last executing test programs: 4.85244972s ago: executing program 0 (id=3606): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r3, 0x29, 0x4d, 0x0, 0x8) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000300)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f00000003c0)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000440)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000480)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000500)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000540)={0x2c, 0x0, r8}, 0x10) bind$xdp(r5, &(0x7f0000000580)={0x2c, 0x1, r6, 0x2000000, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}}, 0x0) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000810400c51c000000000000000000", @ANYRESHEX=r4, @ANYRES16, @ANYRES64=0x0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(r13, 0x0, 0x0, 0x8093, &(0x7f00000002c0)={0x11, 0xf6, r12, 0x1, 0x12, 0x6, @broadcast}, 0x14) sendto$packet(r2, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x11, 0x8808, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000040)) 4.579841002s ago: executing program 0 (id=3612): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x400000008000f28, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x400000008000f28, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000140)}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x98, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xeb, 0x3}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.227759276s ago: executing program 2 (id=3640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000400)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbfe, {0x80}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000680)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x12, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000008500000084000000b7000000000000009500"/96], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6, 0x20}}, 0x20) 1.949152076s ago: executing program 3 (id=3642): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x1, 0xffff, 0x2b0d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2, 0x5d, "919285ead5d7809f42ea98dad6987e9d21e9cbeb6f8cfb5d30af970090ed28511c4e2e791612f2070e6b568deff954bc585dd84b1a580aa38faab437a3d8fe8a04d8ddaf00530d3ed787232dc75d5ee1b9478951815a8862340743483c"}, &(0x7f0000000180)=0x65) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x9, @empty, 0x9}], 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000280)={r3, 0x7}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x4d8c}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000340)={r0, 0xf5, "95e759caed727285f23330588f54664eb4a6177b04104756ee053104c11f6f3f98f8ee303d110b1bd4b369850955fc3ffe78ee06ea6247c2b3fcf0c84242edebdc13e8e75df151af910171bc19ace3bfcf0f3c472fe4b18481f55faf330844c977d2ff41d3b255861c7bf6133002c68aa52c1f5151690d4190f078dff25a609e7f3d12d7c8f2986f1c67ed47e5928d362546e8e4bf018bf45ab2689e7b6f2172a0f060c57c3c34c94408e443c06fbe7debd621867efd866027d9be3a7f78bdfc70a2b88f1e9c98756af2563ab5948c9bebcd38322cd42dfc23f878318b945b71952fab891f7a65cc76f7512e6bbc104be311cd784f"}, &(0x7f0000000440)=0xfd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000480)={r6, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000580)=r8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000005c0)=r8) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000600)={0xffffffffffffffff}) bind$802154_raw(r9, &(0x7f0000000680)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={@empty, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@multicast2}, {@multicast1}, {@dev}]}}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x8, 0x0, r9, 0xfffffffc, '\x00', 0x0, r9, 0x2, 0x1}, 0x50) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x6) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000880)=0x8, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000008c0)={r0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000980)=0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f00000009c0)={0x1, 0x8008, 0x7, 0x6, r7}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000a00)={r5, 0x401}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000a80)={r11, 0x9}, &(0x7f0000000ac0)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x7, 0x7fffffff, 0x4, @remote, @private2, 0x10, 0x20, 0x4, 0x8}}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000bc0)=r12) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x1c, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000d00)='GPL\x00', 0x3ff, 0x7b, &(0x7f0000000d40)=""/123, 0x40f00, 0xe, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000000dc0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e00)=[r9, r9, r10, r9, r9, r10, r10, r10, r10, r9], &(0x7f0000000e40)=[{0x3, 0x2, 0xd, 0x6}, {0x4, 0x3f, 0x4, 0xc}, {0x5, 0x1, 0x2, 0x6}, {0x2, 0x5, 0x0, 0x4}, {0x5, 0x1, 0x4}, {0x4, 0x4, 0x8, 0xc}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x1000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f80)={r13, r12, 0x25, 0x12, @val=@netfilter={0xa, 0x1, 0x81, 0x1}}, 0x20) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r9, 0x84, 0x85, &(0x7f0000000fc0)={r3, @in6={{0xa, 0x4e24, 0xff000000, @loopback, 0x4}}}, &(0x7f0000001080)=0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000010c0)=@sack_info={r14, 0xfffffff6, 0xb}, &(0x7f0000001100)=0xc) 1.884121243s ago: executing program 4 (id=3643): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030f04000000000000000000000070eef44c8e7a207e493280edea86974606d3ce3d3965774a00b46fea14133b24153e9c5c04ef41b325dee46f293d89d4f929476e1f388546f994", @ANYRES32=0x0, @ANYBLOB="010102008203000020001280080001006772650014000280050013000100000005000a0000000000"], 0x40}, 0x1, 0xba01}, 0x810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x4, 0x0, 0xfffffffffffffe64, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.810641932s ago: executing program 4 (id=3645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000000000000000000000000000400000000000900020073797a32000000000c000780050015003e0000000500050002000000050001000600000013000300686173683a6e65062c69666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1.800697591s ago: executing program 3 (id=3646): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'bridge_slave_0\x00', {0x2, 0x4e31, @empty=0xfdfdffff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}}, 0x20}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}}, 0x20}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x4, @empty, 'gre0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000280)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x0, {0xfffb, @empty, 'bond0\x00'}}, 0x1e) close(0x3) (async) close(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, 0x1409, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 1.672161537s ago: executing program 4 (id=3648): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000180)=@id, 0x10) shutdown(r0, 0x1) 1.632695802s ago: executing program 3 (id=3649): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x80000003, 0x5, 0x8}, {0x0, 0x2, 0xb, 0x100}, 0x6}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x0, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x3502, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d7, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x0, 0x3, 0xfffffff9, 0x80103ff, 0xd7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.503370105s ago: executing program 1 (id=3651): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@random="7da97c53f327", @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x21, 0x2c, 0x62, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@rr={0x7, 0x3, 0x3}]}}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x400, 0x0, 0x8da}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) 1.438682647s ago: executing program 1 (id=3652): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001bc0)={'team_slave_1\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000e0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000058000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000002c0004802800018007000100727400001c000280080001400000000a08000240000000009b000240000000041400000011000100"], 0xe0}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r4 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001b80)={'wlan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001dc0)={'syz_tun\x00', &(0x7f0000001fc0)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x7, 0xc, 0x5, 0x0, 0x1, 0x2]}}) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000580)=0x4, 0x4) (async) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001b40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000001840)={0x2a0, r8, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x83}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x25b}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa3}, @NL80211_ATTR_FRAME={0x253, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac, {0x6, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6c}, @val={0x2d, 0x1a, {0x1000, 0x1, 0x1, 0x0, {0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x9, 0x57}}, @void, [{0xdd, 0x6a, "ea547edeed2c890e738bffefbe16ae3e2d38a122378bde4dfb719df403d8b4c5e7e12c1f199b190edf01b035fa0db5173cc7db46b77729bcfd93cd5e82df1a7b0e1cceabb916bff0bbd1b7dc088fdd68450fcab612d3104d060698270955d872b1c11b83541c52596794"}, {0xdd, 0x4f, "90afb365fcac274a65b94c65fc75c4ce3f67339410a86bb03164d05503fb5dd94bfc24528f3314be3bdf850e822a6d3b66d02330ae2c1989ad402a03e2ba14ff4404f662ec1398eb2c18fed4f4cb0a"}, {0xdd, 0x7c, "5df1a9d49cbb61e338b43e2acf3d39036549919033fb05965a3b134a2cc7099f1b86666d24f5d8cbca0a33debd9fb50a8ec8b416760be4583a5a2b9507fa1eec18b9c66741d6687dd113d79be08ef07408d2362a0950bb4197db16062fe48c74278d3903a8e43db2869062e535269aba8682b3c1144ed449042b4776"}, {0xdd, 0xd1, "a16ddde1bc8e6ba9d5c4b7827842c6c6351c5e869a657b946cdf331de20ad0dc16c322d2ea74f633ba20b6161d1532e63efe8a7e67d7347db80b0454878184b8ccfec0cb6c4249c8bd0bd2b125aa184490eec0374423188e2a54dc014b03cab98df89947256ee1be21ca25c2acf6bcda53a68ca633829d25c2d3a8e0882e10334c69195ab182c6d831b3addfea0dda2117d97eb48c9f22b54fff18064f2a85bbb3df6191cc29f6a53a7a7860f3fda29ceea088b0c8c7af7e853e741fbe0ff21ebebc0eb3df163fa02299c1911e09e941ed"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb62}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="148640f9a587ab4a7ecfc9a38a91000100000000", @ANYRES16=r11, @ANYBLOB="030b26bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (rerun: 32) writev(r13, &(0x7f0000001c00)=[{&(0x7f0000001c40)='/', 0x1}, {&(0x7f0000001c80)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="1800f8ff6ce3d893df4fcc02cfbf28fe6d000000000000000000e4ff9517ccbc16c8aa2b630de4791ab8f1127aa146290ca3f360aeb3b99eb1867a9fc0264a32651b8f6f5736f00f3799f3a6b334cf1bccf8c2e319c740ce49a60f6e8821114adcf47c283aad1a92624796fedddea3ae2426e3470270581908da3b1048aa8732fc700709e6ccd468aba166afda93a5e48c55836b5fee7cc505f9aa4ad2ffbe1fcbbbc17b0dbb6b2bc21012ef95473022b54a0230fd7312980d26158c034f2769892bb14b42973c176bd701f3ee9a5882a3af37fd265c9d3dd3b2b778c4db954502b4a08a2a14b24dcd7dbb5f4351a7740bed56f6d2e6c81bfd75b9c0366753408713418a16088aec38d13a68fc3a936694306f224df096c46df8e10976cbcf5d90d2000000f65634e2dd806b5a86dd3ab984c3c146a2663cacec4b39814b54263729ef7077e6e95d2e882981d2a85a535892ece3c16ef71a6972b1ef98952b8e88b129239a0db5961189f9031de7a6e64172cb8195c2d27cba72b1b08cc3c4249232758eb952cef4269116009900"/413], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r9, 0x25, r13}, 0x94) sendmmsg$inet(r0, &(0x7f0000001600)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="277472027d7dc9527f6b2ed6f6b8681d540bd3525983a22824400fea26", 0x1d}, {&(0x7f0000000240)="9cb6b7d02847213c13565f088d4b8a14502cc5fb12ee4bcb56fab0f5799b262898a8d98a8597bb228709549deeb6a6938af135bab09bc26301e0ada47447f6ebb9e9f204c58a8086b48db15b890b6dff3e4d4e9a77434397bde2361852467eda439b19ae02d1afcb2bdc1df9b0c4ac12ecfd18f30ad677753e670fa54e41028471da9cea195a1abedbedefe8f38119629b62e0c713f05ef831b1c47c46c9325ea510f5d8316c37d5df", 0xa9}, {&(0x7f0000000300)="4a69bd3ea9660cdf4d25504a0891d25fccc8c7506f4177b185b0f99e261711b94599690ea6b466143fdcecda33a30c81b4055605362f2e7413cf6c40a88810201ed9993a05614fc8d6cb7280bbf3c7f1af44d243c833c14178e0e3", 0x5b}, {&(0x7f0000000380)="1471b5839328e8ed1c910dd043b7ba5c44a89569fecb03ffe87219bb49fb36ce0805d92b515657a4a07e0cf01c14f6a8e9d32f3d3b5fc4fe82acf52fd064a50dde0a5d8f9d47aa9a21682f72b571d145763399c68e4b58bd0860faabaff0c0be61d63ebe45d7", 0x66}, {&(0x7f0000000400)="6abd5a361b", 0x5}], 0x5, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1fb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_int={{0x14}}], 0x78}}, {{&(0x7f0000000540)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001580)=[{&(0x7f0000002180)="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", 0x1000}], 0x1, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010102, @rand_addr=0x64010102}}}], 0x20}}], 0x2, 0x24008010) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r14, r9, 0x25, 0x2, @void}, 0x10) 1.416659722s ago: executing program 0 (id=3653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x100002) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x800, {{@in6=@private1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}, 0x0, 0x2, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x1, 0x0, 0x0, 0xff, 0x2, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@multicast2, 0x3502, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {{@in=@empty, 0x4d5, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.415692705s ago: executing program 3 (id=3654): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000007c0)=r2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000940)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000000a00)=""/144, &(0x7f0000000ac0)=0x90) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000b40)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000b80)={0x1d, r6, 0x2, {}, 0xfe}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c40)={'tunl0\x00', &(0x7f0000000bc0)={'tunl0\x00', r6, 0x10, 0x7, 0x3, 0x47, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x67, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@noop, @ssrr={0x89, 0x23, 0xc, [@local, @remote, @loopback, @loopback, @rand_addr=0x64010101, @local, @loopback, @multicast1]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop]}}}}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x1, 0x0}, 0x8) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r8, 0x4) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x7, 0xd, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a000000006f2daa00030000000000000000000000000c00000095000000000000000000000000483b973d38a5c69b00eb9228bc284e8b07e18d70ab9ad4d06a90944d6468329789c2674761caf823a208b9d879cb9864c3b9e5823076abbb71cf2341d656d2e09b82d670d7650c545acdcfd074526e31d645132fb08a7d4615fc283d", @ANYRES16=r10], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x94) 1.295439605s ago: executing program 2 (id=3655): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x5}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000300)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000180)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x2e) (async) write$tun(r5, &(0x7f0000000180)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x2e) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.221480833s ago: executing program 1 (id=3656): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c01", 0x17}], 0x1}, 0x0) (async) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="0d000000010001", 0x7}], 0x1}, 0x0) (async, rerun: 32) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="590000001400000000000000010000000000000000000101aa", 0x1a}], 0x1}, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000600)=0x5, 0x4) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x44000004) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001e0001030200a88e0ae37ef22b"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = epoll_create1(0x0) write(r0, &(0x7f0000000540)="a5122eaa3ec9a9efb9563ad2deeac03191461f92617f5024640ff60cb0aa4cac5494a21328207cc5cbbaaffd2d25aad4c18333c1191ee182d9c16233d8d9b64d79fa3f3f1e0e3ebd0e4cbdf0fef14fe5cd0d73c6d8a363168d2363f819f8d26eda3baf3a269d0e0a795b791b2dc3b9e15d9e274405f17641c9c43f3de30161a5f497f67d5e782109cefafe88e5609e29d822d99afedbf57c63acc0ffbdff4139cd0e8faf45c7cc6864643fa37bf34c13979110eb149382e7b0adcf5365cc1398", 0xc0) (async, rerun: 64) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f"], 0x48}}, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ppoll(&(0x7f0000000440)=[{r4, 0x2a}, {r5, 0x20}, {0xffffffffffffffff, 0x2}, {r6, 0x500}, {r7}], 0x5, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f00000004c0)={[0x9]}, 0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 64) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000500)=0x5, 0x4) (rerun: 64) 1.216869449s ago: executing program 3 (id=3657): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1000000}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="89", 0x1}], 0x1}}], 0x1, 0x20000000) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="fdffffff"], 0x8) 1.132016918s ago: executing program 0 (id=3658): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2d020000000985283a63c929532326d85d8fea08010073797a3200000000140002007465617069f0ad6998ea5ff761102231b3a7012c79663ca5a89c2d692dbf1bedb17df297f7"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.019605102s ago: executing program 2 (id=3659): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0x27c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x7}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@tmpl={0x1c4, 0x5, [{{@in6=@remote}, 0x0, @in6=@local}, {{@in=@private=0xa010100}, 0x0, @in=@dev}, {{@in=@multicast2}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x12f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, {{@in, 0x0, 0x3c}, 0x0, @in=@rand_addr=0xfffffff5}, {{@in6=@dev}, 0x0, @in=@local}]}]}, 0x27c}}, 0x0) 938.046723ms ago: executing program 0 (id=3660): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0x0, 0x10, &(0x7f0000001500), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0x0, 0x10, &(0x7f0000001500), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdc02, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x25}, 0x4004081) (async) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x25}, 0x4004081) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="1c99f444332c9310ae65b5ce3c5965f0b9c6a683756d31ccbf4aac6e4ee9c78b4c2d20e5141b74454f05e075234ff1d7f5e496954ededfb57d0ef33d0a99a99f082ceab4898aa88127cf7e93c6caec", 0x4f}, {&(0x7f0000000440)="9e19da4f1b13df3f4ee6393390f2c74eed5470fa4a36fad87f6e13dcaf", 0x1d}, {&(0x7f0000000640)="446a200b7abd72117ccb91221493ce5363ee85d8c62c7b8953c0442c99622616d0450baf881ed762805b94a3426d84d0cf09f702bef91b20620fddcbdc6e3a5f9d0b5bfebe2ac5e9db76d474cb3fe9eee4b458d7a6b20306b332945021f3420d3dfb", 0x62}, {&(0x7f00000006c0)="f9318062f1b2182db0e03e5d33d80f4f0557b9fcd7057f27cfea7d13147c397b60f8da8c1f57ba1d1b1cb4d59be83904f0198f252fc73fda6656bb0ff14f7a1a5a4e479a5b6e09a20bb6687815096af6ee58bdff7a31292544d0deb4c3716129804659779422e092e5abefdf6ff7d5fe8d37adfd3ab6bd8d3ed8dd4a14a2ecb1b672b9b0e06a55e238a33b3e083db6dae7bf0cee5612746954cb30d2f2806d0fc1fcc29e5fdc6c0faad6fadf650307ff2afb09b53dc92d9688298c45e27f42783fa9f4a100b0cf09d6bce3eb5d10", 0xce}, {&(0x7f00000007c0)="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", 0x1a5}], 0x5}, 0x4000841) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/134, 0x86}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/134, 0x86}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001540)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000001580)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe80000000000000002df297480000aaff0200000000000000000000000000011595a7"], 0xffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x54, r5, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 815.241652ms ago: executing program 2 (id=3661): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="61128c000000000061138a0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000c40)='GPL\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x2000005d) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000000b030000000000000000000a000007060001002400000008000340000000000800024000000003d0d26ce4c993369cfd2704097bb5f19b3e163c60bd3511a05a860b16a38ad0cc68326315e1a4d1900dab4446c39515ec3a677721840dbcceb6fba8dc1eac8954a235961a09341b2544591a8cdde0b21f303d2e9e410e967a140a2f454da9a4ba0ddc11cecccbfdfdfb56204c23b212f9e491b4631fc5a84f9ef17ed776e99d02785f063849704ad361afbe211c44e1231b517555dbdf3e05b88217d129901ec6c3b23543aa35404c96a61e34b56577f225c0d3a9560c9b39c1376c1fe8a07d4c85aa92"], 0x2c}, 0x1, 0x0, 0x0, 0x60081}, 0x4000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x6, 0x0, 0xc8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000080)={0x6, 0x4, 0x2, 0x6, 0x4}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000ec0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000f40)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b001300000008000300030000000800010001000000080061"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x44, r8, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) r9 = epoll_create(0x5) r10 = socket(0xf, 0x4, 0x1faa) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000cc0)={r10, 0x3, 0x6, 0x7}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000680)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000006c0)={r13, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000c80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getqdisc={0x38, 0x26, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x9, 0xe}, {0x3, 0x7}, {0xa, 0xfff2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x15) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r1, &(0x7f00000000c0)={0x80000009}) 614.694989ms ago: executing program 4 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000400)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83140500000000002000128008000100677470001400028005000500010094000800070064010101"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000480)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000700), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000009c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000b00), 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c80)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000d40)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000004c0)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000500)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000580)=0x101a18b, 0x4) bind$xdp(r2, &(0x7f00000005c0)={0x2c, 0x0, r8}, 0x10) bind$xdp(r1, &(0x7f0000000600)={0x2c, 0x1, r8, 0x0, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000a40)={0xa, 0x4e22}, 0x1c) listen(r9, 0x10040) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x4ce857f3, @mcast1, 0x9}}, 0x0, 0x0, 0x4, 0x0, "d7642b95a83d1ab2a63a084f21201490e3378568fd34da600df6148f913f4719906da8de36ffca72eeace435c57d37178243ac6027fb645b4dc53c68d55e2c1fda62fd8a28c2b099b477d9ae1ba6c58c"}, 0xd8) 539.289727ms ago: executing program 1 (id=3663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x194, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xed, 0xa8, @random="b0b1a27f752ab4ed8d258e075ec13ee33a4cbc561c13f2add612f56774f74e98b30c7859c87da233a548d53d920fd2956fe0c1ecc070f3622c46a59b70ae1d043a19d2ffdcfc4e6c4f96d2148ef20181675692f1deb345c08a9064d8d2ae85e1fa38f81cc765fa171038c95b467c53ffbe1772cf88d95ac22831b1f85309b8304349b04d5221fa3c5b2bb4a6f22018df299d4fcf5a93538358d7b1bfce2cced05f80adfb9bd2289b9508be6516a98674712884c39aec9aa84269f1b46c8a2fc8ba3146e48ce9ef4e2db0fd7a0b4019b03b9876b59662e7150119393054aa3d95ac5a84c62f90c2384a"}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 388.003865ms ago: executing program 2 (id=3664): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x80000003, 0x5, 0x8}, {0x0, 0x2, 0xb, 0x100}, 0x6}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x0, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x3502, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d7, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x0, 0x3, 0xfffffff9, 0x80103ff, 0xd7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 319.917359ms ago: executing program 4 (id=3665): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000800)='GPL\x00', 0x5, 0x11, &(0x7f0000000840)=""/4098}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r8, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r8], 0x44}}, 0x40848c0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0xc004) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@can_delroute={0x60, 0x19, 0x400, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x2}}}, @CGW_FILTER={0xc, 0xb, {{0x1}, {0x9, 0x1, 0x0, 0x1}}}, @CGW_DST_IF={0x8, 0xa, r5}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r8}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "1dcc86aba24564d0"}, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x4000040) 296.553519ms ago: executing program 1 (id=3666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 171.294599ms ago: executing program 3 (id=3667): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085061000"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f804"], &(0x7f0000000240)=0x520) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 146.748567ms ago: executing program 1 (id=3668): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000af8000000050a0108000000000000000005000006280004"], 0x120}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x955}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000c80)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000dc0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000e00)={{{@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x200, 0xffffffffffffffff, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x1, 0x0, 0x2, 0xfffffffe, 0x4}}, 0xe8) connect$inet(r8, &(0x7f0000000f00)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000000000010000000000000000000510000a3c0000000c0a010100000000000000000a0000050900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010009000000ffdbdf25250000070e0001006e65746465767369d03199c7c5a3e0060000000f0002006e657464657673016d300000"], 0x34}}, 0x24004814) socket$inet_icmp(0x2, 0x2, 0x1) syz_emit_ethernet(0x7c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000461101fc000000000000000000000000000000ff02000000000000000000000000000100004e2400469078f7a8080887faa66d31fff63a5b1fc73bb0653ee2ae4ec8b9869fe9b85c65dd65e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f7218561783347bf03a17d7a6be9b83221e3520afa23057344b1a81e0eec9c51d139188255e44764b"], 0x0) 135.030066ms ago: executing program 0 (id=3669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x5, 0x53, 0x0, &(0x7f0000000240)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000f40)={0x11, 0x3, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) write(r4, &(0x7f0000000f80)="0802110000010802110000000800", 0xe) 96.747096ms ago: executing program 2 (id=3670): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)='?', 0x30004}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=r3, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) read(r5, &(0x7f00000003c0)=""/185, 0xb9) (async) read(r5, &(0x7f00000003c0)=""/185, 0xb9) close(0x4) close(0x3) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) (async) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80c00, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80c00, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'\x00', @local}) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0xffffffffffffffff, &(0x7f0000000080)) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0xffffffffffffffff, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x2}, &(0x7f0000000b40)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x2}, &(0x7f0000000b40)=0x8) 0s ago: executing program 4 (id=3671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000400)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000440)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfff9, 0x99}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000480)=0x40, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000000500)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000540)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000580)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000600)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000640)={0x2c, 0x0, r5}, 0x10) bind$xdp(r3, &(0x7f0000000680)={0x2c, 0x1, r5, 0x0, r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010b00000000000000926c40af766ffccb509f7686a60fe1000000000000000000000000000000c6e86bf502909da520a1f55c2aa32e45afa9cbd42a37ad9becb14703c1922c7123"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_PAYLOAD={0xbd, 0xa, "c5d865dc98d46ebda68431472d1d942bf1a357dc73cff545fb5709a1ae10e037180fd902cafc974731ef6734a2c9e25e7dbd1f55840f61d5aef7ae896434478330a774f8388b3ee3b8f1b8b5e190d53d6082fe78f827c97764962915a4a8fbafe98f5da58adcc34caefe361ab95defe53af57a9b38aa1c59f547069d01417cf522e0c85ccc96370aa28177ea407e7c52fcc00b8cde96ab7bea5aca7d0295cd8f421dff20eb8e971ba3fe879e231785c77c11ed6e6a86e09dc1"}, @NFQA_CT={0x50, 0xb, 0x0, 0x1, [@CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x422}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc0}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x801}, 0x0) kernel console output (not intermixed with test programs): change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.146341][T13421] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 294.146599][T13421] Cannot find add_set index 0 as target [ 294.263524][T13427] __nla_validate_parse: 16 callbacks suppressed [ 294.263626][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'. [ 294.507370][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1998'. [ 294.718286][T13449] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.719136][T13449] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 294.807020][T13451] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.818770][T13451] bond9: (slave bond10): making interface the new active one [ 294.819388][T13451] bond9: (slave bond10): Enslaving as an active interface with an up link [ 294.844870][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1999'. [ 296.575803][T13391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.766881][T13460] ip_tables: iptables: counters copy to user failed while replacing table [ 297.204665][T13484] IPVS: length: 151 != 24 [ 297.294497][T13494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.531829][T13502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2011'. [ 297.548902][T13502] veth1_macvtap: left promiscuous mode [ 297.656739][T13506] bond0: left promiscuous mode [ 297.656766][T13506] bond0: left allmulticast mode [ 297.977315][T13515] syzkaller0: entered promiscuous mode [ 297.977432][T13515] syzkaller0: entered allmulticast mode [ 298.131622][T13526] bond7: option fail_over_mac: invalid value (16) [ 298.147221][T13526] bond7 (unregistering): Released all slaves [ 298.192886][T13530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2020'. [ 298.382486][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'. [ 298.446170][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 300.051461][T13543] syzkaller0: left promiscuous mode [ 300.051486][T13543] syzkaller0: left allmulticast mode [ 300.077600][T13546] team0: Caught tx_queue_len zero misconfig [ 300.089717][T13549] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 300.089741][T13549] netlink: 'syz.4.2021': attribute type 2 has an invalid length. [ 300.721506][T13594] batadv_slave_1: entered promiscuous mode [ 300.723752][T13592] batadv_slave_1: left promiscuous mode [ 300.746759][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2037'. [ 300.783992][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 300.786527][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 300.986140][T13598] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 301.020812][T13606] xt_hashlimit: size too large, truncated to 1048576 [ 301.202994][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203092][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203183][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203272][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203364][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203454][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203543][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203641][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203735][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203823][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.203911][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.204001][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.204092][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.204182][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.204270][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.204358][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.204498][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.204514][T13613] tun0: persist enabled [ 301.204612][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.204627][T13613] tun0: persist enabled [ 301.207558][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.207579][T13613] tun0: persist enabled [ 301.207681][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.207696][T13613] tun0: persist enabled [ 301.207787][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.207802][T13613] tun0: persist enabled [ 301.209501][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.209520][T13613] tun0: persist enabled [ 301.209656][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.209671][T13613] tun0: persist enabled [ 301.209777][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.209791][T13613] tun0: persist enabled [ 301.209882][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.209896][T13613] tun0: persist enabled [ 301.217823][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.219250][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.219554][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.219818][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.220054][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.220280][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.226715][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.226781][T13613] tun0: persist enabled [ 301.227089][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.227116][T13613] tun0: persist enabled [ 301.227350][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.227390][T13613] tun0: persist enabled [ 301.227618][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.227653][T13613] tun0: persist enabled [ 301.227871][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.250600][T13613] tun0: persist enabled [ 301.251039][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.251081][T13613] tun0: persist enabled [ 301.251311][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.251351][T13613] tun0: persist enabled [ 301.251654][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.251696][T13613] tun0: persist enabled [ 301.257808][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.258431][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.258683][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.259058][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.259279][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.267856][T13613] tun0: tun_chr_ioctl cmd 1074025675 [ 301.269447][T13613] tun0: persist enabled [ 301.270242][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.270486][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.270717][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.276393][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.276679][T13612] tun0: tun_chr_ioctl cmd 1074025673 [ 301.978432][T13629] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.979223][T13629] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.130765][T13629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 302.340735][T13646] sctp: [Deprecated]: syz.2.2052 (pid 13646) Use of int in maxseg socket option. [ 302.340735][T13646] Use struct sctp_assoc_value instead [ 303.309827][T13711] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2072'. [ 303.411575][T13695] syzkaller1: entered promiscuous mode [ 303.411604][T13695] syzkaller1: entered allmulticast mode [ 303.459946][T13720] netlink: 'syz.1.2075': attribute type 29 has an invalid length. [ 303.459970][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 303.857833][T13740] netlink: 'syz.0.2082': attribute type 12 has an invalid length. [ 303.857859][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'. [ 303.892986][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2082'. [ 303.893017][T13740] block nbd1: Unsupported socket: should be TCP or UNIX. [ 304.034646][T13754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2085'. [ 304.188060][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 304.209696][T13764] xt_LOG: level 8 >= 8 [ 304.752817][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2091'. [ 304.874895][T13794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2096'. [ 304.877433][T13792] netlink: Conntrack attr has 8 unknown bytes [ 304.882310][T13791] netlink: Conntrack attr has 8 unknown bytes [ 305.354549][T13810] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 305.662790][T13833] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 305.912858][T13841] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 305.927213][T13841] tun0: tun_chr_ioctl cmd 1074025675 [ 305.927375][T13841] tun0: persist enabled [ 306.035740][T13847] __nla_validate_parse: 5 callbacks suppressed [ 306.035763][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'. [ 306.036296][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2111'. [ 306.036352][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2111'. [ 306.216657][T13857] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 306.320631][T13858] netlink: 'syz.4.2114': attribute type 2 has an invalid length. [ 306.822533][T13890] tipc: Enabling of bearer rejected, failed to enable media [ 306.855887][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2122'. [ 307.590518][T13937] Cannot find add_set index 0 as target [ 307.631571][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 307.664558][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 307.664588][T13935] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2133'. [ 307.685672][T13935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2133'. [ 307.777800][ T5296] veth1_vlan: left promiscuous mode [ 307.895115][T13946] netlink: 'syz.0.2134': attribute type 5 has an invalid length. [ 307.924339][T13946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2134'. [ 308.077699][T13951] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 308.251100][T13960] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2137'. [ 308.487215][T13973] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 308.873447][T14007] netlink: 'syz.2.2143': attribute type 2 has an invalid length. [ 309.015594][T14008] gretap0: entered promiscuous mode [ 309.076539][T14016] 0ªî{X¹¦: renamed from gretap0 [ 309.097061][T14016] 0ªî{X¹¦: left promiscuous mode [ 309.097087][T14016] 0ªî{X¹¦: entered allmulticast mode [ 309.129743][T14016] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 309.431059][T14033] syzkaller0: entered promiscuous mode [ 309.431084][T14033] syzkaller0: entered allmulticast mode [ 309.780959][T14063] netlink: 'syz.2.2158': attribute type 30 has an invalid length. [ 310.698174][T14119] sch_fq: defrate 0 ignored. [ 310.828362][T14121] bond12: entered promiscuous mode [ 310.828388][T14121] bond12: entered allmulticast mode [ 311.486367][T14145] __nla_validate_parse: 11 callbacks suppressed [ 311.486389][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 311.721911][T14152] rdma_op ffff8880671ffa38 conn xmit_rdma 0000000000000000 [ 311.724109][T14149] ip6erspan0: entered promiscuous mode [ 311.749176][T14152] hsr0: entered allmulticast mode [ 311.749198][T14152] hsr_slave_0: entered allmulticast mode [ 311.749216][T14152] hsr_slave_1: entered allmulticast mode [ 311.750131][T14154] hsr0: entered promiscuous mode [ 311.750801][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 311.751903][T14152] hsr_slave_0: left promiscuous mode [ 311.754859][T14152] hsr_slave_1: left promiscuous mode [ 311.834547][T14152] hsr0 (unregistering): left allmulticast mode [ 311.834592][T14152] hsr0 (unregistering): left promiscuous mode [ 311.897084][T14149] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 312.020767][T14159] syzkaller1: entered promiscuous mode [ 312.020792][T14159] syzkaller1: entered allmulticast mode [ 312.089445][T14159] openvswitch: netlink: Multiple metadata blocks provided [ 312.118961][T14169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2189'. [ 312.123032][T14169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2189'. [ 312.216507][T14166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 312.216547][T14166] netlink: 'syz.0.2188': attribute type 7 has an invalid length. [ 312.216563][T14166] netlink: 'syz.0.2188': attribute type 8 has an invalid length. [ 312.216576][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2188'. [ 312.634664][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 312.634689][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 312.742722][T14207] xt_hashlimit: size too large, truncated to 1048576 [ 313.304548][T14237] netlink: 'syz.3.2201': attribute type 58 has an invalid length. [ 313.304573][T14237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2201'. [ 313.545036][T14246] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 313.774315][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 314.536103][T14315] 0ªî{X¹¦: left allmulticast mode [ 314.562748][T14318] ip_tables: iptables: counters copy to user failed while replacing table [ 314.613287][T14318] 8021q: adding VLAN 0 to HW filter on device bond5 [ 315.191387][ T30] audit: type=1800 audit(1793411152.583:6): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2230" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2403 res=0 errno=-22 [ 315.469664][T14355] TC_ACT_REPEAT abuse ? [ 315.586655][T14361] bond14 (unregistering): Released all slaves [ 315.616688][T14367] netlink: 'syz.1.2237': attribute type 2 has an invalid length. [ 315.744459][T14362] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 315.760288][T14362] bond13 (unregistering): Released all slaves [ 316.402458][T14415] syzkaller1: entered promiscuous mode [ 316.402478][T14415] syzkaller1: entered allmulticast mode [ 316.904553][T14394] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 316.985185][T14423] syzkaller1: entered promiscuous mode [ 316.985212][T14423] syzkaller1: entered allmulticast mode [ 317.134014][T14431] netlink: 'syz.0.2254': attribute type 10 has an invalid length. [ 317.134039][T14431] __nla_validate_parse: 11 callbacks suppressed [ 317.134051][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 317.264893][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 317.311758][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.311823][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.501886][T14453] ip_tables: iptables: counters copy to user failed while replacing table [ 317.516040][T14453] syzkaller1: entered promiscuous mode [ 317.516104][T14453] syzkaller1: entered allmulticast mode [ 317.633916][T14460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'. [ 317.634345][T14460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'. [ 317.753568][T14465] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2265'. [ 317.983362][T14480] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 317.983391][T14480] batman_adv: batadv0: Removing interface: syzkaller0 [ 318.331261][T14497] Bluetooth: hci0: unsupported parameter 5135 [ 318.331287][T14497] Bluetooth: hci0: unsupported parameter 8192 [ 318.331301][T14497] Bluetooth: hci0: unsupported parameter 5135 [ 318.331315][T14497] Bluetooth: hci0: unsupported parameter 8192 [ 318.383612][T14500] netlink: 'syz.2.2276': attribute type 4 has an invalid length. [ 318.383637][T14500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2276'. [ 318.625026][T14512] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.738734][T14521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 318.742858][T14522] netlink: ct family unspecified [ 318.742893][T14522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.743417][T14521] netlink: ct family unspecified [ 318.743449][T14521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.999613][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2285'. [ 318.999855][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2285'. [ 319.077401][T14537] bridge0: port 3(wlan0) entered blocking state [ 319.077523][T14537] bridge0: port 3(wlan0) entered disabled state [ 319.077728][T14537] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 319.092789][T14537] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 319.494578][T14560] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 319.673180][ T6119] nci: nci_rsp_packet: unknown rsp opcode 0x8 [ 320.095569][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'. [ 320.133032][T14595] bond13: entered promiscuous mode [ 320.133058][T14595] bond13: entered allmulticast mode [ 320.565543][T14619] netlink: 'syz.0.2309': attribute type 49 has an invalid length. [ 322.571835][T14566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.601044][T14630] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 322.601072][T14630] netlink: 4288 bytes leftover after parsing attributes in process `syz.4.2310'. [ 322.740732][T14654] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2315'. [ 322.913345][T14665] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2317'. [ 323.019609][T14670] netlink: 'syz.2.2317': attribute type 29 has an invalid length. [ 323.019637][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 323.020039][T14670] netlink: 'syz.2.2317': attribute type 29 has an invalid length. [ 323.020059][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 323.276594][T14677] xt_hashlimit: size too large, truncated to 1048576 [ 323.315686][T14681] netlink: 'syz.2.2322': attribute type 3 has an invalid length. [ 323.671062][T14709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2330'. [ 323.672151][T14709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2330'. [ 323.729710][T14710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.772679][T14712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.877125][T14720] syzkaller0: entered promiscuous mode [ 323.877150][T14720] syzkaller0: entered allmulticast mode [ 324.214439][T14739] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 324.330130][T14750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 324.482249][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2340'. [ 324.482339][T14752] C: Caught tx_queue_len zero misconfig [ 324.541144][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'. [ 324.617364][T14765] netlink: 'syz.3.2344': attribute type 21 has an invalid length. [ 324.617428][T14765] netlink: 'syz.3.2344': attribute type 4 has an invalid length. [ 324.617443][T14765] netlink: 'syz.3.2344': attribute type 5 has an invalid length. [ 324.825904][T14777] veth0: Caught tx_queue_len zero misconfig [ 325.414482][T14816] sit0: entered promiscuous mode [ 325.414643][T14816] netlink: 'syz.2.2362': attribute type 1 has an invalid length. [ 325.420662][T14816] syzkaller0: MTU not usable for tipc bearer [ 325.420767][T14816] tipc: Enabling of bearer rejected, failed to enable media [ 325.799710][T14838] veth0: left allmulticast mode [ 325.799739][T14838] veth0: left promiscuous mode [ 325.799986][T14838] bridge0: port 1(veth0) entered disabled state [ 325.851296][ T30] audit: type=1800 audit(1793411163.243:7): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2366" name=0A dev="tmpfs" ino=2483 res=0 errno=-22 [ 326.156331][T14851] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.492374][T14866] pimreg: entered allmulticast mode [ 326.611863][T14876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.885043][T14889] xt_hashlimit: invalid interval [ 327.586069][T14924] tipc: Started in network mode [ 327.586103][T14924] tipc: Node identity ac1414aa, cluster identity 4711 [ 327.601142][T14924] tipc: New replicast peer: 172.20.20.187 [ 327.618894][T14924] tipc: Enabled bearer , priority 10 [ 327.671926][T14925] bridge13: entered promiscuous mode [ 327.695412][T14929] ip_tables: iptables: counters copy to user failed while replacing table [ 327.726669][T14937] __nla_validate_parse: 9 callbacks suppressed [ 327.726693][T14937] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2399'. [ 327.881303][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 327.899304][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 328.181368][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 328.264936][T14964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2408'. [ 328.377294][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 328.530431][T14979] ip_tables: iptables: counters copy to user failed while replacing table [ 328.599958][T13352] tipc: Node number set to 2886997162 [ 328.914764][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 328.914803][T14999] netlink: 'syz.3.2419': attribute type 8 has an invalid length. [ 328.985611][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 328.998867][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 329.143934][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'. [ 329.226756][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 329.334485][T14975] syz_tun: left allmulticast mode [ 329.334516][T14975] syz_tun: left promiscuous mode [ 329.334798][T14975] bridge0: port 2(syz_tun) entered disabled state [ 329.572143][T15021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.637377][T14975] bond0: (slave veth0_to_bond): Releasing active interface [ 330.188376][T14975] team0: Port device team_slave_0 removed [ 330.210444][T14975] team0: Port device team_slave_1 removed [ 330.212923][T14975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.212946][T14975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.215878][T14975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.215896][T14975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.257233][T14975] bond4: (slave wlan1): Releasing backup interface [ 330.282564][T14975] bond4: (slave veth5): Releasing backup interface [ 330.299370][T14975] bond5: (slave bridge3): Releasing backup interface [ 330.299399][T14975] bridge3: left promiscuous mode [ 330.327366][T14975] bond9: (slave erspan1): Releasing active interface [ 330.344226][T14975] bond10: (slave wireguard0): Releasing backup interface [ 330.344248][T14975] wireguard0: left promiscuous mode [ 330.364936][T14975] bond11: (slave bond12): Releasing backup interface [ 330.382442][T14975] bond13: (slave ip6gretap0): Removing an active aggregator [ 330.382949][T14975] bond13: (slave ip6gretap0): Releasing backup interface [ 330.385679][T14975] ip6gretap0: left allmulticast mode [ 330.413931][T14975] batman_adv: batadv0: Removing interface: macsec2 [ 330.459060][ T5771] syz_tun: tun_net_xmit 110 [ 330.520407][ T1125] syz_tun: tun_net_xmit 130 [ 330.834014][T15061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.888797][ T1125] syz_tun: tun_net_xmit 90 [ 331.097563][T15079] bond15: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 331.118492][T15079] bond15 (unregistering): Released all slaves [ 331.550434][T15109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 331.628419][T15108] team_slave_1: entered allmulticast mode [ 331.875599][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888072fc1000: rx timeout, send abort [ 332.059296][T15150] vlan4: entered promiscuous mode [ 332.059322][T15150] bond0: entered promiscuous mode [ 332.059336][T15150] bond_slave_0: entered promiscuous mode [ 332.059549][T15150] bond_slave_1: entered promiscuous mode [ 332.375834][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888072fc0800: rx timeout, send abort [ 332.376792][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888072fc1000: abort rx timeout. Force session deactivation [ 332.631626][T15179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.840556][T15186] __nla_validate_parse: 9 callbacks suppressed [ 332.840579][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 332.875891][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888072fc0800: abort rx timeout. Force session deactivation [ 333.366152][T15204] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 333.375756][T15201] netlink: 'syz.2.2471': attribute type 2 has an invalid length. [ 333.696466][T15212] wireguard0: entered promiscuous mode [ 333.777826][T15224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.780857][T15224] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2474'. [ 333.807123][ C0] syz_tun: tun_net_xmit 58 [ 333.832245][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 333.935574][T15231] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 333.936394][T15231] netlink: 'syz.2.2479': attribute type 21 has an invalid length. [ 333.936417][T15231] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.936512][T15231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.936524][T15231] IPv6: NLM_F_CREATE should be set when creating new route [ 333.936659][T15231] IPv6: NLM_F_CREATE should be set when creating new route [ 333.936686][T15231] IPv6: NLM_F_CREATE should be set when creating new route [ 334.271845][T15248] ip6t_hbh: too many supported opts specified [ 334.339222][ C0] syz_tun: tun_net_xmit 58 [ 334.460655][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 334.538134][ C1] syz_tun: tun_net_xmit 58 [ 334.598172][ C1] syz_tun: tun_net_xmit 58 [ 334.759325][T15266] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2489'. [ 334.987794][T15293] netlink: 'syz.1.2495': attribute type 15 has an invalid length. [ 334.996586][T15293] netlink: 'syz.1.2495': attribute type 15 has an invalid length. [ 335.239994][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 335.267323][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 335.267725][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 335.302907][T15308] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2498'. [ 335.502166][T15314] bond15: Unable to set peer notification delay as MII monitoring is disabled [ 335.505669][T15314] bond15 (unregistering): Released all slaves [ 335.535218][T15320] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 335.587838][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 335.609653][T15320] 8021q: adding VLAN 0 to HW filter on device bond7 [ 335.677435][T15313] bond7: (slave gretap2): making interface the new active one [ 335.692572][T15313] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 335.851764][T15338] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 335.852205][T15337] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 336.415114][T15366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.748496][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 336.873396][T15382] sctp: [Deprecated]: syz.2.2516 (pid 15382) Use of int in max_burst socket option deprecated. [ 336.873396][T15382] Use struct sctp_assoc_value instead [ 337.053465][T15387] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 338.228623][T15412] __nla_validate_parse: 3 callbacks suppressed [ 338.228646][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2525'. [ 338.954823][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 339.007552][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 339.034171][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 339.166656][T15436] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 339.215983][T15441] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2531'. [ 339.317863][T15443] xt_CT: No such helper "snmp_trap" [ 339.415014][T15449] vlan4: entered promiscuous mode [ 339.415042][T15449] hsr0: entered promiscuous mode [ 339.500327][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 339.524518][T15454] hsr_slave_0: left promiscuous mode [ 340.045737][T15485] netlink: 'syz.0.2541': attribute type 1 has an invalid length. [ 340.045764][T15485] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2541'. [ 340.244960][T15492] gre2: entered promiscuous mode [ 340.293887][T15495] bridge7: entered promiscuous mode [ 340.293963][T15495] bridge7: entered allmulticast mode [ 340.437797][T15499] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 340.476067][ T5650] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 340.491276][T15499] 8021q: adding VLAN 0 to HW filter on device bond15 [ 340.537703][T15500] bond15: (slave geneve4): making interface the new active one [ 340.545679][T15500] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 340.601111][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2547'. [ 340.654329][T15514] x_tables: duplicate underflow at hook 2 [ 340.920099][ T5650] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 340.993781][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 341.041929][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 341.399234][T15552] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 341.552512][T15551] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.552648][T15551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.605837][T15563] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 341.625706][T15554] bond6: (slave gretap2): making interface the new active one [ 341.626523][T15554] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 342.442619][T15618] netlink: 'syz.1.2576': attribute type 1 has an invalid length. [ 342.479592][T15622] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 342.625992][T15626] bridge4: entered allmulticast mode [ 342.807238][T15639] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 343.046203][T15652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.220983][T15666] netlink: 'syz.0.2592': attribute type 64 has an invalid length. [ 343.221370][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.707783][T15692] __nla_validate_parse: 68 callbacks suppressed [ 343.707807][T15692] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2600'. [ 343.715191][T15689] netlink: 'syz.0.2598': attribute type 29 has an invalid length. [ 344.067674][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2604'. [ 344.086431][T15713] ip_tables: iptables: counters copy to user failed while replacing table [ 344.158658][T15721] syzkaller0: entered promiscuous mode [ 344.158682][T15721] syzkaller0: entered allmulticast mode [ 344.164363][T15721] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 344.321224][T15729] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 344.400697][T15736] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2613'. [ 344.435861][T15740] netlink: 'syz.2.2614': attribute type 13 has an invalid length. [ 344.572151][T15749] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2617'. [ 344.588205][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2616'. [ 344.623622][T15747] 8021q: adding VLAN 0 to HW filter on device bond14 [ 344.772556][T15758] bond15: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 345.076213][T15777] xt_hl: Unknown Hop Limit match mode: 206 [ 345.379074][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2624'. [ 345.775307][T15817] syzkaller0: entered promiscuous mode [ 345.775331][T15817] syzkaller0: entered allmulticast mode [ 345.902971][T15824] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 346.229440][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2639'. [ 346.232255][T15840] syz_tun: tun_net_xmit 42 [ 346.271621][T15842] bond7: entered promiscuous mode [ 346.272221][T15842] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.422485][T15852] ip6tnl0: Caught tx_queue_len zero misconfig [ 346.655564][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'. [ 346.674789][T15874] xfrm1: entered promiscuous mode [ 346.674813][T15874] xfrm1: entered allmulticast mode [ 346.701470][T15871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2644'. [ 346.704003][T15877] SET target dimension over the limit! [ 346.806909][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 346.806948][T15880] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 346.889254][T15884] netlink: 'syz.1.2649': attribute type 39 has an invalid length. [ 346.990993][T15888] netlink: 'syz.2.2651': attribute type 4 has an invalid length. [ 347.025055][T15888] netlink: 'syz.2.2651': attribute type 4 has an invalid length. [ 347.276019][T15900] netlink: 'syz.3.2653': attribute type 11 has an invalid length. [ 347.295827][T15902] SET target dimension over the limit! [ 347.308124][ C1] syz_tun: tun_net_xmit 42 [ 347.355657][T15904] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 347.784580][T15937] syzkaller0: mtu less than device minimum [ 347.796415][T15936] syzkaller0: mtu greater than device maximum [ 347.957417][T15947] bridge_slave_1: left allmulticast mode [ 347.957448][T15947] bridge_slave_1: left promiscuous mode [ 347.957684][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.009705][T15947] ¾x9ÿ: left allmulticast mode [ 348.009733][T15947] ¾x9ÿ: left promiscuous mode [ 348.009994][T15947] bridge0: port 1(1¾x9ÿ) entered disabled state [ 348.231660][T15964] netlink: 'syz.1.2670': attribute type 5 has an invalid length. [ 348.270962][T15963] netlink: 'syz.2.2669': attribute type 15 has an invalid length. [ 348.348026][ C1] syz_tun: tun_net_xmit 42 [ 348.609668][T15981] gretap3: entered promiscuous mode [ 348.712020][T15992] __nla_validate_parse: 11 callbacks suppressed [ 348.712043][T15992] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2676'. [ 348.839273][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2679'. [ 348.932315][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2680'. [ 349.194263][T16014] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2685'. [ 349.665617][T16041] tipc: Enabling of bearer rejected, failed to enable media [ 349.739356][T16043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2695'. [ 349.817417][T16047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 349.977559][T16053] netlink: 'syz.2.2700': attribute type 4 has an invalid length. [ 349.977585][T16053] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2700'. [ 350.006865][T16053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.047036][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2703'. [ 350.127251][T16063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2701'. [ 350.242650][T16063] bridge0: entered promiscuous mode [ 350.254908][T16063] bridge0: entered allmulticast mode [ 350.294843][T16063] team0: Port device bridge0 added [ 350.426179][T16093] ip6t_srh: unknown srh match flags 4000 [ 350.445910][T16093] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode [ 350.735187][T16114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2716'. [ 350.914363][T16125] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 351.006726][T16128] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2718'. [ 351.037608][T16132] netlink: 'syz.0.2720': attribute type 10 has an invalid length. [ 351.750079][T16156] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.750924][T16156] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.936831][T16161] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode [ 352.545253][T16194] netlink: 'syz.4.2739': attribute type 29 has an invalid length. [ 352.545820][T16194] netlink: 'syz.4.2739': attribute type 29 has an invalid length. [ 352.547697][T16194] xt_TCPMSS: Only works on TCP SYN packets [ 352.738970][T16205] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 352.801017][T16205] bond8: entered promiscuous mode [ 352.801538][T16205] 8021q: adding VLAN 0 to HW filter on device bond8 [ 352.825987][T16212] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.826015][T16212] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 352.826032][T16212] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 352.980581][T16213] tipc: Enabling of bearer rejected, failed to enable media [ 353.165328][T16238] syz_tun: tun_net_xmit 54 [ 353.410344][T16248] openvswitch: netlink: EtherType 50a is less than min 600 [ 353.593728][T16259] blkio.reset_stats is deprecated [ 353.796632][T16270] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 353.809977][T16270] bond9 (unregistering): Released all slaves [ 354.078553][T16293] veth0: entered promiscuous mode [ 354.119560][T16296] netlink: 'syz.1.2763': attribute type 19 has an invalid length. [ 354.119583][T16296] __nla_validate_parse: 11 callbacks suppressed [ 354.119597][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 354.119832][T16296] netlink: 'syz.1.2763': attribute type 19 has an invalid length. [ 354.119848][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 354.136636][T16294] veth0: left promiscuous mode [ 354.327444][T16300] syzkaller0: entered promiscuous mode [ 354.327468][T16300] syzkaller0: entered allmulticast mode [ 354.397732][T16320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2768'. [ 354.411281][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 354.413379][T16320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.414170][T16320] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2768'. [ 355.516977][T16345] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2774'. [ 355.517012][T16345] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2774'. [ 355.779925][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2777'. [ 357.239255][T16310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.252182][T16359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2778'. [ 357.941825][T16396] bond16: option arp_all_targets: invalid value (18446744073709551613) [ 357.946241][T16396] bond16 (unregistering): Released all slaves [ 358.268348][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 358.302070][T16415] tipc: Enabled bearer , priority 10 [ 358.319977][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 358.381296][T16388] netlink: 'syz.1.2786': attribute type 1 has an invalid length. [ 358.421161][T16422] netlink: 'syz.4.2798': attribute type 11 has an invalid length. [ 358.495605][T16436] netlink: 'syz.1.2786': attribute type 1 has an invalid length. [ 358.802170][T16455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.879640][T16464] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 359.103818][T16471] netlink: 'syz.1.2803': attribute type 1 has an invalid length. [ 359.321820][T16477] netlink: 'syz.2.2806': attribute type 2 has an invalid length. [ 359.557008][T16484] netlink: 'syz.2.2809': attribute type 1 has an invalid length. [ 359.617128][T16484] __nla_validate_parse: 5 callbacks suppressed [ 359.617152][T16484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2809'. [ 359.637734][T16484] 8021q: adding VLAN 0 to HW filter on device bond15 [ 359.649501][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 359.693863][T16494] netlink: 'syz.1.2813': attribute type 12 has an invalid length. [ 359.693885][T16494] netlink: 'syz.1.2813': attribute type 29 has an invalid length. [ 359.693900][T16494] netlink: 'syz.1.2813': attribute type 7 has an invalid length. [ 359.693913][T16494] netlink: 'syz.1.2813': attribute type 39 has an invalid length. [ 360.218326][T16524] ip_tables: iptables: counters copy to user failed while replacing table [ 360.325927][T16539] netlink: 'syz.1.2824': attribute type 11 has an invalid length. [ 360.556176][T16552] ip_tables: iptables: counters copy to user failed while replacing table [ 360.556967][T16551] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2826'. [ 360.875123][T16563] bond9 (unregistering): Released all slaves [ 360.984640][T16568] bond9 (unregistering): Released all slaves [ 361.755918][T16609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2839'. [ 361.779127][T16611] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2837'. [ 361.802946][T16611] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2837'. [ 362.119272][T16628] veth6: entered allmulticast mode [ 362.442779][T16654] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2848'. [ 363.313765][T16673] syzkaller0: entered promiscuous mode [ 363.313794][T16673] syzkaller0: entered allmulticast mode [ 363.331580][T16689] lo: entered promiscuous mode [ 363.331772][T16689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.488919][T16696] validate_nla: 3 callbacks suppressed [ 363.488941][T16696] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 365.249855][T16696] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 365.256709][T16706] lo: left allmulticast mode [ 365.465152][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.469213][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.469840][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.470491][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.477693][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.478387][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.484047][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.484790][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.485685][T16718] xt_hashlimit: size too large, truncated to 1048576 [ 365.502479][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.503281][T16720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 365.585380][T16722] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 365.673535][T16734] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 365.783292][T16734] bond16: entered promiscuous mode [ 365.786041][T16734] 8021q: adding VLAN 0 to HW filter on device bond16 [ 365.881966][T16734] bond16: (slave bridge3): making interface the new active one [ 365.881994][T16734] bridge3: entered promiscuous mode [ 365.923721][T16734] bond16: (slave bridge3): Enslaving as an active interface with an up link [ 366.229806][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.229885][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.235043][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.236211][T16753] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 366.236265][T16753] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 366.241941][T16753] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 366.425245][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.437145][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.447069][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.459331][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.467858][T16753] wg0 speed is unknown, defaulting to 1000 [ 366.996724][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.003094][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.013195][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.016116][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.016823][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.122595][T16784] vlan2: entered promiscuous mode [ 367.122620][T16784] bridge0: entered promiscuous mode [ 367.122829][T16784] vlan2: entered allmulticast mode [ 367.122844][T16784] bridge0: entered allmulticast mode [ 367.232488][T16793] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 367.669929][T16811] No such timeout policy "syz0" [ 367.982462][T16778] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.441054][T16778] wg0 speed is unknown, defaulting to 1000 [ 369.068673][ T5650] Bluetooth: hci5: command tx timeout [ 369.242424][T16869] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.332251][T16778] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.332371][T16778] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.332548][T16778] bridge_slave_0: entered allmulticast mode [ 369.348534][T16778] bridge_slave_0: entered promiscuous mode [ 369.373228][T16778] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.373348][T16778] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.373516][T16778] bridge_slave_1: entered allmulticast mode [ 369.397139][T16778] bridge_slave_1: entered promiscuous mode [ 369.576379][T16778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.612095][T16778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.801216][T16778] team0: Port device team_slave_0 added [ 369.839220][T16778] team0: Port device team_slave_1 added [ 369.996250][T16778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.996271][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.996299][T16778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.067669][T16778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.067689][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.067718][T16778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.190423][T16778] hsr_slave_0: entered promiscuous mode [ 370.191574][T16778] hsr_slave_1: entered promiscuous mode [ 370.303799][T16933] x_tables: duplicate underflow at hook 1 [ 370.325545][T16931] netlink: 'syz.1.2918': attribute type 1 has an invalid length. [ 370.801897][T16948] __nla_validate_parse: 35 callbacks suppressed [ 370.801924][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 370.870625][T16778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.870675][T16778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.994443][T16958] SET target dimension over the limit! [ 371.051092][T16778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.051134][T16778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.148878][ T5650] Bluetooth: hci5: command tx timeout [ 371.188365][T16778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.188412][T16778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.292768][T16778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.292804][T16778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.331317][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2928'. [ 371.359332][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 371.363790][T16978] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2926'. [ 371.404820][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 371.573229][T16982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2929'. [ 371.809683][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 371.835092][T16991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2931'. [ 371.936969][T16778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 372.000350][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.005114][T16778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 372.025031][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.032050][T16778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.064690][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.075082][T16778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.112871][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.221589][T17010] lo: entered promiscuous mode [ 372.240761][T17010] tunl0: entered promiscuous mode [ 372.269971][T17010] gre0: entered promiscuous mode [ 372.344932][T17028] netlink: 'syz.2.2937': attribute type 2 has an invalid length. [ 372.392895][T17010] gretap0: entered promiscuous mode [ 372.435045][T17010] erspan0: left allmulticast mode [ 372.435505][T17010] ip_vti0: entered promiscuous mode [ 372.616009][T17030] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 372.640273][T17030] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 372.724543][T16778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.741927][T17035] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2940'. [ 372.801215][T16778] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.836047][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.836161][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.907443][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.907556][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.156029][T17047] veth13: entered allmulticast mode [ 373.228051][ T5650] Bluetooth: hci5: command tx timeout [ 373.286577][T17061] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2947'. [ 373.787623][T17087] unsupported nlmsg_type 40 [ 374.224651][T16778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.361344][T16778] veth0_vlan: entered promiscuous mode [ 374.406568][T16778] veth1_vlan: entered promiscuous mode [ 374.579740][T16778] veth0_macvtap: entered promiscuous mode [ 374.588484][T16778] veth1_macvtap: entered promiscuous mode [ 374.643789][T16778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.684155][T16778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.707861][T17112] netlink: 'syz.0.2959': attribute type 2 has an invalid length. [ 374.750324][T13967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.784676][T13967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.785064][T13967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.888561][T13967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.072996][T13967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.073020][T13967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.258243][ T6115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.258267][ T6115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.308402][ T5635] Bluetooth: hci5: command tx timeout [ 375.342262][T17137] netlink: 'syz.2.2968': attribute type 15 has an invalid length. [ 375.369023][T17137] netlink: 'syz.2.2968': attribute type 15 has an invalid length. [ 375.398915][ T1169] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 375.399727][ T1169] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 375.399859][ T1169] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 375.399898][ T1169] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 375.575321][T17144] batman_adv: batadv0: Adding interface: veth0 [ 375.575340][T17144] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.575404][T17144] batman_adv: batadv0: Interface activated: veth0 [ 375.635965][T17145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.635993][T17145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.658656][T17145] batman_adv: batadv0: Interface deactivated: veth0 [ 375.658679][T17145] batman_adv: batadv0: Removing interface: veth0 [ 375.905857][T17153] __nla_validate_parse: 9 callbacks suppressed [ 375.905881][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 376.282081][ T5650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.285046][ T5650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.288538][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.304931][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.319912][ T5650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.182816][T17201] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2985'. [ 377.239834][T17165] rxe_eth0 speed is unknown, defaulting to 1000 [ 377.417520][T17213] netlink: 'syz.3.2989': attribute type 1 has an invalid length. [ 377.439987][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2988'. [ 377.440012][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2988'. [ 377.440256][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2988'. [ 377.440273][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2988'. [ 377.490452][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'. [ 377.491864][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2988'. [ 377.491885][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2988'. [ 377.492117][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2988'. [ 377.599719][T17202] veth7: entered allmulticast mode [ 377.759544][T17233] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 377.866766][T17165] wg0 speed is unknown, defaulting to 1000 [ 378.171098][T17248] netlink: 'syz.3.2998': attribute type 12 has an invalid length. [ 378.217702][T17251] openvswitch: netlink: Message has 70 unknown bytes. [ 378.217740][T17251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.406552][T17256] netlink: 'syz.3.2998': attribute type 21 has an invalid length. [ 378.406576][T17256] netlink: 'syz.3.2998': attribute type 22 has an invalid length. [ 378.406618][T17256] netlink: 'syz.3.2998': attribute type 23 has an invalid length. [ 378.406634][T17256] netlink: 'syz.3.2998': attribute type 25 has an invalid length. [ 378.430873][ T5650] Bluetooth: hci2: command tx timeout [ 378.757045][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.770745][T17165] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.770927][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.771136][T17165] bridge_slave_0: entered allmulticast mode [ 378.772998][T17165] bridge_slave_0: entered promiscuous mode [ 378.803656][T17165] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.803844][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.804001][T17165] bridge_slave_1: entered allmulticast mode [ 378.805880][T17165] bridge_slave_1: entered promiscuous mode [ 378.868153][T17165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.871818][T17165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.933272][T17165] team0: Port device team_slave_0 added [ 378.944966][T17165] team0: Port device team_slave_1 added [ 378.994885][T17278] xt_l2tp: invalid flags combination: 8 [ 379.126546][T17165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.126565][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.126622][T17165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.163771][T17165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.163826][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.163902][T17165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.343759][T17165] hsr_slave_0: entered promiscuous mode [ 379.344907][T17165] hsr_slave_1: entered promiscuous mode [ 379.345784][T17165] debugfs: 'hsr0' already exists in 'hsr' [ 379.345805][T17165] Cannot create hsr debugfs directory [ 379.447650][T17297] netlink: 'syz.1.3006': attribute type 10 has an invalid length. [ 379.559986][T17300] netlink: 'syz.4.3008': attribute type 83 has an invalid length. [ 379.671514][T17304] bond17: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 379.696683][T17304] bond17 (unregistering): Released all slaves [ 379.784733][T17320] openvswitch: netlink: Missing key (keys=40, expected=80) [ 379.827245][T17310] bond17: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 379.840533][T17310] bond17 (unregistering): Released all slaves [ 379.963910][T17315] h: entered promiscuous mode [ 380.193757][T17165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.193800][T17165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 380.193831][T17165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 48555 - 0 [ 380.383745][T17165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.383795][T17165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 380.383825][T17165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 48555 - 0 [ 380.509494][ T5650] Bluetooth: hci2: command tx timeout [ 380.622825][T17165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.622865][T17165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 380.622894][T17165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 48555 - 0 [ 380.672349][T17352] tipc: Enabling of bearer rejected, failed to enable media [ 380.672722][T17356] netlink: 'syz.3.3021': attribute type 11 has an invalid length. [ 380.676147][T17351] batman_adv: batadv0: Adding interface: syzkaller0 [ 380.676163][T17351] batman_adv: batadv0: Interface activated: syzkaller0 [ 380.825936][T17165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.825976][T17165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 380.826005][T17165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 48555 - 0 [ 380.879555][T17366] netlink: 'syz.2.3019': attribute type 22 has an invalid length. [ 380.984777][T17366] netlink: 'syz.2.3019': attribute type 22 has an invalid length. [ 380.984806][T17366] __nla_validate_parse: 10 callbacks suppressed [ 380.984826][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'. [ 381.225909][T17165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.235444][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.238897][T17165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.271355][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.275844][T17165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.304801][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.305946][T17165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.335708][T17376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.339068][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.367073][T17376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.380960][T17379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3025'. [ 381.382973][T17379] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3025'. [ 381.697294][T17165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.775427][T17165] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.814401][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.814572][T13996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.871175][T17396] xt_TCPMSS: Only works on TCP SYN packets [ 381.871469][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.871578][T13996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.930778][T17397] pim6reg: entered allmulticast mode [ 382.543806][T17415] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 382.588862][ T5650] Bluetooth: hci2: command tx timeout [ 382.650090][T17427] openvswitch: netlink: Multiple metadata blocks provided [ 382.720396][T17429] netlink: 'syz.3.3039': attribute type 3 has an invalid length. [ 382.720654][T17429] netlink: 'syz.3.3039': attribute type 3 has an invalid length. [ 382.922232][T17435] IPVS: set_ctl: invalid protocol: 21 100.1.0.253:20004 [ 383.037337][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'. [ 383.104859][T17445] xt_hashlimit: size too large, truncated to 1048576 [ 383.184845][T17449] xt_hashlimit: size too large, truncated to 1048576 [ 383.371591][T17455] bond17: option lp_interval: invalid value (0) [ 383.371618][T17455] bond17: option lp_interval: allowed values 1 - 2147483647 [ 383.399764][T17455] bond17 (unregistering): Released all slaves [ 383.535695][T17461] netlink: 'syz.4.3045': attribute type 58 has an invalid length. [ 383.535724][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3045'. [ 383.632726][T17165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.771932][T17165] veth0_vlan: entered promiscuous mode [ 383.802112][T17165] veth1_vlan: entered promiscuous mode [ 383.880279][T17165] veth0_macvtap: entered promiscuous mode [ 383.899809][T17165] veth1_macvtap: entered promiscuous mode [ 383.941866][T17165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.975939][T17165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.050888][T13967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.051466][T13967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.051501][T13967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.051529][T13967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.168947][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.168971][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.225524][T13995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.225548][T13995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.264189][T17486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3050'. [ 384.640795][T17500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3051'. [ 384.671034][ T5650] Bluetooth: hci2: command tx timeout [ 384.761160][T17504] x_tables: duplicate underflow at hook 1 [ 384.783151][T17505] x_tables: duplicate underflow at hook 1 [ 384.952507][T17506] syzkaller1: entered promiscuous mode [ 384.952535][T17506] syzkaller1: entered allmulticast mode [ 385.156191][T17527] netlink: 'syz.0.3056': attribute type 50 has an invalid length. [ 385.285328][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.287793][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.306615][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.326989][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.336131][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.989652][T17556] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3061'. [ 385.991017][T17556] netlink: 'syz.2.3061': attribute type 2 has an invalid length. [ 386.065369][T17541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.357813][T17541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.452968][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051bf7c00: rx timeout, send abort [ 386.453617][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051bf7c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 386.559581][T17571] netlink: 'syz.1.3063': attribute type 11 has an invalid length. [ 386.635868][T17541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.851232][T17541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.090638][T17534] rxe_eth0 speed is unknown, defaulting to 1000 [ 387.288788][ T6115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.362797][ T6120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.433260][ T6120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.454140][T17534] wg0 speed is unknown, defaulting to 1000 [ 387.521639][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 387.545486][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 387.641563][T13995] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.837674][T17628] netlink: 'syz.3.3076': attribute type 4 has an invalid length. [ 388.142811][T17638] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 388.579733][T17534] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.579816][T17534] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.579955][T17534] bridge_slave_0: entered allmulticast mode [ 388.586542][T17534] bridge_slave_0: entered promiscuous mode [ 388.610311][T17652] Cannot find set identified by id 65534 to match [ 388.631831][T17534] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.631937][T17534] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.632110][T17534] bridge_slave_1: entered allmulticast mode [ 388.636456][T17534] bridge_slave_1: entered promiscuous mode [ 388.692411][T17655] netlink: 'syz.1.3084': attribute type 3 has an invalid length. [ 388.761269][T17534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.778729][T17534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.933154][T17534] team0: Port device team_slave_0 added [ 388.962566][T17534] team0: Port device team_slave_1 added [ 389.081941][T17674] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3088'. [ 389.176779][T17534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.176806][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.176832][T17534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.177496][T17677] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20000 [ 389.234880][T17534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.234898][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.234925][T17534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.400363][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3092'. [ 389.403054][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3092'. [ 389.455812][T17689] netlink: 'syz.1.3091': attribute type 10 has an invalid length. [ 389.470547][T17689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.507558][T17534] hsr_slave_0: entered promiscuous mode [ 389.516345][T17534] hsr_slave_1: entered promiscuous mode [ 389.517179][T17534] debugfs: 'hsr0' already exists in 'hsr' [ 389.517201][T17534] Cannot create hsr debugfs directory [ 389.776876][T17701] netlink: 'syz.2.3096': attribute type 2 has an invalid length. [ 389.776900][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 389.812948][T17703] ip_tables: iptables: counters copy to user failed while replacing table [ 389.835653][T17701] ip_tables: iptables: counters copy to user failed while replacing table [ 390.018130][T17534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.018171][T17534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.018200][T17534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.083556][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3098'. [ 390.173320][T17534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.173363][T17534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.173393][T17534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.271641][T17534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.271684][T17534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.271714][T17534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.371066][T17534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.371106][T17534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.371127][T17534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.510988][T17534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.514273][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.515110][T17534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.517837][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.522932][T17534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.545706][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.554073][T17534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.569058][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.660822][T17534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.681317][T17534] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.692208][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.692494][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.716926][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.717020][ T6120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.825620][T17726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3103'. [ 390.930941][T17732] xt_SECMARK: invalid mode: 9 [ 391.026395][T17736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3100'. [ 391.027420][T17736] ip_tables: iptables: counters copy to user failed while replacing table [ 391.100619][T17742] xt_l2tp: v2 doesn't support IP mode [ 391.282672][T17749] netlink: 'syz.3.3106': attribute type 12 has an invalid length. [ 391.324827][T17749] netlink: 'syz.3.3106': attribute type 2 has an invalid length. [ 391.582218][T17754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.585731][T17754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.606654][T17754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.657549][T17754] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 391.836103][T13995] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.916910][ T142] bond0: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 391.916988][ T142] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 391.944418][ T142] bond0: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 391.944868][ T142] bond0: active interface up! [ 391.969910][T17767] openvswitch: netlink: Unknown key attributes 2 [ 392.000930][T17767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3110'. [ 392.011772][T17767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3110'. [ 392.011845][T17767] bridge: RTM_NEWNEIGH with invalid ether address [ 392.143682][T17534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.643339][T17803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3118'. [ 392.723140][T17808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3119'. [ 392.724265][T17808] openvswitch: netlink: IP tunnel dst address not specified [ 392.832968][T17534] veth0_vlan: entered promiscuous mode [ 392.865645][T17534] veth1_vlan: entered promiscuous mode [ 392.971834][T17825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.000634][T17816] tipc: Failed to obtain node identity [ 393.000662][T17816] tipc: Enabling of bearer rejected, failed to enable media [ 393.006034][T17534] veth0_macvtap: entered promiscuous mode [ 393.211845][T17534] veth1_macvtap: entered promiscuous mode [ 393.476205][T17840] lo: entered promiscuous mode [ 393.491869][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'. [ 393.509097][T17840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.859841][T17854] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.902609][T17861] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3130'. [ 394.039245][T17534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.222483][T17864] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 394.227637][T17534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.380537][T17872] syzkaller1: entered promiscuous mode [ 394.380564][T17872] syzkaller1: entered allmulticast mode [ 394.409481][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'. [ 394.838555][ T6115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.838756][ T6115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.838798][ T6115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.894829][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 395.146679][T17895] netlink: 'syz.3.3139': attribute type 1 has an invalid length. [ 395.146699][T17895] netlink: 'syz.3.3139': attribute type 3 has an invalid length. [ 395.146710][T17895] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3139'. [ 395.226694][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.365959][T17898] netlink: 'syz.2.3138': attribute type 1 has an invalid length. [ 395.655967][T17898] 8021q: adding VLAN 0 to HW filter on device bond17 [ 395.701595][T17898] macvlan2: entered promiscuous mode [ 395.701621][T17898] macvlan2: entered allmulticast mode [ 395.705730][T17898] bond17: entered promiscuous mode [ 395.718195][T17898] bond17: entered allmulticast mode [ 395.741367][T17898] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.786266][T17917] netlink: 'syz.2.3138': attribute type 1 has an invalid length. [ 395.813173][T17898] bond17: left allmulticast mode [ 395.813226][T17898] bond17: left promiscuous mode [ 395.892707][T17906] bond17: entered promiscuous mode [ 395.892733][T17906] bond17: entered allmulticast mode [ 395.956217][T17902] bond17: (slave veth0_to_bond): making interface the new active one [ 395.956246][T17902] veth0_to_bond: entered promiscuous mode [ 395.956440][T17902] veth0_to_bond: entered allmulticast mode [ 395.957239][T17902] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 396.045449][T17929] Bluetooth: MGMT ver 1.23 [ 396.056207][T17923] macvlan2: entered promiscuous mode [ 396.056231][T17923] macvlan2: entered allmulticast mode [ 396.094901][T17923] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.106826][T17923] bond17: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 396.109426][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.262845][T17927] lo: left promiscuous mode [ 396.310210][T17927] tunl0: left promiscuous mode [ 396.346177][T17927] gre0: left promiscuous mode [ 396.651740][T17927] gretap0: left promiscuous mode [ 396.695406][T17927] erspan0: left promiscuous mode [ 396.730411][T17927] ip_vti0: left promiscuous mode [ 396.849748][T17927] bridge0: port 3(syz_tun) entered disabled state [ 396.872452][T17927] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.873147][T17927] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.166876][T17927] vlan0: left promiscuous mode [ 397.175856][T17927] veth0_vlan: left promiscuous mode [ 397.280547][T17927] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 397.612774][T17927] sit1: left promiscuous mode [ 397.612804][T17927] sit1: left allmulticast mode [ 397.672695][T17927] xfrm1: left allmulticast mode [ 397.836049][T17927] geneve2: left promiscuous mode [ 397.836087][T17927] geneve2: left allmulticast mode [ 398.005322][T17927] h: left promiscuous mode [ 398.101598][T13967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.101623][T13967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.128155][ T6120] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.128203][ T6120] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.128232][ T6120] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 398.128433][ T6120] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.128462][ T6120] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.128490][ T6120] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 398.128541][ T6120] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.128569][ T6120] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.128624][ T6120] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 398.260544][T17974] netlink: 'syz.1.3146': attribute type 1 has an invalid length. [ 398.420783][ T5650] block nbd296: Receive control failed (result -32) [ 398.524254][T17982] __nla_validate_parse: 12 callbacks suppressed [ 398.524279][T17982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3150'. [ 398.582089][T13967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.582113][T13967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.633718][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3150'. [ 398.834657][T17993] openvswitch: netlink: Message has 70 unknown bytes. [ 398.834698][T17993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.187218][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 399.187251][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 399.187270][T17999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3153'. [ 399.281645][T18011] IPv6: sit1: Disabled Multicast RS [ 399.882494][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'. [ 399.947445][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.958880][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.966171][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.984588][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.995416][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.797480][T13996] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.797528][T13996] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 400.797558][T13996] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.925878][T18078] netlink: 'syz.1.3168': attribute type 10 has an invalid length. [ 400.973032][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 401.005114][T18082] netlink: 'syz.1.3168': attribute type 10 has an invalid length. [ 401.020487][T18076] ip_tables: iptables: counters copy to user failed while replacing table [ 401.104793][T13996] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.120626][T13996] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 401.120668][T13996] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.146412][T18076] Bluetooth: MGMT ver 1.23 [ 401.395008][T13996] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.395047][T13996] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 401.395076][T13996] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.545367][T13996] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.545412][T13996] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 401.545445][T13996] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.746846][T18035] rxe_eth0 speed is unknown, defaulting to 1000 [ 402.108438][ T5650] Bluetooth: hci1: command tx timeout [ 402.271980][T18134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3178'. [ 402.520929][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 402.619985][T13996] bridge_slave_1: left allmulticast mode [ 402.620046][T13996] bridge_slave_1: left promiscuous mode [ 402.621848][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.680139][T13996] bridge_slave_0: left allmulticast mode [ 402.680167][T13996] bridge_slave_0: left promiscuous mode [ 402.680400][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.817602][T18154] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3179'. [ 403.501771][T13996] bond2 (unregistering): (slave gretap1): Releasing active interface [ 403.566663][T13996] bond7 (unregistering): (slave gretap2): Releasing backup interface [ 403.699520][T13996] bond16 (unregistering): (slave bridge3): Releasing backup interface [ 403.699550][T13996] bridge3 (unregistering): left promiscuous mode [ 403.733709][T13996] bond1 (unregistering): Released all slaves [ 403.751607][T13996] bond2 (unregistering): Released all slaves [ 403.778675][T13996] bond3 (unregistering): Released all slaves [ 403.796587][T13996] bond4 (unregistering): Released all slaves [ 403.837597][T13996] bond0 (unregistering): (slave bond5): Releasing backup interface [ 403.837627][T13996] bond5 (unregistering): left promiscuous mode [ 403.841013][T13996] bond0 (unregistering): Released all slaves [ 403.864595][T13996] bond5 (unregistering): Released all slaves [ 403.882430][T13996] bond6 (unregistering): Released all slaves [ 403.905239][T13996] bond7 (unregistering): Released all slaves [ 403.928499][T13996] bond8 (unregistering): Released all slaves [ 403.947141][T13996] bond9 (unregistering): (slave bond10): Releasing backup interface [ 403.958134][T13996] bond9 (unregistering): Released all slaves [ 403.983458][T13996] bond10 (unregistering): Released all slaves [ 404.005787][T13996] bond11 (unregistering): Released all slaves [ 404.023573][T13996] bond12 (unregistering): Released all slaves [ 404.046125][T13996] bond13 (unregistering): Released all slaves [ 404.066126][T13996] bond14 (unregistering): Released all slaves [ 404.091451][T13996] bond15 (unregistering): Released all slaves [ 404.123426][T13996] bond16 (unregistering): Released all slaves [ 404.151827][T13996] bond17 (unregistering): (slave veth0_to_bond): Releasing active interface [ 404.151864][T13996] veth0_to_bond: left promiscuous mode [ 404.151985][T13996] veth0_to_bond: left allmulticast mode [ 404.153734][T13996] bond17 (unregistering): Released all slaves [ 404.189049][ T5650] Bluetooth: hci1: command tx timeout [ 404.191947][T18035] wg0 speed is unknown, defaulting to 1000 [ 404.462901][T13996] tipc: Disabling bearer [ 404.476679][T13996] tipc: Left network mode [ 404.526458][T13996] IPVS: stopping backup sync thread 8391 ... [ 404.924748][T18205] sctp: Trying to GSO but underlying device doesn't support it. [ 405.494360][T18227] bridge1: entered promiscuous mode [ 405.494427][T18227] bridge1: entered allmulticast mode [ 405.816828][T18237] bridge2: entered promiscuous mode [ 405.816897][T18237] bridge2: entered allmulticast mode [ 406.270070][ T5650] Bluetooth: hci1: command tx timeout [ 406.453710][T18271] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.454483][T18271] __nla_validate_parse: 1 callbacks suppressed [ 406.454500][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 406.525277][T18274] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.532765][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 406.769829][T18284] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3204'. [ 406.793113][T18284] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:21 [ 406.843381][T13996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.843522][T13996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.846290][T13996] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 406.846314][T13996] batman_adv: batadv0: Removing interface: ipvlan3 [ 406.870879][T13996] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 406.870904][T13996] batman_adv: batadv0: Removing interface: syzkaller0 [ 406.912439][T13996] veth0_macvtap: left promiscuous mode [ 406.912613][T13996] veth1_vlan: left promiscuous mode [ 406.912709][T13996] veth0_vlan: left promiscuous mode [ 407.457184][T13996] team0 (unregistering): Port device team_slave_0 removed [ 407.597644][T13967] smbdirect: ib_dev[syz0] removed [ 407.796945][T18035] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.797061][T18035] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.797214][T18035] bridge_slave_0: entered allmulticast mode [ 407.826843][T18035] bridge_slave_0: entered promiscuous mode [ 407.842492][T18035] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.842597][T18035] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.842717][T18035] bridge_slave_1: entered allmulticast mode [ 407.854461][T18035] bridge_slave_1: entered promiscuous mode [ 407.965662][T18312] netlink: 'syz.4.3208': attribute type 10 has an invalid length. [ 408.079861][T18035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.115878][T18035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.221544][T18321] netlink: 'syz.0.3213': attribute type 5 has an invalid length. [ 408.287197][T18035] team0: Port device team_slave_0 added [ 408.315228][T18035] team0: Port device team_slave_1 added [ 408.348865][ T5635] Bluetooth: hci1: command tx timeout [ 408.354863][T18322] x_tables: duplicate underflow at hook 1 [ 408.384827][T18324] syzkaller0: entered promiscuous mode [ 408.384852][T18324] syzkaller0: entered allmulticast mode [ 408.426560][T18035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.426579][T18035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.426609][T18035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.554668][T18329] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 408.581044][T18035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.581064][T18035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.581094][T18035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.666188][T13996] IPVS: stop unused estimator thread 0... [ 408.694697][T18329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.796719][T18324] tipc: Started in network mode [ 408.796780][T18324] tipc: Node identity fa24a38b05da, cluster identity 4711 [ 408.797030][T18324] tipc: Enabled bearer , priority 0 [ 408.857722][T18035] hsr_slave_0: entered promiscuous mode [ 408.865356][T18035] hsr_slave_1: entered promiscuous mode [ 408.886467][T18035] debugfs: 'hsr0' already exists in 'hsr' [ 408.886492][T18035] Cannot create hsr debugfs directory [ 408.896420][T18323] tipc: Resetting bearer [ 409.035844][T18323] tipc: Disabling bearer [ 409.254323][T18357] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3217'. [ 409.385042][T18353] syzkaller1: entered promiscuous mode [ 409.385070][T18353] syzkaller1: entered allmulticast mode [ 409.452369][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 409.874989][T18367] tipc: Started in network mode [ 409.875012][T18367] tipc: Node identity , cluster identity 4711 [ 409.875028][T18367] tipc: Failed to set node id, please configure manually [ 409.875078][T18367] tipc: Enabling of bearer rejected, failed to enable media [ 410.428113][ T5635] Bluetooth: hci1: command tx timeout [ 410.901359][T18035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 410.934611][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.937250][T18035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 410.966029][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.967058][T18035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.001574][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.004021][T18035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.028160][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.225809][T18035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.303564][T18035] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.351612][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.351732][ T6120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.411568][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.411692][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.536603][T18438] netlink: 'syz.3.3236': attribute type 1 has an invalid length. [ 411.655690][T18438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.669397][T18441] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 411.674512][T18441] bond2: entered allmulticast mode [ 411.740141][T18448] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 412.081991][T18463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.141022][T18468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3242'. [ 412.359208][T18474] ip_tables: iptables: counters copy to user failed while replacing table [ 412.414682][T18482] netlink: 'syz.0.3244': attribute type 2 has an invalid length. [ 413.392612][T18035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.700358][T18525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3252'. [ 413.823621][T18035] veth0_vlan: entered promiscuous mode [ 413.855972][T18035] veth1_vlan: entered promiscuous mode [ 413.969090][T18035] veth0_macvtap: entered promiscuous mode [ 413.987628][T18035] veth1_macvtap: entered promiscuous mode [ 414.027548][T18035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.082187][T18035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.140270][T13995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.140807][ T5635] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 414.146385][T18536] netlink: 'syz.0.3254': attribute type 7 has an invalid length. [ 414.147108][T18533] netlink: 'syz.1.3253': attribute type 7 has an invalid length. [ 414.215044][ T6120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.215100][ T6120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.215142][ T6120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.227827][T18533] netlink: 'syz.1.3253': attribute type 7 has an invalid length. [ 414.325601][ T6120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.325626][ T6120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.417012][ T6120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.417036][ T6120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.620344][T18548] netlink: 'syz.3.3255': attribute type 64 has an invalid length. [ 414.806764][T18559] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3258'. [ 414.823965][T18559] tipc: Started in network mode [ 414.824000][T18559] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 414.824192][T18559] tipc: Enabled bearer , priority 10 [ 414.852180][T18559] netlink: 'syz.1.3258': attribute type 1 has an invalid length. [ 414.959397][T18564] bond9: (slave geneve4): making interface the new active one [ 414.965460][T18564] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 414.990451][T13996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 414.991782][T13967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 414.995421][T18559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3258'. [ 415.033998][T18559] 8021q: adding VLAN 0 to HW filter on device bond9 [ 415.040724][T13995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.074161][T18568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3260'. [ 415.206768][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 415.443406][ T5650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.462006][ T5650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.465669][ T5650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.466955][ T5650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.468782][ T5650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.961969][ T5763] tipc: Node number set to 10070698 [ 416.110701][T18597] sctp: [Deprecated]: syz.2.3267 (pid 18597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.110701][T18597] Use struct sctp_sack_info instead [ 416.151644][ T5646] syz_tun (unregistering): left allmulticast mode [ 416.151677][ T5646] syz_tun (unregistering): left promiscuous mode [ 416.151805][ T5646] bridge0: port 3(syz_tun) entered disabled state [ 416.211468][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3265'. [ 416.211503][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'. [ 416.613275][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804a673c00: rx timeout, send abort [ 416.840861][T18577] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.974682][T18629] netlink: 'syz.0.3271': attribute type 5 has an invalid length. [ 417.113346][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804a673c00: abort rx timeout. Force session deactivation [ 417.113547][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880498ff400: rx timeout, send abort [ 417.301135][ T5650] Bluetooth: hci5: unexpected event 0x3b length: 11 > 10 [ 417.539099][T18655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3275'. [ 417.548343][ T5650] Bluetooth: hci4: command tx timeout [ 417.613596][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880498ff400: abort rx timeout. Force session deactivation [ 417.793913][T18659] openvswitch: netlink: EtherType 50a is less than min 600 [ 417.820948][T18659] pimreg: entered allmulticast mode [ 418.561270][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3284'. [ 418.877551][T18675] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 418.922576][T18577] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.922692][T18577] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.922856][T18577] bridge_slave_0: entered allmulticast mode [ 418.936482][T18577] bridge_slave_0: entered promiscuous mode [ 418.951686][T18577] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.952388][T18577] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.953164][T18577] bridge_slave_1: entered allmulticast mode [ 418.964317][T18577] bridge_slave_1: entered promiscuous mode [ 419.263920][T18577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.285390][T18577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.364410][T18577] team0: Port device team_slave_0 added [ 419.367760][T18577] team0: Port device team_slave_1 added [ 419.433992][T18577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.434021][T18577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.434052][T18577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.436888][T18577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.436905][T18577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.436935][T18577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.628750][ T5650] Bluetooth: hci4: command tx timeout [ 419.704052][T18577] hsr_slave_0: entered promiscuous mode [ 419.705228][T18577] hsr_slave_1: entered promiscuous mode [ 419.707805][T18577] debugfs: 'hsr0' already exists in 'hsr' [ 419.707828][T18577] Cannot create hsr debugfs directory [ 419.888805][T18749] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3289'. [ 419.975640][T18754] tipc: Started in network mode [ 419.975690][T18754] tipc: Node identity ac1414aa, cluster identity 4711 [ 419.984023][T18758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3292'. [ 420.003252][T18754] tipc: New replicast peer: 172.20.20.187 [ 420.003780][T18754] tipc: Enabled bearer , priority 10 [ 420.307146][T18771] openvswitch: netlink: Duplicate key (type 16). [ 420.410003][T18776] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 420.821769][T18577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 421.053260][T18797] xt_HMARK: proto mask must be zero with L3 mode [ 421.070506][T18800] xt_HMARK: proto mask must be zero with L3 mode [ 421.147784][T18577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 421.204394][ T5763] tipc: Node number set to 2886997162 [ 421.226225][T18808] ip_tables: iptables: counters copy to user failed while replacing table [ 421.500262][T18809] pim6reg: entered allmulticast mode [ 421.567575][T18577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 421.719530][ T5635] Bluetooth: hci4: command tx timeout [ 421.862170][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 422.748641][T18857] syzkaller0: entered promiscuous mode [ 422.748671][T18857] syzkaller0: entered allmulticast mode [ 422.836813][T18577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.854525][T18577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.856137][T18577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.876593][T18577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.017490][T18577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.051000][T18577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.052023][T18577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.080572][T18577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.131441][T18879] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3314'. [ 423.206125][ T5635] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 423.540742][T18577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.662187][T18577] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.789368][ T5635] Bluetooth: hci4: command 0x0419 tx timeout [ 423.814803][T18901] bond1: option resend_igmp: invalid value (32767) [ 423.814830][T18901] bond1: option resend_igmp: allowed values 0 - 255 [ 423.817070][T18901] bond1 (unregistering): Released all slaves [ 423.878999][T13967] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.879114][T13967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.886453][T13967] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.886572][T13967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.611455][T18946] batman_adv: batadv0: Adding interface: veth0 [ 424.611475][T18946] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.611508][T18946] batman_adv: batadv0: Interface activated: veth0 [ 424.666602][T18946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.666629][T18946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.677571][T18946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.677596][T18946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.705929][T18946] batman_adv: batadv0: Interface deactivated: veth0 [ 424.705955][T18946] batman_adv: batadv0: Removing interface: veth0 [ 425.145053][T18577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.367409][T18976] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 425.373227][T18976] team0: Device ipvlan2 is already an upper device of the team interface [ 425.484108][T18991] netlink: 'syz.4.3334': attribute type 4 has an invalid length. [ 425.484136][T18991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3334'. [ 425.519107][T18978] Cannot find set identified by id 3 to match [ 425.604009][T18577] veth0_vlan: entered promiscuous mode [ 425.714444][T18577] veth1_vlan: entered promiscuous mode [ 425.714959][T18978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.869239][ T5650] Bluetooth: hci4: command 0x0419 tx timeout [ 425.964774][T18577] veth0_macvtap: entered promiscuous mode [ 426.008313][T18577] veth1_macvtap: entered promiscuous mode [ 426.086146][T18577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.144078][T18577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.308137][ T142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.368657][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.370208][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.434431][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.455501][T19021] sctp: [Deprecated]: syz.4.3342 (pid 19021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.455501][T19021] Use struct sctp_sack_info instead [ 426.496933][T19021] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 426.547107][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.547135][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.605542][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.605595][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.691923][T19024] Cannot find del_set index 3 as target [ 426.763947][T19030] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 427.030374][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.047671][T19045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.057411][T19045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.068110][T19045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.068314][T19045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.068499][T19045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.068694][T19045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.068879][T19045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.354569][T19054] TC_ACT_REPEAT abuse ? [ 428.220742][T19096] __nla_validate_parse: 58 callbacks suppressed [ 428.220768][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3362'. [ 428.223142][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3362'. [ 428.495224][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3364'. [ 428.525130][T19104] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 428.606384][T19107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3365'. [ 428.606425][T19107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3365'. [ 428.651292][T19107] geneve2: entered promiscuous mode [ 428.747252][T19113] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3368'. [ 428.747432][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 428.747465][T19113] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 428.980028][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 428.985150][T19120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3371'. [ 429.282818][T19126] hsr0: entered allmulticast mode [ 429.282844][T19126] hsr_slave_0: entered allmulticast mode [ 429.282864][T19126] hsr_slave_1: entered allmulticast mode [ 429.283710][T19126] hsr0: entered promiscuous mode [ 429.284575][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3375'. [ 429.285452][T19126] hsr_slave_0: left promiscuous mode [ 429.286758][T19126] hsr_slave_1: left promiscuous mode [ 429.355387][T19126] hsr0 (unregistering): left allmulticast mode [ 429.355437][T19126] hsr0 (unregistering): left promiscuous mode [ 429.410361][T19124] netlink: 'syz.3.3373': attribute type 10 has an invalid length. [ 429.510316][T19124] team0: Port device dummy0 added [ 429.675917][T19145] netlink: 'syz.0.3381': attribute type 2 has an invalid length. [ 429.675944][T19145] nbd: couldn't find a device at index -2147221500 [ 430.563900][T19193] netlink: 'syz.2.3392': attribute type 1 has an invalid length. [ 430.907307][T19211] xt_TCPMSS: Only works on TCP SYN packets [ 430.931668][T19211] tipc: Started in network mode [ 430.931714][T19211] tipc: Node identity ac1414aa, cluster identity 4711 [ 430.931968][T19211] tipc: New replicast peer: 172.20.20.187 [ 430.964854][T19211] tipc: Enabled bearer , priority 10 [ 431.015546][T19211] netlink: 'syz.1.3399': attribute type 1 has an invalid length. [ 431.720750][T19241] Unsupported ieee802154 address type: 0 [ 431.986927][T13347] tipc: Node number set to 2886997162 [ 432.101635][T19251] batadv_slave_1: entered promiscuous mode [ 432.129512][T19249] batadv_slave_1: left promiscuous mode [ 432.453226][T19268] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 432.453251][T19268] netlink: 'syz.2.3418': attribute type 2 has an invalid length. [ 432.693152][T13967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.694042][T13967] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.694085][T13967] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.735922][ T142] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.596900][T19332] __nla_validate_parse: 24 callbacks suppressed [ 433.596922][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 433.665499][T19331] 8021q: VLANs not supported on ip6_vti0 [ 433.677639][T19332] hsr_slave_0: left promiscuous mode [ 433.686891][T19332] hsr_slave_1: left promiscuous mode [ 433.785997][T19336] ip6gre1: entered promiscuous mode [ 433.786022][T19336] ip6gre1: entered allmulticast mode [ 433.810363][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 433.817064][T19339] nft_compat: unsupported protocol 0 [ 433.913032][T19343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3435'. [ 434.201109][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3438'. [ 434.537396][T19387] vxcan2: entered allmulticast mode [ 434.583360][T19389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.583624][T19392] xt_esp: unknown flags DD [ 434.684463][T19397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3446'. [ 434.702513][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 434.724300][T19394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3447'. [ 434.797564][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 434.852471][T19402] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 434.852554][T19402] syzkaller1: Refused to change device type [ 434.876112][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 434.895386][T19412] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 434.904899][T19413] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 434.906743][T19413] syzkaller1: Refused to change device type [ 435.006003][T19410] siw: device registration error -23 [ 435.020644][T19419] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3452'. [ 435.534106][T19438] can: request_module (can-proto-4) failed. [ 435.985619][T19467] bond0: Error: Cannot enslave bond to itself. [ 436.046845][T19467] bridge_slave_0: left allmulticast mode [ 436.046874][T19467] bridge_slave_0: left promiscuous mode [ 436.047098][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.103669][T19467] bridge_slave_1: left allmulticast mode [ 436.103699][T19467] bridge_slave_1: left promiscuous mode [ 436.103921][T19467] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.142716][T19467] bond0: (slave bond_slave_0): Releasing backup interface [ 436.166406][T19467] bond0: (slave bond_slave_1): Releasing backup interface [ 436.194245][T19467] team0: Port device team_slave_0 removed [ 436.207825][T19467] team0: Port device team_slave_1 removed [ 436.209319][T19467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.209342][T19467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.211433][T19467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.211454][T19467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.240533][T19467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.328623][T19472] bond0: Error: Cannot enslave bond to itself. [ 436.366258][T19475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.392802][T19476] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 436.470596][T19495] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 436.877266][T19513] IPVS: set_ctl: invalid protocol: 29 172.20.20.34:20004 [ 437.299344][T19543] netlink: 'syz.4.3484': attribute type 2 has an invalid length. [ 437.299959][ T5650] Bluetooth: hci1: ACL packet too small [ 437.757191][ T6115] IPVS: starting estimator thread 0... [ 437.838021][T19573] IPVS: using max 24 ests per chain, 57600 per kthread [ 438.661784][T19620] __nla_validate_parse: 7 callbacks suppressed [ 438.661808][T19620] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3504'. [ 439.382379][T19650] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 439.395981][T19653] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3510'. [ 439.399236][T19653] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3510'. [ 439.401990][T19653] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3510'. [ 439.445085][T19653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3510'. [ 440.192581][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.724046][T19680] bond1 (unregistering): Released all slaves [ 442.074092][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3530'. [ 442.296973][T19727] Bluetooth: MGMT ver 1.23 [ 442.547793][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3537'. [ 442.548065][T19746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3537'. [ 442.583272][T19746] geneve2: entered promiscuous mode [ 442.583300][T19746] geneve2: entered allmulticast mode [ 443.035267][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3540'. [ 443.035877][T19761] netlink: 'syz.0.3540': attribute type 49 has an invalid length. [ 443.195899][T19765] bond1 (unregistering): Released all slaves [ 443.219928][T19771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3543'. [ 444.069959][T19810] __nla_validate_parse: 68 callbacks suppressed [ 444.069986][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3554'. [ 444.165059][T19810] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3554'. [ 444.405908][T19804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3553'. [ 444.431772][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3557'. [ 444.896088][T19852] openvswitch: netlink: Missing valid actions attribute. [ 444.896126][T19852] openvswitch: netlink: Actions may not be safe on all matching packets [ 444.920748][T19852] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 445.217657][T19868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 445.234607][T19869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3571'. [ 445.499027][T19880] ip_tables: iptables: counters copy to user failed while replacing table [ 445.613562][T19883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 445.669649][T19887] netlink: 'syz.3.3574': attribute type 2 has an invalid length. [ 445.897115][T19893] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.3579'. [ 446.066337][T19905] team0: Device ipvlan0 failed to register rx_handler [ 446.202078][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'. [ 446.250932][T19908] team0: No ports can be present during mode change [ 446.326209][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3583'. [ 446.402347][T19910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3584'. [ 446.791634][T19930] bond1: entered promiscuous mode [ 446.792225][T19930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.821378][T19930] bridge1: entered promiscuous mode [ 446.822128][T19930] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 447.398072][T19963] netlink: 'syz.1.3598': attribute type 3 has an invalid length. [ 447.787570][T19950] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 447.880236][T19950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.882310][T19952] bond2: entered promiscuous mode [ 447.882333][T19952] bond2: entered allmulticast mode [ 447.930931][T19954] macvlan2: entered promiscuous mode [ 447.930959][T19954] macvlan2: entered allmulticast mode [ 447.934769][T19954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.106930][T19951] bond2: (slave veth0_to_bond): making interface the new active one [ 448.106960][T19951] veth0_to_bond: entered promiscuous mode [ 448.107185][T19951] veth0_to_bond: entered allmulticast mode [ 448.116650][T19951] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 448.688328][T20010] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 449.102259][T20032] netlink: 'syz.3.3616': attribute type 2 has an invalid length. [ 449.102287][T20032] __nla_validate_parse: 9 callbacks suppressed [ 449.102302][T20032] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3616'. [ 449.106967][T20032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'. [ 449.204872][T20037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.230997][T20041] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3619'. [ 449.251471][T20032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.253903][T20035] bond3: entered promiscuous mode [ 449.253929][T20035] bond3: entered allmulticast mode [ 449.255372][T20038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3620'. [ 449.255398][T20038] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3620'. [ 449.255418][T20038] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3620'. [ 449.311833][T20040] macvlan2: entered promiscuous mode [ 449.311858][T20040] macvlan2: entered allmulticast mode [ 449.313474][T20040] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 449.363718][T20044] x_tables: unsorted underflow at hook 1 [ 449.364245][T20042] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3620'. [ 449.364263][T20042] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3620'. [ 449.485803][T20049] x_tables: unsorted underflow at hook 1 [ 449.942419][T20068] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3628'. [ 449.965897][T20071] netlink: 'syz.1.3629': attribute type 12 has an invalid length. [ 450.313118][T20084] lo: entered promiscuous mode [ 450.323628][T20084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.389377][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 452.182009][T20170] ip6gre1: entered allmulticast mode [ 452.183697][T20162] lo speed is unknown, defaulting to 1000 [ 452.183788][T20162] lo speed is unknown, defaulting to 1000 [ 452.185040][T20162] lo speed is unknown, defaulting to 1000 [ 452.196091][T20162] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 452.196133][T20162] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 452.196178][T20162] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 452.357091][T20162] lo speed is unknown, defaulting to 1000 [ 452.395833][T20162] lo speed is unknown, defaulting to 1000 [ 452.417580][T20162] lo speed is unknown, defaulting to 1000 [ 452.443404][T20162] lo speed is unknown, defaulting to 1000 [ 452.457162][T20162] lo speed is unknown, defaulting to 1000 [ 452.471756][T20162] lo speed is unknown, defaulting to 1000 [ 452.482525][T20162] lo speed is unknown, defaulting to 1000 [ 452.505507][T20162] lo speed is unknown, defaulting to 1000 [ 452.515150][T20162] lo speed is unknown, defaulting to 1000 [ 452.567444][T20183] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 452.627176][T20186] netlink: 'syz.2.3661': attribute type 97 has an invalid length. [ 452.627208][T20186] netlink: 'syz.2.3661': attribute type 97 has an invalid length. [ 452.659534][T20186] veth1_to_bond: entered allmulticast mode [ 452.706584][T20178] veth1_to_bond: left allmulticast mode [ 453.062131][T20202] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 453.130796][T20202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.276374][T20202] bond4: (slave bridge3): making interface the new active one [ 453.297221][T20202] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 453.309001][T20207] ------------[ cut here ]------------ [ 453.309018][T20207] sp->magic != HWSIM_STA_MAGIC [ 453.309037][T20207] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1d04/0x25b0, CPU#1: syz.0.3669/20207 [ 453.332634][T20207] Modules linked in: [ 453.336704][T20207] CPU: 1 UID: 0 PID: 20207 Comm: syz.0.3669 Not tainted syzkaller #0 PREEMPT(full) [ 453.346211][T20207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.356489][T20207] RIP: 0010:mac80211_hwsim_tx+0x1d04/0x25b0 [ 453.363095][T20207] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 0b 08 00 00 45 0f b6 8d 71 08 00 00 4c 89 ee 67 48 0f b9 3a e9 c4 f4 ff ff e8 9d 04 7a fa 90 <0f> 0b 90 e9 27 f5 ff ff e8 8f 04 7a fa 90 0f 0b 90 48 8b 7c 24 20 [ 453.382844][T20207] RSP: 0018:ffffc9000b8feb60 EFLAGS: 00010287 [ 453.389019][T20207] RAX: ffffffff874f1133 RBX: 0000000000000000 RCX: 0000000000080000 [ 453.397038][T20207] RDX: ffffc90010d0a000 RSI: 00000000000001c4 RDI: 00000000000001c5 [ 453.405117][T20207] RBP: ffffc9000b8fecf0 R08: ffff8880236c9c8f R09: 0000000000000000 [ 453.413214][T20207] R10: ffff8880236c9c80 R11: ffffffff874ef430 R12: dffffc0000000000 [ 453.421314][T20207] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff9200171fdb8 [ 453.429399][T20207] FS: 00007feec0a276c0(0000) GS:ffff888123720000(0000) knlGS:0000000000000000 [ 453.438906][T20207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.445542][T20207] CR2: 00007fdb807222b4 CR3: 000000006f85e000 CR4: 00000000003526f0 [ 453.453694][T20207] Call Trace: [ 453.457111][T20207] [ 453.460181][T20207] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 453.465765][T20207] ieee80211_tx_frags+0x3df/0x890 [ 453.470937][T20207] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 453.476613][T20207] __ieee80211_xmit_fast+0xabf/0x2160 [ 453.482150][T20207] ? cfg80211_classify8021d+0x1110/0x1220 [ 453.488087][T20207] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 453.494019][T20207] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 453.499975][T20207] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 453.505783][T20207] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 453.511688][T20207] ? lock_acquire+0x115/0x350 [ 453.516452][T20207] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 453.522790][T20207] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 453.529167][T20207] __ieee80211_subif_start_xmit+0x663/0x1840 [ 453.535314][T20207] ? __lock_acquire+0x747/0x2de0 [ 453.540429][T20207] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 453.546966][T20207] ? ktime_get+0x1f5/0x220 [ 453.549494][T20215] netlink: 'syz.1.3668': attribute type 83 has an invalid length. [ 453.559515][T20207] ieee80211_subif_start_xmit+0xee/0x560 [ 453.565238][T20207] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 453.571606][T20207] ? dev_queue_xmit_nit+0x2d/0xac0 [ 453.576792][T20207] ? dev_queue_xmit_nit+0x95c/0xac0 [ 453.582127][T20207] ? dev_queue_xmit_nit+0x2d/0xac0 [ 453.587680][T20207] dev_hard_start_xmit+0x2cd/0x830 [ 453.592944][T20207] __dev_queue_xmit+0x14d1/0x3920 [ 453.598132][T20207] ? __dev_queue_xmit+0x29b/0x3920 [ 453.603322][T20207] ? __might_fault+0xaf/0x130 [ 453.608184][T20207] ? _copy_from_iter+0x21b/0x1680 [ 453.613276][T20207] ? __pfx___dev_queue_xmit+0x10/0x10 [ 453.618796][T20207] ? __pfx__copy_from_iter+0x10/0x10 [ 453.624258][T20207] ? __pfx_packet_parse_headers+0x10/0x10 [ 453.630192][T20207] ? packet_xmit+0x68/0x330 [ 453.634755][T20207] ? skb_put+0x112/0x210 [ 453.639147][T20207] packet_sendmsg+0x406f/0x5330 [ 453.644101][T20207] ? lock_acquire+0x115/0x350 [ 453.648919][T20207] ? aa_file_perm+0x18b/0x15f0 [ 453.653874][T20207] ? __pfx_packet_sendmsg+0x10/0x10 [ 453.659192][T20207] ? aa_sk_perm+0x6ff/0x8f0 [ 453.663782][T20207] ? __pfx_aa_sk_perm+0x10/0x10 [ 453.668757][T20207] ? aa_sock_msg_perm+0x144/0x210 [ 453.673838][T20207] ? apparmor_socket_sendmsg+0x98/0x360 [ 453.679525][T20207] ? __pfx_packet_sendmsg+0x10/0x10 [ 453.684791][T20207] sock_sendmsg_nosec+0x14e/0x190 [ 453.689970][T20207] sock_write_iter+0x2de/0x3e0 [ 453.694803][T20207] ? __pfx_sock_write_iter+0x10/0x10 [ 453.701305][T20207] ? bpf_lsm_file_permission+0x9/0x20 [ 453.706769][T20207] ? security_file_permission+0x75/0x260 [ 453.712536][T20207] vfs_write+0x612/0xba0 [ 453.716856][T20207] ? __pfx_vfs_write+0x10/0x10 [ 453.721756][T20207] ? __fget_files+0x3a2/0x420 [ 453.726488][T20207] ? __fget_files+0x2a/0x420 [ 453.731213][T20207] ? fdget+0x1ac/0x250 [ 453.735347][T20207] ksys_write+0x150/0x270 [ 453.739803][T20207] ? __pfx_ksys_write+0x10/0x10 [ 453.744725][T20207] do_syscall_64+0x166/0x520 [ 453.749404][T20207] ? trace_irq_disable+0x3b/0x140 [ 453.754487][T20207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.760688][T20207] ? clear_bhb_loop+0x70/0xc0 [ 453.765426][T20207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.772205][T20207] RIP: 0033:0x7feebfb9f559 [ 453.776681][T20207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.796476][T20207] RSP: 002b:00007feec0a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.805074][T20207] RAX: ffffffffffffffda RBX: 00007feebfe25fa0 RCX: 00007feebfb9f559 [ 453.813151][T20207] RDX: 000000000000000e RSI: 0000200000000f80 RDI: 0000000000000006 [ 453.821261][T20207] RBP: 00007feebfc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 453.829312][T20207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.837321][T20207] R13: 00007feebfe26038 R14: 00007feebfe25fa0 R15: 00007fff77d6c6f8 [ 453.845436][T20207] [ 453.848549][T20207] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 453.855860][T20207] CPU: 1 UID: 0 PID: 20207 Comm: syz.0.3669 Not tainted syzkaller #0 PREEMPT(full) [ 453.865291][T20207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.875387][T20207] Call Trace: [ 453.878709][T20207] [ 453.881679][T20207] vpanic+0x26f/0x710 [ 453.885704][T20207] panic+0xc5/0xd0 [ 453.889466][T20207] ? __pfx_panic+0x10/0x10 [ 453.893945][T20207] __warn+0x315/0x4c0 [ 453.897972][T20207] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 453.903316][T20207] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 453.908654][T20207] __report_bug+0x276/0x570 [ 453.913209][T20207] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 453.918547][T20207] ? __pfx___report_bug+0x10/0x10 [ 453.923628][T20207] ? check_stack_access_within_bounds+0xc63/0xf60 [ 453.930111][T20207] ? __lock_acquire+0x747/0x2de0 [ 453.935114][T20207] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 453.940918][T20207] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 453.946273][T20207] report_bug+0x16b/0x220 [ 453.950665][T20207] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 453.956021][T20207] ? mac80211_hwsim_tx+0x1d06/0x25b0 [ 453.961635][T20207] handle_bug+0x9c/0x200 [ 453.966031][T20207] exc_invalid_op+0x1a/0x50 [ 453.970602][T20207] asm_exc_invalid_op+0x1a/0x20 [ 453.975513][T20207] RIP: 0010:mac80211_hwsim_tx+0x1d04/0x25b0 [ 453.981459][T20207] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 0b 08 00 00 45 0f b6 8d 71 08 00 00 4c 89 ee 67 48 0f b9 3a e9 c4 f4 ff ff e8 9d 04 7a fa 90 <0f> 0b 90 e9 27 f5 ff ff e8 8f 04 7a fa 90 0f 0b 90 48 8b 7c 24 20 [ 454.001111][T20207] RSP: 0018:ffffc9000b8feb60 EFLAGS: 00010287 [ 454.007230][T20207] RAX: ffffffff874f1133 RBX: 0000000000000000 RCX: 0000000000080000 [ 454.015244][T20207] RDX: ffffc90010d0a000 RSI: 00000000000001c4 RDI: 00000000000001c5 [ 454.023259][T20207] RBP: ffffc9000b8fecf0 R08: ffff8880236c9c8f R09: 0000000000000000 [ 454.031275][T20207] R10: ffff8880236c9c80 R11: ffffffff874ef430 R12: dffffc0000000000 [ 454.039294][T20207] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff9200171fdb8 [ 454.047309][T20207] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 454.052821][T20207] ? mac80211_hwsim_tx+0x1d03/0x25b0 [ 454.058198][T20207] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 454.063748][T20207] ieee80211_tx_frags+0x3df/0x890 [ 454.068857][T20207] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 454.074515][T20207] __ieee80211_xmit_fast+0xabf/0x2160 [ 454.079999][T20207] ? cfg80211_classify8021d+0x1110/0x1220 [ 454.085782][T20207] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 454.091666][T20207] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 454.097536][T20207] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 454.103362][T20207] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 454.108975][T20207] ? lock_acquire+0x115/0x350 [ 454.113711][T20207] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 454.119850][T20207] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 454.126148][T20207] __ieee80211_subif_start_xmit+0x663/0x1840 [ 454.132282][T20207] ? __lock_acquire+0x747/0x2de0 [ 454.137645][T20207] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 454.144475][T20207] ? ktime_get+0x1f5/0x220 [ 454.148999][T20207] ieee80211_subif_start_xmit+0xee/0x560 [ 454.154698][T20207] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 454.160993][T20207] ? dev_queue_xmit_nit+0x2d/0xac0 [ 454.166175][T20207] ? dev_queue_xmit_nit+0x95c/0xac0 [ 454.171424][T20207] ? dev_queue_xmit_nit+0x2d/0xac0 [ 454.176616][T20207] dev_hard_start_xmit+0x2cd/0x830 [ 454.181844][T20207] __dev_queue_xmit+0x14d1/0x3920 [ 454.186931][T20207] ? __dev_queue_xmit+0x29b/0x3920 [ 454.192090][T20207] ? __might_fault+0xaf/0x130 [ 454.196829][T20207] ? _copy_from_iter+0x21b/0x1680 [ 454.201987][T20207] ? __pfx___dev_queue_xmit+0x10/0x10 [ 454.207416][T20207] ? __pfx__copy_from_iter+0x10/0x10 [ 454.212861][T20207] ? __pfx_packet_parse_headers+0x10/0x10 [ 454.218641][T20207] ? packet_xmit+0x68/0x330 [ 454.223202][T20207] ? skb_put+0x112/0x210 [ 454.227490][T20207] packet_sendmsg+0x406f/0x5330 [ 454.232448][T20207] ? lock_acquire+0x115/0x350 [ 454.237279][T20207] ? aa_file_perm+0x18b/0x15f0 [ 454.242098][T20207] ? __pfx_packet_sendmsg+0x10/0x10 [ 454.247339][T20207] ? aa_sk_perm+0x6ff/0x8f0 [ 454.251902][T20207] ? __pfx_aa_sk_perm+0x10/0x10 [ 454.256800][T20207] ? aa_sock_msg_perm+0x144/0x210 [ 454.261864][T20207] ? apparmor_socket_sendmsg+0x98/0x360 [ 454.267492][T20207] ? __pfx_packet_sendmsg+0x10/0x10 [ 454.272746][T20207] sock_sendmsg_nosec+0x14e/0x190 [ 454.277827][T20207] sock_write_iter+0x2de/0x3e0 [ 454.282646][T20207] ? __pfx_sock_write_iter+0x10/0x10 [ 454.287997][T20207] ? bpf_lsm_file_permission+0x9/0x20 [ 454.293512][T20207] ? security_file_permission+0x75/0x260 [ 454.299211][T20207] vfs_write+0x612/0xba0 [ 454.303515][T20207] ? __pfx_vfs_write+0x10/0x10 [ 454.308922][T20207] ? __fget_files+0x3a2/0x420 [ 454.313643][T20207] ? __fget_files+0x2a/0x420 [ 454.318279][T20207] ? fdget+0x1ac/0x250 [ 454.322419][T20207] ksys_write+0x150/0x270 [ 454.326787][T20207] ? __pfx_ksys_write+0x10/0x10 [ 454.331690][T20207] do_syscall_64+0x166/0x520 [ 454.336312][T20207] ? trace_irq_disable+0x3b/0x140 [ 454.341373][T20207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.347468][T20207] ? clear_bhb_loop+0x70/0xc0 [ 454.352178][T20207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.358094][T20207] RIP: 0033:0x7feebfb9f559 [ 454.362550][T20207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.382449][T20207] RSP: 002b:00007feec0a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 454.390896][T20207] RAX: ffffffffffffffda RBX: 00007feebfe25fa0 RCX: 00007feebfb9f559 [ 454.398920][T20207] RDX: 000000000000000e RSI: 0000200000000f80 RDI: 0000000000000006 [ 454.406949][T20207] RBP: 00007feebfc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 454.414947][T20207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.422949][T20207] R13: 00007feebfe26038 R14: 00007feebfe25fa0 R15: 00007fff77d6c6f8 [ 454.430968][T20207] [ 454.434609][T20207] Kernel Offset: disabled [ 454.438958][T20207] Rebooting in 86400 seconds..