 25 has an invalid length. [ 319.075327][T11430] syzkaller0: entered promiscuous mode [ 319.081546][T11430] syzkaller0: entered allmulticast mode [ 319.123093][T11428] netlink: 'syz.3.1746': attribute type 25 has an invalid length. [ 319.941360][T11471] syzkaller0: entered promiscuous mode [ 319.948454][T11471] syzkaller0: entered allmulticast mode [ 320.123283][T11473] netlink: 'syz.2.1761': attribute type 25 has an invalid length. [ 320.293761][T11477] syzkaller0: entered promiscuous mode [ 320.312176][T11477] syzkaller0: entered allmulticast mode [ 320.501377][T11479] syzkaller0: entered promiscuous mode [ 320.518629][T11479] syzkaller0: entered allmulticast mode [ 320.960185][T11506] xt_l2tp: invalid flags combination: 8 [ 322.710007][T11524] __nla_validate_parse: 7 callbacks suppressed [ 322.710030][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1773'. [ 322.848741][T11528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.856381][T11528] IPv6: NLM_F_CREATE should be set when creating new route [ 322.863724][T11528] IPv6: NLM_F_CREATE should be set when creating new route [ 322.877256][T11528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.409874][T11524] bond7: entered promiscuous mode [ 324.418588][T11524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.437939][T11525] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 324.455408][T11528] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 324.476996][T11533] batadv_slave_0: entered promiscuous mode [ 324.537383][T11534] batadv_slave_0: left promiscuous mode [ 324.611498][T11548] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1775'. [ 324.784615][T11548] syzkaller0: entered promiscuous mode [ 324.800831][T11548] syzkaller0: entered allmulticast mode [ 324.831240][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1779'. [ 327.697503][T11625] tipc: Enabled bearer , priority 0 [ 327.734485][T11625] syzkaller0: entered promiscuous mode [ 327.741087][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'. [ 327.756397][T11625] syzkaller0: entered allmulticast mode [ 327.809168][T11625] tipc: Resetting bearer [ 327.830290][T11623] tipc: Resetting bearer [ 327.870494][T11623] tipc: Disabling bearer [ 327.999597][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 328.140548][T11648] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1799'. [ 328.189969][T11648] netlink: 'syz.0.1799': attribute type 13 has an invalid length. [ 328.206325][T11649] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1800'. [ 328.229024][T11649] syzkaller0: entered promiscuous mode [ 328.238108][T11649] syzkaller0: entered allmulticast mode [ 328.309125][T11658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1802'. [ 328.324822][T11653] syzkaller0: entered promiscuous mode [ 328.341006][T11653] syzkaller0: entered allmulticast mode [ 328.574146][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1808'. [ 328.650607][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1808'. [ 328.788996][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 328.808140][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1809'. [ 328.847905][T11672] xt_nat: multiple ranges no longer supported [ 328.952157][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1812'. [ 328.977167][T11674] syzkaller0: entered promiscuous mode [ 328.989648][T11674] syzkaller0: entered allmulticast mode [ 329.322455][T11698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.329900][T11698] IPv6: NLM_F_CREATE should be set when creating new route [ 329.337305][T11698] IPv6: NLM_F_CREATE should be set when creating new route [ 329.392489][T11698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.069285][T11689] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 331.351474][T11721] syzkaller0: entered promiscuous mode [ 331.389373][T11721] syzkaller0: entered allmulticast mode [ 331.829510][T11746] syzkaller0: entered promiscuous mode [ 331.835785][T11746] syzkaller0: entered allmulticast mode [ 331.963039][T11751] syzkaller0: entered promiscuous mode [ 331.982585][T11751] syzkaller0: entered allmulticast mode [ 332.543780][T11777] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 332.844933][T11794] batadv_slave_0: entered promiscuous mode [ 332.963228][T11795] __nla_validate_parse: 15 callbacks suppressed [ 332.963267][T11795] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1849'. [ 333.027153][T11795] syzkaller0: entered promiscuous mode [ 333.067413][T11795] syzkaller0: entered allmulticast mode [ 333.096825][T11778] batadv_slave_0: left promiscuous mode [ 333.204747][T11806] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1853'. [ 333.371262][T11812] syzkaller0: entered promiscuous mode [ 333.391940][T11812] syzkaller0: entered allmulticast mode [ 333.565078][T11820] netlink: 'syz.4.1859': attribute type 25 has an invalid length. [ 333.703114][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'. [ 333.890899][T11836] syzkaller0: entered promiscuous mode [ 333.916565][T11836] syzkaller0: entered allmulticast mode [ 333.969054][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 334.020627][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1867'. [ 334.029603][T11846] xt_nat: multiple ranges no longer supported [ 334.518517][T11868] netlink: 'syz.0.1875': attribute type 25 has an invalid length. [ 334.753168][T11878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1878'. [ 334.822625][T11884] syzkaller0: entered promiscuous mode [ 334.848898][T11884] syzkaller0: entered allmulticast mode [ 335.181913][T11886] syzkaller0: entered promiscuous mode [ 335.188051][T11886] syzkaller0: entered allmulticast mode [ 337.309020][T11924] tipc: Enabling of bearer rejected, failed to enable media [ 337.601473][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 338.115973][T11970] netlink: 'syz.1.1905': attribute type 25 has an invalid length. [ 338.158048][T11975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1904'. [ 338.210202][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 338.242085][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'. [ 338.278416][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 338.303183][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'. [ 338.363499][T11977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1907'. [ 338.417129][T11967] batadv_slave_0: entered promiscuous mode [ 338.479504][T11987] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1909'. [ 338.514981][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 338.563032][T11988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 338.574458][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 338.598876][T11966] batadv_slave_0: left promiscuous mode [ 338.623415][T11991] syzkaller0: entered promiscuous mode [ 338.629685][T11991] syzkaller0: entered allmulticast mode [ 339.281240][T12009] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 339.398643][T12019] netlink: 'syz.3.1919': attribute type 25 has an invalid length. [ 339.772660][T12039] netlink: 'syz.4.1921': attribute type 2 has an invalid length. [ 339.821177][T12039] netlink: 'syz.4.1921': attribute type 2 has an invalid length. [ 340.329644][T12057] netlink: 'syz.3.1929': attribute type 2 has an invalid length. [ 340.390724][T12057] netlink: 'syz.3.1929': attribute type 2 has an invalid length. [ 340.650500][T12065] tipc: Enabled bearer , priority 0 [ 340.815087][T12065] syzkaller0: entered promiscuous mode [ 340.824219][T12065] syzkaller0: entered allmulticast mode [ 340.839639][T12065] tipc: Resetting bearer [ 340.928207][T12064] tipc: Resetting bearer [ 343.501250][T12064] tipc: Disabling bearer [ 343.510390][T12088] __nla_validate_parse: 14 callbacks suppressed [ 343.510409][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1941'. [ 343.526535][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1941'. [ 343.535564][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1941'. [ 343.545476][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1941'. [ 343.554542][T12088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1941'. [ 343.917992][T12124] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1949'. [ 343.978925][T12123] syzkaller0: entered promiscuous mode [ 344.008108][T12123] syzkaller0: entered allmulticast mode [ 344.175190][T12114] batadv_slave_0: entered promiscuous mode [ 344.251515][T12111] batadv_slave_0: left promiscuous mode [ 344.424259][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 344.441722][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 344.473119][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1958'. [ 344.529389][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 344.599855][T12159] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 344.770745][T12159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.391921][T12191] netlink: 'syz.3.1972': attribute type 1 has an invalid length. [ 345.415253][T12193] netlink: 'syz.0.1973': attribute type 1 has an invalid length. [ 345.517778][T12191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.669774][T12193] 8021q: adding VLAN 0 to HW filter on device bond9 [ 346.257707][T12230] netlink: 'syz.4.1981': attribute type 2 has an invalid length. [ 346.277169][T12230] netlink: 'syz.4.1981': attribute type 2 has an invalid length. [ 347.025365][T12256] xt_nat: multiple ranges no longer supported [ 347.239302][T12264] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 347.286098][T12264] 8021q: adding VLAN 0 to HW filter on device bond10 [ 347.846538][T12291] tipc: Enabled bearer , priority 0 [ 347.865982][T12289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.879855][T12296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.900937][T12296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.940834][T12296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.957260][T12296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.000386][T12296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.043243][T12291] syzkaller0: entered promiscuous mode [ 348.048990][T12291] syzkaller0: entered allmulticast mode [ 348.064676][T12291] tipc: Resetting bearer [ 348.097119][T12290] tipc: Resetting bearer [ 348.374379][T12317] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 349.103933][T12342] __nla_validate_parse: 29 callbacks suppressed [ 349.103952][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2019'. [ 350.506390][T12290] tipc: Disabling bearer [ 350.524951][T12320] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2013'. [ 350.544211][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 350.553771][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2015'. [ 350.566320][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 350.576513][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2015'. [ 350.597862][T12330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2015'. [ 350.625086][T12342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.748357][T12347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2020'. [ 350.859934][T12352] syzkaller0: entered promiscuous mode [ 350.861530][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2024'. [ 350.873045][T12352] syzkaller0: entered allmulticast mode [ 351.210440][T12370] tipc: Enabled bearer , priority 0 [ 351.312620][T12370] syzkaller0: entered promiscuous mode [ 351.319032][T12370] syzkaller0: entered allmulticast mode [ 351.326394][T12370] tipc: Resetting bearer [ 351.340644][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 351.487509][T12369] tipc: Resetting bearer [ 353.523839][T12369] tipc: Disabling bearer [ 353.534595][T12383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.383151][T12441] __nla_validate_parse: 14 callbacks suppressed [ 354.383174][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2056'. [ 354.512978][T12446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2057'. [ 354.547329][T12446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.688118][T12455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2061'. [ 354.922581][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 355.080477][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 355.143092][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'. [ 355.154467][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2064'. [ 355.177462][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 355.204631][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2064'. [ 355.227825][T12468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2064'. [ 356.971434][T12524] syzkaller0: entered promiscuous mode [ 356.988592][T12524] syzkaller0: entered allmulticast mode [ 357.085860][T12529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.522397][T12546] xt_nat: multiple ranges no longer supported [ 358.056976][T12564] bond8: entered promiscuous mode [ 358.062453][T12564] 8021q: adding VLAN 0 to HW filter on device bond8 [ 358.115425][T12569] 8021q: adding VLAN 0 to HW filter on device bond8 [ 358.161591][T12569] bond8: (slave wireguard2): The slave device specified does not support setting the MAC address [ 358.221392][T12569] bond8: (slave wireguard2): Error -95 calling set_mac_address [ 359.469149][T12614] __nla_validate_parse: 24 callbacks suppressed [ 359.469173][T12614] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2114'. [ 359.497833][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 359.680592][T12622] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 359.758442][T12626] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2117'. [ 359.779284][T12622] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.871251][T12622] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2118'. [ 359.974668][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2121'. [ 360.161514][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2123'. [ 360.188688][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 360.422293][T12652] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2126'. [ 360.448924][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 360.780708][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2130'. [ 362.027498][T12717] syz_tun: entered allmulticast mode [ 362.513706][T12739] syzkaller0: entered promiscuous mode [ 362.523430][T12739] syzkaller0: entered allmulticast mode [ 362.774221][T12749] syzkaller0: entered promiscuous mode [ 362.790344][T12749] syzkaller0: entered allmulticast mode [ 363.286150][T12770] syzkaller0: entered promiscuous mode [ 363.313293][T12770] syzkaller0: entered allmulticast mode [ 363.571591][T12783] netlink: 'syz.4.2173': attribute type 2 has an invalid length. [ 363.626278][T12783] netlink: 'syz.4.2173': attribute type 2 has an invalid length. [ 363.705530][T12792] netlink: 'syz.1.2179': attribute type 19 has an invalid length. [ 363.728024][T12792] xt_nat: multiple ranges no longer supported [ 363.938093][T12801] syzkaller0: entered promiscuous mode [ 363.943976][T12801] syzkaller0: entered allmulticast mode [ 364.768142][T12829] __nla_validate_parse: 17 callbacks suppressed [ 364.768164][T12829] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2189'. [ 364.913414][T12832] syzkaller0: entered promiscuous mode [ 364.934795][T12832] syzkaller0: entered allmulticast mode [ 365.189090][T12843] syzkaller0: entered promiscuous mode [ 365.196142][T12843] syzkaller0: entered allmulticast mode [ 365.229278][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 365.272813][T12844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2194'. [ 365.303676][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 365.328760][T12844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2194'. [ 365.360599][T12844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2194'. [ 365.726187][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'. [ 365.901893][T12869] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 365.911047][T12858] bond10: entered promiscuous mode [ 365.938033][T12858] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.993650][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2202'. [ 366.010204][T12866] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.030930][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 366.046846][T12879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2201'. [ 366.055605][T12866] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address [ 366.069146][T12866] bond10: (slave wireguard2): Error -95 calling set_mac_address [ 366.212133][T12885] syzkaller0: entered promiscuous mode [ 366.231659][T12885] syzkaller0: entered allmulticast mode [ 366.672906][T12901] syzkaller0: entered promiscuous mode [ 366.691145][T12901] syzkaller0: entered allmulticast mode [ 367.138336][T12918] syz_tun: left allmulticast mode [ 367.248328][T12922] netlink: 'syz.1.2216': attribute type 2 has an invalid length. [ 367.301228][T12922] netlink: 'syz.1.2216': attribute type 2 has an invalid length. [ 368.118439][T12954] syzkaller0: entered promiscuous mode [ 368.133625][T12954] syzkaller0: entered allmulticast mode [ 368.580655][T12975] syzkaller0: entered promiscuous mode [ 368.586954][T12975] syzkaller0: entered allmulticast mode [ 368.744134][T12978] syzkaller0: entered promiscuous mode [ 368.773110][T12978] syzkaller0: entered allmulticast mode [ 369.257720][T12997] syzkaller0: entered promiscuous mode [ 369.288536][T12997] syzkaller0: entered allmulticast mode [ 369.729264][T13020] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 369.920060][T13027] __nla_validate_parse: 17 callbacks suppressed [ 369.920084][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2248'. [ 370.043437][T13027] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.073787][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2248'. [ 370.169529][T13034] syzkaller0: entered promiscuous mode [ 370.187175][T13034] syzkaller0: entered allmulticast mode [ 370.362495][T13044] syzkaller0: entered promiscuous mode [ 370.382153][T13044] syzkaller0: entered allmulticast mode [ 370.649814][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2263'. [ 370.681398][T13057] syzkaller0: entered promiscuous mode [ 370.697919][T13057] syzkaller0: entered allmulticast mode [ 370.943565][T13070] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 371.092205][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2267'. [ 371.116074][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2271'. [ 371.169328][T13083] 8021q: adding VLAN 0 to HW filter on device bond10 [ 371.181116][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2267'. [ 371.382376][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2275'. [ 371.412817][T13091] syzkaller0: entered promiscuous mode [ 371.428746][T13091] syzkaller0: entered allmulticast mode [ 371.715525][T13107] syzkaller0: entered promiscuous mode [ 371.728309][T13107] syzkaller0: entered allmulticast mode [ 372.074696][T13121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2284'. [ 372.673876][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 373.005856][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 373.166670][T13152] syzkaller0: entered promiscuous mode [ 373.183586][T13152] syzkaller0: entered allmulticast mode [ 373.898868][T13175] syz_tun: left allmulticast mode [ 373.913055][T13175] dvmrp6: left allmulticast mode [ 374.431784][T13194] syzkaller0: entered promiscuous mode [ 374.447069][T13194] syzkaller0: entered allmulticast mode [ 375.197409][T13233] __nla_validate_parse: 15 callbacks suppressed [ 375.197431][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2319'. [ 375.309574][T13239] syzkaller0: entered promiscuous mode [ 375.325117][T13239] syzkaller0: entered allmulticast mode [ 375.486971][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2322'. [ 375.496295][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 375.496323][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2323'. [ 376.102514][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2329'. [ 376.143241][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2329'. [ 376.183040][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2329'. [ 376.242583][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2329'. [ 376.287402][T13272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2329'. [ 376.287415][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2332'. [ 376.720139][T13299] syzkaller0: entered promiscuous mode [ 376.729780][T13299] syzkaller0: entered allmulticast mode [ 376.923408][T13313] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 377.062477][T13313] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.654367][T13340] syzkaller0: entered promiscuous mode [ 377.687031][T13340] syzkaller0: entered allmulticast mode [ 378.027078][T13359] xt_nat: multiple ranges no longer supported [ 378.101446][T13357] syzkaller0: entered promiscuous mode [ 378.133615][T13357] syzkaller0: entered allmulticast mode [ 379.000708][T13403] xt_nat: multiple ranges no longer supported [ 379.168864][T13410] syzkaller0: entered promiscuous mode [ 379.183047][T13410] syzkaller0: entered allmulticast mode [ 379.204434][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.396425][T13459] __nla_validate_parse: 18 callbacks suppressed [ 380.396445][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2385'. [ 380.452726][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 380.500244][T13462] syzkaller0: entered promiscuous mode [ 380.515017][T13466] xt_nat: multiple ranges no longer supported [ 380.522568][T13462] syzkaller0: entered allmulticast mode [ 380.826077][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2388'. [ 380.898405][T13484] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 380.984929][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2391'. [ 381.029743][T13484] 8021q: adding VLAN 0 to HW filter on device bond11 [ 381.260497][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2395'. [ 381.350615][T13508] tipc: Enabled bearer , priority 0 [ 381.432275][T13508] syzkaller0: entered promiscuous mode [ 381.438320][T13508] syzkaller0: entered allmulticast mode [ 381.446711][T13508] tipc: Resetting bearer [ 381.469562][T13507] tipc: Resetting bearer [ 381.881872][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 381.900650][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2401'. [ 381.912769][T13520] xt_nat: multiple ranges no longer supported [ 383.707353][T13507] tipc: Disabling bearer [ 383.727122][T13515] tipc: Enabling of bearer rejected, failed to enable media [ 384.440881][T13578] syzkaller0: entered promiscuous mode [ 384.474166][T13578] syzkaller0: entered allmulticast mode [ 384.535363][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 384.559654][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2415'. [ 384.604883][T13589] xt_nat: multiple ranges no longer supported [ 384.652158][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2417'. [ 385.580028][T13630] __nla_validate_parse: 6 callbacks suppressed [ 385.580050][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 385.597710][T13637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2432'. [ 385.634239][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'. [ 385.652004][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2431'. [ 385.676541][T13630] xt_nat: multiple ranges no longer supported [ 386.123002][T13662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2438'. [ 386.317460][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 386.582504][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2444'. [ 386.809481][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 386.858280][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2446'. [ 386.900623][T13688] xt_nat: multiple ranges no longer supported [ 387.026593][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 387.343601][T13711] syzkaller0: entered promiscuous mode [ 387.353538][T13711] syzkaller0: entered allmulticast mode [ 388.061080][T13737] xt_nat: multiple ranges no longer supported [ 388.988518][T13775] syzkaller0: entered promiscuous mode [ 389.010828][T13775] syzkaller0: entered allmulticast mode [ 389.128229][T13782] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 389.215848][T13782] 8021q: adding VLAN 0 to HW filter on device bond12 [ 390.004816][T13820] syzkaller0: entered promiscuous mode [ 390.019999][T13820] syzkaller0: entered allmulticast mode [ 390.587405][T13848] __nla_validate_parse: 21 callbacks suppressed [ 390.587425][T13848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2494'. [ 390.948921][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2501'. [ 391.110991][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 391.135105][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2504'. [ 391.168066][T13876] xt_nat: multiple ranges no longer supported [ 391.180539][T13873] xt_nat: multiple ranges no longer supported [ 391.236944][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 391.300650][T13880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2502'. [ 391.375479][T13894] netlink: 'syz.0.2506': attribute type 2 has an invalid length. [ 391.383561][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 391.403038][T13894] netlink: 'syz.0.2506': attribute type 2 has an invalid length. [ 391.411300][T13880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2502'. [ 391.426614][T13880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2502'. [ 391.696256][T13906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2508'. [ 393.641882][T13971] tipc: Enabled bearer , priority 0 [ 393.789823][T13971] syzkaller0: entered promiscuous mode [ 393.795512][T13971] syzkaller0: entered allmulticast mode [ 393.801862][T13971] tipc: Resetting bearer [ 393.995539][T13970] tipc: Resetting bearer [ 395.718372][T13970] tipc: Disabling bearer [ 395.962524][T14013] __nla_validate_parse: 11 callbacks suppressed [ 395.962545][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 395.979695][T14011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2540'. [ 395.991172][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'. [ 396.118071][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'. [ 396.237453][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 396.309203][T14032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2548'. [ 396.352322][T14033] xt_nat: multiple ranges no longer supported [ 396.834794][T14059] tipc: Enabled bearer , priority 0 [ 397.003904][T14051] syzkaller0: entered promiscuous mode [ 397.007168][T14063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2556'. [ 397.009675][T14051] syzkaller0: entered allmulticast mode [ 397.027440][T14051] tipc: Resetting bearer [ 397.042325][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 397.063686][T14049] tipc: Resetting bearer [ 397.594776][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2562'. [ 399.305077][T14049] tipc: Disabling bearer [ 399.610824][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 399.701322][T14116] syzkaller0: entered promiscuous mode [ 399.728961][T14116] syzkaller0: entered allmulticast mode [ 400.159082][T14133] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 400.373592][T14143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.056588][T14181] __nla_validate_parse: 7 callbacks suppressed [ 401.056611][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 401.240360][T14187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2587'. [ 401.281711][T14190] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2590'. [ 401.352344][T14190] syzkaller0: entered promiscuous mode [ 401.386857][T14190] syzkaller0: entered allmulticast mode [ 401.710773][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2595'. [ 401.783773][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 401.991235][T14227] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2599'. [ 402.329885][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2603'. [ 402.498894][T14246] tipc: Enabled bearer , priority 0 [ 402.509997][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2608'. [ 402.608940][T14256] netlink: 'syz.3.2609': attribute type 1 has an invalid length. [ 402.615228][T14246] syzkaller0: entered promiscuous mode [ 402.622498][T14246] syzkaller0: entered allmulticast mode [ 402.629879][T14246] tipc: Resetting bearer [ 402.743842][ T6254] tipc: Resetting bearer [ 402.756373][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2609'. [ 402.766116][T14245] tipc: Resetting bearer [ 403.146234][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 404.731179][T14245] tipc: Disabling bearer [ 404.742709][T14256] 8021q: adding VLAN 0 to HW filter on device bond13 [ 405.031538][T14293] tipc: Enabled bearer , priority 0 [ 405.234154][T14293] syzkaller0: entered promiscuous mode [ 405.256181][T14293] syzkaller0: entered allmulticast mode [ 405.274538][T14293] tipc: Resetting bearer [ 405.368829][T14290] tipc: Resetting bearer [ 407.113617][T14290] tipc: Disabling bearer [ 407.514224][T14341] __nla_validate_parse: 4 callbacks suppressed [ 407.514246][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 407.951361][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2634'. [ 408.016547][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'. [ 408.068939][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2634'. [ 408.106800][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'. [ 408.122952][T14353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2634'. [ 408.301065][T14370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2641'. [ 408.353042][T14370] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2641'. [ 408.536038][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 408.581679][T14378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2643'. [ 408.618103][T14378] xt_nat: multiple ranges no longer supported [ 409.378909][T14416] syzkaller0: entered promiscuous mode [ 409.399357][T14416] syzkaller0: entered allmulticast mode [ 410.060893][T14442] xt_nat: multiple ranges no longer supported [ 410.591130][T14456] tipc: Enabled bearer , priority 0 [ 410.760932][T14456] syzkaller0: entered promiscuous mode [ 410.769918][T14456] syzkaller0: entered allmulticast mode [ 410.777340][T14456] tipc: Resetting bearer [ 410.813250][T14455] tipc: Resetting bearer [ 412.722082][T14455] tipc: Disabling bearer [ 412.739658][T14471] tipc: Enabled bearer , priority 0 [ 412.828886][T14472] syzkaller0: entered promiscuous mode [ 412.834886][T14472] syzkaller0: entered allmulticast mode [ 412.842089][T14472] tipc: Resetting bearer [ 413.015534][ T3293] tipc: Resetting bearer [ 413.029909][T14469] tipc: Resetting bearer [ 413.085903][T14501] __nla_validate_parse: 11 callbacks suppressed [ 413.085919][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 415.038426][T14469] tipc: Disabling bearer [ 415.066793][T14500] tipc: Enabling of bearer rejected, failed to enable media [ 415.286074][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'. [ 415.374361][T14538] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2678'. [ 415.379745][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 415.776316][T14554] tipc: Enabled bearer , priority 0 [ 415.917148][T14549] syzkaller0: entered promiscuous mode [ 415.928820][T14549] syzkaller0: entered allmulticast mode [ 415.946199][T14549] tipc: Resetting bearer [ 415.986897][T14547] tipc: Resetting bearer [ 416.361640][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 416.402474][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 416.423816][T14569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'. [ 417.476588][T14585] netlink: 'syz.2.2694': attribute type 1 has an invalid length. [ 417.595765][T14587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2694'. [ 418.512734][T14547] tipc: Disabling bearer [ 418.523260][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2690'. [ 418.532292][T14578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2690'. [ 418.541572][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2690'. [ 418.551227][T14578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2690'. [ 418.560590][T14578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2690'. [ 418.657679][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2696'. [ 418.678415][T14585] 8021q: adding VLAN 0 to HW filter on device bond9 [ 419.019458][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 419.037312][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 419.103102][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2701'. [ 419.162712][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2701'. [ 419.850771][T14633] tipc: Enabled bearer , priority 0 [ 420.021400][T14633] syzkaller0: entered promiscuous mode [ 420.039932][T14633] syzkaller0: entered allmulticast mode [ 420.063926][T14633] tipc: Resetting bearer [ 420.133168][T14632] tipc: Resetting bearer [ 422.360233][T14632] tipc: Disabling bearer [ 422.588716][T14666] netlink: 'syz.3.2715': attribute type 1 has an invalid length. [ 423.049365][T14682] tipc: Enabled bearer , priority 0 [ 423.246972][T14682] syzkaller0: entered promiscuous mode [ 423.252746][T14682] syzkaller0: entered allmulticast mode [ 423.259654][T14682] tipc: Resetting bearer [ 423.362133][T14680] tipc: Resetting bearer [ 423.781946][T14718] __nla_validate_parse: 17 callbacks suppressed [ 423.781967][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 423.866922][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 424.071742][T14724] netlink: 'syz.1.2728': attribute type 1 has an invalid length. [ 424.194466][T14726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2728'. [ 425.507024][T14680] tipc: Disabling bearer [ 425.921651][T14717] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.948279][T14717] syzkaller0: entered promiscuous mode [ 425.957558][T14717] syzkaller0: entered allmulticast mode [ 426.005660][T14726] 8021q: adding VLAN 0 to HW filter on device bond10 [ 426.209313][T14748] netlink: 'syz.3.2732': attribute type 2 has an invalid length. [ 426.271965][T14748] netlink: 'syz.3.2732': attribute type 2 has an invalid length. [ 426.361310][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'. [ 426.455402][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2740'. [ 426.522205][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2740'. [ 426.782382][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2744'. [ 427.389973][T14798] tipc: Enabled bearer , priority 0 [ 427.570304][T14798] syzkaller0: entered promiscuous mode [ 427.580953][T14798] syzkaller0: entered allmulticast mode [ 427.599478][T14798] tipc: Resetting bearer [ 427.681751][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2753'. [ 427.757241][ T6253] tipc: Resetting bearer [ 427.768757][T14797] tipc: Resetting bearer [ 427.791580][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2753'. [ 429.642236][T14797] tipc: Disabling bearer [ 429.812189][T14824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2756'. [ 430.049102][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 430.360515][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'. [ 430.815969][T14861] syzkaller0: entered promiscuous mode [ 430.822066][T14861] syzkaller0: entered allmulticast mode [ 431.064453][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'. [ 431.069257][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 432.978601][T14896] tipc: Enabled bearer , priority 0 [ 433.011179][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'. [ 433.103785][T14907] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2782'. [ 433.170893][T14896] syzkaller0: entered promiscuous mode [ 433.181293][T14896] syzkaller0: entered allmulticast mode [ 433.188415][T14896] tipc: Resetting bearer [ 433.247006][T14895] tipc: Resetting bearer [ 433.538169][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 435.116569][T14895] tipc: Disabling bearer [ 435.129700][T14917] tipc: Enabled bearer , priority 0 [ 435.185409][T14921] syzkaller0: entered promiscuous mode [ 435.192786][T14921] syzkaller0: entered allmulticast mode [ 435.207657][T14921] tipc: Resetting bearer [ 435.376608][ T6253] tipc: Resetting bearer [ 435.589064][T14912] tipc: Resetting bearer [ 435.729022][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2797'. [ 437.325819][T14912] tipc: Disabling bearer [ 437.352610][T14946] tipc: Enabling of bearer rejected, failed to enable media [ 437.361946][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2793'. [ 437.371720][T14944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2793'. [ 437.381143][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2793'. [ 437.390957][T14944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2793'. [ 437.400915][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2793'. [ 437.634164][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2799'. [ 437.661193][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2801'. [ 437.938897][T14975] syzkaller0: entered promiscuous mode [ 437.945215][T14975] syzkaller0: entered allmulticast mode [ 440.004802][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2815'. [ 440.030795][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2815'. [ 440.360781][T15017] 8021q: adding VLAN 0 to HW filter on device bond14 [ 440.644791][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.781127][T15030] __nla_validate_parse: 8 callbacks suppressed [ 440.781150][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 441.177808][T15045] syzkaller0: entered promiscuous mode [ 441.193826][T15045] syzkaller0: entered allmulticast mode [ 441.209272][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 441.232043][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 441.263147][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 441.289777][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 441.299248][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2827'. [ 441.448570][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2830'. [ 443.474120][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 443.486324][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 443.504843][T15070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2836'. [ 443.518909][T15070] xt_nat: multiple ranges no longer supported [ 443.551358][T15071] tipc: Enabled bearer , priority 0 [ 443.692238][T15071] syzkaller0: entered promiscuous mode [ 443.708819][T15071] syzkaller0: entered allmulticast mode [ 443.716216][T15071] tipc: Resetting bearer [ 443.731226][T15069] tipc: Resetting bearer [ 445.682294][T15069] tipc: Disabling bearer [ 445.992456][T15121] __nla_validate_parse: 3 callbacks suppressed [ 445.992479][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2849'. [ 446.031573][T15116] syzkaller0: entered promiscuous mode [ 446.038943][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 446.049237][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2849'. [ 446.058368][T15116] syzkaller0: entered allmulticast mode [ 446.111642][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'. [ 446.253332][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 446.264586][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2852'. [ 446.277489][T15132] xt_nat: multiple ranges no longer supported [ 448.240564][T15148] tipc: Enabled bearer , priority 0 [ 448.381783][T15148] syzkaller0: entered promiscuous mode [ 448.388963][T15148] syzkaller0: entered allmulticast mode [ 448.396000][T15148] tipc: Resetting bearer [ 448.434649][T15147] tipc: Resetting bearer [ 448.576262][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 448.593835][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 450.388090][T15147] tipc: Disabling bearer [ 450.429456][T15183] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2867'. [ 450.758657][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2872'. [ 451.559777][T15229] tipc: Enabled bearer , priority 0 [ 451.642987][T15226] tipc: Disabling bearer [ 451.785300][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.796193][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.808707][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.819617][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.828720][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.118113][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 452.722351][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2895'. [ 453.005800][T15276] syzkaller0: entered promiscuous mode [ 453.011509][T15276] syzkaller0: entered allmulticast mode [ 453.083696][T15278] syzkaller0: entered promiscuous mode [ 453.089335][T15278] syzkaller0: entered allmulticast mode [ 453.926079][ T5641] Bluetooth: hci5: command tx timeout [ 456.002998][ T5641] Bluetooth: hci5: command tx timeout [ 457.025958][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'. [ 457.035053][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2903'. [ 457.045072][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'. [ 457.056842][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2903'. [ 457.067617][T15298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2903'. [ 457.077879][T15301] tipc: Enabling of bearer rejected, failed to enable media [ 457.671533][ T1116] bridge_slave_1: left allmulticast mode [ 457.677792][ T1116] bridge_slave_1: left promiscuous mode [ 457.690802][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.702130][ T1116] bridge_slave_0: left allmulticast mode [ 457.708201][ T1116] bridge_slave_0: left promiscuous mode [ 457.715239][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.859144][ T1116] bond3 (unregistering): (slave geneve2): Releasing active interface [ 458.082959][ T5641] Bluetooth: hci5: command tx timeout [ 458.129833][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.140650][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.151482][ T1116] bond0 (unregistering): Released all slaves [ 458.165442][ T1116] bond1 (unregistering): Released all slaves [ 458.183142][ T1116] bond2 (unregistering): Released all slaves [ 458.201744][ T1116] bond3 (unregistering): Released all slaves [ 458.226281][ T1116] bond4 (unregistering): Released all slaves [ 458.243053][ T1116] bond5 (unregistering): Released all slaves [ 458.261206][ T1116] bond6 (unregistering): Released all slaves [ 458.284441][ T1116] bond7 (unregistering): Released all slaves [ 458.300695][ T1116] bond8 (unregistering): Released all slaves [ 458.321478][ T1116] bond9 (unregistering): Released all slaves [ 458.508456][T15334] syzkaller0: entered promiscuous mode [ 458.514402][T15334] syzkaller0: entered allmulticast mode [ 460.164655][ T5641] Bluetooth: hci5: command tx timeout [ 460.809327][ T1116] tipc: Left network mode [ 460.868002][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 461.209425][T15389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2926'. [ 461.255388][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2927'. [ 461.273140][T15389] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2926'. [ 461.499260][ T1116] hsr_slave_0: left promiscuous mode [ 461.551564][ T1116] hsr_slave_1: left promiscuous mode [ 461.598838][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.629065][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.885276][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 462.355668][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 462.932269][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 463.174721][T15438] tipc: Enabled bearer , priority 0 [ 463.214725][T15452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2939'. [ 463.322145][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 463.387700][T15445] syzkaller0: entered promiscuous mode [ 463.398594][T15445] syzkaller0: entered allmulticast mode [ 463.417250][T15445] tipc: Resetting bearer [ 463.431924][T15237] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.451829][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.477645][T15237] bridge_slave_0: entered allmulticast mode [ 463.499484][T15237] bridge_slave_0: entered promiscuous mode [ 463.638411][T15436] tipc: Resetting bearer [ 463.684429][T15473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2943'. [ 463.951780][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2945'. [ 465.750250][T15436] tipc: Disabling bearer [ 465.761364][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.769182][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.776843][T15237] bridge_slave_1: entered allmulticast mode [ 465.784466][T15237] bridge_slave_1: entered promiscuous mode [ 465.865610][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 465.964240][T15237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.004450][T15237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.106573][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2949'. [ 466.180912][T15237] team0: Port device team_slave_0 added [ 466.216304][T15237] team0: Port device team_slave_1 added [ 466.387459][T15237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.397444][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.425964][T15237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.580237][T15237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.618014][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.720037][T15237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.071143][T15237] hsr_slave_0: entered promiscuous mode [ 467.159186][T15237] hsr_slave_1: entered promiscuous mode [ 467.199026][T15553] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 467.928306][T15581] FAULT_INJECTION: forcing a failure. [ 467.928306][T15581] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 467.973075][T15581] CPU: 0 UID: 0 PID: 15581 Comm: syz.4.2971 Not tainted syzkaller #0 PREEMPT(full) [ 467.973106][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.973117][T15581] Call Trace: [ 467.973126][T15581] [ 467.973135][T15581] dump_stack_lvl+0xe8/0x150 [ 467.973165][T15581] should_fail_ex+0x412/0x560 [ 467.973199][T15581] _copy_to_user+0x31/0xb0 [ 467.973231][T15581] simple_read_from_buffer+0xe1/0x170 [ 467.973263][T15581] proc_fail_nth_read+0x1bb/0x230 [ 467.973292][T15581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.973323][T15581] ? rw_verify_area+0x2a6/0x4d0 [ 467.973350][T15581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.973378][T15581] vfs_read+0x20c/0xa70 [ 467.973413][T15581] ? __pfx___mutex_lock+0x10/0x10 [ 467.973443][T15581] ? __pfx_vfs_read+0x10/0x10 [ 467.973473][T15581] ? __fget_files+0x2a/0x420 [ 467.973504][T15581] ? __fget_files+0x3a0/0x420 [ 467.973527][T15581] ? __fget_files+0x2a/0x420 [ 467.973562][T15581] ksys_read+0x150/0x270 [ 467.973593][T15581] ? __pfx_ksys_read+0x10/0x10 [ 467.973631][T15581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.973653][T15581] do_syscall_64+0x15f/0xf80 [ 467.973679][T15581] ? trace_irq_disable+0x3b/0x140 [ 467.973709][T15581] ? clear_bhb_loop+0x40/0x90 [ 467.973735][T15581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.973755][T15581] RIP: 0033:0x7f0e2cb5d60e [ 467.973775][T15581] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.973793][T15581] RSP: 002b:00007f0e2da09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.973816][T15581] RAX: ffffffffffffffda RBX: 00007f0e2da0a6c0 RCX: 00007f0e2cb5d60e [ 467.973831][T15581] RDX: 000000000000000f RSI: 00007f0e2da0a0a0 RDI: 0000000000000004 [ 467.973843][T15581] RBP: 00007f0e2da0a090 R08: 0000000000000000 R09: 0000000000000000 [ 467.973856][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.973869][T15581] R13: 00007f0e2ce16038 R14: 00007f0e2ce15fa0 R15: 00007fffa9b1a2a8 [ 467.973905][T15581] [ 468.655536][T15607] netlink: 'syz.4.2981': attribute type 3 has an invalid length. [ 469.101323][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2983'. [ 470.617785][T15675] FAULT_INJECTION: forcing a failure. [ 470.617785][T15675] name failslab, interval 1, probability 0, space 0, times 1 [ 470.634390][T15675] CPU: 1 UID: 0 PID: 15675 Comm: syz.0.2991 Not tainted syzkaller #0 PREEMPT(full) [ 470.634421][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.634433][T15675] Call Trace: [ 470.634441][T15675] [ 470.634450][T15675] dump_stack_lvl+0xe8/0x150 [ 470.634481][T15675] should_fail_ex+0x412/0x560 [ 470.634515][T15675] should_failslab+0xa8/0x100 [ 470.634549][T15675] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 470.634580][T15675] ? __kernfs_new_node+0xaa/0x970 [ 470.634614][T15675] kstrdup+0x42/0x100 [ 470.634637][T15675] __kernfs_new_node+0xaa/0x970 [ 470.634671][T15675] ? __pfx___kernfs_new_node+0x10/0x10 [ 470.634698][T15675] ? kernfs_root+0x1c/0x230 [ 470.634731][T15675] ? kernfs_root+0x1c/0x230 [ 470.634757][T15675] ? kernfs_root+0x1c/0x230 [ 470.634788][T15675] kernfs_new_node+0x102/0x210 [ 470.634821][T15675] kernfs_create_link+0xa7/0x200 [ 470.634847][T15675] sysfs_do_create_link_sd+0x83/0x110 [ 470.634876][T15675] device_add_class_symlinks+0x1cf/0x240 [ 470.634904][T15675] device_add+0x475/0xbb0 [ 470.634932][T15675] ? device_initialize+0x26a/0x460 [ 470.634957][T15675] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 470.634988][T15675] wakeup_source_register+0x18a/0x380 [ 470.635017][T15675] ep_insert+0x1022/0x1a40 [ 470.635063][T15675] ? __pfx_ep_insert+0x10/0x10 [ 470.635106][T15675] ? ep_loop_check+0x50/0x1b0 [ 470.635142][T15675] do_epoll_ctl+0x7f4/0xe80 [ 470.635179][T15675] __x64_sys_epoll_ctl+0x165/0x1b0 [ 470.635211][T15675] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 470.635250][T15675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.635282][T15675] do_syscall_64+0x15f/0xf80 [ 470.635309][T15675] ? trace_irq_disable+0x3b/0x140 [ 470.635339][T15675] ? clear_bhb_loop+0x40/0x90 [ 470.635366][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.635387][T15675] RIP: 0033:0x7fdf4399cdd9 [ 470.635407][T15675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.635425][T15675] RSP: 002b:00007fdf447ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 470.635449][T15675] RAX: ffffffffffffffda RBX: 00007fdf43c15fa0 RCX: 00007fdf4399cdd9 [ 470.635464][T15675] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 470.635476][T15675] RBP: 00007fdf447ac090 R08: 0000000000000000 R09: 0000000000000000 [ 470.635489][T15675] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 470.635502][T15675] R13: 00007fdf43c16038 R14: 00007fdf43c15fa0 R15: 00007ffc57ab4d18 [ 470.635540][T15675] [ 472.466740][T15637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.480035][T15643] netlink: 'syz.3.2985': attribute type 2 has an invalid length. [ 472.490303][T15643] netlink: 'syz.3.2985': attribute type 2 has an invalid length. [ 472.531257][T15237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.616758][T15237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.654273][T15237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 472.703101][T15237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.732636][T15237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 472.751904][T15237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.768011][T15237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 472.786331][T15237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.126846][T15237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.219300][T15751] bridge_slave_1: left allmulticast mode [ 473.239099][T15751] bridge_slave_1: left promiscuous mode [ 473.253221][T15751] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.275836][T15751] bridge_slave_0: left allmulticast mode [ 473.299182][T15751] bridge_slave_0: left promiscuous mode [ 473.320064][T15751] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.327750][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3004'. [ 473.346962][T15762] netlink: 'syz.1.3003': attribute type 2 has an invalid length. [ 473.392342][T15762] netlink: 'syz.1.3003': attribute type 2 has an invalid length. [ 473.494132][T15237] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.720779][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.728196][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.761809][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.769171][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.923424][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3010'. [ 474.558945][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3015'. [ 475.137142][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'. [ 475.285559][T15237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.345940][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 475.392402][T15826] tipc: Enabling of bearer rejected, failed to enable media [ 475.468482][T15237] veth0_vlan: entered promiscuous mode [ 475.520430][T15237] veth1_vlan: entered promiscuous mode [ 475.709454][T15841] FAULT_INJECTION: forcing a failure. [ 475.709454][T15841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.735324][T15836] syzkaller0: entered promiscuous mode [ 475.741894][T15841] CPU: 0 UID: 0 PID: 15841 Comm: syz.0.3027 Not tainted syzkaller #0 PREEMPT(full) [ 475.741920][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.741931][T15841] Call Trace: [ 475.741939][T15841] [ 475.741946][T15841] dump_stack_lvl+0xe8/0x150 [ 475.741973][T15841] should_fail_ex+0x412/0x560 [ 475.742001][T15841] _copy_from_user+0x2d/0xb0 [ 475.742028][T15841] ____sys_sendmsg+0x308/0x9f0 [ 475.742063][T15841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.742098][T15841] ? import_iovec+0x73/0xa0 [ 475.742127][T15841] ___sys_sendmsg+0x2a5/0x360 [ 475.742150][T15841] ? __lock_acquire+0x6b5/0x2cf0 [ 475.742176][T15841] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.742246][T15841] ? __fget_files+0x2a/0x420 [ 475.742271][T15841] ? __fget_files+0x3a0/0x420 [ 475.742303][T15841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 475.742331][T15841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.742365][T15841] ? __pfx_ksys_write+0x10/0x10 [ 475.742400][T15841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.742419][T15841] do_syscall_64+0x15f/0xf80 [ 475.742442][T15841] ? trace_irq_disable+0x3b/0x140 [ 475.742469][T15841] ? clear_bhb_loop+0x40/0x90 [ 475.742491][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.742509][T15841] RIP: 0033:0x7fdf4399cdd9 [ 475.742527][T15841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.742543][T15841] RSP: 002b:00007fdf447ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.742563][T15841] RAX: ffffffffffffffda RBX: 00007fdf43c15fa0 RCX: 00007fdf4399cdd9 [ 475.742576][T15841] RDX: 00000000000480d0 RSI: 00002000000029c0 RDI: 0000000000000003 [ 475.742588][T15841] RBP: 00007fdf447ac090 R08: 0000000000000000 R09: 0000000000000000 [ 475.742599][T15841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.742610][T15841] R13: 00007fdf43c16038 R14: 00007fdf43c15fa0 R15: 00007ffc57ab4d18 [ 475.742641][T15841] [ 475.959018][T15836] syzkaller0: entered allmulticast mode [ 475.985722][T15237] veth0_macvtap: entered promiscuous mode [ 476.178829][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3031'. [ 478.044000][T15237] veth1_macvtap: entered promiscuous mode [ 478.157122][T15237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.221373][T15237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.276961][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.320086][ T6254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.355878][ T6254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.366675][ T6254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.445266][T15861] sctp: [Deprecated]: syz.1.3033 (pid 15861) Use of int in maxseg socket option. [ 478.445266][T15861] Use struct sctp_assoc_value instead [ 478.497085][T15869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.651821][ T6253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.686235][ T6253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.812500][ T6253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.842741][ T6253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.900256][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 478.953025][T15878] bond15: option lacp_active: invalid value (8) [ 478.968857][T15878] bond15 (unregistering): Released all slaves [ 478.997636][T15894] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3042'. [ 479.296912][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3045'. [ 479.375572][T15899] syzkaller0: entered promiscuous mode [ 479.381674][T15899] syzkaller0: entered allmulticast mode [ 479.718314][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 479.854216][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.869513][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.881014][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.907358][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.918119][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.590799][T15930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3051'. [ 480.760974][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 480.799203][T15937] netlink: 'syz.0.3053': attribute type 2 has an invalid length. [ 482.016354][ T5641] Bluetooth: hci1: command tx timeout [ 482.746472][T15944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 483.087487][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3060'. [ 483.313423][ T1726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.603770][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.611220][T15976] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 483.775539][T15913] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.792336][T15913] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.839510][T15913] bridge_slave_0: entered allmulticast mode [ 483.873412][T15913] bridge_slave_0: entered promiscuous mode [ 483.884366][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 483.884922][T15913] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.894033][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'. [ 483.901327][T15913] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.919772][T15913] bridge_slave_1: entered allmulticast mode [ 483.928927][T15913] bridge_slave_1: entered promiscuous mode [ 483.977911][T15913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.991246][T15913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.083078][ T5641] Bluetooth: hci1: command tx timeout [ 484.086768][T15913] team0: Port device team_slave_0 added [ 484.106085][T15913] team0: Port device team_slave_1 added [ 484.238200][T15913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.248052][T15913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.276379][T15913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.291687][T15913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.299132][T15913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.327267][T15913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.456070][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3069'. [ 484.507683][T15913] hsr_slave_0: entered promiscuous mode [ 484.524765][T15913] hsr_slave_1: entered promiscuous mode [ 484.545857][T15913] debugfs: 'hsr0' already exists in 'hsr' [ 484.556833][T15913] Cannot create hsr debugfs directory [ 484.566477][T16005] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3069'. [ 484.618202][T16006] netlink: 'syz.3.3072': attribute type 1 has an invalid length. [ 484.646470][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.035584][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3076'. [ 485.211369][ T1726] IPVS: starting estimator thread 0... [ 485.336250][T16026] IPVS: using max 25 ests per chain, 60000 per kthread [ 485.349773][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3079'. [ 485.526120][ T1726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.599467][T16036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3083'. [ 485.679949][T16037] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3083'. [ 485.686314][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.970608][T16044] netlink: set zone limit has 4 unknown bytes [ 486.167133][ T5635] Bluetooth: hci1: command tx timeout [ 486.233610][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3088'. [ 486.244191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.306832][T15913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.331566][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.353801][T15913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.399723][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.436460][T15913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.466564][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.499277][T15913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.530384][T16052] Cannot find add_set index 0 as target [ 486.542526][T16053] netlink: set zone limit has 4 unknown bytes [ 486.546339][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.606849][T16054] veth0: entered promiscuous mode [ 486.620747][T16054] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3084'. [ 486.725195][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.754921][T16038] veth0: left promiscuous mode [ 486.781140][T16040] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 486.794737][T15913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.875987][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3094'. [ 486.901227][T15913] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.958202][T16072] bond1: option fail_over_mac: invalid value (127) [ 486.986444][T16079] netlink: 'syz.2.3093': attribute type 1 has an invalid length. [ 486.987011][T16072] bond1 (unregistering): Released all slaves [ 487.133488][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 487.167732][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.175213][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.260740][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.268154][ T6254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.497070][T16089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3098'. [ 487.730935][T16094] syzkaller0: entered promiscuous mode [ 487.755104][T16094] syzkaller0: entered allmulticast mode [ 487.764722][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.967173][T16112] Bluetooth: MGMT ver 1.23 [ 487.998706][T16112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.244281][ T5638] Bluetooth: hci1: command 0x0419 tx timeout [ 488.658428][ T5744] net_ratelimit: 2 callbacks suppressed [ 488.658451][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.804355][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.844890][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.013121][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 490.021299][ T5635] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 490.323576][ T5635] Bluetooth: hci1: command 0x0419 tx timeout [ 490.567331][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.578813][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.637078][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 490.647601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.648203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.886791][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.265520][T15913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.330822][T16164] tipc: Enabled bearer , priority 0 [ 491.409987][T16137] syz.4.3109 (16137) used greatest stack depth: 17944 bytes left [ 491.444004][T16164] syzkaller0: entered promiscuous mode [ 491.449940][T16164] syzkaller0: entered allmulticast mode [ 491.458642][T16164] tipc: Resetting bearer [ 491.470934][T16168] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 491.490647][T16168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.522922][T16162] tipc: Resetting bearer [ 493.632246][T16162] tipc: Disabling bearer [ 493.697560][T15913] veth0_vlan: entered promiscuous mode [ 493.750503][T15913] veth1_vlan: entered promiscuous mode [ 493.827452][T15913] veth0_macvtap: entered promiscuous mode [ 493.866568][T15913] veth1_macvtap: entered promiscuous mode [ 493.888372][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 493.940276][T15913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.980642][T16183] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3123'. [ 494.004176][ T5744] net_ratelimit: 4 callbacks suppressed [ 494.004198][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.018791][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3123'. [ 494.062517][T15913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.097570][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3125'. [ 494.110861][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.156364][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.177992][ T141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.208415][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.219939][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3127'. [ 494.403542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.463897][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3129'. [ 494.473381][ T115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.503879][ T115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.646658][T16212] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3131'. [ 494.661232][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.689514][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.777041][T16207] syzkaller0: entered promiscuous mode [ 494.784779][T16207] syzkaller0: entered allmulticast mode [ 494.986581][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 494.998536][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 495.043738][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.608268][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 495.621065][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 495.642075][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 495.650729][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 495.659529][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 495.674702][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'. [ 496.085658][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.654908][ T1726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.128268][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.763834][ T5635] Bluetooth: hci3: command tx timeout [ 497.986863][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3140'. [ 498.117145][T16253] netlink: set zone limit has 4 unknown bytes [ 498.163142][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.439299][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 498.634279][T16280] netlink: 'syz.2.3148': attribute type 21 has an invalid length. [ 498.662743][T16280] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3148'. [ 498.968596][T16282] syzkaller0: entered promiscuous mode [ 498.977005][T16282] syzkaller0: entered allmulticast mode [ 499.214225][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.628060][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3153'. [ 499.695673][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.843175][ T5635] Bluetooth: hci3: command tx timeout [ 500.246870][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.806865][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.286299][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.454022][ T1726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.727483][T16296] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.856251][T16311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3155'. [ 501.923649][ T5635] Bluetooth: hci3: command tx timeout [ 502.088879][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.155416][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 502.325714][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.621294][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3162'. [ 502.670136][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'. [ 502.907169][ T6254] bridge_slave_1: left allmulticast mode [ 502.928375][ T6254] bridge_slave_1: left promiscuous mode [ 502.950073][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.364952][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.374122][ T6254] bridge_slave_0: left allmulticast mode [ 503.385927][ T6254] bridge_slave_0: left promiscuous mode [ 503.398433][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.852130][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.003908][ T5635] Bluetooth: hci3: command tx timeout [ 504.245760][ T6254] bond4 (unregistering): (slave geneve2): Releasing active interface [ 504.403299][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.829981][ T6254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.840576][ T6254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.851055][ T6254] bond0 (unregistering): Released all slaves [ 504.862141][ T6254] bond1 (unregistering): Released all slaves [ 504.878654][ T6254] bond2 (unregistering): Released all slaves [ 504.893486][ T6254] bond3 (unregistering): Released all slaves [ 504.909279][ T6254] bond4 (unregistering): Released all slaves [ 504.927199][ T6254] bond5 (unregistering): Released all slaves [ 504.945238][ T6254] bond6 (unregistering): Released all slaves [ 504.963643][ T6254] bond7 (unregistering): Released all slaves [ 504.999744][ T6254] bond8 (unregistering): Released all slaves [ 505.016824][ T6254] bond9 (unregistering): Released all slaves [ 505.032012][ T6254] bond10 (unregistering): Released all slaves [ 505.047379][ T6254] bond11 (unregistering): Released all slaves [ 505.061891][ T6254] bond12 (unregistering): Released all slaves [ 505.076861][ T6254] bond13 (unregistering): Released all slaves [ 505.091514][ T6254] bond14 (unregistering): Released all slaves [ 505.308037][ T6254] tipc: Left network mode [ 505.444578][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.542570][T16402] block nbd0: not configured, cannot reconfigure [ 505.887388][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 506.010994][T16416] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 506.024479][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'. [ 506.047826][T16416] bond1 (unregistering): Released all slaves [ 506.483487][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.530545][T16236] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.567827][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.570284][T16236] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.586356][T16438] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 506.620143][T16236] bridge_slave_0: entered allmulticast mode [ 506.636168][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3179'. [ 506.664215][T16236] bridge_slave_0: entered promiscuous mode [ 506.692209][T16236] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.714674][T16236] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.753012][T16236] bridge_slave_1: entered allmulticast mode [ 506.770204][T16236] bridge_slave_1: entered promiscuous mode [ 506.852363][ T6254] hsr_slave_0: left promiscuous mode [ 506.871455][ T6254] hsr_slave_1: left promiscuous mode [ 506.901007][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.904917][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.920867][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.207036][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.259690][ T6254] team0 (unregistering): Port device team_slave_1 removed [ 507.289987][ T6254] team0 (unregistering): Port device team_slave_0 removed [ 507.532389][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.598433][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 507.678222][T16451] syzkaller0: entered promiscuous mode [ 507.684823][T16451] syzkaller0: entered allmulticast mode [ 507.943926][T16470] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 508.567472][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.133246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.443999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.453922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.607565][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.767209][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.092104][T16236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.143533][T16479] tipc: Started in network mode [ 510.148729][T16479] tipc: Node identity 2e0fbea5b244, cluster identity 4711 [ 510.156723][T16479] tipc: Enabled bearer , priority 0 [ 510.178804][T16480] syzkaller0: entered promiscuous mode [ 510.205932][T16480] syzkaller0: entered allmulticast mode [ 510.239318][T16483] tipc: Resetting bearer [ 510.255197][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.306132][T16236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.477109][T16236] team0: Port device team_slave_0 added [ 510.501860][T16483] tipc: Resetting bearer [ 510.648281][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.705499][T16483] tipc: Disabling bearer [ 510.731056][T16236] team0: Port device team_slave_1 added [ 510.739433][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3192'. [ 510.936246][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 511.027512][T16236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.041153][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.086599][T16236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.154823][T16236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.185247][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.213649][T16236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.622637][T16236] hsr_slave_0: entered promiscuous mode [ 511.650054][T16236] hsr_slave_1: entered promiscuous mode [ 511.670704][T16236] debugfs: 'hsr0' already exists in 'hsr' [ 511.683708][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.685446][T16236] Cannot create hsr debugfs directory [ 511.863677][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 512.283778][T16547] syzkaller0: entered promiscuous mode [ 512.289605][T16547] syzkaller0: entered allmulticast mode [ 512.714434][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 512.724502][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.883190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.288152][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.811426][ T29] net_ratelimit: 1 callbacks suppressed [ 514.811449][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.940848][T16509] Set syz1 is full, maxelem 65536 reached [ 515.440944][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3207'. [ 515.852287][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.138251][T16563] macvlan2: entered allmulticast mode [ 516.143770][T16563] hsr0: entered allmulticast mode [ 516.164703][T16563] hsr_slave_0: entered allmulticast mode [ 516.170858][T16563] hsr_slave_1: entered allmulticast mode [ 516.204342][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 516.223440][T16589] tipc: Enabling of bearer rejected, failed to enable media [ 516.365038][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.855562][T16619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 516.884522][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.909350][T16625] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3218'. [ 517.026265][T16619] 8021q: adding VLAN 0 to HW filter on device bond11 [ 517.420162][T16631] syzkaller0: entered promiscuous mode [ 517.442864][T16631] syzkaller0: entered allmulticast mode [ 517.443865][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.771637][T16642] syzkaller0: entered promiscuous mode [ 517.780802][T16642] syzkaller0: entered allmulticast mode [ 517.847079][T16666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 517.925964][T16199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.938749][T16669] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005e: 0000 [#1] SMP KASAN PTI [ 517.950699][T16669] KASAN: null-ptr-deref in range [0x00000000000002f0-0x00000000000002f7] [ 517.959244][T16669] CPU: 1 UID: 0 PID: 16669 Comm: syz.0.3227 Not tainted syzkaller #0 PREEMPT(full) [ 517.968633][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.978698][T16669] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 517.984195][T16669] Code: e0 c3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 39 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e6 5c 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 518.004591][T16669] RSP: 0018:ffffc900030177c0 EFLAGS: 00010202 [ 518.010771][T16669] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a44c303 [ 518.019141][T16669] RDX: 0000000000000000 RSI: ffffffff8e21d8a7 RDI: 00000000000002f0 [ 518.027169][T16669] RBP: ffffc90003017980 R08: ffffc900030178e7 R09: 0000000000000000 [ 518.035430][T16669] R10: ffffc900030178c0 R11: fffff52000602f1d R12: 0000000000000298 [ 518.043608][T16669] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000602f10 [ 518.051957][T16669] FS: 00007fdf4478b6c0(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 518.061099][T16669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.067811][T16669] CR2: 00007fdf4478bd58 CR3: 000000007c544000 CR4: 00000000003526f0 [ 518.075973][T16669] Call Trace: [ 518.079262][T16669] [ 518.082197][T16669] ? wake_up_q+0x99/0xd0 [ 518.086450][T16669] ? preempt_schedule_thunk+0x16/0x30 [ 518.091834][T16669] ? preempt_schedule_common+0x82/0xd0 [ 518.097651][T16669] ? l2cap_unregister_user+0x36/0x170 [ 518.103159][T16669] ? __pfx___mutex_lock+0x10/0x10 [ 518.108401][T16669] ? __up_read+0x2fe/0x6b0 [ 518.112859][T16669] ? __pfx___up_read+0x10/0x10 [ 518.117643][T16669] ? hidp_session_find+0xce/0x100 [ 518.122682][T16669] l2cap_unregister_user+0x36/0x170 [ 518.127990][T16669] hidp_connection_del+0xb0/0x170 [ 518.133032][T16669] hidp_sock_ioctl+0x3ab/0x650 [ 518.137912][T16669] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 518.143226][T16669] ? do_vfs_ioctl+0x1166/0x1530 [ 518.148108][T16669] sock_do_ioctl+0x101/0x320 [ 518.152704][T16669] ? __pfx_sock_do_ioctl+0x10/0x10 [ 518.157920][T16669] sock_ioctl+0x5c6/0x7f0 [ 518.162603][T16669] ? __pfx_sock_ioctl+0x10/0x10 [ 518.167639][T16669] ? __fget_files+0x2a/0x420 [ 518.172242][T16669] ? __fget_files+0x3a0/0x420 [ 518.176941][T16669] ? __fget_files+0x2a/0x420 [ 518.181537][T16669] ? bpf_lsm_file_ioctl+0x9/0x20 [ 518.186778][T16669] ? __pfx_sock_ioctl+0x10/0x10 [ 518.192014][T16669] __se_sys_ioctl+0xfc/0x170 [ 518.196614][T16669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.202792][T16669] do_syscall_64+0x15f/0xf80 [ 518.207947][T16669] ? trace_irq_disable+0x3b/0x140 [ 518.213008][T16669] ? clear_bhb_loop+0x40/0x90 [ 518.217790][T16669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.223710][T16669] RIP: 0033:0x7fdf4399cdd9 [ 518.228132][T16669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.248728][T16669] RSP: 002b:00007fdf4478b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.257359][T16669] RAX: ffffffffffffffda RBX: 00007fdf43c16090 RCX: 00007fdf4399cdd9 [ 518.265620][T16669] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 518.274064][T16669] RBP: 00007fdf43a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 518.282160][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.290605][T16669] R13: 00007fdf43c16128 R14: 00007fdf43c16090 R15: 00007ffc57ab4d18 [ 518.298888][T16669] [ 518.302028][T16669] Modules linked in: [ 518.307413][T16669] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.333112][T16669] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 518.345416][T16669] Code: e0 c3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 39 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e6 5c 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 518.455513][T16669] RSP: 0018:ffffc900030177c0 EFLAGS: 00010202 [ 518.468667][T16669] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a44c303 [ 518.478444][T16669] RDX: 0000000000000000 RSI: ffffffff8e21d8a7 RDI: 00000000000002f0 [ 518.490142][T16669] RBP: ffffc90003017980 R08: ffffc900030178e7 R09: 0000000000000000 [ 518.499634][T16669] R10: ffffc900030178c0 R11: fffff52000602f1d R12: 0000000000000298 [ 518.521922][T16669] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000602f10 [ 518.541483][T16669] FS: 00007fdf4478b6c0(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 518.558848][T16669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.573473][T16669] CR2: 00007fe2b1d89368 CR3: 000000007c544000 CR4: 00000000003526f0 [ 518.581572][T16669] Kernel panic - not syncing: Fatal exception [ 518.591395][T16669] Kernel Offset: disabled [ 518.595975][T16669] Rebooting in 86400 seconds..