last executing test programs: 2m47.628209283s ago: executing program 4 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320300000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000070900010073797a30"], 0x108}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2m47.363760863s ago: executing program 4 (id=500): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="740000001000010400000006000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d30000000000000000000000024000e00"/69], 0x74}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) shutdown(r1, 0x0) 2m47.091652008s ago: executing program 4 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000001f40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="d4030000", @ANYRES16=r2, @ANYBLOB="000127bd7000fbdbdf258700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000600000040000000060048002f0000006c002a0026240f0c001b2aadab8f65a34437ddaa2bd9e1d5f79a2596fd776c377af5adc09dc3dc1f23892503010c058325400204080211000001ffff00000802110000010e0000000000000008021100000002000000751400002d0d46f61801f648738cafd466f684dc364fe7002a000406ff0800000000ddc99a8a82816010e54bee38271e491b1bd5eca0b0ff3634e16381192c8bf1e0f64ce9693e3628197c194a8b5ad4faa40cd23431618516178947eeaff5f6b5990ee0f7738464399f6993ee57ca9e9ea54791effebb54e83a9438ce4743114813b03bf12870ad3252a1f79a30dfa9c08cf7c547d580a8e1056a3e9da5458cb4a04535edf452e7e002f0525ef3ebd3c387645fb1056b84b15b18f843147a859f13ef7b154f7622ef3e4721bb8fa04c60447e6f86292a853cdeb5f037fad2a9d615e2d0e81d93706503ffce4dbd06ffffffffffff0106e00982056c86000a000600ffffffffffff000036022a003e01030104e00b84b02d1a00000402000000000000002500020017000000060081000000eb7107ff0701ffff1f0c3744fc08e84ebd1e8ac26bde8d5e41140dfbaa2453ba1780b7a5b8839496387d05d5cf30cc561f62fba4109051579005678c4ee02d19bfed1b961c77b06e5456a6c4e43f106f4618ba572b514f0e79f251fa4c640327f5832c0d9fc6e4d553d9d477946a704ad6177392dddc9e13ff69f419f8bdd6f3648f951703e42a010e3fc76af7d8b609fc4721ed45bad40125cf1b2977ac55db676850cd90aeb125a4665a02cd489213b9d6025df60422f5918c4042afa003147e36c0314066b3904adf73d9fe8d4544bd3123ca0122217ffe3750f18f552ee5a510141d3835dc1ebd3648a755f414dff39446cba06d2a2b0224a15081602d378141b16311b39061ae7f025fc0650aff9cd488bcc5684c9caeb46e5da54301243e306ebcf76e1a57a1b01cca4c33b93df732e6e6181dbf668fc571c675856fa13e26c9c2020a7b248d1a3aced111fdfcdd1910eaa6d605407ced83c7f688965ef8fe9c19a501c9588cb119ae98c8330e54cd2b2c51c4a36954630d9a4212907c482e28f610ba3ab95c83fb59be9a82ee68d4fc578c74215da9006f0b94b37d9201385b69f333712ac56afda07035d43a07a094b2449f52a4e4a4d4e496583989038faf61bab91505b5ea6b6852745acf8dfcbfa3621a0c8099c4f92ac5b5f7ff0ccaf55cc0810849b0052ff920549c3b629ec9f9fefac5bec121b2e6d18880e9bc8093e4876804ff0701002a010000000c002a007206030303030303"], 0x3d4}, 0x1, 0x0, 0x0, 0xa0688c8ee18d0205}, 0x4010001) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x64}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0) syz_emit_ethernet(0x2a5, &(0x7f0000000840)={@local, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "a66859", 0x267, 0x21, 0xff, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, {[@srh={0x6c, 0x4, 0x4, 0x2, 0x81, 0x20, 0x9, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x33, 0x6, 0x4, 0x3, 0x9, 0x28, 0x2, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x84, 0xe, 0x4, 0x7, 0x3, 0x10, 0xc, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @loopback]}, @dstopts={0x0, 0x8, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x1, [0x8, 0x3000, 0x7, 0x31, 0x5, 0x0, 0x8d]}}]}, @fragment={0x5e, 0x0, 0x7, 0x0, 0x0, 0x4}, @routing={0x2c, 0x6, 0x0, 0x25, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2]}, @routing={0x0, 0x0, 0x2, 0x88}], {{0x4e22, 0x4e21, 0x4, 0x1, 0xe, 0x0, 0x0, 0x1, 0x4, "c59f8c", 0x40, "c67850"}, "f8650b027fd9eaf04666bd8e5bc1324f20ccc5122f988fd0a3da49808906cf03326e62472f7fd710fab127da2979c63604ff639a956b14a4c4b54e00ec7ed0d4fbc941913f0cc7e037cd597c51d586d8860949ea36ce5a32849b7346fbd6963a2b90df36bc2b454c2ff5f9a16cbd5724ad2c0ce98b265e23fe7c15455464c2d1d2c70faeed3895f16872d19008758c09a4095341209770e716afa9fcfd3520969cfbce12d59f58139114fee0702fd0082c074a1f104fafe28a476cd5dab426ea0cf7cb3f2d6d095cb730b26f0f1055118a98ad0833eca4ba3298967dbbbb13d90588ff2dcd7653"}}}}}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x48000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ccf7000fedbdf2519ab5dbd9800018008000100", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x4000080) 2m46.63958342s ago: executing program 4 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0xfffffff9, 0x100000}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x1}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 2m46.484191517s ago: executing program 4 (id=514): bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)}, 0x10) 2m46.182063196s ago: executing program 4 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmmsg$sock(r0, &(0x7f0000002740), 0x0, 0x4048850) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$inet6(r0, 0x0, 0x0) 2m30.865007269s ago: executing program 32 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmmsg$sock(r0, &(0x7f0000002740), 0x0, 0x4048850) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$inet6(r0, 0x0, 0x0) 2m30.355393992s ago: executing program 2 (id=676): ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91c76b948342585053b9c13865039d27ed74f633c0778fe63f9a25eaac6b501d68cb8b80339fd4da7b19790a921da91d25f12c6c304d3fc9a8ff16c786fa88aa9da82b4ec317f845e12493d04394ea1b862fedf710d1817cb1a7cd4f8b59bd4287e0f681901c0814f5f39b09f27b2341d0234bd7745828d02aa212b59b7bb3ccf50d63e63d4af914d9b6ef16cb49f81b744f06574875d9afb6daea9163eb4d0f0f76aa99b49fe7fd33b1e15e51ae684cc18ac1ffe14a0e83408e9ed11ea191082c9f27b4e69bd79f34aa27c5797e5963efe2797812302134724c000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x6, 0x2, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xa, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r2, @ANYBLOB="000828bd7000ffdbdf250a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0xbd400dc7835d06cf) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2263}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, 0x7, 0x4, 0x5, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x7}, [@nested={0x22, 0x158, 0x0, 0x1, [@nested={0x4, 0x43}, @typed={0x8, 0x20, 0x0, 0x0, @u32}, @nested={0x4, 0xb0}, @nested={0x4, 0xc3}, @nested={0x4, 0x84}, @generic="8d71", @nested={0x4, 0xf3}]}, @generic="9120af7681e6afca4d61211af002a1986b26154ee716167c7bc8b5c6bf230bdb879df839b37530b1411b2d9d8fdda6e9d597df30b00e1ed87cb7d9b5cf91c84b9f195f67d0289327ee79184bf4aaf0567087054a6cde4ba85263ccd28904bd2264aef2e29f952398e123fdab797e63fdc643cefe8369a82de6b8fa6ded318aafd2ea4106de20038ceb13a0b301fd2cd1d17c5b8984574e0958d0e51c7277e52826ec241d4505446361597cb7"]}, 0xe4}, 0x1, 0x0, 0x0, 0x4080}, 0x14) 2m30.220604118s ago: executing program 2 (id=678): listen(0xffffffffffffffff, 0x10040) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x2000c881) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000000)="1c99f444332c9310ae65b5ce3c5965f0b9c6a683756d31ccbf4aac6e4ee9c78b4c2d20e5141b74454f05e075234ff1d7f5e496954ededfb57d0ef33d0a99a99f082ceab4898aa88127cf7e93c6caec", 0x4f}, {&(0x7f00000000c0)="9e19da4f1b13df3f4ee6393390f2c74eed5470fa4a36fad87f6e13dc", 0x1c}, {&(0x7f0000000180)="446a200b7abd72117ccb91221493ce5363ee85d8c62c7b8953c0442c99622616d0450baf881ed762805b94a3426d84d0cf09f702bef91b20620fddcbdc6e3a5f9d0b5bfebe2ac5e9db76", 0x4a}, {&(0x7f00000003c0)="f9318062f1b2182db0e03e5d33d80f4f0557b9fcd7057f27cfea7d13147c397b60f8da8c1f57ba1d1b1cb4d59be839", 0x2f}, {&(0x7f0000000980)="b6f5e00cb5f9a02db1581ba7c43036c785b8d2ff3c81275ae750662cc2fb4d1b4242ec3924e4c2506080c15a478ff45490cb9dad9c47b619329c494bb2da00bd1b532758d9dc34359b041f2d4934ca362fc8aa71f23e173350f343722467e68e98c62fdaccf03e9410e9805efdb20959c96606ad0c436d02e5d8ffe195fe4d3496f387e0c4c2dc3d5d5e6945b49ded9a4db18209c42c77a57cb7443eac035892e99ffbb966538ec4e25d088c66fe5601301c91c106d927321c1076a8b29a166b41f50a465b0ea8df26b1ab3a097624942e5bd81d9dc09774b044ee66c6bc14a272e5ee51b361f4416b48bd44b9850e1e38134ee66836c372de16cf8a006947bd3dbb6cec50cf2675d5bd3b78242fe031a1f02970fe7d478e81225365ddbe09b636989481950be56bc4075be1e9340ccae7d46400ccf237253fe5588886c2184715d5f83710c35e875f3d4cd26a8a3c8118afd66ac65eac033e9207de2764542c460c9386e02c9db43fabf1029de951c1056c3afa19b6df234869c026104dd3fc9bd7a3020b3f0c166023bb9cb18f30cd9687a59f0d75a21b9a91377894b9f4a79625b602319416f5b991347eba0cfb331e08f7b5d7817042997d4541915618e6275fe4d19c6c30e3420e60f1c30de95e069c6314e867c510583bba1630f8cee193a98c0143e291752973b64f9046036d190708cee3980de320da40934246bcbb1c73ca0b74a60ea0bdf2b8bc3cb7db006e1d25c1cf887262b3defbf2520cefed1ff7029dd95348786174a3c0749ebbcc55967501913fe1df4b290b62e0142f157f249d9296551cc46b21649a00c66c0de91586c840e77f4172bd4e9c73", 0x25d}], 0x5}, 0x4000841) 2m30.168560733s ago: executing program 2 (id=679): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m30.105690474s ago: executing program 2 (id=680): socket$inet6_udp(0xa, 0x2, 0x0) close(0x4) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r5, 0x2, 0x9d7e, 0x6, 0x98a, 0x8, 0x38ae, 0x8, {r5, @in6={{0xa, 0x4e00, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, 0x2, 0x7, 0x3, 0x8, 0x3}}, &(0x7f00000003c0)=0xb0) (async) close(0x4) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000200)=""/31, &(0x7f0000000240)=0x1f) (async) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2m29.673508129s ago: executing program 2 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x48010) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2m29.311246164s ago: executing program 2 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x104}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) close(0x3) 2m14.197350184s ago: executing program 33 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x104}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) close(0x3) 3.080216489s ago: executing program 3 (id=2313): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611970000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r0, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xff7f}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x20, r2, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x138, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x800, 0x2b}}}}, [@NL80211_ATTR_IE={0x23, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x200, 0x3, 0x0, 0xb6, 0x0, 0x1, 0x1, 0x1}, 0x6, 0xfffffffe, 0x6}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE={0x23, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa1, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x9d}}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_IE={0x80, 0x2a, [@fast_bss_trans={0x37, 0x7a, {0x76, 0x3, "37125e146b0aa8bb68dc7bd5f88084ea", "90f75938effc561349e5948fc4330b858a386333ba26580d7e4f222a56dcc15c", "3afa7cccb4d90150ef8eead25dc3a72b19d200cedff8239e6c07a6ccc7ba3f6a", [{0x1, 0xf, "e6900657173565b6ceec4ff258eb56"}, {0x2, 0x4, "f3da99dd"}, {0x2, 0xf, "6f2e674543fd783db0ab85c57504d0"}]}}]}, @NL80211_ATTR_IE={0x40, 0x2a, [@measure_req={0x26, 0x11, {0x80, 0x0, 0x0, "e35a9a45bc41481d91e08c636a58"}}, @chsw_timing={0x68, 0x4, {0x3, 0x7}}, @cf={0x4, 0x6, {0x5, 0xd, 0x6, 0x6989}}, @cf={0x4, 0x6, {0xd, 0x2, 0x3, 0x3}}, @chsw_timing={0x68, 0x4, {0x5, 0xffb3}}, @ibss={0x6, 0x2, 0x8}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x1}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000004c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c0001007061796c6f616400140000001000010000000000000000000000000a"], 0x94}}, 0x0) 2.873089911s ago: executing program 3 (id=2316): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@udp, 0x1}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003600)={0x34, r3, 0x51b, 0x7, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1}, 0x60) 1.921143935s ago: executing program 1 (id=2322): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4) 1.911890105s ago: executing program 3 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r7, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x220, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x5ecd, 0x59e0, 0x7, 0xffff, 0x826d, 0x16e, 0x7]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x24, 0x6c, 0xb, 0x9, 0x1, 0x30, 0x0, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x18]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x24, 0x4, 0x4, 0x48, 0x3, 0x18, 0xc, 0x18, 0x3, 0x4, 0xb, 0x24, 0x6, 0xb, 0xb, 0x0, 0xb, 0x4, 0x60, 0xb, 0x30, 0x3, 0x60, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x1000, 0xfff7, 0x2, 0x11, 0x1ff, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x6c, 0x12, 0xb, 0x30, 0x6c, 0x16, 0x1b, 0x24, 0x5, 0x4, 0x36, 0x36, 0x9, 0x5, 0x16]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x3}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x9}, {0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x6, 0x6}, {0x6, 0x2}, {0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x9, 0x7, 0x3, 0x1, 0x6, 0xf96d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffd5, 0x0, 0x3, 0x3, 0x80, 0x6, 0x4, 0x9]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x4, 0x1, 0x8, 0x3, 0x5, 0xb0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x2d, 0x2, 0xb, 0x9, 0x6c, 0x9, 0x1, 0x24, 0xc, 0x18, 0x1, 0x1b, 0x36, 0x7b, 0x16, 0x5, 0x5, 0x16, 0x48, 0x5, 0x6c4ef21e07ea17a9, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0xa}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x5, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x5, 0x7}, {0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x2, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x7}, {0x5, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x0, 0x9, 0x1000, 0xfe00, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xec85, 0x2, 0x7, 0x101, 0x800, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x6c, 0x1b, 0x5, 0x18, 0xb8aa8dfd3cbc7738, 0x2, 0x8, 0x24, 0x18, 0x2, 0xb, 0x1, 0xc, 0x24, 0x2, 0xb, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x7, 0xb7d6, 0x9, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6d, 0x3, 0x30, 0x1, 0x18, 0x18, 0x12, 0x36, 0x36, 0x5, 0x12, 0x16, 0x60, 0xb, 0x9, 0x30, 0x77, 0x24, 0x5, 0x60, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x6, 0x8, 0x2, 0x3, 0x5, 0x401]}}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4) (async) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000340)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000009a0085060000000000000000000000007357c187b4da8ef240e0cbcdb01a8f359505e9e7b9ad46bb4b5a0875565ade0c649b270ef94b5a76c40ccd7b7cf1577d71c546661f98aa159af42f32ade80c93b8d7b9a622cc484ff4bf68ed8b829c7a7cf07eb0c799c28febea22645281282238fc91daa24109d3007e5b83", @ANYRES32=r3, @ANYRES8=r1, @ANYRES32=r3, @ANYRES8=r1, @ANYRES32=r0, @ANYRES8=r9, @ANYRES64=r9], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00fbdbb23d9763b0921610cafff1a914dd43aa341d5f30707fc5a19b4ce94327066793352417c0f7c6e4555b6f05d90000000000000000c5e2b19d02db20dab2375f553daf2d99372c3dfacbfe8dcc05fe10651f174e7bab47c9159e7ecf35a96a73f1d7708ca59aed190324958090523534c697a5e6f9962623d401e5d60c77aa", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', r3, 0x10, 0x8700, 0x2, 0x6, {{0x19, 0x4, 0x1, 0xe, 0x64, 0x67, 0x0, 0xef, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x13, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @local]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x9, [@local, @multicast2, @empty, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @local]}, @generic={0x83, 0x10, "190fb1aab48742fdfc16362ac72a"}, @end]}}}}}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@newlink={0x70, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @remote}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_VERSION={0x5, 0x6, 0x9}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x70}}, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.815441072s ago: executing program 1 (id=2326): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) bind$inet6(r0, 0x0, 0x0) (async) bind$inet6(r0, 0x0, 0x0) 1.655661912s ago: executing program 3 (id=2329): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r4, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="c6fa0c8ffb5621d8ead77b984f04aa494410664310589a8ff5b8ae6484dcfc8d260929a59c85bc5d21eb23464df0f3b36d182aa1b391c1419a56", 0x3a) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) bind$can_raw(r6, &(0x7f0000000480)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000000), 0x4) sendmmsg$alg(r5, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20044881) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000140)=0xffff, 0x4) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}], 0x2}, 0x0) 1.600730077s ago: executing program 1 (id=2331): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) 1.235710421s ago: executing program 1 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0xfa39, {{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0x1}}}, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0xfa39, {{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0x1}}}, 0x88) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) (async) 1.136132834s ago: executing program 3 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xe067d064e23ae3d0}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe2, 0x79, 0x4, 0x1, 0x1, 0x7, 0x4a}}, {0x4}}]}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0x12, 0xd, 0x0, 0x7, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x5, 0xa5e2, 0xff, 0x0, 0xe13, 0x1, 0x1}}, {0x6, 0x2, [0x7d7]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000000)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x103, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="0d968031314a067fda358a41ac51fb371629d502323df993c2452d331195618ea0a0eeca205e2669b1e7945391f9bd33ba4ea861c0df5933a3c23a3c35e292e1a33032a1074080714d25f33ad90f630929f3b2c54cdb15c8cf3a5917d2147857ac7e9e07534d7087b5471818af3d5d6038575467a225a4f522feea7182"}, 0x99) 1.017112741s ago: executing program 1 (id=2337): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x5, 0x80000, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$igmp6(0xa, 0x3, 0x2) accept$inet6(r3, 0x0, &(0x7f0000000000)) 785.807619ms ago: executing program 6 (id=2340): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}, {0x0, 0x700}, {&(0x7f0000000280)='4', 0x1}], 0x3}, 0x804) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=0xffffffffffffffff, 0x16, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, r0, 0x1f, 0x10, r0, @void, @value=r0, @void, @void, r3}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) openat$cgroup_ro(r2, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) 780.84618ms ago: executing program 1 (id=2341): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000010000050900010073797a30000000002c000000030a01010000000000000000010000800900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000400001800c00010062697477697365003000028008000340000000020800014000000002080002400000001708000240000000070c000480"], 0x114}, 0x1, 0x0, 0x0, 0x200c4}, 0xc044) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="40574c060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x840) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="3400000013000100000010000000000007000000ff3aaad9299bd24621499042634e88ed0d0ad7294ad0f4576949bf900aa75a19a17b60b2568185a8656c1c270b12cd9919ad8d8f3dc416415a43100e7078715360ae3d23c90734e3a3dff6cce3cdebd26189d9af17f5463dd4d6f3b67b5443e7e8ce4b5b", @ANYRES32=r11, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="7108ad935000030000000000fbe2", @ANYRES32=r9, @ANYBLOB="01000000a4100000140012800b00010067656e6576650000040002801c001a8018000a8014000700fc0200"/56], 0x50}, 0x1, 0x2}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b36, &(0x7f0000000080)={'wlan1\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x11, 0x6}) 737.125334ms ago: executing program 5 (id=2342): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'netpci0\x00', {0x5}, 0x4}) 674.347142ms ago: executing program 6 (id=2344): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async, rerun: 64) pipe(&(0x7f0000002740)) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000200), 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080c1}, 0x44041) 651.209205ms ago: executing program 5 (id=2345): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/115, &(0x7f0000000140)=0x73) recvfrom$l2tp6(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x40000101, &(0x7f0000001180)={0xa, 0x0, 0x0, @mcast2}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000011c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001200)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001240)={r3, 0x10000}, &(0x7f0000001280)=0x8) r4 = accept(r1, &(0x7f00000012c0)=@rc, &(0x7f0000001340)=0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x88, r5, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x637a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4008811) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x100) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000001640)={0xa, 0x0, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd, 0x3}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001680)={r2, 0x20000000}, &(0x7f00000016c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001700)={r7, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001740)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001780)={r7, 0x6, 0x28}, 0xc) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) bind$l2tp6(r0, &(0x7f00000017c0)={0xa, 0x0, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1, 0x4}, 0x20) sendto$inet(r1, &(0x7f0000001800)="7e231a9b6ac194b1aa072404666b3de49717562030a502950fc35693fcd0688c032045", 0x23, 0x4004080, &(0x7f0000001840)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001880)=0xe, 0x4) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000001940)={0x3, 0x400, 0x6, 0x1, 0x7fffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000001a80)={r1, &(0x7f0000001980)='TIPCv2\x00', 0x200840, &(0x7f00000019c0)={@align=0x2, {0xdb9, 0x8001, 0x7fff, 0x1}}, 0x5, &(0x7f0000001a00)={@_ha_fsid}, &(0x7f0000001a40)=0x8}) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000001b40)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x2}}, 0x10) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000001b80)={0xcc, 0x2, 0x4, 0x2, 0x4}) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000001bc0)={0x13, "4d2d5ac297f19327222b252cf604dd8d1c5e9ae45b5feb99ddfa6cd7d1cc3147b3cce20bcdabe6304ec9b1218ca07f66feeb44308c10fba79cd718b0a434bd6d590f35953de39d834b8bd728dff8f351133da13f99bc3a36bbc731a19b7c7c4232e4f4bd4d98b7a2698cb8ad19855040da7ce48995b93f2310099f708cee5c13"}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r1) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10440c02}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x77}, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008814}, 0x20040000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x60, 0x0, 0x308, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000000) 556.134598ms ago: executing program 0 (id=2346): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005142106fdffffff00000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @random="e278c8b9b5d9", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty=0xe0000001}, {0x8000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140b, 0xddc7ec68a2052e43, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r3, 0x0, 0x0) 550.896662ms ago: executing program 6 (id=2347): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) getsockopt(r0, 0x10, 0x8, &(0x7f00000000c0)=""/88, &(0x7f0000000140)=0x58) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 548.032824ms ago: executing program 5 (id=2348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000feffffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) 425.011142ms ago: executing program 0 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x13c, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x801}, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b8000000d5"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x896518ea8b71bde0}, 0x90) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000000c0)) 422.539017ms ago: executing program 6 (id=2350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003cf5130c084902f300000061125000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r1, 0x1, 0x3d, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000", 0x36}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x2, 0x80805, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xfffffffffffffffc}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x5}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffff}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x14, 0x10, 0x0, 0xfffffd5a}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001a40)=ANY=[@ANYRESHEX=r4, @ANYBLOB="2f0000001400000004", @ANYRES32, @ANYRESHEX=r8, @ANYRESOCT, @ANYRESHEX=r6, @ANYRES32=r5], 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r11, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4044844) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0908060000002dbd704005000000040003008000000007000000000000000800000000000000bb6e000000000000"], 0x30}}, 0x4040800) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r9, 0x111, 0x5, 0x9480, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 420.029243ms ago: executing program 5 (id=2351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 363.454041ms ago: executing program 0 (id=2352): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2f) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x20000, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x1}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv4_deladdr={0x44, 0x15, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x1, 0x4, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LABEL={0x14, 0x3, 'veth1_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48011}, 0x4001) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6a}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x20008800) 297.227959ms ago: executing program 0 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c0000109500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(r5) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x66, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x0, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004444}, 0x8000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) close(0xffffffffffffffff) 196.335503ms ago: executing program 6 (id=2354): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x18000000000002a0, 0xfea7, 0xfffffffffffffdea, &(0x7f00000004c0)="b9fe030768045c8c989a14f088a865f986dd", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r5, 0x0, 0x0, 0x40002062, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00030006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 195.299015ms ago: executing program 3 (id=2355): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800040000060000084ea07ffd3a40f2"], 0x30}}, 0x0) 194.650704ms ago: executing program 0 (id=2356): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8f, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x8000, 0xffffff00, {{0x10, 0x4, 0x0, 0x24, 0x40, 0x68, 0x0, 0xb, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x83, 0x5, "0c58d1"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xc8, [@multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @multicast1, @loopback]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x53, &(0x7f0000000280)=""/83, 0x40f00, 0x2a, '\x00', r3, 0x25, r1, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xf}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000600)=[{0x1, 0x3, 0xe, 0x8}, {0x0, 0x2, 0xd, 0x3}, {0x3, 0x2, 0xe, 0xb}, {0x2, 0x9b, 0x10, 0xc}, {0x2, 0x1, 0xa, 0x4}], 0x10, 0xe}, 0x94) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcf}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x29, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) 123.967721ms ago: executing program 5 (id=2357): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000011000d0927bd7000668c3cbac73648113e", @ANYBLOB], 0x28}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000480)=""/245, 0x41000, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x3, 0xf, 0x3, 0x1a}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0xa, 0x1}, {0x4, 0x3, 0xf, 0x2}], 0x10, 0x74647a47}, 0x94) (rerun: 64) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async, rerun: 64) openat$cgroup(0xffffffffffffffff, &(0x7f0000000980)='syz0\x00', 0x200002, 0x0) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4, 0x2, 0x10}, &(0x7f0000000240)=0xc) (async, rerun: 32) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async, rerun: 32) unshare(0xc020400) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 107.800033ms ago: executing program 0 (id=2358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 962.415µs ago: executing program 6 (id=2359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x24, 0x2, 0x1, 0x2, 0x200, 0x7ff}, {0x5, 0x0, 0xf, 0x7ff}, 0x6, 0x1aec, 0xf39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd71f3c2e6ceb9ec4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x1000, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020029bd7000fcdbdf25260000000c0099000400002d1fc4ebc158801f5b87451d00430000000a00060050505050505000000ff200b42b87c314abeb3cd7de25000400af009e1ecc19f4e24b55cc6e28ffacdfc3f1b81b496454f4871fd620caa6225f566b40cd3f3eb00be302ddad295389069d60210d65564f1a79e0803b1ceca60ff3150517894a9c50afce73ad53e15b110f8fa9c19e4f11c562682d8e99c5155213d874d126f77dde06597bbe5796fab05b75862ec188287a28e18da77e9e2f80f0deb970815f7ffffdb3bc40fe11a7cabafe01fb30e3c5a983e32cec477ecafcc816cb1639ac2c78ea7ff37f49bd"], 0x40}, 0x1, 0x0, 0x0, 0x4884}, 0x40000) close(r3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="a65cefce49853809fc276cddfa70215150b0db97179081f1819aa074f082f14694b03ffb2dfb627e9bf83e2313c232db347ff558d5437f0838b0fb749704b2ca470637fdb93f57684309917c8edd2453944d97f877414c63f0031d3ac0887579301d198c53388b541fd42ac4a697bb6a17559ca89af58e8d432b132b1519d13d96b54e9c2c6746580ee91cc23449cbc4015bae26af3f9f38def227c87684bde825"], 0x44}}, 0x0) 0s ago: executing program 5 (id=2360): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f00000002c0)) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2d, 'cpuacct'}, {0x0, 'pids'}]}, 0xf) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000200001030000000000000000020018000000000b1f00000008000100ffffffff08000b000600000062fd17004e204e23"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21006, 0x1301}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa0d}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f00000001c0)={{0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'sed\x00', 0x8, 0x3, 0x6f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x10000, 0x7, 0x0, 0x5}}, 0x44) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): [ T6356] __x64_sys_sendmsg+0x1b1/0x290 [ 105.529303][ T6356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.529348][ T6356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.529377][ T6356] do_syscall_64+0x174/0x580 [ 105.529400][ T6356] ? trace_irq_disable+0x3b/0x140 [ 105.529424][ T6356] ? clear_bhb_loop+0x40/0x90 [ 105.529447][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.529466][ T6356] RIP: 0033:0x7f82aab9de59 [ 105.529483][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.529499][ T6356] RSP: 002b:00007f82aba87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.529519][ T6356] RAX: ffffffffffffffda RBX: 00007f82aae25fa0 RCX: 00007f82aab9de59 [ 105.529533][ T6356] RDX: 0000000004000004 RSI: 0000200000000600 RDI: 0000000000000003 [ 105.529545][ T6356] RBP: 00007f82aba87090 R08: 0000000000000000 R09: 0000000000000000 [ 105.529556][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.529567][ T6356] R13: 00007f82aae26038 R14: 00007f82aae25fa0 R15: 00007fffdc4b43c8 [ 105.529598][ T6356] [ 105.871029][ T6369] netlink: 48 bytes leftover after parsing attributes in process `syz.3.151'. [ 105.938487][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'. [ 105.975752][ T6374] syzkaller1: entered promiscuous mode [ 105.996099][ T6374] syzkaller1: entered allmulticast mode [ 106.019229][ T6362] syzkaller0: entered promiscuous mode [ 106.038601][ T6362] syzkaller0: entered allmulticast mode [ 106.054373][ T6381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.151'. [ 106.299323][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 106.714921][ T6391] ipvlan2: entered allmulticast mode [ 106.727862][ T6391] batadv_slave_1: entered allmulticast mode [ 106.744115][ T6391] batman_adv: batadv0: Adding interface: ipvlan2 [ 106.760087][ T6391] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.789491][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.800338][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.818304][ T6391] batman_adv: batadv0: Interface activated: ipvlan2 [ 106.827040][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.161'. [ 106.975441][ T6414] x_tables: unsorted underflow at hook 2 [ 107.599243][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.608316][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.941541][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.974897][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.274696][ T61] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.305867][ T61] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.338247][ T61] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.375154][ T61] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.409718][ T61] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.433830][ T61] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.463147][ T61] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.481005][ T61] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.694146][ T6491] netlink: 'syz.0.178': attribute type 83 has an invalid length. [ 108.835342][ T6491] bond2: entered promiscuous mode [ 108.841474][ T6514] netlink: 'syz.4.183': attribute type 14 has an invalid length. [ 108.849530][ T6491] bond2: entered allmulticast mode [ 108.858573][ T6514] netlink: 'syz.4.183': attribute type 13 has an invalid length. [ 108.860436][ T6491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.898982][ T6512] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 108.912902][ T6512] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 108.944954][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.399036][ T6544] __nla_validate_parse: 11 callbacks suppressed [ 109.399078][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 109.438368][ T6544] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 109.931868][ T6578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'. [ 110.035341][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 110.067610][ T6581] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 110.106218][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.195'. [ 110.168558][ T6581] geneve2: entered promiscuous mode [ 110.190205][ T6581] geneve2: entered allmulticast mode [ 110.223017][ T6595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.248720][ T6665] batadv_slave_1: entered promiscuous mode [ 111.284705][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 111.311399][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 111.345822][ T6665] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.354868][ T6664] netlink: 'syz.0.217': attribute type 5 has an invalid length. [ 111.385983][ T6662] batadv_slave_1: left promiscuous mode [ 111.393985][ T6668] syzkaller0: entered promiscuous mode [ 111.402061][ T6668] syzkaller0: entered allmulticast mode [ 111.434776][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 111.615930][ T6698] netlink: 'syz.1.226': attribute type 3 has an invalid length. [ 111.690267][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 111.699355][ T6701] netlink: 'syz.2.227': attribute type 5 has an invalid length. [ 111.708798][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'. [ 111.783240][ T6701] geneve2: entered promiscuous mode [ 111.813830][ T6701] geneve2: entered allmulticast mode [ 111.815696][ T6704] netlink: 'syz.1.228': attribute type 83 has an invalid length. [ 111.855018][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 111.878548][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 111.914919][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 111.953089][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 111.956164][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 112.534106][ T6737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.694909][ T6755] netlink: 'syz.2.243': attribute type 3 has an invalid length. [ 112.743222][ T6758] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 112.756661][ T6755] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 113.693198][ T6811] team0: Device ipvlan2 failed to register rx_handler [ 114.085316][ T6836] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 114.085316][ T6836] Please contact the netfilter-devel mailing list or update your nftables rules. [ 114.275975][ T6843] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 114.367341][ T6843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.438621][ T6852] xt_hashlimit: size too large, truncated to 1048576 [ 114.524357][ T6860] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 114.662008][ T6866] __nla_validate_parse: 9 callbacks suppressed [ 114.662026][ T6866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.271'. [ 115.009834][ T6875] syzkaller0: entered promiscuous mode [ 115.040961][ T6875] syzkaller0: entered allmulticast mode [ 115.086529][ T6880] netlink: 'syz.2.277': attribute type 3 has an invalid length. [ 115.144440][ T6885] syzkaller0: entered promiscuous mode [ 115.159508][ T6885] syzkaller0: entered allmulticast mode [ 115.327609][ T6893] pimreg: entered allmulticast mode [ 115.486607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.608712][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.643144][ T6906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.729818][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 115.932937][ T6930] tipc: Started in network mode [ 115.942954][ T6922] sctp: [Deprecated]: syz.1.288 (pid 6922) Use of int in max_burst socket option. [ 115.942954][ T6922] Use struct sctp_assoc_value instead [ 115.975085][ T6930] tipc: Node identity 96848ce3c90c, cluster identity 4711 [ 116.006611][ T6930] tipc: Enabled bearer , priority 0 [ 116.106504][ T6930] tipc: Disabling bearer [ 116.158839][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 116.161409][ T6942] netlink: 108 bytes leftover after parsing attributes in process `syz.1.294'. [ 116.188475][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.290261][ T6945] netlink: 52 bytes leftover after parsing attributes in process `syz.4.295'. [ 116.362614][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.381595][ T6951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.420146][ T6945] xt_hl: Unknown Hop Limit match mode: 206 [ 116.426636][ T6945] netlink: 52 bytes leftover after parsing attributes in process `syz.4.295'. [ 116.518945][ T6955] lo speed is unknown, defaulting to 1000 [ 116.526477][ T6955] lo speed is unknown, defaulting to 1000 [ 116.536128][ T6955] lo speed is unknown, defaulting to 1000 [ 116.545573][ T6955] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.587919][ T6955] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.622662][ T6955] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.650816][ T6956] Illegal XDP return value 4294967282 on prog (id 51) dev syz_tun, expect packet loss! [ 116.664048][ T6962] openvswitch: netlink: Missing key (keys=40, expected=100) [ 116.699697][ T6956] ±ÿª¨úrBº“: renamed from lo (while UP) [ 116.724701][ T6955] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.771278][ T6955] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.983025][ T6955] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 117.024784][ T6955] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 117.052662][ T6955] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 117.088444][ T6955] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 117.088790][ T6982] netlink: 260 bytes leftover after parsing attributes in process `syz.2.306'. [ 117.134980][ T6955] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 117.262489][ T6989] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 117.329137][ T6993] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 117.385781][ T6993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.430978][ T7003] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20001 [ 117.433908][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 117.582904][ T5743] hid-generic 0005:4C4C:100F.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 117.601203][ T7005] ipvlan2: entered promiscuous mode [ 117.966225][ T7035] x_tables: unsorted entry at hook 3 [ 118.186363][ T7054] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 118.407166][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 118.502831][ T7069] syz_tun: entered allmulticast mode [ 118.619486][ T7073] netlink: 'syz.4.330': attribute type 9 has an invalid length. [ 118.650182][ T7073] netlink: 'syz.4.330': attribute type 6 has an invalid length. [ 118.669097][ T7073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.871565][ T7085] x_tables: duplicate underflow at hook 1 [ 118.973400][ T7085] syzkaller0: entered promiscuous mode [ 118.989717][ T7085] syzkaller0: entered allmulticast mode [ 119.153156][ T7097] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 119.181572][ T7097] netlink: 'syz.1.334': attribute type 21 has an invalid length. [ 119.197367][ T7097] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.210256][ T7097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.217572][ T7097] IPv6: NLM_F_CREATE should be set when creating new route [ 119.224942][ T7097] IPv6: NLM_F_CREATE should be set when creating new route [ 119.232231][ T7097] IPv6: NLM_F_CREATE should be set when creating new route [ 119.272755][ T7066] syz_tun: left allmulticast mode [ 119.717414][ T7116] __nla_validate_parse: 5 callbacks suppressed [ 119.717432][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.338'. [ 119.777627][ T7123] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 119.785966][ T7116] veth1_macvtap: left promiscuous mode [ 119.799048][ T5743] IPVS: starting estimator thread 0... [ 119.933818][ T7126] IPVS: using max 30 ests per chain, 72000 per kthread [ 120.275028][ T7149] trusted_key: syz.1.345 sent an empty control message without MSG_MORE. [ 120.462242][ T7158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.348'. [ 120.789868][ T7169] syzkaller0: entered promiscuous mode [ 120.803007][ T7169] syzkaller0: entered allmulticast mode [ 121.018104][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 122.590356][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.599373][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.692558][ T7209] bond0: (slave gre0): refused to change device type [ 122.912824][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 123.109586][ T7230] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 123.140897][ T7230] bond1 (unregistering): Released all slaves [ 123.182010][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 123.346918][ T7253] netlink: 256 bytes leftover after parsing attributes in process `syz.4.373'. [ 123.490641][ T7259] netlink: 76 bytes leftover after parsing attributes in process `syz.1.375'. [ 123.543061][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 123.676327][ T7263] block nbd3: Unsupported socket: should be TCP or UNIX. [ 123.795492][ T7270] xt_hashlimit: size too large, truncated to 1048576 [ 123.935208][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 124.008903][ T7278] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 124.722020][ T7322] atomic_op ffff88807b951198 conn xmit_atomic 0000000000000000 [ 124.783561][ T5732] IPVS: starting estimator thread 0... [ 124.803479][ T7325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.872875][ T7336] veth1_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 124.920091][ T7330] IPVS: using max 29 ests per chain, 69600 per kthread [ 126.044795][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 126.159115][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 126.274729][ T7379] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 126.293377][ T7379] bond4 (unregistering): Released all slaves [ 126.394382][ T7392] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 126.438791][ T7392] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 127.105378][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 127.137338][ T7429] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 127.145405][ T5732] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 128.055401][ T7490] netlink: 'syz.1.438': attribute type 19 has an invalid length. [ 128.084340][ T7492] veth1_macvtap: left promiscuous mode [ 128.098543][ T7490] netlink: 56 bytes leftover after parsing attributes in process `syz.1.438'. [ 128.208389][ T7494] syzkaller0: entered promiscuous mode [ 128.222495][ T7494] syzkaller0: entered allmulticast mode [ 128.236477][ T7501] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 128.310503][ T7504] netlink: 'syz.3.443': attribute type 8 has an invalid length. [ 128.335384][ T7506] netlink: 524 bytes leftover after parsing attributes in process `syz.2.442'. [ 128.605263][ T7523] macvlan0: entered promiscuous mode [ 128.629189][ T7521] syzkaller0: entered promiscuous mode [ 128.652918][ T7521] syzkaller0: entered allmulticast mode [ 128.711256][ T7527] netlink: 56 bytes leftover after parsing attributes in process `syz.0.449'. [ 128.898219][ T7532] can: request_module (can-proto-0) failed. [ 129.056298][ T7550] tipc: Started in network mode [ 129.071060][ T7550] tipc: Node identity ac14142f, cluster identity 4711 [ 129.086475][ T7550] tipc: New replicast peer: 0.0.0.0 [ 129.103959][ T7550] tipc: Enabled bearer , priority 10 [ 129.272300][ T7550] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.454'. [ 129.564359][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 129.635288][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 129.635860][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 130.116979][ T5286] veth1_macvtap: entered promiscuous mode [ 130.209863][ T7611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.239879][ T7617] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 130.240286][ T5732] tipc: Node number set to 2886997039 [ 130.606990][ T7637] netlink: 'syz.0.474': attribute type 1 has an invalid length. [ 130.806678][ T7637] bond3: entered promiscuous mode [ 130.826618][ T7637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.861223][ T7662] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:1024 [ 130.872423][ T7650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.885884][ T7650] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 130.898658][ T7650] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 130.918293][ T7650] bond3: (slave ip6gre1): making interface the new active one [ 130.927171][ T7650] ip6gre1: entered promiscuous mode [ 130.942242][ T7650] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 131.348606][ T7683] __nla_validate_parse: 3 callbacks suppressed [ 131.348627][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 131.381877][ T7683] netlink: 84 bytes leftover after parsing attributes in process `syz.4.480'. [ 131.391766][ T7683] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 131.835344][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 132.056095][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 132.128353][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 132.155803][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 132.165698][ T7734] bond1: Invalid ad_actor_system MAC address. [ 132.172187][ T7734] bond1: option ad_actor_system: invalid value (1) [ 132.181744][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 132.208942][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 132.221357][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 132.235191][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 132.557038][ T7734] bond1 (unregistering): Released all slaves [ 132.733269][ T7716] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 132.969129][ T7762] netlink: 'syz.4.498': attribute type 6 has an invalid length. [ 133.204776][ T7769] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 133.254325][ T7771] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 133.275553][ T7771] .`: renamed from bond0 (while UP) [ 133.404532][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.424289][ T7461] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.452089][ T5757] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.462497][ T7461] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.503872][ T7775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.539999][ T7775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.574762][ T7775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.593344][ T7775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.641039][ T5757] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.075376][ T7810] netlink: 'syz.2.515': attribute type 4 has an invalid length. [ 134.090172][ T5757] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.107557][ T7810] .`: renamed from bond0 [ 134.374994][ T7828] SET target dimension over the limit! [ 134.904352][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802792f800: rx timeout, send abort [ 134.915453][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802792f800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 135.142193][ T7869] netlink: 'syz.1.529': attribute type 83 has an invalid length. [ 135.760904][ T7915] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 135.798113][ T7915] team0: Port device geneve1 added [ 136.005922][ T7928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.195959][ T7930] netlink: 'syz.3.547': attribute type 83 has an invalid length. [ 136.688417][ T7946] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 136.736973][ T24] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 137.402402][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.891317][ T7992] netlink: 'syz.3.562': attribute type 21 has an invalid length. [ 138.906409][ T7992] __nla_validate_parse: 41 callbacks suppressed [ 138.906427][ T7992] netlink: 156 bytes leftover after parsing attributes in process `syz.3.562'. [ 138.949813][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 138.987306][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 139.012223][ T7996] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.046972][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.055289][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.064386][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.124823][ T7999] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 139.159023][ T7999] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 139.198958][ T7999] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 139.216863][ T7999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 139.346583][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.383938][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.408327][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.429555][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.460562][ T7999] wlan1 speed is unknown, defaulting to 1000 [ 139.772624][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 139.782613][ T8033] netlink: 'syz.0.573': attribute type 29 has an invalid length. [ 139.811874][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.573'. [ 140.395623][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.584'. [ 140.747869][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 140.949203][ T8099] bridge0: port 3(macvlan0) entered blocking state [ 140.967801][ T8099] bridge0: port 3(macvlan0) entered disabled state [ 140.976155][ T8099] macvlan0: entered allmulticast mode [ 140.982485][ T8099] veth1_vlan: entered allmulticast mode [ 141.013715][ T8099] macvlan0: entered promiscuous mode [ 141.035720][ T8099] bridge0: port 3(macvlan0) entered blocking state [ 141.043810][ T8099] bridge0: port 3(macvlan0) entered forwarding state [ 141.076047][ T8101] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 141.168897][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'. [ 141.211117][ T8115] netlink: 2 bytes leftover after parsing attributes in process `syz.1.602'. [ 141.409415][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 141.803663][ T8151] ip6t_srh: unknown srh invflags 4000 [ 141.832355][ T8158] bond4: Unable to set up delay as MII monitoring is disabled [ 141.855835][ T8158] bond4 (unregistering): Released all slaves [ 141.883346][ T8163] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 142.034185][ T8168] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.010521][ T4941] Bluetooth: hci3: command 0x0401 tx timeout [ 143.913721][ T8247] __nla_validate_parse: 3 callbacks suppressed [ 143.913739][ T8247] netlink: 14 bytes leftover after parsing attributes in process `syz.0.628'. [ 144.668966][ T8290] xt_hashlimit: size too large, truncated to 1048576 [ 144.842577][ T8299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.639'. [ 145.177563][ T8310] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 145.186961][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 145.188328][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 145.212707][ T8282] netlink: 'syz.3.634': attribute type 64 has an invalid length. [ 145.224958][ T8310] netlink: 312 bytes leftover after parsing attributes in process `syz.0.641'. [ 145.256397][ T8282] netlink: 'syz.3.634': attribute type 64 has an invalid length. [ 145.560172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.597849][ T8327] netlink: 27 bytes leftover after parsing attributes in process `syz.3.645'. [ 145.952649][ T8337] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 146.213014][ T8352] netlink: 'syz.0.655': attribute type 83 has an invalid length. [ 146.234858][ T8353] netlink: 'syz.0.655': attribute type 83 has an invalid length. [ 146.605063][ T8379] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 146.985551][ T8394] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 146.994916][ T8394] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 147.003779][ T8394] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 149.470569][ T8370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.653898][ T8404] netlink: 'syz.2.667': attribute type 2 has an invalid length. [ 149.722580][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.775764][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.822498][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.849992][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.899403][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.917480][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.927510][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.936808][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.947270][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.985550][ T8407] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 150.010038][ T8407] batman_adv: batadv0: Removing interface: ipvlan2 [ 150.068664][ T8434] IPv6: NLM_F_REPLACE set, but no existing node found! [ 150.248490][ T8450] xt_ecn: cannot match TCP bits for non-tcp packets [ 150.975511][ T8467] netlink: 'syz.2.681': attribute type 13 has an invalid length. [ 151.032602][ T8463] team0: Device gtp0 is up. Set it down before adding it as a team port [ 151.335838][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 151.657677][ T8491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.727563][ T8420] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 151.747970][ T8420] ÿ speed is unknown, defaulting to 1000 [ 151.896738][ T8491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.999651][ T8491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.042659][ T4941] Bluetooth: hci5: command tx timeout [ 152.135983][ T8491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.269264][ T8515] netlink: 'syz.1.691': attribute type 9 has an invalid length. [ 152.356730][ T7458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.409618][ T7447] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.468442][ T7458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.529225][ T7458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.556304][ T8526] syzkaller0: entered promiscuous mode [ 152.570061][ T8526] syzkaller0: entered allmulticast mode [ 152.712157][ T8538] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 152.732005][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.739716][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.749362][ T8420] bridge_slave_0: entered allmulticast mode [ 152.767034][ T8420] bridge_slave_0: entered promiscuous mode [ 152.781910][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.792597][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.811374][ T8420] bridge_slave_1: entered allmulticast mode [ 152.841662][ T8420] bridge_slave_1: entered promiscuous mode [ 152.917218][ T8552] openvswitch: netlink: IP tunnel dst address not specified [ 152.937067][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 152.962461][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.988142][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.062871][ T8420] team0: Port device team_slave_0 added [ 153.073463][ T8420] team0: Port device team_slave_1 added [ 153.110297][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.124941][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.166317][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.185616][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.193632][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.228955][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.341103][ T8563] syzkaller0: entered promiscuous mode [ 153.350419][ T8563] syzkaller0: entered allmulticast mode [ 153.369517][ T8420] hsr_slave_0: entered promiscuous mode [ 153.377410][ T8420] hsr_slave_1: entered promiscuous mode [ 153.384198][ T8420] debugfs: 'hsr0' already exists in 'hsr' [ 153.390183][ T8420] Cannot create hsr debugfs directory [ 153.395850][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 153.412966][ T8565] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 153.423321][ T8565] netlink: 224 bytes leftover after parsing attributes in process `syz.0.704'. [ 153.679844][ T8420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.694627][ T8420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.703755][ T8420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.716809][ T8420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.733038][ T8420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.746057][ T8420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.754722][ T8420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.764726][ T8420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.865155][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.896253][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.913983][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.921170][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.936144][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.943340][ T7447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.123049][ T4941] Bluetooth: hci5: command tx timeout [ 154.463752][ T8611] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 154.485810][ T8611] bond5: entered promiscuous mode [ 154.493040][ T8611] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.507755][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.747637][ T8622] nbd: couldn't find a device at index 0 [ 154.772173][ T8625] netlink: 'syz.1.714': attribute type 24 has an invalid length. [ 154.868144][ T8420] veth0_vlan: entered promiscuous mode [ 154.900855][ T8420] veth1_vlan: entered promiscuous mode [ 154.944212][ T8420] veth0_macvtap: entered promiscuous mode [ 154.963286][ T8420] veth1_macvtap: entered promiscuous mode [ 155.009244][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.051382][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.076086][ T7461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.088410][ T7461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.108264][ T7447] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.125276][ T7447] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.288892][ T8637] netlink: 14 bytes leftover after parsing attributes in process `syz.1.718'. [ 155.303653][ T8640] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 155.308200][ T7458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.335290][ T7458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.438998][ T7447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.448517][ T7447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.753300][ T8658] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 155.759624][ T8661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.724'. [ 155.759825][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 155.781316][ T8659] netlink: 'syz.0.722': attribute type 22 has an invalid length. [ 155.789883][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 155.799676][ T8661] vlan2: entered allmulticast mode [ 155.806998][ T8661] erspan0: entered allmulticast mode [ 155.834918][ T7461] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.841431][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 155.846114][ T7461] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.873215][ T8659] netlink: 'syz.0.722': attribute type 22 has an invalid length. [ 155.878298][ T7461] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.893537][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 155.905401][ T7461] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.927634][ T8665] openvswitch: netlink: Multiple metadata blocks provided [ 156.107326][ T8676] netlink: 'syz.0.727': attribute type 33 has an invalid length. [ 156.149837][ T8677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.159819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.170819][ T8672] nftables ruleset with unbound chain [ 156.204963][ T4941] Bluetooth: hci5: command tx timeout [ 156.688411][ T8702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.736'. [ 156.699854][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.710752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.023474][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.742'. [ 157.316726][ T8736] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 157.338481][ T8736] netlink: 232 bytes leftover after parsing attributes in process `syz.0.746'. [ 157.370092][ T8736] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 157.633916][ T8747] netlink: 256 bytes leftover after parsing attributes in process `syz.1.749'. [ 157.814746][ T8761] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.753'. [ 157.832705][ T8761] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.753'. [ 157.863437][ T8756] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 157.876800][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.887023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.924300][ T8756] bond5 (unregistering): Released all slaves [ 157.926581][ T8767] netlink: 64 bytes leftover after parsing attributes in process `syz.5.754'. [ 157.993973][ T8766] veth1_vlan (unregistering): left allmulticast mode [ 158.044594][ T8766] bridge0: port 3(macvlan0) entered disabled state [ 158.062610][ T8766] macvlan0 (unregistering): left allmulticast mode [ 158.086897][ T8775] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 158.098029][ T8766] bridge0: port 3(macvlan0) entered disabled state [ 158.181327][ T8764] syzkaller1: entered promiscuous mode [ 158.186913][ T8764] syzkaller1: entered allmulticast mode [ 158.219256][ T8775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 158.280680][ T4941] Bluetooth: hci5: command tx timeout [ 158.360706][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.385041][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 158.596634][ T8791] netlink: 'syz.1.763': attribute type 7 has an invalid length. [ 158.729550][ T8797] syzkaller1: entered promiscuous mode [ 158.780410][ T8797] syzkaller1: entered allmulticast mode [ 158.814196][ T8804] netlink: 104 bytes leftover after parsing attributes in process `syz.3.766'. [ 158.834347][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 159.208313][ T8826] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 159.364303][ T8826] bond6: entered promiscuous mode [ 159.384165][ T8826] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.407867][ T8826] Bluetooth: MGMT ver 1.23 [ 159.425554][ T8839] netlink: 'syz.5.776': attribute type 1 has an invalid length. [ 159.488448][ T8841] bond6: option all_slaves_active: invalid value (222) [ 159.498168][ T8841] bond6 (unregistering): Released all slaves [ 159.531235][ T7447] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.548789][ T7447] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.641235][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.648912][ T8851] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 159.657341][ T8839] bond1 (unregistering): Released all slaves [ 159.683070][ T8845] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 159.683840][ T7447] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.701026][ T7447] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.849643][ T8858] netlink: 'syz.5.782': attribute type 7 has an invalid length. [ 159.857725][ T8858] netlink: 'syz.5.782': attribute type 8 has an invalid length. [ 159.911407][ T8861] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 159.960969][ T8862] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 160.214283][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.278728][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.468588][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.744012][ T8876] syz.1.786 (8876) used greatest stack depth: 19208 bytes left [ 160.905570][ T8924] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 160.920632][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.592992][ T8971] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 161.634793][ T8976] validate_nla: 5 callbacks suppressed [ 161.634811][ T8976] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 161.684257][ T8976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.733725][ T8975] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 161.787832][ T8933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.800722][ T8957] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 161.818785][ T8957] __nla_validate_parse: 9 callbacks suppressed [ 161.818800][ T8957] netlink: 224 bytes leftover after parsing attributes in process `syz.1.803'. [ 162.224706][ T9000] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 162.370597][ T9005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.811'. [ 162.389483][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 162.425446][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 162.598307][ T8995] netlink: 'syz.5.814': attribute type 4 has an invalid length. [ 162.772147][ T9025] netlink: 52 bytes leftover after parsing attributes in process `syz.0.822'. [ 162.802160][ T9025] netlink: 52 bytes leftover after parsing attributes in process `syz.0.822'. [ 163.404851][ T9059] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 163.424841][ T9059] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.518303][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.834'. [ 163.539031][ T9072] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 163.787251][ T9084] syzkaller0: entered promiscuous mode [ 163.798945][ T9084] syzkaller0: entered allmulticast mode [ 163.991784][ T9093] netlink: 'syz.3.840': attribute type 11 has an invalid length. [ 164.025036][ T9093] netlink: 64 bytes leftover after parsing attributes in process `syz.3.840'. [ 164.083332][ T9096] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 164.211277][ T9103] veth0: entered promiscuous mode [ 164.266596][ T9103] veth0: left promiscuous mode [ 164.359106][ T9107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 164.373015][ T9107] bond0: (slave bond7): Enslaving as an active interface with an up link [ 164.552318][ T9124] netlink: 60 bytes leftover after parsing attributes in process `syz.5.849'. [ 164.588102][ T9124] unsupported nlmsg_type 40 [ 164.629348][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 164.792243][ T9129] netlink: 'syz.0.851': attribute type 49 has an invalid length. [ 164.971699][ T9129] ip6gretap0: entered promiscuous mode [ 164.996544][ T9129] ip6gretap0: entered allmulticast mode [ 165.058816][ T9144] C: renamed from lo (while UP) [ 165.109642][ T9144] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 165.523265][ T9174] netlink: 'syz.3.863': attribute type 23 has an invalid length. [ 165.612274][ T30] audit: type=1107 audit(1783376691.888:2): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='•´„¶'ƒ×þß:„˜¶Ä¡ô [ 165.612274][ T30] ¥è8YtDÎÅ^­É)ß`ÞmàcKÉxû…¹ï¤‚ˆò W–³  œ©“@ú•<cÞ.mrïÂÞ´`' [ 165.751520][ T5286] veth1_vlan: left promiscuous mode [ 165.947554][ T9186] ref_ctr_offset mismatch. inode: 0x19a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x10 [ 166.065408][ T9200] siw: device registration error -23 [ 166.181272][ T9197] bond8: entered promiscuous mode [ 166.186969][ T9197] 8021q: adding VLAN 0 to HW filter on device bond8 [ 166.195383][ T9200] ±ÿª¨úrBº“: renamed from lo (while UP) [ 166.634942][ T5635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.639471][ T9226] bond0: option ad_select: unable to set because the bond device is up [ 166.656655][ T5635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.667124][ T5635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.679750][ T9225] team0: Device xfrm0 is of different type [ 166.679800][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.700154][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.198315][ T9249] bond7: (slave gre0): Device is not bonding slave [ 167.209007][ T9260] __nla_validate_parse: 2 callbacks suppressed [ 167.209024][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 167.259130][ T9249] bond7: option active_slave: invalid value (gre0) [ 167.286489][ T9249] bond7 (unregistering): Released all slaves [ 167.369295][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 167.708704][ T9223] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 167.754364][ T9223] ÿ speed is unknown, defaulting to 1000 [ 168.347818][ T9317] netlink: 'syz.5.899': attribute type 64 has an invalid length. [ 168.391995][ T9317] netlink: 'syz.5.899': attribute type 64 has an invalid length. [ 168.441941][ T9321] ip6erspan0: entered allmulticast mode [ 168.760489][ T4941] Bluetooth: hci6: command tx timeout [ 168.902447][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.919143][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.941191][ T9223] bridge_slave_0: entered allmulticast mode [ 168.959146][ T9223] bridge_slave_0: entered promiscuous mode [ 168.988952][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.012892][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.040360][ T9223] bridge_slave_1: entered allmulticast mode [ 169.058504][ T9223] bridge_slave_1: entered promiscuous mode [ 169.101545][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 169.186980][ T9360] erspan0: entered promiscuous mode [ 169.220221][ T9223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.286319][ T9223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.442138][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 169.513846][ T9223] team0: Port device team_slave_0 added [ 169.569497][ T9223] team0: Port device team_slave_1 added [ 169.604066][ T9377] netlink: 108 bytes leftover after parsing attributes in process `syz.0.910'. [ 169.712693][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 169.913592][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.921954][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.952357][ T9223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.964583][ T9374] syzkaller1: entered promiscuous mode [ 169.970519][ T9374] syzkaller1: entered allmulticast mode [ 169.982954][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.000274][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.062441][ T9223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.203034][ T9406] netlink: 'syz.3.916': attribute type 13 has an invalid length. [ 170.231181][ T9406] netlink: 'syz.3.916': attribute type 58 has an invalid length. [ 170.272067][ T9406] netlink: 152 bytes leftover after parsing attributes in process `syz.3.916'. [ 170.367888][ T9415] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 170.418343][ T9415] netlink: 156 bytes leftover after parsing attributes in process `syz.5.917'. [ 170.456380][ T9223] hsr_slave_0: entered promiscuous mode [ 170.484220][ T9223] hsr_slave_1: entered promiscuous mode [ 170.496036][ T9223] debugfs: 'hsr0' already exists in 'hsr' [ 170.508066][ T9223] Cannot create hsr debugfs directory [ 170.841347][ T4941] Bluetooth: hci6: command tx timeout [ 171.566218][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.610035][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.195243][ T5723] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 172.203609][ T5723] syú2: Port: 1 Link DOWN [ 172.224380][ T9431] geneve3: entered promiscuous mode [ 172.229650][ T9431] geneve3: entered allmulticast mode [ 172.261772][ T169] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.290794][ T169] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.316539][ T169] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 172.360633][ T169] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.378887][ T169] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.415557][ T169] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 172.469302][ T169] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.478765][ T9467] sctp: [Deprecated]: syz.0.926 (pid 9467) Use of int in max_burst socket option. [ 172.478765][ T9467] Use struct sctp_assoc_value instead [ 172.505507][ T169] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.517017][ T169] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 172.535394][ T169] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.551173][ T169] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.570133][ T169] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 172.715235][ T9478] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 172.761505][ T9489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.920374][ T4941] Bluetooth: hci6: command tx timeout [ 173.108174][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 173.126166][ T9509] netlink: 'syz.5.937': attribute type 39 has an invalid length. [ 173.240266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.330984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.366745][ T9520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.939'. [ 173.367558][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.420918][ T9223] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.466202][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.478202][ T9223] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.547773][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.580914][ T9223] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.603219][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.624613][ T9223] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.641155][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.653035][ T9525] veth1_vlan: entered promiscuous mode [ 173.735043][ T9522] netlink: 'syz.1.940': attribute type 8 has an invalid length. [ 173.767311][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 173.778948][ T9541] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 173.809267][ T9543] veth0_macvtap: left promiscuous mode [ 173.842490][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 173.904307][ T9554] netlink: 88 bytes leftover after parsing attributes in process `syz.1.947'. [ 174.145948][ T9223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.195637][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 174.221592][ T9223] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.259420][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.266658][ T7455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.367200][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.374445][ T7455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.965339][ T9586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.955'. [ 175.026110][ T4941] Bluetooth: hci6: command tx timeout [ 175.273056][ T9595] netlink: 140 bytes leftover after parsing attributes in process `syz.3.957'. [ 175.407423][ T9596] syzkaller0: entered promiscuous mode [ 175.437736][ T9596] syzkaller0: entered allmulticast mode [ 175.467507][ T9223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.793580][ T9619] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 177.587710][ T9613] pim6reg: entered allmulticast mode [ 178.027553][ T9663] netlink: 'syz.5.971': attribute type 10 has an invalid length. [ 178.109361][ T9663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.133287][ T9663] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 178.198475][ T9671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.222967][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 178.246615][ T9678] tipc: Enabling of bearer rejected, failed to enable media [ 178.256477][ T9223] veth0_vlan: entered promiscuous mode [ 178.268142][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 178.317815][ T9223] veth1_vlan: entered promiscuous mode [ 178.341184][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 178.348487][ T9682] netlink: 'syz.5.977': attribute type 1 has an invalid length. [ 178.402497][ T9682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.435917][ T9685] vlan2: entered allmulticast mode [ 178.466085][ T9685] veth0_to_bond: entered allmulticast mode [ 178.503228][ T9685] bond1: (slave vlan2): Opening slave failed [ 178.526672][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 178.549582][ T9687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.560954][ T9694] netlink: 56 bytes leftover after parsing attributes in process `syz.1.980'. [ 178.678807][ T9687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.833098][ T9223] veth0_macvtap: entered promiscuous mode [ 178.882726][ T9223] veth1_macvtap: entered promiscuous mode [ 178.904113][ T9705] netlink: 'syz.1.982': attribute type 2 has an invalid length. [ 179.033206][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.095499][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.159056][ T169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.205569][ T169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.215583][ T9723] netlink: 27 bytes leftover after parsing attributes in process `syz.5.987'. [ 179.258423][ T169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.294252][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 179.307521][ T169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.599319][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.630699][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.825535][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.844072][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.995'. [ 179.866547][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.176576][ T9754] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 180.322694][ T9777] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1000'. [ 180.535982][ T9793] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1005'. [ 181.009832][ T9825] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 181.021815][ T9772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.193405][ T9836] openvswitch: netlink: Missing key (keys=40, expected=100) [ 181.197546][ T9839] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 181.243429][ T9841] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 181.538180][ T9857] IPv6: sit1: Disabled Multicast RS [ 181.775831][ T9865] netlink: 'syz.1.1025': attribute type 9 has an invalid length. [ 181.924522][ T9869] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 182.066109][ T9883] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 182.166986][ T9868] bond9 (unregistering): Released all slaves [ 182.200439][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.346001][ T9888] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 182.483290][ T9892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.491265][ T169] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 182.517872][ T9890] netlink: 'syz.1.1030': attribute type 3 has an invalid length. [ 182.700469][ T7455] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 182.802232][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.855016][ T9912] netlink: 'syz.6.1032': attribute type 16 has an invalid length. [ 182.926434][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.978927][ T9912] netlink: 'syz.6.1032': attribute type 17 has an invalid length. [ 183.421696][ T9912] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.428997][ T9912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.444522][ T9912] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.451830][ T9912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.606107][ T9926] pim6reg: entered allmulticast mode [ 183.625852][ T9905] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 183.657721][ T9905] ÿ speed is unknown, defaulting to 1000 [ 183.812906][ T9950] No such timeout policy "syz0" [ 185.020667][T10001] netlink: 'syz.6.1054': attribute type 12 has an invalid length. [ 185.155082][T10014] netlink: 'syz.0.1058': attribute type 10 has an invalid length. [ 185.184754][T10014] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 185.379885][T10023] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 185.979432][T10054] sctp: [Deprecated]: syz.6.1067 (pid 10054) Use of int in max_burst socket option deprecated. [ 185.979432][T10054] Use struct sctp_assoc_value instead [ 185.981176][T10052] ±ÿª¨úrBº“: left allmulticast mode [ 186.002771][T10051] __nla_validate_parse: 8 callbacks suppressed [ 186.002788][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 186.135278][T10051] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 186.226172][T10051] bond7 (unregistering): Released all slaves [ 186.321983][T10071] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1069'. [ 186.363020][T10071] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1069'. [ 186.851056][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.858751][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.600481][ T61] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.634038][ T61] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.666043][ T61] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.677870][ T61] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.703605][ T61] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.735621][ T61] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.846508][ T61] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.898456][ T61] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.149788][T10136] sctp: [Deprecated]: syz.5.1086 (pid 10136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.149788][T10136] Use struct sctp_sack_info instead [ 188.336025][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1086'. [ 188.957019][T10161] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 188.984095][T10161] bond1 (unregistering): Released all slaves [ 188.997543][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1094'. [ 189.101416][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 189.127192][T10169] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 189.350918][T10189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.574069][T10222] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1099'. [ 189.629113][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1101'. [ 189.703621][ T7455] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.707727][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1101'. [ 189.754707][ T7455] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.805706][ T7455] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.858584][ T7455] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.278364][T10261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 190.356426][T10272] syzkaller0: entered promiscuous mode [ 190.363116][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.413412][T10272] syzkaller0: entered allmulticast mode [ 190.476016][T10271] tipc: Started in network mode [ 190.497752][T10271] tipc: Node identity 06fd51295be7, cluster identity 4711 [ 190.543491][T10271] tipc: Enabled bearer , priority 0 [ 190.649632][T10277] bond3 (unregistering): Released all slaves [ 190.709876][T10283] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 190.732139][T10271] tipc: Resetting bearer [ 190.868116][T10271] tipc: Disabling bearer [ 191.297465][T10328] __nla_validate_parse: 1 callbacks suppressed [ 191.297483][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 191.329427][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 191.339567][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'. [ 191.364633][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 191.365508][ T7455] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.381908][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'. [ 191.428720][T10337] netlink: 'syz.0.1127': attribute type 33 has an invalid length. [ 191.438443][ T7455] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.462605][ T7455] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.491711][ T7455] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.547775][T10341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 191.565485][T10340] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 191.620574][T10343] batadv_slave_0: entered promiscuous mode [ 191.622504][T10345] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.181817][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1136'. [ 192.216419][T10384] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 192.242665][T10386] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 192.371340][T10386] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.413448][T10386] bond7: (slave bond8): making interface the new active one [ 192.423262][T10386] bond7: (slave bond8): Enslaving as an active interface with an up link [ 192.479826][T10384] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 192.705041][T10417] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 192.839821][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 192.895911][T10424] team0 (unregistering): Port device team_slave_0 removed [ 192.911996][T10431] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1150'. [ 192.927444][T10424] team0 (unregistering): Port device team_slave_1 removed [ 192.951644][T10433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1151'. [ 193.468360][T10466] vlan0: entered promiscuous mode [ 193.474282][T10466] gretap0: entered promiscuous mode [ 193.650796][T10470] netlink: 'syz.0.1163': attribute type 30 has an invalid length. [ 193.680380][T10477] netlink: 'syz.6.1165': attribute type 1 has an invalid length. [ 193.699554][T10477] NCSI netlink: No device for ifindex 0 [ 193.768239][T10477] bridge1: entered allmulticast mode [ 194.239027][T10515] syzkaller0: entered promiscuous mode [ 194.258309][T10515] syzkaller0: entered allmulticast mode [ 194.341864][T10515] syzkaller0: left promiscuous mode [ 194.372208][T10515] syzkaller0: left allmulticast mode [ 194.483436][T10530] 0·: renamed from hsr0 (while UP) [ 194.494986][T10530] 0·: entered allmulticast mode [ 194.500240][T10530] hsr_slave_0: entered allmulticast mode [ 194.506032][T10530] hsr_slave_1: entered allmulticast mode [ 194.514264][T10530] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 194.553299][T10531] 1·: renamed from c0· (while UP) [ 194.575755][T10531] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 194.846396][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.885979][T10547] netlink: 'syz.3.1186': attribute type 10 has an invalid length. [ 194.954855][T10551] openvswitch: netlink: ct_state flags ffffffff unsupported [ 195.067824][T10551] netlink: 'syz.5.1188': attribute type 7 has an invalid length. [ 195.083036][T10555] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 195.096527][T10551] netlink: 'syz.5.1188': attribute type 8 has an invalid length. [ 195.569535][ T3360] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.613912][ T3360] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.765377][T10577] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.781864][T10577] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.804789][ T3360] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.814088][ T3360] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.856027][T10599] team0 (unregistering): Port device team_slave_0 removed [ 195.868285][T10599] team0 (unregistering): Port device team_slave_1 removed [ 195.951784][T10577] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.989822][T10577] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.022850][T10608] veth1_macvtap: left promiscuous mode [ 196.031287][T10608] macsec0: entered allmulticast mode [ 196.193280][T10577] bond0: (slave netdevsim1): Releasing backup interface [ 196.263463][T10577] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.308636][T10577] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.548607][T10577] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.569024][T10577] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.906199][T10659] __nla_validate_parse: 58 callbacks suppressed [ 196.906219][T10659] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1221'. [ 197.077488][ T7464] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.096251][ T7464] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.173792][T10676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1223'. [ 197.183384][ T7455] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.201987][ T7455] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.213177][T10676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1223'. [ 197.303520][ T74] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.327178][ T74] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.394024][ T74] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.415847][ T74] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.429381][T10684] tc_dump_action: action bad kind [ 197.458410][T10688] pim6reg: left allmulticast mode [ 197.776871][T10703] sctp: [Deprecated]: syz.3.1232 (pid 10703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.776871][T10703] Use struct sctp_sack_info instead [ 197.863795][T10711] validate_nla: 7 callbacks suppressed [ 197.863813][T10711] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 197.864689][T10708] IPVS: Scheduler module ip_vs_sip not found [ 197.937703][T10717] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 198.140546][T10727] macvtap1: entered allmulticast mode [ 198.197586][T10717] bond3: (slave bridge1): making interface the new active one [ 198.228615][T10717] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 198.296750][T10711] macvtap2: entered allmulticast mode [ 198.498449][T10752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1243'. [ 198.787046][T10763] netlink: 'syz.5.1246': attribute type 1 has an invalid length. [ 198.796830][T10764] Cannot find add_set index 0 as target [ 198.824677][T10763] netlink: 'syz.5.1246': attribute type 2 has an invalid length. [ 198.899494][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1246'. [ 198.947733][T10763] veth0_macvtap: left promiscuous mode [ 199.278211][T10784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 199.454849][T10793] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 199.569868][T10795] veth3: entered allmulticast mode [ 199.603617][T10796] veth5: entered allmulticast mode [ 199.683028][T10806] veth0_to_bridge: entered promiscuous mode [ 199.697351][T10806] veth0_to_bridge: left promiscuous mode [ 199.735211][T10810] netlink: 'syz.3.1261': attribute type 8 has an invalid length. [ 200.236338][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 200.286394][T10840] netlink: 'syz.6.1272': attribute type 10 has an invalid length. [ 200.295298][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1272'. [ 200.295516][T10836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1270'. [ 200.329494][T10839] vlan0: entered promiscuous mode [ 200.378107][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 200.565545][T10853] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 200.691246][T10858] netlink: 'syz.6.1278': attribute type 2 has an invalid length. [ 200.850719][T10868] syzkaller0: entered promiscuous mode [ 200.865218][T10868] syzkaller0: entered allmulticast mode [ 200.920158][T10871] syzkaller0: entered promiscuous mode [ 200.926023][T10871] syzkaller0: entered allmulticast mode [ 201.113452][T10884] xt_TCPMSS: Only works on TCP SYN packets [ 201.554149][T10917] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20003 [ 202.044410][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.044764][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 202.054035][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 202.060872][ T5640] Bluetooth: hci3: command 0x0401 tx timeout [ 202.319172][T10959] __nla_validate_parse: 8 callbacks suppressed [ 202.319190][T10959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1309'. [ 202.442972][T10967] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 202.648232][T10972] bond9: (slave gretap2): making interface the new active one [ 202.673254][T10972] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 202.844001][T10977] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 202.865269][T10977] bond9: option packets_per_slave: allowed values 0 - 65535 [ 202.877459][T10977] bond9 (unregistering): Released all slaves [ 227.721938][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1321'. [ 227.753850][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1319'. [ 227.845906][T11005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.944568][T11021] ip6t_srh: unknown srh invflags 4000 [ 228.058017][T11025] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 228.271980][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1328'. [ 228.344484][T11041] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 228.358012][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1330'. [ 228.360593][T11041] bond5 (unregistering): Released all slaves [ 228.604116][T11057] raw_sendmsg: syz.0.1334 forgot to set AF_INET. Fix it! [ 229.582377][T11114] tipc: Started in network mode [ 229.602081][T11114] tipc: Node identity 2003, cluster identity 4711 [ 229.622761][T11114] tipc: Node number set to 8195 [ 229.912671][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1355'. [ 230.293964][T11153] bond5: entered promiscuous mode [ 230.418299][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1364'. [ 230.471737][T11173] team0: Port device team_slave_0 removed [ 230.550768][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 230.753244][T11190] IPVS: ip_vs_edit_dest(): server weight less than zero [ 230.762343][ T5743] IPVS: starting estimator thread 0... [ 230.781715][T11189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1369'. [ 230.880883][T11191] IPVS: using max 40 ests per chain, 96000 per kthread [ 230.914831][T11198] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1372'. [ 231.032853][T11211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 231.076205][ T5796] IPVS: starting estimator thread 0... [ 231.170023][T11213] IPVS: using max 28 ests per chain, 67200 per kthread [ 231.188194][T11219] nbd: couldn't find a device at index 0 [ 231.236141][T11219] block nbd3: Unsupported socket: should be TCP or UNIX. [ 231.491154][T11238] netlink: 'syz.6.1385': attribute type 10 has an invalid length. [ 231.753952][T11255] bond6: option resend_igmp: invalid value (32767) [ 231.762761][T11255] bond6: option resend_igmp: allowed values 0 - 255 [ 231.777493][T11255] bond6 (unregistering): Released all slaves [ 231.950397][T11266] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 232.098424][T11284] netlink: 'syz.5.1394': attribute type 2 has an invalid length. [ 232.156521][T11283] netlink: 'syz.6.1396': attribute type 19 has an invalid length. [ 232.186132][T11278] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.266686][T11294] netlink: 'syz.6.1396': attribute type 10 has an invalid length. [ 232.375601][T11284] : entered promiscuous mode [ 232.421321][T11294] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 232.912870][T11306] syzkaller0: entered promiscuous mode [ 232.918655][T11306] syzkaller0: entered allmulticast mode [ 232.975899][T11312] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 233.025769][T11300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.051741][T11300] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 233.155910][T11336] __nla_validate_parse: 9 callbacks suppressed [ 233.155926][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 233.165492][T11300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.197793][T11300] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 233.248909][T11300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.279743][T11300] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 233.323242][T11300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.350604][T11300] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 233.383293][T11300] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.400357][T11300] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 235.236407][T11354] netlink: 576 bytes leftover after parsing attributes in process `syz.6.1411'. [ 235.349689][ T5814] ÿ speed is unknown, defaulting to 1000 [ 235.359832][ T5814] syz1: Port: 1 Link DOWN [ 235.494398][T11365] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 235.502857][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 235.684249][T11358] team0 (unregistering): Port device team_slave_1 removed [ 235.697181][T11358] team0 (unregistering): Port device geneve1 removed [ 235.722074][T11361] syzkaller1: entered promiscuous mode [ 235.767508][T11361] syzkaller1: entered allmulticast mode [ 235.836415][T11300] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 235.859432][T11357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.883388][T11300] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 236.106541][T11405] sctp: [Deprecated]: syz.6.1418 (pid 11405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.106541][T11405] Use struct sctp_sack_info instead [ 236.124032][T11300] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 236.124059][T11300] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 236.309357][T11408] netlink: 'syz.5.1419': attribute type 21 has an invalid length. [ 236.350151][T11408] netlink: 'syz.5.1419': attribute type 22 has an invalid length. [ 236.387325][T11408] netlink: 'syz.5.1419': attribute type 23 has an invalid length. [ 236.410088][T11408] netlink: 'syz.5.1419': attribute type 25 has an invalid length. [ 236.428552][T11408] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1419'. [ 236.669667][T11408] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1419'. [ 236.773201][T11441] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1425'. [ 236.809048][T11441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1425'. [ 236.897584][T11448] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 237.049760][T11447] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 237.057543][T11449] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 237.259451][T11467] netlink: 'syz.1.1431': attribute type 2 has an invalid length. [ 237.424569][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1433'. [ 237.476958][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1433'. [ 238.034861][T11497] netlink: 'syz.0.1439': attribute type 39 has an invalid length. [ 238.149105][T11507] ieee802154 phy1 wpan1: encryption failed: -90 [ 238.329291][T11516] tipc: Enabling of bearer rejected, failed to enable media [ 238.498732][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 238.597039][T11536] netlink: 'syz.5.1448': attribute type 2 has an invalid length. [ 238.623371][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1443'. [ 238.683554][T11537] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1447'. [ 239.140066][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 239.205041][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 239.334371][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1445'. [ 239.561403][T11580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1458'. [ 239.583336][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 239.615624][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1459'. [ 239.657215][T11582] netlink: 'syz.0.1459': attribute type 7 has an invalid length. [ 239.704680][T11582] netlink: 'syz.0.1459': attribute type 8 has an invalid length. [ 239.763907][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 240.308196][T11622] netlink: 'syz.6.1469': attribute type 5 has an invalid length. [ 240.321515][T11609] bond11: option mode: invalid value (250) [ 240.347178][T11629] netlink: 'syz.1.1470': attribute type 3 has an invalid length. [ 240.374840][T11609] bond11 (unregistering): Released all slaves [ 240.499218][T11620] bond11: option mode: invalid value (250) [ 240.507535][T11620] bond11 (unregistering): Released all slaves [ 240.643040][T11621] bond11: option mode: invalid value (250) [ 240.663313][T11621] bond11 (unregistering): Released all slaves [ 240.769104][T11640] vlan2: entered allmulticast mode [ 240.787068][T11640] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 240.924148][T11649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.423379][T11692] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 241.547662][T11695] tap0: tun_chr_ioctl cmd 1074025676 [ 241.556201][T11695] tap0: owner set to 0 [ 241.908458][T11710] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 242.038666][T11716] syzkaller1: entered promiscuous mode [ 242.072607][T11716] syzkaller1: entered allmulticast mode [ 242.086979][T11719] netlink: 'syz.0.1490': attribute type 5 has an invalid length. [ 242.956638][T11743] netlink: 'syz.5.1498': attribute type 2 has an invalid length. [ 243.000695][T11749] netlink: 'syz.0.1501': attribute type 3 has an invalid length. [ 243.043499][T11749] netlink: 'syz.0.1501': attribute type 1 has an invalid length. [ 243.111171][T11748] tipc: Enabling of bearer rejected, failed to enable media [ 243.155887][T11744] openvswitch: netlink: Flow key attr not present in new flow. [ 243.168917][T11759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.786891][T11798] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 243.815215][T11798] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 243.915311][T11802] __nla_validate_parse: 10 callbacks suppressed [ 243.915330][T11802] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1518'. [ 243.940294][T11802] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1518'. [ 243.958577][T11804] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 243.968708][T11802] netlink: 'syz.3.1518': attribute type 5 has an invalid length. [ 243.984091][T11802] netlink: 'syz.3.1518': attribute type 6 has an invalid length. [ 243.989714][ T30] audit: type=1804 audit(1783376770.298:3): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1520" name="/newroot/365/cgroup.controllers" dev="tmpfs" ino=1874 res=1 errno=0 [ 243.997387][T11804] ÿ speed is unknown, defaulting to 1000 [ 244.021122][T11802] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1518'. [ 244.084512][ T30] audit: type=1800 audit(1783376770.338:4): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1520" name="cgroup.controllers" dev="tmpfs" ino=1874 res=0 errno=0 [ 244.284181][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 244.495303][T11824] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 244.615366][T11830] netlink: 'syz.6.1527': attribute type 1 has an invalid length. [ 244.650201][T11830] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1527'. [ 244.890880][T11850] netlink: 'syz.5.1531': attribute type 1 has an invalid length. [ 245.009895][T11850] bond6: entered promiscuous mode [ 245.018208][T11850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.049121][T11857] netlink: 'syz.3.1532': attribute type 21 has an invalid length. [ 245.066602][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1533'. [ 245.082711][T11857] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.106167][T11856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.113710][T11856] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 245.123960][T11856] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 245.137280][T11856] bond6: (slave vti0): making interface the new active one [ 245.146280][T11856] vti0: entered promiscuous mode [ 245.153561][T11856] bond6: (slave vti0): Enslaving as an active interface with an up link [ 245.162608][T11846] syzkaller0: entered promiscuous mode [ 245.168210][T11846] syzkaller0: entered allmulticast mode [ 245.338833][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'. [ 245.408425][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 245.508205][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 245.525229][T11874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.728326][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 245.758920][T11892] syz_tun: entered allmulticast mode [ 245.783163][T11892] lo: entered allmulticast mode [ 245.816238][T11891] syz_tun: left allmulticast mode [ 245.929878][T11903] netlink: 'syz.0.1549': attribute type 2 has an invalid length. [ 246.029330][T11903] : entered promiscuous mode [ 248.338854][T11920] netlink: 'syz.3.1554': attribute type 5 has an invalid length. [ 248.742473][T11965] netlink: 'syz.5.1567': attribute type 3 has an invalid length. [ 248.984452][T11975] veth0: entered promiscuous mode [ 248.997610][T11976] netlink: 'syz.6.1570': attribute type 9 has an invalid length. [ 249.093335][T11973] veth0: left promiscuous mode [ 249.176925][T11983] Cannot find set identified by id 65534 to match [ 249.466377][T11998] __nla_validate_parse: 7 callbacks suppressed [ 249.466396][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 249.467894][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'. [ 249.603043][T12000] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1579'. [ 249.648236][T11998] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 249.685756][T11998] bond10 (unregistering): Released all slaves [ 249.821655][T12000] bond7 (unregistering): Released all slaves [ 250.103044][T12042] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 250.112090][T12042] bond1: option packets_per_slave: allowed values 0 - 65535 [ 250.123947][T12042] bond1 (unregistering): Released all slaves [ 250.274451][T12052] syzkaller0: entered promiscuous mode [ 250.301681][T12052] syzkaller0: entered allmulticast mode [ 250.353232][T12052] xt_nfacct: accounting object `syz1' does not exist [ 250.495781][T12052] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 250.505535][T12067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1595'. [ 250.532223][T12052] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1592'. [ 250.543140][T12067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1595'. [ 250.555739][T12069] openvswitch: netlink: Missing key (keys=40, expected=100) [ 250.556299][T12067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1595'. [ 250.572054][T12052] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 250.599633][T12067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.035910][T12095] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1602'. [ 251.063208][T12100] netlink: 'syz.5.1605': attribute type 12 has an invalid length. [ 251.071949][T12100] netlink: 'syz.5.1605': attribute type 29 has an invalid length. [ 251.101508][T12100] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1605'. [ 251.113226][T12100] netlink: 'syz.5.1605': attribute type 1 has an invalid length. [ 251.132649][T12107] veth1_macvtap: left promiscuous mode [ 251.142045][T12107] macsec0: entered promiscuous mode [ 251.160195][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.364965][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1611'. [ 251.491156][T12115] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 251.510479][T12125] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 251.529578][T12124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 251.543688][T12115] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 251.609059][T12124] ÿ speed is unknown, defaulting to 1000 [ 251.697041][T12137] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 251.893869][T12146] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.293914][T12160] syz_tun: entered allmulticast mode [ 252.333269][T12166] syzkaller0: entered promiscuous mode [ 252.341086][T12166] syzkaller0: entered allmulticast mode [ 252.360660][T12166] Bluetooth: MGMT ver 1.23 [ 252.384136][T12152] syz_tun: left allmulticast mode [ 253.112885][T12201] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 253.383119][T12217] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 253.911817][T12245] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 254.094896][T12260] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20002 [ 254.255734][T12265] validate_nla: 1 callbacks suppressed [ 254.255755][T12265] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 254.337754][T12265] 8021q: adding VLAN 0 to HW filter on device bond11 [ 254.394737][T12271] bond6: (slave veth0_to_bond): Releasing active interface [ 254.458747][T12271] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.573900][T12271] netlink: 'syz.0.1656': attribute type 13 has an invalid length. [ 254.754233][T12294] __nla_validate_parse: 7 callbacks suppressed [ 254.754248][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1664'. [ 254.780265][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1664'. [ 254.793779][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1662'. [ 254.826068][T12298] tipc: Trying to set illegal importance in message [ 254.828044][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1664'. [ 255.109224][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 255.126992][T12317] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 255.236834][T12317] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 255.371301][T12320] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 255.379904][T12317] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 255.412182][T12320] xt_TCPMSS: Only works on TCP SYN packets [ 255.475575][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 255.515167][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 255.519436][T12332] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1673'. [ 255.557602][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 255.603761][ T7455] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 255.625853][T12317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.741782][T12341] netlink: 'syz.1.1676': attribute type 9 has an invalid length. [ 255.770721][ T7464] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 255.908818][T12342] netlink: 'syz.6.1675': attribute type 16 has an invalid length. [ 255.938213][T12342] netlink: 'syz.6.1675': attribute type 17 has an invalid length. [ 256.058588][T12342] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 256.185842][T12363] netlink: 'syz.0.1682': attribute type 6 has an invalid length. [ 256.268116][T12367] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.285665][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.455348][T12371] netlink: 'syz.1.1685': attribute type 13 has an invalid length. [ 256.813787][T12398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1691'. [ 256.882499][ T5757] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.896070][T12393] syzkaller0: entered promiscuous mode [ 256.902663][T12393] syzkaller0: entered allmulticast mode [ 257.052992][T12400] bond3: entered promiscuous mode [ 257.058226][T12400] bond3: entered allmulticast mode [ 257.077924][T12410] sctp: [Deprecated]: syz.6.1695 (pid 12410) Use of int in max_burst socket option deprecated. [ 257.077924][T12410] Use struct sctp_assoc_value instead [ 257.205216][T12414] netlink: 'syz.1.1696': attribute type 10 has an invalid length. [ 257.404679][T12426] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 257.445198][T12426] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 257.520707][ T5743] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.023285][T12470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.054182][T12470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.081180][T12470] bond0 (unregistering): Released all slaves [ 258.129044][T12482] openvswitch: netlink: Message has 4 unknown bytes. [ 258.475560][T12497] bond7: entered promiscuous mode [ 258.502954][T12497] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.138347][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.247377][T12540] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 259.729459][T12565] validate_nla: 2 callbacks suppressed [ 259.729478][T12565] netlink: 'syz.5.1741': attribute type 5 has an invalid length. [ 259.770012][T12565] netlink: 'syz.5.1741': attribute type 6 has an invalid length. [ 259.805574][T12565] __nla_validate_parse: 11 callbacks suppressed [ 259.805593][T12565] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1741'. [ 259.814500][T12570] netlink: 'syz.6.1743': attribute type 1 has an invalid length. [ 259.929567][T12570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.973964][T12574] vlan3: entered promiscuous mode [ 259.988989][T12574] geneve1: entered promiscuous mode [ 259.997069][T12574] vlan3: entered allmulticast mode [ 260.003268][T12574] geneve1: entered allmulticast mode [ 260.037902][T12576] bond1: (slave gretap1): making interface the new active one [ 260.053453][T12576] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 260.068475][T12580] tipc: Enabled bearer , priority 11 [ 260.093528][T12580] netlink: 'syz.5.1746': attribute type 11 has an invalid length. [ 260.101764][T12580] netlink: 4312 bytes leftover after parsing attributes in process `syz.5.1746'. [ 260.334090][T12604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.493869][T12609] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 260.507869][T12615] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 260.527053][T12618] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 260.548119][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1753'. [ 260.664082][T12609] bond8: entered promiscuous mode [ 260.670777][T12609] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.708323][T12627] bond8: (slave bridge2): making interface the new active one [ 260.718819][T12627] bridge2: entered promiscuous mode [ 260.728297][T12627] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 261.115032][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 261.383875][T12674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.420667][T12674] openvswitch: netlink: IP tunnel dst address not specified [ 261.446115][T12678] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.1771'. [ 261.473690][T12678] openvswitch: netlink: Message has 8 unknown bytes. [ 261.582024][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 261.616941][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 261.668525][T12696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.739724][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 261.759713][T12696] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1768'. [ 261.769536][T12700] netlink: 'syz.3.1777': attribute type 6 has an invalid length. [ 261.780309][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 261.813647][ T7464] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.822622][T12700] netlink: 'syz.3.1777': attribute type 6 has an invalid length. [ 261.830513][ T7464] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.846620][ T7464] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.859308][ T7464] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.022514][T12719] netlink: 'syz.3.1782': attribute type 6 has an invalid length. [ 262.033986][T12719] netlink: 'syz.3.1782': attribute type 5 has an invalid length. [ 262.180784][T12726] sit2: entered promiscuous mode [ 262.186184][T12726] sit2: entered allmulticast mode [ 262.191695][T12728] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 262.283120][T12728] bond4: entered promiscuous mode [ 262.288794][T12728] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.474686][T12735] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 262.951449][T12766] netlink: 'syz.3.1795': attribute type 23 has an invalid length. [ 263.448529][T12799] veth0_macvtap: Caught tx_queue_len zero misconfig [ 264.053442][T12838] syzkaller0: entered promiscuous mode [ 264.067994][T12838] syzkaller0: entered allmulticast mode [ 264.442231][T12868] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.506609][T12870] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 264.564859][T12874] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 264.580585][T12874] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 264.846367][T12891] __nla_validate_parse: 9 callbacks suppressed [ 264.846386][T12891] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1831'. [ 265.050230][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 265.098981][T12904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1835'. [ 265.124528][T12906] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1836'. [ 265.506196][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'. [ 265.606668][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 265.642828][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 265.714531][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 265.728038][T12941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1846'. [ 265.777688][T12929] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1842'. [ 265.923602][T12948] validate_nla: 1 callbacks suppressed [ 265.923616][T12948] netlink: 'syz.6.1848': attribute type 29 has an invalid length. [ 265.968321][T12949] netlink: 'syz.6.1848': attribute type 29 has an invalid length. [ 266.139466][T12951] netlink: 'syz.6.1849': attribute type 10 has an invalid length. [ 266.159903][T12951] netlink: 'syz.6.1849': attribute type 10 has an invalid length. [ 267.137154][T12986] syzkaller0: entered promiscuous mode [ 267.147699][T12986] syzkaller0: entered allmulticast mode [ 267.384218][T12999] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 267.406192][T12999] ÿ speed is unknown, defaulting to 1000 [ 267.489140][T13013] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 267.570857][T13019] netlink: 'syz.5.1869': attribute type 3 has an invalid length. [ 267.958295][T13037] IPVS: Unknown mcast interface: nicvf0 [ 268.093152][T13025] syzkaller0: entered promiscuous mode [ 268.101061][T13025] syzkaller0: entered allmulticast mode [ 268.149444][T13053] tunl0: Caught tx_queue_len zero misconfig [ 268.593858][T13080] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.637517][T13064] bond5: entered promiscuous mode [ 268.659209][T13064] bond5: entered allmulticast mode [ 268.672965][T13085] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 268.699621][T13085] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 268.759205][T13091] syzkaller0: entered promiscuous mode [ 268.773311][T13091] syzkaller0: entered allmulticast mode [ 268.930389][T13091] bond2: entered promiscuous mode [ 268.945048][T13091] bond2: entered allmulticast mode [ 269.082357][T13109] macsec1: entered allmulticast mode [ 269.089625][T13109] bond0: entered allmulticast mode [ 269.110753][T13109] bond_slave_0: entered allmulticast mode [ 269.121365][T13109] bond_slave_1: entered allmulticast mode [ 269.140579][T13109] bond_slave_0: entered promiscuous mode [ 269.147919][T13109] bond_slave_1: entered promiscuous mode [ 269.191331][T13109] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 269.212642][T13109] bond0: left allmulticast mode [ 269.223468][T13109] bond_slave_0: left allmulticast mode [ 269.233493][T13109] bond_slave_1: left allmulticast mode [ 269.287509][T13120] vlan0: entered allmulticast mode [ 269.303191][T13120] bond0: entered allmulticast mode [ 269.308778][ T5814] bond_slave_0: left promiscuous mode [ 269.315855][ T5814] bond_slave_1: left promiscuous mode [ 269.335162][T13112] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 269.352173][T13112] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 269.433276][T13143] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.538606][T13147] veth0: entered promiscuous mode [ 269.583694][T13147] veth0: left promiscuous mode [ 269.738165][T13160] bond12: entered promiscuous mode [ 269.744208][T13160] 8021q: adding VLAN 0 to HW filter on device bond12 [ 269.763848][T13160] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 269.969048][T13173] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 270.026402][T13175] __nla_validate_parse: 22 callbacks suppressed [ 270.026422][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1911'. [ 270.106510][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1912'. [ 270.159871][T13188] netlink: 'syz.1.1916': attribute type 64 has an invalid length. [ 270.168379][T13188] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1916'. [ 270.178710][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1912'. [ 270.207381][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1912'. [ 270.219717][T13189] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1915'. [ 270.273598][T13189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1915'. [ 270.325083][T13198] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1915'. [ 270.352350][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1919'. [ 270.361876][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1919'. [ 270.875450][T13232] netlink: 'syz.1.1925': attribute type 3 has an invalid length. [ 271.276861][T13250] bond6: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 271.303768][T13250] bond6: (slave ip6_vti0): Error -95 calling set_mac_address [ 271.327082][T13268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.364828][T13250] bridge_slave_0: left allmulticast mode [ 271.380466][T13250] bridge_slave_0: left promiscuous mode [ 271.386382][T13250] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.404899][T13250] bridge_slave_1: left allmulticast mode [ 271.423441][T13250] bridge_slave_1: left promiscuous mode [ 271.429347][T13250] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.443829][T13250] .`: (slave bond_slave_0): Releasing backup interface [ 271.455585][T13250] .`: (slave bond_slave_1): Releasing backup interface [ 271.467849][T13250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.060771][T13299] netlink: 'syz.6.1946': attribute type 4 has an invalid length. [ 272.277078][T13314] netlink: 'syz.1.1950': attribute type 39 has an invalid length. [ 272.289225][T13313] netlink: 'syz.1.1950': attribute type 39 has an invalid length. [ 272.428102][T13316] only policy match revision 0 supported [ 272.428124][T13316] unable to load match [ 272.466246][T13329] tipc: Invalid UDP bearer configuration [ 272.466303][T13329] tipc: Enabling of bearer rejected, failed to enable media [ 272.757989][T13347] netlink: 'syz.6.1959': attribute type 9 has an invalid length. [ 272.789273][T13349] netlink: 'syz.3.1957': attribute type 12 has an invalid length. [ 272.813542][T13349] netlink: 'syz.3.1957': attribute type 11 has an invalid length. [ 273.004567][T13359] IPv6: sit1: Disabled Multicast RS [ 273.453305][T13392] openvswitch: netlink: EtherType 0 is less than min 600 [ 274.152464][T13435] sctp: [Deprecated]: syz.5.1981 (pid 13435) Use of int in max_burst socket option deprecated. [ 274.152464][T13435] Use struct sctp_assoc_value instead [ 274.671992][T13472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.282834][T13467] syz.0.1987 (13467) used greatest stack depth: 17688 bytes left [ 275.817005][T13506] __nla_validate_parse: 14 callbacks suppressed [ 275.817026][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 275.855895][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 275.887256][T13515] netlink: 'syz.5.2000': attribute type 1 has an invalid length. [ 275.897502][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 275.902920][T13516] netlink: 'syz.5.2000': attribute type 1 has an invalid length. [ 275.981650][T13523] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1999'. [ 275.982633][T13515] bond10: entered promiscuous mode [ 275.997407][T13515] 8021q: adding VLAN 0 to HW filter on device bond10 [ 276.023452][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2001'. [ 276.353751][T13539] syzkaller0: entered promiscuous mode [ 276.377201][T13539] syzkaller0: entered allmulticast mode [ 276.436030][T13544] openvswitch: netlink: Message has 12 unknown bytes. [ 276.463202][T13548] openvswitch: netlink: Message has 12 unknown bytes. [ 276.479568][T13549] netlink: 524 bytes leftover after parsing attributes in process `syz.5.2010'. [ 276.481751][T13544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.530611][T13548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.633604][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2013'. [ 276.661945][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2013'. [ 276.704574][T13556] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 276.744991][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2014'. [ 276.792404][T13558] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2014'. [ 276.866322][T13568] xt_l2tp: invalid flags combination: 8 [ 277.014844][T13578] netlink: 'syz.5.2018': attribute type 1 has an invalid length. [ 277.137050][T13578] 8021q: adding VLAN 0 to HW filter on device bond11 [ 277.152936][T13582] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 277.208788][T13588] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 277.268990][T13600] bond7: entered allmulticast mode [ 277.337658][T13600] ipvlan2: entered promiscuous mode [ 277.392354][T13608] dvmrp8: entered allmulticast mode [ 277.407274][T13599] bond7: left allmulticast mode [ 277.429257][T13611] netlink: 'syz.1.2025': attribute type 2 has an invalid length. [ 277.452804][T13611] netlink: 'syz.1.2025': attribute type 8 has an invalid length. [ 277.656818][T13623] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 277.740761][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 277.753676][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 277.777272][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 278.024871][T13643] syzkaller0: entered promiscuous mode [ 278.048927][T13643] syzkaller0: entered allmulticast mode [ 278.448658][ T5743] vxcan1 speed is unknown, defaulting to 1000 [ 278.473689][T13617] infiniband syz2: set active [ 278.491448][T13617] infiniband syz2: added vxcan1 [ 278.570513][T13617] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 278.581984][T13672] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 278.638548][T13617] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 278.656327][T13617] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 278.769271][T13617] RDS/IB: syz2: added [ 278.779504][T13617] smc: adding ib device syz2 with port count 1 [ 278.797190][T13617] smc: ib device syz2 port 1 has no pnetid [ 278.825212][ T5814] vxcan1 speed is unknown, defaulting to 1000 [ 278.867647][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 279.041636][T13689] tun0: tun_chr_ioctl cmd 1074025675 [ 279.061992][T13689] tun0: persist disabled [ 279.194458][T13698] openvswitch: netlink: Message has 1 unknown bytes. [ 279.210485][T13698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.545945][T13716] netlink: 'syz.1.2057': attribute type 15 has an invalid length. [ 279.651741][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 279.967888][T13740] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 279.987359][T13740] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 280.239599][T13743] syzkaller0: entered promiscuous mode [ 280.248454][T13743] syzkaller0: entered allmulticast mode [ 280.347084][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 282.788300][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 283.070772][T13789] __nla_validate_parse: 21 callbacks suppressed [ 283.070790][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2080'. [ 283.521449][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 283.658984][T13826] sctp: [Deprecated]: syz.3.2090 (pid 13826) Use of int in maxseg socket option. [ 283.658984][T13826] Use struct sctp_assoc_value instead [ 284.057229][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2095'. [ 284.188155][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 284.308845][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2098'. [ 284.321482][T13863] netlink: 'syz.6.2098': attribute type 3 has an invalid length. [ 284.341113][T13863] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2098'. [ 284.353014][T13865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.711308][T13884] syzkaller0: entered promiscuous mode [ 284.725728][T13884] syzkaller0: entered allmulticast mode [ 284.861187][T13617] vxcan1 speed is unknown, defaulting to 1000 [ 285.093792][T13902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2110'. [ 285.122320][T13902] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2110'. [ 285.442371][T13922] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.2116'. [ 285.642453][T13925] netlink: 'syz.1.2117': attribute type 21 has an invalid length. [ 285.659864][T13925] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2117'. [ 285.662260][T13929] xt_HMARK: spi-set and port-set can't be combined [ 285.670104][T13925] netlink: 'syz.1.2117': attribute type 5 has an invalid length. [ 285.687628][T13925] netlink: 'syz.1.2117': attribute type 6 has an invalid length. [ 285.695987][T13925] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2117'. [ 285.905368][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 286.385593][T13968] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 286.484323][T13981] batadv_slave_0: Caught tx_queue_len zero misconfig [ 286.651346][T13989] tipc: Enabling of bearer rejected, failed to enable media [ 286.693942][T13989] netlink: 'syz.6.2134': attribute type 13 has an invalid length. [ 286.956252][T14007] macsec1: entered promiscuous mode [ 286.999448][T14012] netlink: 'syz.6.2140': attribute type 19 has an invalid length. [ 287.190072][T14021] team0: Caught tx_queue_len zero misconfig [ 287.415656][T14037] x_tables: duplicate underflow at hook 1 [ 287.676211][T14056] smc: net device team0 applied user defined pnetid SYZ2 [ 287.715275][T14062] syzkaller1: entered promiscuous mode [ 287.721395][T14062] syzkaller1: entered allmulticast mode [ 288.075678][T14081] veth1_to_team: Caught tx_queue_len zero misconfig [ 288.099769][T14084] __nla_validate_parse: 69 callbacks suppressed [ 288.099787][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 288.134849][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 288.256230][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 288.275867][T14091] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2161'. [ 288.440936][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 288.614504][T14100] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 288.857650][T14124] netlink: 'syz.0.2170': attribute type 2 has an invalid length. [ 289.058270][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 289.085422][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2176'. [ 289.112575][T14144] netlink: 'syz.6.2176': attribute type 1 has an invalid length. [ 289.124207][T14144] netlink: 'syz.6.2176': attribute type 1 has an invalid length. [ 289.135455][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2176'. [ 289.282315][T14151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.289650][T14151] IPv6: NLM_F_CREATE should be set when creating new route [ 289.296957][T14151] IPv6: NLM_F_CREATE should be set when creating new route [ 289.449601][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 289.609840][T14170] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 289.634835][T14173] veth1_to_bond: entered allmulticast mode [ 289.644245][T14173] veth1_to_bond: entered promiscuous mode [ 289.708245][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 289.746812][T14174] veth1_to_bond (unregistering): left allmulticast mode [ 289.761949][T14174] veth1_to_bond (unregistering): left promiscuous mode [ 289.784833][T14182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.804215][T14174] bond0: (slave bond_slave_1): Releasing backup interface [ 290.094583][T14204] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 290.106531][T14204] bond3 (unregistering): Released all slaves [ 290.418949][T14222] netlink: 'syz.5.2200': attribute type 33 has an invalid length. [ 290.533841][T14231] sctp: [Deprecated]: syz.0.2204 (pid 14231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.533841][T14231] Use struct sctp_sack_info instead [ 290.586489][T14222] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 290.625538][T14222] bond12 (unregistering): Released all slaves [ 290.712412][T14250] xt_hashlimit: size too large, truncated to 1048576 [ 290.863119][T14236] syzkaller0: entered promiscuous mode [ 290.928192][T14231] netlink: 'syz.0.2204': attribute type 21 has an invalid length. [ 290.943136][T14236] syzkaller0: entered allmulticast mode [ 291.109217][T14231] bond13: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 291.163384][T14231] bond13 (unregistering): Released all slaves [ 291.409021][T14280] xt_connbytes: Forcing CT accounting to be enabled [ 291.430713][T14280] Cannot find set identified by id 65534 to match [ 291.465456][T14280] tipc: Enabling of bearer rejected, failed to enable media [ 291.551270][T14284] ip6tnl0: Caught tx_queue_len zero misconfig [ 291.894117][T14282] syzkaller1: entered allmulticast mode [ 292.043060][T14317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.064042][T14317] batadv_slave_0: entered promiscuous mode [ 292.157681][T14320] xt_socket: unknown flags 0x8 [ 292.187952][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.477174][T14341] bond3: entered promiscuous mode [ 292.482794][T14341] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.612205][T14352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.619646][T14352] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 292.633455][T14352] bond3: (slave ip6gre1): Error -95 calling set_mac_address [ 292.913850][T14364] IPVS: set_ctl: invalid protocol: 2 100.1.1.5:20002 [ 292.923908][T14371] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 293.117368][T14371] bond7: entered promiscuous mode [ 293.145443][T14371] 8021q: adding VLAN 0 to HW filter on device bond7 [ 293.270465][T14379] bond7: (slave bridge6): making interface the new active one [ 293.299587][T14379] bridge6: entered promiscuous mode [ 293.323139][T14379] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 293.621920][T14404] netlink: 'syz.6.2250': attribute type 1 has an invalid length. [ 293.795451][T14411] __nla_validate_parse: 14 callbacks suppressed [ 293.795470][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 293.840613][T14411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2251'. [ 294.041961][T14423] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2255'. [ 294.052231][T14423] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2255'. [ 294.122574][T14424] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2255'. [ 294.156424][T14431] netlink: 'syz.6.2257': attribute type 8 has an invalid length. [ 294.168109][T14424] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2255'. [ 294.465582][ T30] audit: type=1800 audit(1783376820.778:5): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2264" name="memory.events" dev="tmpfs" ino=2406 res=0 errno=0 [ 294.489806][T14444] team0: Device ipvlan3 is already an upper device of the team interface [ 294.604102][T14453] gtp0: entered allmulticast mode [ 294.820379][T14469] netlink: 'syz.0.2267': attribute type 11 has an invalid length. [ 295.502597][T14519] netlink: 'syz.1.2279': attribute type 6 has an invalid length. [ 295.555296][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2279'. [ 295.583664][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2279'. [ 295.662978][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 295.823903][T14533] xt_policy: output policy not valid in PREROUTING and INPUT [ 295.856008][T14530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.903581][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2286'. [ 295.924865][T14530] netlink: 'syz.6.2281': attribute type 3 has an invalid length. [ 296.258726][T14558] netlink: 'syz.6.2293': attribute type 1 has an invalid length. [ 296.514705][T14574] netlink: 'syz.3.2296': attribute type 11 has an invalid length. [ 296.526625][T14570] netlink: 'syz.1.2295': attribute type 7 has an invalid length. [ 296.547940][T14570] netlink: 'syz.1.2295': attribute type 8 has an invalid length. [ 297.206302][T14609] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.682349][T14638] netlink: 'syz.3.2316': attribute type 3 has an invalid length. [ 297.844093][T14644] netlink: 'syz.1.2317': attribute type 2 has an invalid length. [ 297.857981][T14644] netlink: 'syz.1.2317': attribute type 2 has an invalid length. [ 297.869531][T14644] netlink: 'syz.1.2317': attribute type 2 has an invalid length. [ 298.226119][T14653] vlan1: entered allmulticast mode [ 298.240009][T14653] veth0_vlan: entered allmulticast mode [ 298.402717][T14655] IPVS: set_ctl: invalid protocol: 56 172.20.20.170:20001 [ 298.874251][T14681] __nla_validate_parse: 13 callbacks suppressed [ 298.874270][T14681] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2328'. [ 298.958093][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 299.005927][T14691] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2332'. [ 299.203274][T14695] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2333'. [ 299.477320][T14706] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 299.479237][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2336'. [ 299.507253][T14712] : renamed from ip6_vti0 (while UP) [ 299.523284][T14706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.537662][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2336'. [ 299.914760][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 299.948657][T14738] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 300.308480][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2354'. [ 300.370824][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 300.396066][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 300.440440][ T31] INFO: task syz.2.683:8478 blocked for more than 143 seconds. [ 300.461887][ T31] Not tainted syzkaller #0 [ 300.482949][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.502080][ T31] task:syz.2.683 state:D stack:26536 pid:8478 tgid:8477 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 300.527406][ T31] Call Trace: [ 300.537725][ T31] [ 300.544165][ T31] __schedule+0x17d9/0x56c0 [ 300.548968][ T31] ? __lock_acquire+0x683/0x2cf0 [ 300.555240][ T31] ? __lock_acquire+0x683/0x2cf0 [ 300.560811][ T31] ? __pfx___schedule+0x10/0x10 [ 300.565794][ T31] ? schedule+0x90/0x2b0 [ 300.570643][ T31] schedule+0x164/0x2b0 [ 300.575007][ T31] schedule_preempt_disabled+0x13/0x30 [ 300.581324][ T31] __mutex_lock+0x7bf/0x1550 [ 300.586147][ T31] ? __mutex_lock+0x5d4/0x1550 [ 300.601344][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 300.616682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 300.626378][ T31] ? rcu_is_watching+0x15/0xb0 [ 300.631689][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 300.637452][ T31] ? __kmalloc_noprof+0x396/0x720 [ 300.645389][T14781] IPVS: set_ctl: invalid protocol: 58 172.30.0.6:20003 [ 300.652916][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 300.659140][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 300.666231][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 300.673514][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 300.679266][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.686366][ T31] ? bpf_lsm_capable+0x9/0x20 [ 300.691445][ T31] ? security_capable+0x7e/0x2c0 [ 300.701656][ T31] genl_rcv_msg+0x614/0x7a0 [ 300.709477][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.715984][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 300.722597][ T31] netlink_rcv_skb+0x226/0x4a0 [ 300.727529][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.733376][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.738850][ T31] ? down_read+0x2be/0x330 [ 300.743888][ T31] genl_rcv+0x28/0x40 [ 300.747973][ T31] netlink_unicast+0x7bb/0x940 [ 300.753341][ T31] netlink_sendmsg+0x813/0xb40 [ 300.758278][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.765198][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.770711][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.776158][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 300.781811][ T31] ____sys_sendmsg+0x54e/0x850 [ 300.786746][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.792889][ T31] ? import_iovec+0x73/0xa0 [ 300.797556][ T31] ___sys_sendmsg+0x2a5/0x360 [ 300.802818][ T31] ? __lock_acquire+0x683/0x2cf0 [ 300.807964][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.813631][ T31] ? futex_wake+0x51b/0x5f0 [ 300.818321][ T31] ? __fget_files+0x2a/0x420 [ 300.823754][ T31] ? __fget_files+0x3a2/0x420 [ 300.828616][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 300.834073][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.839720][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.846386][ T31] do_syscall_64+0x174/0x580 [ 300.860220][ T31] ? trace_irq_disable+0x3b/0x140 [ 300.869980][ T31] ? clear_bhb_loop+0x40/0x90 [ 300.880571][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.889869][ T31] RIP: 0033:0x7f82aab9de59 [ 300.894390][ T31] RSP: 002b:00007f82aba87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.903093][ T31] RAX: ffffffffffffffda RBX: 00007f82aae25fa0 RCX: 00007f82aab9de59 [ 300.911516][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000005 [ 300.919543][ T31] RBP: 00007f82aac33e6f R08: 0000000000000000 R09: 0000000000000000 [ 300.927813][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.936902][ T31] R13: 00007f82aae26038 R14: 00007f82aae25fa0 R15: 00007fffdc4b43c8 [ 300.945323][ T31] [ 300.948632][ T31] [ 300.948632][ T31] Showing all locks held in the system: [ 300.956421][ T31] 1 lock held by khungtaskd/31: [ 300.962305][ T31] #0: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 300.983291][ T31] 3 locks held by kworker/u8:5/74: [ 300.988511][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 301.000917][ T31] #1: ffffc9000229fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 301.012703][ T31] #2: ffffffff8eb5fdf8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 301.022942][ T31] 2 locks held by getty/5379: [ 301.027629][ T31] #0: ffff8880364790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 301.037742][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 301.048579][ T31] 2 locks held by syz.4.519/7830: [ 301.053661][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.062183][ T31] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 301.073618][ T31] 2 locks held by syz.2.683/8478: [ 301.078673][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.087457][ T31] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 301.097774][ T31] [ 301.100173][ T31] ============================================= [ 301.100173][ T31] [ 301.108585][ T31] NMI backtrace for cpu 1 [ 301.108620][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 301.108641][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.108652][ T31] Call Trace: [ 301.108660][ T31] [ 301.108667][ T31] dump_stack_lvl+0xe8/0x150 [ 301.108700][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 301.108722][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.108751][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 301.108775][ T31] sys_info+0x135/0x170 [ 301.108790][ T31] watchdog+0xfd7/0x1030 [ 301.108820][ T31] ? watchdog+0x1c7/0x1030 [ 301.108848][ T31] kthread+0x388/0x470 [ 301.108874][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.108893][ T31] ? __pfx_kthread+0x10/0x10 [ 301.108920][ T31] ret_from_fork+0x514/0xb70 [ 301.108949][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 301.108974][ T31] ? __switch_to+0xc89/0x1420 [ 301.108998][ T31] ? __pfx_kthread+0x10/0x10 [ 301.109024][ T31] ret_from_fork_asm+0x1a/0x30 [ 301.109056][ T31] [ 301.109063][ T31] Sending NMI from CPU 1 to CPUs 0: [ 301.219481][ C0] NMI backtrace for cpu 0 [ 301.219499][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 301.219518][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.219529][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 301.219557][ C0] Code: 2c 81 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 19 1b 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 301.219572][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 301.219588][ C0] RAX: 000000000012cc65 RBX: ffffffff819ab370 RCX: 0000000080000001 [ 301.219600][ C0] RDX: 0000000000000001 RSI: ffffffff8e22940e RDI: ffffffff8c4bd280 [ 301.219612][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 301.219625][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 301.219636][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 301.219650][ C0] FS: 0000000000000000(0000) GS:ffff888124f5a000(0000) knlGS:0000000000000000 [ 301.219664][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.219675][ C0] CR2: 00007fcc41deb158 CR3: 0000000022ed8000 CR4: 00000000003526f0 [ 301.219691][ C0] Call Trace: [ 301.219700][ C0] [ 301.219708][ C0] default_idle+0x9/0x20 [ 301.219732][ C0] default_idle_call+0x72/0xb0 [ 301.219757][ C0] do_idle+0x2e0/0x540 [ 301.219781][ C0] ? __pfx_do_idle+0x10/0x10 [ 301.219808][ C0] cpu_startup_entry+0x43/0x60 [ 301.219830][ C0] rest_init+0x2de/0x300 [ 301.219845][ C0] start_kernel+0x392/0x3e0 [ 301.219867][ C0] x86_64_start_reservations+0x24/0x30 [ 301.219892][ C0] x86_64_start_kernel+0x137/0x1b0 [ 301.219915][ C0] common_startup_64+0x13e/0x157 [ 301.219940][ C0] [ 301.220601][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 301.220617][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 301.220638][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.220649][ T31] Call Trace: [ 301.220658][ T31] [ 301.220666][ T31] vpanic+0x56c/0xa60 [ 301.220696][ T31] ? __pfx___schedule+0x10/0x10 [ 301.220719][ T31] ? __pfx_vpanic+0x10/0x10 [ 301.220756][ T31] panic+0xc5/0xd0 [ 301.220781][ T31] ? __pfx_panic+0x10/0x10 [ 301.220806][ T31] ? preempt_schedule_common+0x82/0xd0 [ 301.220829][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 301.220852][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 301.220875][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 301.220898][ T31] watchdog+0x1030/0x1030 [ 301.220928][ T31] ? watchdog+0x1c7/0x1030 [ 301.220957][ T31] kthread+0x388/0x470 [ 301.220983][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.221002][ T31] ? __pfx_kthread+0x10/0x10 [ 301.221028][ T31] ret_from_fork+0x514/0xb70 [ 301.221058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 301.221084][ T31] ? __switch_to+0xc89/0x1420 [ 301.221108][ T31] ? __pfx_kthread+0x10/0x10 [ 301.221134][ T31] ret_from_fork_asm+0x1a/0x30 [ 301.221168][ T31] [ 301.518333][ T31] Kernel Offset: disabled [ 301.522649][ T31] Rebooting in 86400 seconds..