last executing test programs: 7.273287021s ago: executing program 4 (id=3929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000240], 0x700, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @esp={{0x0, 0x4, 0x1, 0x1, 0x0, 0x66, 0x0, 0x9, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@cipso={0x86, 0x0, 0xffffffffffffffff, [{0x5, 0x0, "3ee6498897f34bf088b2"}]}, @timestamp={0x44, 0x0, 0xdf, 0x0, 0x4, [0x1]}, @generic={0x88, 0x0, "bffbc04f"}]}}, {0x4d2, 0x401, @cc={0x1, 0x0, 0x8, 0x1, 0x8, 0x4, 0x3, [@runt="e27cb8cbd575ec13ae699a3c976aeb215b"]}, "d3"}}}}}}, 0x22) 6.657821362s ago: executing program 4 (id=3934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xfffa, 0x7, 0x7, 0x9, 0x8}, 0x14) bind$inet6(r5, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x7) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{&(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="f6", 0x1}], 0x1}}], 0x3ffffffffffffd1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x4) 5.6603894s ago: executing program 4 (id=3940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f00000016c0), &(0x7f0000001700)=0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x161042, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000140)=0x2, 0x4) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xffffffff) unshare(0x22020400) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, &(0x7f0000001600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f0000001680)=0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="7c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d3000000000000034001680300001802c000c801400180000f8ffff61080000040000008100000014000100010000007b0200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 4.967536409s ago: executing program 1 (id=3945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x20, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000000500)='X', 0x34000, 0x0, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e26, @broadcast}}, 0x140, 0x0, 0x0, 0x0, 0x4a, 0x4, 0x73}, 0x9c) 4.827621509s ago: executing program 4 (id=3947): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="610309000302e7947a"], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x170bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) 4.032475409s ago: executing program 1 (id=3955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0xffffffffffffff81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x50}}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000280)={'nat\x00', 0x0, [0x9, 0x6, 0x7, 0x8, 0x40]}, &(0x7f0000000300)=0x54) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 3.587663211s ago: executing program 2 (id=3957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2b, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a00)={r2, 0x0, 0x0}, 0x10) 3.142233082s ago: executing program 3 (id=3959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xe, 0x4000000, 0x1}, 0x70bd27, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x17}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000480)=0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, r3, 0x3f}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) 3.108042864s ago: executing program 3 (id=3960): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xff49, &(0x7f0000000140)}, &(0x7f0000000180)=0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$tipc(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000027c0)="7ca069", 0x3}, {0x0}], 0x2, 0x0, 0x0, 0x40080}, 0x4040) 3.025721179s ago: executing program 3 (id=3961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x28, 0x8, 0x5, 0xfffff004}, {0x6, 0xc0, 0x40}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x48) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000340)={'pim6reg0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_int(r4, &(0x7f0000000500)=0x7, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="3da751604cdde8f49209c0e1a77d583b45027c5adfc6d3b90e0fbb12eba73bfb717c8b2e4acd02997607d78850ad1244e39df14aa2166ca176efb620f535d6e03cd8612036b55ef05e298ff1375221f36f056c78925e693422477544ef75aa7262456899276f455ec592bc7cbd7387de42f6df3209e9f0aa52ef18f6e0fe721aee1747b2d1d247cd12021f2d", @ANYRES16=r6, @ANYBLOB="080428bd7000ffdbdf250f00000008002c007102000005002d000000000005002e000100000008003a00000000000800340000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.651812731s ago: executing program 2 (id=3962): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x1, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=r0, 0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)={0x120, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x110, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf", @typed={0x8, 0x96, 0x0, 0x0, @fd=r4}, @nested={0x65, 0xf1, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@empty}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x120}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000001a80)=ANY=[], &(0x7f0000001ac0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f00000019c0)=[{0xfffffffc, 0x2, 0xd, 0x8}], 0x10, 0x3}, 0x94) 1.648704431s ago: executing program 4 (id=3963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, r4, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800500150000000000080012400000000005000500020000000500040000000000160003"], 0x64}}, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x46, &(0x7f00000003c0), 0x1}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r8, @ANYBLOB="0819025bd21414aa"], 0x20}}, 0x4000040) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r8], 0x58}}, 0x0) 1.647257402s ago: executing program 0 (id=3964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="e3ffffff04000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x0, 0x201}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.584163101s ago: executing program 1 (id=3965): socket$packet(0x11, 0x2, 0x300) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000280)=[{&(0x7f00000002c0)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f00000008c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x3, 0x4, 0x0, @private=0xa010102, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@rand_addr=0x64010101}]}]}}}}}}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x1, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=0x1, 0x2f, 0x1, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000680)=[{&(0x7f00000006c0)="fb90", 0x2}], 0x1, 0x1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000880)={r6, r5, 0x4, r5}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup=r4, r0, 0x24, 0x0, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) (async) sendmsg(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="a5a05fada44d19519e812b2180fc7423a13cc51f1f", 0x15}, {&(0x7f0000000380)="aacc38e37d72bfd2fc141816b02cf9e00a54f265e577bc6a16e7cc387d1a8c11bcc659d43eda1acd48bfcac6b61ae9d09e374c55173f6843ed99728e608c0840b10c2b9d9bf25e8f7f8d54999b974da9b1d37d7780c786ca85974ccb2b01cf6c9a7a6884966d079335683048e394fd850de4f94b41ea075b2a8a41fa445c89", 0x7f}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="5fe3263a3985c9dceed1edc1c3", 0xd}, {&(0x7f0000001d80)="9cffe20d54248c91c2c35d39669a6849547beae6129aa8491844622b706d9cf08b2277a75984d05308edea4883c4d460019b684fcc", 0x35}, {&(0x7f0000001dc0)="bb4622dd67f7fd4f14355378722c06507680d307a49ab73cb0e536a315538ce669453d9ece5aaaff46f6", 0x2a}, {&(0x7f0000001e00)="eb80a44451d69ee06ef2f5bb18c19328161975dd0833795246836b373dda8c91fc3498c8b1422d40ca10729490a692a99df39c39c7b860e9fac3bcf6204acb0ba85a3026b43613f6455c6bfd95847e2d3a69aabb22d9419172296e94880e81b803c3f0b21dd0", 0x66}], 0x7}, 0x4080) 1.534795715s ago: executing program 2 (id=3966): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) (async, rerun: 32) ioctl$sock_proto_private(r0, 0x8b24, &(0x7f0000000100)) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000080)=0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000101030000000000000000000a0000073c0001802c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000bb0c000280"], 0x50}}, 0x0) (async) shutdown(r1, 0x2) 1.486832745s ago: executing program 0 (id=3967): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) unshare(0x26020480) r2 = socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 822.787877ms ago: executing program 1 (id=3968): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000100)=0x80000001, 0x4) close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000140)=0x80000001, 0x4) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000080)={{}, 0x6e}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000c40)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002c40)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000002c80)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000002cc0)=0x10, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x9d, "aff9f52b8e19510ed2d117e9955c30ea3cbf4bb9ac86a09a430c50c7371eb59822c2a042dec6506f33ef95a7552e5e12bd73d0dc4984d81ff9d5dd33cb4aa0fb7b3ec1edb14f988fb0be65c029068ca22ada450cfab8d52bbb2953044ebe1f4e40d87d46a97546f23c4417460b3b17d292105af157bcd6983110a695e58777fa3cc5438a73506fdabb233a9d5b03ac5f86491e7affbab9e4ca866b4543"}, &(0x7f00000002c0)=0xc1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002d40)={'veth0_to_bond\x00', 0x0}) bind$xdp(r2, &(0x7f0000002d80)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x100000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="18080000000010c30000000003fff800851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000b40)=""/222, 0x0, 0x8}, 0x78) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @private1, 0x8}, 0x1c) 746.606217ms ago: executing program 3 (id=3969): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="05174305", 0x4, 0x50, &(0x7f00000000c0)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xea, '\x00', 0x0, @sock_ops}, 0x48) 660.053674ms ago: executing program 0 (id=3970): r0 = socket$unix(0x1, 0x2, 0x0) unshare(0x20000400) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async, rerun: 64) connect$unix(r3, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (rerun: 64) close(0xffffffffffffffff) 656.882847ms ago: executing program 2 (id=3971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000091104000000000000500000700000000"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa5}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @exit, @call={0x85, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xbd}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd3, &(0x7f00000001c0)=""/211, 0x41000, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000400)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x10, 0x6, 0x1}, 0x10, 0x13fdd, r0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 580.480075ms ago: executing program 3 (id=3972): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) (async, rerun: 32) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c92535d", @ANYRES16=r3, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r8 = epoll_create(0x200) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000008}) (async) close(r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='\'\x00\x00\t', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf253f00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099007002000066000000"], 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x8881) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r10, 0x89e7, &(0x7f0000000f40)="00c3") r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) r14 = socket$inet(0xa, 0x801, 0x84) connect$inet(r14, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r14, 0x8) (async) r15 = accept4(r10, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r15, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x7}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x16, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES64=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000006b0cbe9d37ef1b246b2fe7ab55ee0007040000f0ffffffb702000008", @ANYRES32=0x1, @ANYRES64=r1], &(0x7f0000000480)='GPL\x00', 0x9702, 0x72, &(0x7f00000004c0)=""/114, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x10, 0x9, 0xb0dd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x1, 0xe, 0x6}, {0x0, 0x5, 0x10, 0x8c8f5b0e9df9bc8}, {0x5, 0x1, 0xf, 0x6}, {0x5, 0x1, 0x5, 0x4}, {0x2, 0x4, 0x5, 0x5}, {0x4, 0x4, 0x3, 0x6}, {0x3, 0x4, 0x5, 0x3}, {0x4, 0x1, 0xb, 0x1}, {0x5, 0x2, 0x0, 0xa}], 0x10, 0x7}, 0x94) 576.104283ms ago: executing program 1 (id=3973): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240880c0, &(0x7f0000000000)={0xa, 0xe20, 0x20, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r3, 0xa25cd5d97e5ae12b, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xdfcf5044da016759}, 0x40880) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000002a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002a40)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='.\x00\x00\x00\x00\x00', @ANYBLOB], 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002b00)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r7, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x7816, 0x41121}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000001}, @IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4000040) 492.093311ms ago: executing program 0 (id=3974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000180)=@caif, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d54792c15b99add7409530452abeb65f0d602251ff679bed"}]]}, 0x54}}, 0x400c8a4) 426.072517ms ago: executing program 2 (id=3975): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x56, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0xfd, 0xfffff00c}, {0x20, 0x0, 0x0, 0xa1f1}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xcd6}, 0x94) 378.704601ms ago: executing program 4 (id=3976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x14}}, 0x20008000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) socketpair(0x18, 0x3, 0x9df500, &(0x7f0000000440)) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge_slave_1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000700)={'wpan1\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) (rerun: 64) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001880)={0x24, r9, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000180), 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf2531000000050035007f00000008000200", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="084a0d005edaf2a7a30dbd9282bc6fd0e90717c1dcbf74253f876d2e530ee6401d8912048d324e3610d9986c4cedf7", @ANYRES32=r13, @ANYBLOB="05003500070000000500330007000000"], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x4044000) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80040000000800030046"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x22008870) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)={0x70, r6, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001500)={0xffffffffffffff04, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async, rerun: 64) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000a80)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3401bf0000", @ANYRES16=r3, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x40400c5) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xe, 0xc, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) 299.97265ms ago: executing program 0 (id=3977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000002700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 184.892145ms ago: executing program 0 (id=3978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="d135396fc11df40a49b940041ac05fd83547161b59a35d0885066c7d4d368232b4738eba4e49a959d48c75c12494e90db10f55f0efe1ebc1a6eba7c1728c78e183a946c21e245cf672e981146d8d9fb88fe848cb745725f3cf528455f7850977f42c0fb194aeeed48aff7c5edf2ed705e9d7763d5ccae044cde92325194d3f12896c5e94ec7e7bfdb1dc2bf68a537f8b3573cbc17ee50a5029470d000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0xc010) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[], 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0x13, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r6, 0x0, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x6, 0x14, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{r7}, &(0x7f0000001940), &(0x7f0000001980)=r8}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000019c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a00)={r8, r10, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000001a40)=ANY=[], 0x0) 161.716654ms ago: executing program 1 (id=3979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x2d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@generic="cbd30d11251c9a26"]}, @nested={0x4, 0x7}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x904}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x900}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x60}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a0100000a0900010073797a3000000000daad8bce323545ffd2e2148b6fc81aafb4493e2a68c391a7357de2a33d5b1c2aa5387879964b94405fa6fef914914c8b2087c675ebd91017ecce4a3f54a14ed4b65800809a4d7e962c86737baedc54aa2f2d1b62114ac2458c79f36b57ba46b2cae6bfb885bb60e7bfa2e0d986bc"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) 111.259229ms ago: executing program 2 (id=3980): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xae}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffc00}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x300}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c081) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc5fc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x44ff91a9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000580)={r0, &(0x7f0000000480)='nl80211\x00', 0x0, &(0x7f00000004c0)={@align=0x2c, {0x0, 0x2, 0x5, 0x7fff}}, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0xfffffffa}) recvfrom$binder_report(0xffffffffffffffff, &(0x7f00000005c0)={""/44, 0x0, ""/12, 0x0}, 0x80, 0x102, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r2, 0x802, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x37}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x73}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0xc}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa8, 0x2d}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008081) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r5) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r8, 0x34, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000900), &(0x7f0000000940)=r5}, 0x20) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040010}, 0x41) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c00), r0) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r10, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x2233dfe07e850a94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x10, 0x0, 0x0, 0x6, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x64, 0x0, 0x37, 0x4, 0x0, @private=0xa010100, @empty, {[@cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "f48e3b41541d5d1e75c2885d0d"}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000dc0)={@dev={0xfe, 0x80, '\x00', 0x3b}, 0x6f, r11}) getsockname$packet(r5, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e40)=0x14) close(r5) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e80), r12) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000000ec0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x128, 0x1403, 0x2, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x22004040}, 0x800) r13 = accept4(r5, 0x0, &(0x7f0000001100), 0x80000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r5) sendmsg$NL80211_CMD_UPDATE_FT_IES(r13, &(0x7f0000001480)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x106004}, 0xc, &(0x7f0000001440)={&(0x7f00000011c0)={0x250, r14, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0xe}}}}, [@NL80211_ATTR_IE={0x1d8, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x9, @device_b, 0x6, @value=@broadcast, 0x401, 0x9, @device_a, 0x2}}, @rann={0x7e, 0x15, {{0x0, 0xa}, 0x6, 0x2, @broadcast, 0x1, 0x9, 0xf757}}, @ibss={0x6, 0x2, 0x1000}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x49}}, @mic={0x8c, 0x18, {0x91f, "a9da6ac3c120", @long="9cd9ae42f1a95313a10a2fd4b7915019"}}, @ibss={0x6, 0x2, 0x7}, @rann={0x7e, 0x15, {{0x1, 0x7a}, 0x6, 0xfa, @device_a, 0xd4c, 0x0, 0x3}}, @fast_bss_trans={0x37, 0xf5, {0x24, 0x6, "373a4ff9bdeac0bb87c249de25d8c411", "fe2c12a15ff33f7114669cdd2d24c69e209effd297eec167e420ef0955a32c4b", "29e237604890d9f868f854c29edaffad78316703435fd0af256fc38f91751a02", [{0x1, 0x15, "f54b9ad3e58cd1da5bf01c163b54577a99cb0dcecf"}, {0x2, 0x12, "c96586f6a3076485a043b2b2209c30edf879"}, {0x3, 0x17, "8a093b8c90ba198d5c3c4784bef8963df64aaf7af4705d"}, {0x1, 0x1b, "5700b7788e5f5eb0229862f6feec6fa08062a1ee6f2c0ab8f39955"}, {0x1, 0x16, "3cb7c5d55526d4da3a09c70709f43bd988e94c69dca0"}, {0x1, 0x28, "30c4b96abc4c6584f622527c4fcaedb3fab93100e5051c2123921c90975cfeb384b8801c53999928"}]}}, @tim={0x5, 0x45, {0x48, 0x65, 0x2, "d5e8622fe2526386d034ad4dcfe7dc037c8e72f3a68654d2890f11797aa786660ff394f3ecb063468a8d091b69d68dfcae935cb553c1ab9420bce33b3983b8a4b1f3"}}, @peer_mgmt={0x75, 0x14, {0x0, 0x9, @void, @void, @val="ba785bde72527fe404961d478766ecdf"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xc0}, @NL80211_ATTR_IE={0x4e, 0x2a, [@perr={0x84, 0x48, {0x7, 0x4, [{{}, @device_b, 0xcde6, @void, 0x1}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x1d}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x24}]}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40800}, 0x20000810) 0s ago: executing program 3 (id=3981): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000380200000200000008000100", @ANYRESHEX=r1], 0x1c}}, 0x48844) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x0) write$nci(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="400002ab"], 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): o device for ifindex 0 [ 384.610253][T17120] NCSI netlink: No device for ifindex 0 [ 384.610383][T17120] NCSI netlink: No device for ifindex 0 [ 384.610726][T17120] NCSI netlink: No device for ifindex 0 [ 384.610876][T17120] NCSI netlink: No device for ifindex 0 [ 384.611013][T17120] NCSI netlink: No device for ifindex 0 [ 384.611148][T17120] NCSI netlink: No device for ifindex 0 [ 384.676383][T17116] bridge8: entered allmulticast mode [ 384.758742][T17116] syzkaller0: mtu less than device minimum [ 384.984495][T17125] syzkaller1: entered promiscuous mode [ 384.984522][T17125] syzkaller1: entered allmulticast mode [ 385.981510][T17183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.412798][T17199] IPVS: Error connecting to the multicast addr [ 386.883568][T17208] team0: Port device dummy0 removed [ 387.820990][ T5654] block nbd1: Receive control failed (result -32) [ 387.821476][ T5635] block nbd1: Receive control failed (result -32) [ 388.207180][T17271] xt_CT: No such helper "syz0" [ 388.690468][T17303] ip_tables: iptables: counters copy to user failed while replacing table [ 388.762314][T17307] __nla_validate_parse: 37 callbacks suppressed [ 388.762329][T17307] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2815'. [ 388.913341][T17315] x_tables: unsorted underflow at hook 2 [ 389.405030][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'. [ 390.515691][T17370] xt_HMARK: spi-set and port-set can't be combined [ 390.706024][T17371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2830'. [ 390.849676][T17355] bond0 (unregistering): Released all slaves [ 391.713709][T17392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 392.143821][T17404] syzkaller1: entered promiscuous mode [ 392.143844][T17404] syzkaller1: entered allmulticast mode [ 392.154299][T17406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2841'. [ 392.572271][T17430] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2849'. [ 392.747979][T17437] validate_nla: 94 callbacks suppressed [ 392.747999][T17437] netlink: 'syz.2.2851': attribute type 1 has an invalid length. [ 392.816165][T17447] x_tables: duplicate entry at hook 1 [ 392.836502][T17447] sch_fq: defrate 8 ignored. [ 392.874414][T17437] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 392.903277][T17462] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2854'. [ 392.934963][T17437] macvlan2: entered promiscuous mode [ 392.934987][T17437] macvlan2: entered allmulticast mode [ 392.948326][T17437] bond13: entered promiscuous mode [ 392.949193][T17437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.974968][T17437] bond13: left promiscuous mode [ 393.098239][T17465] netlink: 'syz.0.2855': attribute type 5 has an invalid length. [ 393.214383][T17467] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.2856'. [ 393.232097][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'. [ 393.286066][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 393.289527][T17484] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 393.408881][T17484] bond10: entered promiscuous mode [ 393.409387][T17484] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.485505][T17489] bond10: (slave bridge9): making interface the new active one [ 393.485527][T17489] bridge9: entered promiscuous mode [ 393.486694][T17489] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 393.636135][T17503] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2863'. [ 394.375474][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 394.462270][T17523] tc_dump_action: action bad kind [ 394.571891][T17519] x_tables: eb_tables: u32.0 match: invalid size 1984 (kernel) != (user) 2032 [ 395.008841][T17553] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2874'. [ 395.077232][T17557] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 395.077255][T17557] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 395.113102][T17553] syzkaller0: entered promiscuous mode [ 395.113127][T17553] syzkaller0: entered allmulticast mode [ 395.859513][T17585] Unknown options in mask 6 [ 396.881026][T17576] bridge0: port 2(bond0) entered blocking state [ 396.881118][T17576] bridge0: port 2(bond0) entered disabled state [ 396.881266][T17576] bond0: entered allmulticast mode [ 396.881284][T17576] bond_slave_0: entered allmulticast mode [ 396.881316][T17576] bond_slave_1: entered allmulticast mode [ 396.881331][T17576] team0: entered allmulticast mode [ 396.881343][T17576] team_slave_0: entered allmulticast mode [ 396.884818][T17576] bond0: entered promiscuous mode [ 396.884836][T17576] bond_slave_0: entered promiscuous mode [ 396.885000][T17576] bond_slave_1: entered promiscuous mode [ 396.943409][T17576] team0: entered promiscuous mode [ 396.943423][T17576] team_slave_0: entered promiscuous mode [ 396.952968][T17583] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 397.147511][T17599] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 397.148778][T17599] nbd2: detected capacity change from 0 to 63 [ 397.155024][T17599] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 397.159924][T17599] block nbd2: NBD_DISCONNECT [ 397.160016][T17599] block nbd2: Disconnected due to user request. [ 397.160031][T17599] block nbd2: shutting down sockets [ 397.179035][T17601] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 397.179052][T17601] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 397.180110][ T2010] blk_print_req_error: 69 callbacks suppressed [ 397.180126][ T2010] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 397.180153][ T2010] buffer_io_error: 138 callbacks suppressed [ 397.180165][ T2010] Buffer I/O error on dev nbd2, logical block 0, async page read [ 397.180182][ T2010] Buffer I/O error on dev nbd2, logical block 1, async page read [ 397.180197][ T2010] Buffer I/O error on dev nbd2, logical block 2, async page read [ 397.180212][ T2010] Buffer I/O error on dev nbd2, logical block 3, async page read [ 397.180351][ T2010] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.180376][ T2010] Buffer I/O error on dev nbd2, logical block 0, async page read [ 397.180470][ T2010] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.180494][ T2010] Buffer I/O error on dev nbd2, logical block 1, async page read [ 397.180584][ T2010] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.180608][ T2010] Buffer I/O error on dev nbd2, logical block 2, async page read [ 397.180709][ T2010] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.180770][ T2010] Buffer I/O error on dev nbd2, logical block 3, async page read [ 397.180965][ T2010] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 397.180989][ T2010] Buffer I/O error on dev nbd2, logical block 0, async page read [ 397.181005][ T2010] Buffer I/O error on dev nbd2, logical block 1, async page read [ 397.181117][ T2010] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.181219][ T2010] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.181321][ T2010] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.181422][ T2010] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.182477][T17603] ldm_validate_partition_table(): Disk read failed. [ 397.184773][T17603] Dev nbd2: unable to read RDB block 0 [ 397.190590][T17603] nbd2: unable to read partition table [ 397.230938][T17603] ldm_validate_partition_table(): Disk read failed. [ 397.232068][T17603] Dev nbd2: unable to read RDB block 0 [ 397.236747][T17603] nbd2: unable to read partition table [ 397.293958][T17607] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2886'. [ 397.553017][T17613] macvlan2: entered allmulticast mode [ 397.553037][T17613] bridge0: entered allmulticast mode [ 397.574901][T17613] macvlan3: entered allmulticast mode [ 397.949048][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 397.949072][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 398.042213][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2899'. [ 398.307038][T17642] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.307223][T17642] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.514252][T17642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.538284][T17642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.633913][T17642] veth1_vlan: left allmulticast mode [ 398.830695][T17648] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 398.856601][T17652] bond10: option lacp_active: invalid value (5) [ 398.864838][T17652] bond10 (unregistering): Released all slaves [ 398.972901][T17654] bond14: option arp_validate: invalid value (262147) [ 398.994073][T17654] bond14 (unregistering): Released all slaves [ 399.065657][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 399.148589][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.173026][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.174004][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.183521][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.184567][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.227185][ T5654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.227500][ T5654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.227939][ T5654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.238848][T17655] bond14: option arp_validate: invalid value (262147) [ 399.239443][T17668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.242274][ T5654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.253991][T17655] bond14 (unregistering): Released all slaves [ 399.276666][ T5654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.424712][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 399.986285][T17702] ip_tables: iptables: counters copy to user failed while replacing table [ 400.120175][T17704] xt_CT: No such helper "netbios-ns" [ 400.336782][T17666] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.336895][T17666] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.337133][T17666] bridge_slave_0: entered allmulticast mode [ 400.338185][T17666] bridge_slave_0: entered promiscuous mode [ 400.366393][T17666] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.366557][T17666] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.366659][T17666] bridge_slave_1: entered allmulticast mode [ 400.367551][T17666] bridge_slave_1: entered promiscuous mode [ 400.415669][T17666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.419343][T17666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.474237][T17666] team0: Port device team_slave_0 added [ 400.484727][T17666] team0: Port device team_slave_1 added [ 400.524516][T17720] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 400.525034][T17666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.525047][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.525072][T17666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.582946][T17666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.582963][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.582988][T17666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.709850][T17720] 8021q: adding VLAN 0 to HW filter on device bond36 [ 400.758258][T17666] hsr_slave_0: entered promiscuous mode [ 400.759613][T17666] hsr_slave_1: entered promiscuous mode [ 400.760394][T17666] debugfs: 'hsr0' already exists in 'hsr' [ 400.760413][T17666] Cannot create hsr debugfs directory [ 401.083870][T17747] ip6gre4: entered allmulticast mode [ 401.109617][T10171] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 401.213049][T17666] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.305925][ T5654] Bluetooth: hci5: command tx timeout [ 401.321986][T17754] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 401.327746][T17666] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.454060][T17666] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.537229][T17666] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.599759][T17763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2922'. [ 401.907037][T17666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.914253][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.915078][T17666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.945071][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.952389][T17666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.965916][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.967326][T17666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.971001][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.123768][T17666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.152160][T17666] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.167158][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.167277][T10178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.168584][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2923'. [ 402.168619][T17779] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2923'. [ 402.263858][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.263966][T10176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.276163][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.276465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.889261][T17823] netlink: 976 bytes leftover after parsing attributes in process `syz.2.2931'. [ 403.180530][T17666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.254520][T17841] SET target dimension over the limit! [ 403.269166][T17666] veth0_vlan: entered promiscuous mode [ 403.283904][T17841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2934'. [ 403.295941][T17666] veth1_vlan: entered promiscuous mode [ 403.361514][T17666] veth0_macvtap: entered promiscuous mode [ 403.379794][T17666] veth1_macvtap: entered promiscuous mode [ 403.385691][ T5654] Bluetooth: hci5: command tx timeout [ 403.417762][T17666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.439094][T17666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.554327][T17850] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2937'. [ 403.573824][T17848] smc: net device ip_vti0 applied user defined pnetid SYZ2 [ 403.597428][T10172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.601824][T17851] smc: net device ip_vti0 erased user defined pnetid SYZ2 [ 403.627601][T10173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.676912][T10174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.690246][T17854] smc: net device ip_vti0 applied user defined pnetid SYZ2 [ 403.696672][T10173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.696688][T10173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.827427][T10178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.827448][T10178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.856173][T10173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.153962][T17882] geneve5: entered promiscuous mode [ 404.177477][ T29] audit: type=1804 audit(1793922287.166:23): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2944" name="/newroot/596/cgroup.controllers" dev="tmpfs" ino=3068 res=1 errno=0 [ 404.177705][ T29] audit: type=1800 audit(1793922287.166:24): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2944" name="cgroup.controllers" dev="tmpfs" ino=3068 res=0 errno=-22 [ 404.180265][T17874] netlink: 'syz.2.2944': attribute type 1 has an invalid length. [ 404.187254][T10172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.393247][T17886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2946'. [ 404.394321][T17886] netlink: 'syz.1.2946': attribute type 4 has an invalid length. [ 404.424569][T17886] netlink: 'syz.1.2946': attribute type 1 has an invalid length. [ 404.468355][T17886] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 404.715930][T17908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2952'. [ 404.717405][T17909] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 404.717424][T17909] netlink: 'syz.3.2953': attribute type 8 has an invalid length. [ 404.763623][T17908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2952'. [ 404.781131][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2952'. [ 404.985572][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 405.037608][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.041712][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.042489][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.043369][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.043986][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.465679][ T5654] Bluetooth: hci5: command tx timeout [ 405.486534][T17932] vlan2: entered allmulticast mode [ 405.761026][T17942] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2962'. [ 405.761147][T17942] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 405.786415][T17942] 0ªX¹¦Dö»: entered allmulticast mode [ 406.029766][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 406.029790][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 406.039353][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 406.039377][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 406.079795][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 406.079820][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 406.108119][T10173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.139952][T10172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.139971][T10172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.065271][ T5654] Bluetooth: hci4: command tx timeout [ 407.255929][T18008] sctp: [Deprecated]: syz.3.2970 (pid 18008) Use of int in max_burst socket option. [ 407.255929][T18008] Use struct sctp_assoc_value instead [ 407.256014][T18008] sctp: [Deprecated]: syz.3.2970 (pid 18008) Use of int in max_burst socket option. [ 407.256014][T18008] Use struct sctp_assoc_value instead [ 407.507934][T10178] smc: removing net device ip_vti0 with user defined pnetid SYZ2 [ 407.555877][ T5654] Bluetooth: hci5: command tx timeout [ 407.668107][T10178] bridge0 (unregistering): left allmulticast mode [ 407.702333][T10178] bond1 (unregistering): Released all slaves [ 407.714507][T10178] bond2 (unregistering): Released all slaves [ 407.726655][T10178] bond3 (unregistering): Released all slaves [ 407.741689][T10178] bond4 (unregistering): Released all slaves [ 407.757224][T10178] bond5 (unregistering): Released all slaves [ 407.772813][T10178] bond0 (unregistering): Released all slaves [ 407.992570][T10178] tipc: Left network mode [ 408.216152][T10178] IPVS: stopping backup sync thread 15324 ... [ 408.239855][T17917] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.239956][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.240082][T17917] bridge_slave_0: entered allmulticast mode [ 408.244982][T17917] bridge_slave_0: entered promiscuous mode [ 408.283532][T17917] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.283641][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.283782][T17917] bridge_slave_1: entered allmulticast mode [ 408.307309][T17917] bridge_slave_1: entered promiscuous mode [ 408.613242][T17917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.697084][T17917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.893625][T17917] team0: Port device team_slave_0 added [ 408.948710][T17917] team0: Port device team_slave_1 added [ 408.980733][T18085] sctp: [Deprecated]: syz.1.2987 (pid 18085) Use of int in max_burst socket option. [ 408.980733][T18085] Use struct sctp_assoc_value instead [ 409.150390][ T5654] Bluetooth: hci4: command tx timeout [ 409.171646][T17917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.171663][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.171689][T17917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.182537][T17917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.182550][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.182575][T17917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.609253][T17917] hsr_slave_0: entered promiscuous mode [ 409.610913][T17917] hsr_slave_1: entered promiscuous mode [ 409.613396][T17917] debugfs: 'hsr0' already exists in 'hsr' [ 409.613415][T17917] Cannot create hsr debugfs directory [ 409.623994][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 410.011787][T18131] __nla_validate_parse: 132 callbacks suppressed [ 410.011806][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 410.032933][T18132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2994'. [ 410.543792][T18150] Cannot find del_set index 0 as target [ 411.227682][ T5654] Bluetooth: hci4: command tx timeout [ 411.897023][T10178] team0 (unregistering): Port device dummy0 removed [ 411.977090][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 412.314369][T18208] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 412.578982][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 412.604668][T10178] IPVS: stop unused estimator thread 0... [ 412.663714][ T29] audit: type=1107 audit(1793922295.646:25): pid=18226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 412.697286][T18230] netlink: 'syz.1.3012': attribute type 10 has an invalid length. [ 412.697305][T18230] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3012'. [ 412.942993][T18251] ip_tables: iptables: counters copy to user failed while replacing table [ 413.047186][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 413.145418][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 413.306021][ T5654] Bluetooth: hci4: command tx timeout [ 413.314092][T18265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3015'. [ 413.421147][T17917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.441997][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.443094][T17917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.463684][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.473093][T17917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.488702][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.489605][T17917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.512801][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.783823][T18287] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 413.974206][T18289] bond10: (slave geneve4): making interface the new active one [ 413.990077][T18289] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 414.168204][T18313] netlink: 'syz.0.3021': attribute type 3 has an invalid length. [ 414.218941][T17917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.282377][T18311] tipc: Started in network mode [ 414.282406][T18311] tipc: Node identity b2d4733bef63, cluster identity 4711 [ 414.289142][T18311] tipc: Enabled bearer , priority 0 [ 414.297254][T18309] netlink: 'syz.0.3021': attribute type 3 has an invalid length. [ 414.308239][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'. [ 414.373452][T17917] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.395158][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.395258][T10157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.430996][T10178] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.435465][T10178] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.440291][T10178] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.440340][T10178] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.444069][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'. [ 414.491374][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.491504][T10164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.776681][T18315] syzkaller0: entered promiscuous mode [ 414.776706][T18315] syzkaller0: entered allmulticast mode [ 414.777411][T18315] tipc: Resetting bearer [ 414.839607][T18310] tipc: Resetting bearer [ 415.123276][T18348] ip_tables: iptables: counters copy to user failed while replacing table [ 416.924922][T18387] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3027'. [ 416.936089][T18387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3027'. [ 416.936113][T18387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 416.936127][T18387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3027'. [ 417.319143][T18394] IPVS: Scheduler module ip_vs_mh not found [ 417.356031][T18310] tipc: Disabling bearer [ 417.386538][ T8235] tipc: Node number set to 1572303675 [ 417.807610][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 417.917164][T18423] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3035'. [ 418.124330][T18430] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3036'. [ 418.484890][T17917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.143244][T18477] ip_tables: iptables: counters copy to user failed while replacing table [ 419.372386][T17917] veth0_vlan: entered promiscuous mode [ 419.379883][T18485] x_tables: duplicate underflow at hook 2 [ 419.409008][T17917] veth1_vlan: entered promiscuous mode [ 419.471602][T17917] veth0_macvtap: entered promiscuous mode [ 419.499538][T17917] veth1_macvtap: entered promiscuous mode [ 419.571479][T17917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.588560][T17917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.636098][T10150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.637011][T10150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.637049][T10150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.637081][T10150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.741556][T18503] netlink: 'syz.1.3048': attribute type 10 has an invalid length. [ 419.821501][T18503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.840101][T18503] team0: Port device netdevsim1 added [ 419.881840][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 419.881955][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 419.882055][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 420.104448][T18504] ip6gre3: entered promiscuous mode [ 420.117687][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.117707][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.167917][T18501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.291917][T18527] ip_tables: iptables: counters copy to user failed while replacing table [ 420.319957][T10178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.319977][T10178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.348360][T18533] ip_tables: iptables: counters copy to user failed while replacing table [ 420.371245][T18535] ip_tables: iptables: counters copy to user failed while replacing table [ 420.408600][T18535] FAULT_INJECTION: forcing a failure. [ 420.408600][T18535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.408634][T18535] CPU: 1 UID: 0 PID: 18535 Comm: syz.1.3056 Not tainted syzkaller #0 PREEMPT(full) [ 420.408656][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 420.408671][T18535] Call Trace: [ 420.408679][T18535] [ 420.408687][T18535] dump_stack_lvl+0xe8/0x150 [ 420.408722][T18535] should_fail_ex+0x3eb/0x540 [ 420.408818][T18535] _copy_from_iter+0x1d3/0x1680 [ 420.408902][T18535] ? lock_acquire+0x115/0x350 [ 420.408935][T18535] ? __lock_acquire+0x747/0x2de0 [ 420.408960][T18535] ? __pfx__copy_from_iter+0x10/0x10 [ 420.409000][T18535] tun_get_user+0x265/0x4470 [ 420.409116][T18535] ? aa_file_perm+0x18b/0x15f0 [ 420.409155][T18535] ? aa_file_perm+0x4ed/0x15f0 [ 420.409176][T18535] ? __pfx_tun_get_user+0x10/0x10 [ 420.409202][T18535] ? __lock_acquire+0x747/0x2de0 [ 420.409229][T18535] ? kstrtoull+0x137/0x1d0 [ 420.409291][T18535] ? ref_tracker_alloc+0x172/0x530 [ 420.409315][T18535] ? lock_acquire+0x115/0x350 [ 420.409340][T18535] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 420.409368][T18535] ? lock_acquire+0x115/0x350 [ 420.409392][T18535] ? tun_get+0x1c/0x2f0 [ 420.409421][T18535] ? tun_get+0x1c/0x2f0 [ 420.409441][T18535] ? tun_get+0x1c/0x2f0 [ 420.409468][T18535] tun_chr_write_iter+0x113/0x200 [ 420.409494][T18535] vfs_write+0x612/0xba0 [ 420.409544][T18535] ? __pfx_vfs_write+0x10/0x10 [ 420.409573][T18535] ? __fget_files+0x3a2/0x420 [ 420.409631][T18535] ? __fget_files+0x2a/0x420 [ 420.409657][T18535] ? fdget+0x1ac/0x250 [ 420.409688][T18535] ksys_write+0x150/0x270 [ 420.409716][T18535] ? __pfx_ksys_write+0x10/0x10 [ 420.409753][T18535] do_syscall_64+0x166/0x520 [ 420.409775][T18535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.409794][T18535] ? clear_bhb_loop+0x70/0xc0 [ 420.409818][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.409841][T18535] RIP: 0033:0x7fd6dfd9fb19 [ 420.409859][T18535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.409876][T18535] RSP: 002b:00007fd6e0b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.409897][T18535] RAX: ffffffffffffffda RBX: 00007fd6e0025fa0 RCX: 00007fd6dfd9fb19 [ 420.409911][T18535] RDX: 000000000000003a RSI: 0000200000000640 RDI: 0000000000000004 [ 420.409923][T18535] RBP: 00007fd6e0b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 420.409936][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.409948][T18535] R13: 00007fd6e0026038 R14: 00007fd6e0025fa0 R15: 00007fffab2236a8 [ 420.409982][T18535] [ 420.961368][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.963494][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.980939][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.990377][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.990941][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.468040][T18573] netlink: 'syz.0.3064': attribute type 1 has an invalid length. [ 421.997544][T18601] xfrm0: entered allmulticast mode [ 421.997732][T18601] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 422.045274][T18601] __nla_validate_parse: 67 callbacks suppressed [ 422.045294][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'. [ 422.050983][T18601] @: left promiscuous mode [ 422.158225][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'. [ 422.179632][T18606] ip_tables: iptables: counters copy to user failed while replacing table [ 422.240843][T18608] 8021q: adding VLAN 0 to HW filter on device bond11 [ 422.285404][T18610] FAULT_INJECTION: forcing a failure. [ 422.285404][T18610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.285432][T18610] CPU: 1 UID: 0 PID: 18610 Comm: syz.1.3070 Not tainted syzkaller #0 PREEMPT(full) [ 422.285454][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 422.285465][T18610] Call Trace: [ 422.285473][T18610] [ 422.285481][T18610] dump_stack_lvl+0xe8/0x150 [ 422.285526][T18610] should_fail_ex+0x3eb/0x540 [ 422.285556][T18610] _copy_from_iter+0x1d3/0x1680 [ 422.285582][T18610] ? lock_acquire+0x115/0x350 [ 422.285610][T18610] ? __lock_acquire+0x747/0x2de0 [ 422.285633][T18610] ? __pfx__copy_from_iter+0x10/0x10 [ 422.285671][T18610] tun_get_user+0x51a/0x4470 [ 422.285711][T18610] ? aa_file_perm+0x18b/0x15f0 [ 422.285737][T18610] ? aa_file_perm+0x4ed/0x15f0 [ 422.285757][T18610] ? __pfx_tun_get_user+0x10/0x10 [ 422.285783][T18610] ? __lock_acquire+0x747/0x2de0 [ 422.285810][T18610] ? kstrtoull+0x137/0x1d0 [ 422.285849][T18610] ? ref_tracker_alloc+0x172/0x530 [ 422.285876][T18610] ? lock_acquire+0x115/0x350 [ 422.285901][T18610] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 422.285929][T18610] ? lock_acquire+0x115/0x350 [ 422.285951][T18610] ? tun_get+0x1c/0x2f0 [ 422.285979][T18610] ? tun_get+0x1c/0x2f0 [ 422.286000][T18610] ? tun_get+0x1c/0x2f0 [ 422.286024][T18610] tun_chr_write_iter+0x113/0x200 [ 422.286051][T18610] vfs_write+0x612/0xba0 [ 422.286085][T18610] ? __pfx_vfs_write+0x10/0x10 [ 422.286113][T18610] ? __fget_files+0x3a2/0x420 [ 422.286136][T18610] ? __fget_files+0x2a/0x420 [ 422.286163][T18610] ? fdget+0x1ac/0x250 [ 422.286194][T18610] ksys_write+0x150/0x270 [ 422.286221][T18610] ? __pfx_ksys_write+0x10/0x10 [ 422.286259][T18610] do_syscall_64+0x166/0x520 [ 422.286282][T18610] ? trace_irq_disable+0x3b/0x140 [ 422.286307][T18610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.286327][T18610] ? clear_bhb_loop+0x70/0xc0 [ 422.286351][T18610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.286369][T18610] RIP: 0033:0x7fd6dfd9fb19 [ 422.286387][T18610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.286402][T18610] RSP: 002b:00007fd6ddff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.286421][T18610] RAX: ffffffffffffffda RBX: 00007fd6e0026090 RCX: 00007fd6dfd9fb19 [ 422.286435][T18610] RDX: 000000000000003a RSI: 0000200000000640 RDI: 0000000000000004 [ 422.286446][T18610] RBP: 00007fd6ddff6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.286457][T18610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.286467][T18610] R13: 00007fd6e0026128 R14: 00007fd6e0026090 R15: 00007fffab2236a8 [ 422.286498][T18610] [ 422.290823][T18615] ip_tables: iptables: counters copy to user failed while replacing table [ 422.941602][T18640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3077'. [ 422.957344][T18641] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 423.073827][ T5654] Bluetooth: hci3: command tx timeout [ 423.239708][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 423.257026][T18649] batman_adv: batadv0: Adding interface: syzkaller0 [ 423.257042][T18649] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.257074][T18649] batman_adv: batadv0: Interface activated: syzkaller0 [ 423.262960][T18649] ip_tables: iptables: counters copy to user failed while replacing table [ 423.291345][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 423.291368][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 423.324248][T18648] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 423.428761][T18648] batman_adv: batadv0: Removing interface: syzkaller0 [ 423.636865][T18554] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.636970][T18554] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.637118][T18554] bridge_slave_0: entered allmulticast mode [ 423.639885][T10164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.639902][T10164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.641429][T18554] bridge_slave_0: entered promiscuous mode [ 423.663569][T18665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.672639][T18667] ip_tables: iptables: counters copy to user failed while replacing table [ 423.676790][T18554] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.677018][T18554] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.677146][T18554] bridge_slave_1: entered allmulticast mode [ 423.680822][T18554] bridge_slave_1: entered promiscuous mode [ 423.729652][T18554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.739810][T18668] ip_tables: iptables: counters copy to user failed while replacing table [ 423.752501][T18554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.832512][T18554] team0: Port device team_slave_0 added [ 423.846523][T18554] team0: Port device team_slave_1 added [ 423.917131][T18671] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.3085'. [ 423.920177][T18554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.920191][T18554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.920216][T18554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.930728][T18554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.930741][T18554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.930765][T18554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.050967][T18554] hsr_slave_0: entered promiscuous mode [ 424.054224][T18554] hsr_slave_1: entered promiscuous mode [ 424.054926][T18554] debugfs: 'hsr0' already exists in 'hsr' [ 424.054944][T18554] Cannot create hsr debugfs directory [ 424.132933][ T29] audit: type=1804 audit(1793922307.116:26): pid=18683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3089" name="/newroot/622/cgroup.controllers" dev="tmpfs" ino=3187 res=1 errno=0 [ 424.132983][ T29] audit: type=1800 audit(1793922307.116:27): pid=18683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3089" name="cgroup.controllers" dev="tmpfs" ino=3187 res=0 errno=-22 [ 424.253435][T18686] netlink: 988 bytes leftover after parsing attributes in process `syz.4.3090'. [ 424.281237][T18690] netlink: 988 bytes leftover after parsing attributes in process `syz.4.3090'. [ 424.346924][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 424.442940][T18697] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 424.514880][T18554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.554925][T18705] ip_tables: iptables: counters copy to user failed while replacing table [ 424.560143][ T29] audit: type=1804 audit(1793922307.546:28): pid=18703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3095" name="/newroot/39/cgroup.controllers" dev="tmpfs" ino=217 res=1 errno=0 [ 424.560620][ T29] audit: type=1800 audit(1793922307.546:29): pid=18703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3095" name="cgroup.controllers" dev="tmpfs" ino=217 res=0 errno=-22 [ 424.578192][T18703] netlink: 'syz.1.3095': attribute type 10 has an invalid length. [ 424.604671][T18703] team0: Port device dummy0 added [ 424.622918][T18703] netlink: 'syz.1.3095': attribute type 10 has an invalid length. [ 424.662344][T18703] team0: Port device dummy0 removed [ 424.689029][T18707] netlink: 'syz.4.3097': attribute type 4 has an invalid length. [ 424.743381][T18554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.763097][T18710] netlink: 'syz.4.3097': attribute type 4 has an invalid length. [ 424.833072][T18554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.970856][T18554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.087630][T18732] bridge0: port 1(bond0) entered blocking state [ 425.088017][T18732] bridge0: port 1(bond0) entered disabled state [ 425.088170][T18732] bond0: entered allmulticast mode [ 425.096796][T18732] bond0: entered promiscuous mode [ 425.142452][T18731] syz_tun: entered promiscuous mode [ 425.143329][T18731] macsec1: entered promiscuous mode [ 425.145899][ T5654] Bluetooth: hci3: command tx timeout [ 425.161933][T18731] syz_tun: left promiscuous mode [ 425.459094][T18748] tc_dump_action: action bad kind [ 425.633764][T18554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.673196][T18554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.676184][T18554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.699687][T18554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.704111][T18554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.718403][T18554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.719228][T18554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.726004][T18554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.083163][T18554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.159469][T18554] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.188899][T10164] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.189004][T10164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.213210][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.213377][T10164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.480156][T18793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 426.579546][T18801] netlink: 'syz.0.3116': attribute type 2 has an invalid length. [ 427.226451][ T5654] Bluetooth: hci3: command tx timeout [ 427.441165][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441186][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441197][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441207][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441218][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441228][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441238][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441248][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441258][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441268][T18853] tc action pedit 'at' offset 9 out of bounds [ 427.441303][T18853] TC_ACT_REPEAT abuse ? [ 427.539172][T18857] netlink: 'syz.4.3124': attribute type 1 has an invalid length. [ 427.593861][T18554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.717561][T18554] veth0_vlan: entered promiscuous mode [ 427.739593][T18554] veth1_vlan: entered promiscuous mode [ 427.837560][T18554] veth0_macvtap: entered promiscuous mode [ 427.856313][T18554] veth1_macvtap: entered promiscuous mode [ 427.940589][T18554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.982324][T18554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.036008][T18873] __nla_validate_parse: 41 callbacks suppressed [ 428.036027][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3126'. [ 428.136486][T10164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.136531][T10164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.136561][T10164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.136592][T10164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.199319][T18876] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 428.327298][T10160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.327319][T10160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.377847][T10157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.377866][T10157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.443648][T18871] bond12: option min_links: invalid value (18446744073709551612) [ 428.443675][T18871] bond12: option min_links: allowed values 0 - 2147483647 [ 428.447213][T18871] bond12 (unregistering): Released all slaves [ 428.789211][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3131'. [ 429.263721][T18931] bridge_slave_1: left allmulticast mode [ 429.263740][T18931] bridge_slave_1: left promiscuous mode [ 429.263879][T18931] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.284644][T18931] bridge_slave_0: left allmulticast mode [ 429.284659][T18931] bridge_slave_0: left promiscuous mode [ 429.284818][T18931] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.305945][ T5654] Bluetooth: hci3: command tx timeout [ 429.577463][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.579684][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.581298][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.582267][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.582890][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.664187][T18941] can_create: 1 callbacks suppressed [ 429.664206][T18941] can: request_module (can-proto-0) failed. [ 429.786085][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 430.041424][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.041620][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.041806][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.041974][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.042147][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.042327][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.042498][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.042715][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3142'. [ 430.492669][T18970] xt_ecn: cannot match TCP bits for non-tcp packets [ 430.537004][T10164] IPVS: starting estimator thread 0... [ 430.625295][T18975] IPVS: using max 26 ests per chain, 62400 per kthread [ 430.755583][T10164] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.756024][T10164] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.756060][T10164] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.756093][T10164] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.520195][T18943] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.520347][T18943] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.520489][T18943] bridge_slave_0: entered allmulticast mode [ 431.522447][T18943] bridge_slave_0: entered promiscuous mode [ 431.526225][T18943] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.526796][T18943] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.526914][T18943] bridge_slave_1: entered allmulticast mode [ 431.529618][T18943] bridge_slave_1: entered promiscuous mode [ 431.568325][T18943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.571645][T18943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.603491][T18943] team0: Port device team_slave_0 added [ 431.606821][T18943] team0: Port device team_slave_1 added [ 431.661170][T18943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.661186][T18943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.661211][T18943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.662578][T19019] syzkaller0: entered promiscuous mode [ 431.662597][T19019] syzkaller0: entered allmulticast mode [ 431.707942][T18943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.707959][T18943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.707984][T18943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.714570][ T5654] Bluetooth: hci2: command tx timeout [ 431.806039][T19024] netlink: 'syz.3.3157': attribute type 10 has an invalid length. [ 431.848106][T18943] hsr_slave_0: entered promiscuous mode [ 431.849579][T18943] hsr_slave_1: entered promiscuous mode [ 431.852159][T18943] debugfs: 'hsr0' already exists in 'hsr' [ 431.852178][T18943] Cannot create hsr debugfs directory [ 431.926721][T19027] nbd: socks must be embedded in a SOCK_ITEM attr [ 432.159150][T19035] x_tables: unsorted underflow at hook 3 [ 432.177777][T19035] x_tables: duplicate underflow at hook 2 [ 432.181411][T19035] ip_tables: iptables: counters copy to user failed while replacing table [ 432.271544][T18943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.286673][T18943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.310775][T18943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.325778][T18943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.326635][T18943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.857080][T18943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.858892][T18943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.878261][T18943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.123819][T18943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.162061][T18943] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.197585][T19065] ipip0: entered promiscuous mode [ 433.213705][T10164] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.213789][T10164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.233179][T19067] tun0: tun_chr_ioctl cmd 1074025677 [ 433.233313][T19067] tun0: linktype set to 512 [ 433.234131][T19067] tun0: tun_chr_ioctl cmd 1074818700 [ 433.259409][T19067] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 433.260477][T19067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 433.267887][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.267986][T10178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.271095][T19073] tun0: tun_chr_ioctl cmd 1074025673 [ 433.272375][T19073] tun0: tun_chr_ioctl cmd 1074818700 [ 433.273396][T19067] tun0: tun_chr_ioctl cmd 1074025677 [ 433.273483][T19067] tun0: linktype set to 512 [ 433.282613][T19067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 433.742041][T19095] syzkaller1: entered promiscuous mode [ 433.742064][T19095] syzkaller1: entered allmulticast mode [ 433.785872][ T5654] Bluetooth: hci2: command tx timeout [ 434.227176][T19116] __nla_validate_parse: 30 callbacks suppressed [ 434.227196][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3181'. [ 434.227468][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3181'. [ 434.779628][T18943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.960202][T19150] netlink: 'syz.3.3187': attribute type 1 has an invalid length. [ 434.963819][T19150] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3187'. [ 435.129858][T18943] veth0_vlan: entered promiscuous mode [ 435.172704][T18943] veth1_vlan: entered promiscuous mode [ 435.307533][T19160] vlan0: entered promiscuous mode [ 435.307571][T19160] bond0: entered promiscuous mode [ 435.307585][T19160] bond_slave_0: entered promiscuous mode [ 435.307782][T19160] bond_slave_1: entered promiscuous mode [ 435.360088][T18943] veth0_macvtap: entered promiscuous mode [ 435.364254][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 435.394691][T18943] veth1_macvtap: entered promiscuous mode [ 435.430435][T18943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.453466][T18943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.535451][T10178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.535931][T10178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.626926][T19173] netlink: 'syz.1.3195': attribute type 10 has an invalid length. [ 435.633553][T10178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.633572][T10178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.681896][T19171] netlink: 'syz.3.3194': attribute type 16 has an invalid length. [ 435.681917][T19171] netlink: 'syz.3.3194': attribute type 17 has an invalid length. [ 435.702491][T10150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.724257][T19171] bridge0: port 1(bond0) entered blocking state [ 435.724392][T19171] bridge0: port 1(bond0) entered forwarding state [ 435.724715][T19171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.753087][T19171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.809792][T19171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.861066][T19183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3197'. [ 435.866182][ T5654] Bluetooth: hci2: command tx timeout [ 435.912633][T19171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.913974][T19171] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 435.975497][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.978354][T19186] netpci0: tun_chr_ioctl cmd 1074025678 [ 435.978375][T19186] netpci0: group set to 0 [ 436.004158][T10150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.004189][T10150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.016956][T10178] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 436.400238][T19207] x_tables: duplicate underflow at hook 3 [ 436.708798][T19216] syzkaller0: entered promiscuous mode [ 436.708819][T19216] syzkaller0: entered allmulticast mode [ 436.721795][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 437.020141][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.038483][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.041787][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.069007][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.071714][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 437.482011][T19246] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 437.768674][T19257] netlink: 'syz.0.3214': attribute type 1 has an invalid length. [ 437.842873][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 437.946075][ T5635] Bluetooth: hci2: command tx timeout [ 438.067938][T19267] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.3218'. [ 438.084382][T19267] 0ªX¹¦Dö»: renamed from gretap0 [ 438.095298][T19267] 0ªX¹¦Dö»: entered allmulticast mode [ 438.156605][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'. [ 438.774962][T19305] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 439.043364][T19230] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.043543][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.043667][T19230] bridge_slave_0: entered allmulticast mode [ 439.074889][T19230] bridge_slave_0: entered promiscuous mode [ 439.084147][T19230] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.084330][T19230] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.084455][T19230] bridge_slave_1: entered allmulticast mode [ 439.107930][T19230] bridge_slave_1: entered promiscuous mode [ 439.133095][T19316] bond0: (slave bond_slave_0): Releasing backup interface [ 439.142984][T19316] bond0: (slave bond_slave_1): Releasing backup interface [ 439.145780][ T5635] Bluetooth: hci0: command tx timeout [ 439.161798][T19316] team0: Port device team_slave_0 removed [ 439.166352][T19316] team0: Port device team_slave_1 removed [ 439.167186][T19316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.167216][T19316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.180680][T19316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.180699][T19316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.188824][T19316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 439.213042][T19230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.236896][T19317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3229'. [ 439.240450][T19230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.301530][T19230] team0: Port device team_slave_0 added [ 439.311076][T19230] team0: Port device team_slave_1 added [ 439.336072][T19316] team0: Mode changed to "activebackup" [ 439.366585][T19230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.366600][T19230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.366624][T19230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.371115][T19230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.371128][T19230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.371154][T19230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.534681][T19230] hsr_slave_0: entered promiscuous mode [ 439.541864][T19230] hsr_slave_1: entered promiscuous mode [ 439.542606][T19230] debugfs: 'hsr0' already exists in 'hsr' [ 439.542624][T19230] Cannot create hsr debugfs directory [ 439.735365][T19328] netlink: 'syz.1.3233': attribute type 17 has an invalid length. [ 440.073278][T19230] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.073314][T19230] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.073339][T19230] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.105855][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 440.162989][T19343] ip6gretap0: entered promiscuous mode [ 440.181864][T19230] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.181897][T19230] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.181923][T19230] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.290892][T19230] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.293906][T19230] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.293942][T19230] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.381477][T19230] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.381513][T19230] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.381539][T19230] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.725286][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 440.752555][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 440.832014][T19369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3245'. [ 441.024255][T19378] xt_hashlimit: size too large, truncated to 1048576 [ 441.225972][ T5635] Bluetooth: hci0: command tx timeout [ 443.309603][ T5635] Bluetooth: hci0: command tx timeout [ 443.681355][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 443.683840][T19230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.711023][T19230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.724817][T19230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.755587][T19230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.758823][T19230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 443.772127][T19230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.778944][T19230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 443.787290][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 443.820692][T19230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.822028][T19392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3248'. [ 443.914588][T19403] tap0: tun_chr_ioctl cmd 21731 [ 444.053604][T19414] macvlan0: entered allmulticast mode [ 444.053628][T19414] bridge0: entered allmulticast mode [ 444.053664][T19414] bridge0: entered promiscuous mode [ 444.173566][T19230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.218563][T19230] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.244192][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.244296][T10157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.274189][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.274296][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.550472][T19441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3260'. [ 444.612335][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 445.370147][T19446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3261'. [ 445.385495][ T5635] Bluetooth: hci0: command tx timeout [ 445.512834][T19453] Cannot find del_set index 0 as target [ 445.909059][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 445.980134][T19461] bond2: entered promiscuous mode [ 445.980159][T19461] bond2: entered allmulticast mode [ 445.980674][T19464] bridge0: port 3(gretap0) entered blocking state [ 445.980840][T19464] bridge0: port 3(gretap0) entered disabled state [ 445.980980][T19464] gretap0: entered allmulticast mode [ 445.986594][T19464] gretap0: entered promiscuous mode [ 446.026827][T19464] bridge0: port 3(gretap0) entered blocking state [ 446.026923][T19464] bridge0: port 3(gretap0) entered forwarding state [ 446.121668][T19468] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 446.122721][T19468] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 446.416489][T19478] syzkaller1: entered promiscuous mode [ 446.416513][T19478] syzkaller1: entered allmulticast mode [ 446.429402][T19230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.566094][T19230] veth0_vlan: entered promiscuous mode [ 446.590934][T19230] veth1_vlan: entered promiscuous mode [ 446.658640][T19230] veth0_macvtap: entered promiscuous mode [ 446.663170][T19230] veth1_macvtap: entered promiscuous mode [ 446.698050][T19230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.727669][T19230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.882688][T19505] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 446.892557][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 446.904153][T19506] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 447.008597][T10178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.008617][T10178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.079527][T19514] Set syz1 is full, maxelem 1029 reached [ 447.099214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.099233][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.157849][T10178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.159011][T10164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.159048][T10164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.159081][T10164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.398961][T19527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3280'. [ 447.537811][T19530] bridge0: port 3(gretap0) entered disabled state [ 447.598710][T19530] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.599356][T19530] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.734677][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3282'. [ 447.883332][T19530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.901540][T19530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.073915][T19530] bridge0: left allmulticast mode [ 448.090713][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3279'. [ 448.090737][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3279'. [ 448.113940][T19535] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 448.146385][T10178] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.146507][ T142] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.146546][ T142] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.146581][ T142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.288391][T19567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3284'. [ 448.345691][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 448.556757][T19580] syzkaller0: entered promiscuous mode [ 448.556779][T19580] syzkaller0: entered allmulticast mode [ 448.741515][T10160] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 449.653793][T19626] x_tables: duplicate underflow at hook 1 [ 449.654486][T19627] x_tables: duplicate underflow at hook 1 [ 449.673415][T19625] __nla_validate_parse: 4 callbacks suppressed [ 449.673432][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 449.673448][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'. [ 449.673473][T19625] netlink: 'syz.1.3298': attribute type 18 has an invalid length. [ 449.775455][T10161] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 449.775498][T10161] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 449.775531][T10161] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 449.775561][T10161] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 449.812943][T19629] bond0: Error: Cannot enslave bond to itself. [ 451.650665][T19588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.652523][T19618] netlink: 'syz.3.3297': attribute type 1 has an invalid length. [ 451.843577][T19655] netlink: 'syz.4.3311': attribute type 1 has an invalid length. [ 451.881036][T19655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.899989][T19657] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3308'. [ 451.901458][T19657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3308'. [ 452.065428][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.101082][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.128793][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.149016][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.168387][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.177326][T19661] syzkaller1: entered promiscuous mode [ 452.177347][T19661] syzkaller1: entered allmulticast mode [ 452.203330][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.221016][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.239438][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.256953][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.264566][T19660] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 452.556953][T19685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3319'. [ 452.944353][T19710] veth0_macvtap: left promiscuous mode [ 453.014075][T19718] netlink: 'syz.4.3327': attribute type 1 has an invalid length. [ 453.092489][T19718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.112775][T19712] bond4: (slave veth0_to_bond): making interface the new active one [ 453.114624][T19712] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 453.317676][T19725] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.318474][T19725] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.584308][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.608185][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.013313][T19751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3333'. [ 454.192006][ T5295] veth0_macvtap: entered promiscuous mode [ 454.216785][T19735] syzkaller1: entered promiscuous mode [ 454.216809][T19735] syzkaller1: entered allmulticast mode [ 454.346740][T10157] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.346776][T10157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.346851][T10157] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.346877][T10157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.346912][T10157] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.346936][T10157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.346970][T10157] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.346995][T10157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.779084][T19775] syzkaller1: entered promiscuous mode [ 454.779108][T19775] syzkaller1: entered allmulticast mode [ 454.899363][T19785] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 455.008480][T19792] syz_tun: entered allmulticast mode [ 455.008725][T19792] syz_tun: left allmulticast mode [ 455.190338][T19805] tipc: Started in network mode [ 455.190394][T19805] tipc: Node identity 1001001, cluster identity 4711 [ 455.190406][T19805] tipc: Node number set to 16781313 [ 455.503169][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'. [ 455.712439][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3347'. [ 455.860253][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3346'. [ 455.934006][T19827] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3347'. [ 455.949368][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 455.993095][T19828] netlink: 'syz.1.3346': attribute type 16 has an invalid length. [ 455.993114][T19828] netlink: 'syz.1.3346': attribute type 17 has an invalid length. [ 456.085558][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 456.085612][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 456.085645][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 456.085676][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 456.323083][T19866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.323939][T19866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.889641][T19882] netlink: 'syz.3.3356': attribute type 1 has an invalid length. [ 456.903684][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3358'. [ 456.955018][T19882] bond1 (unregistering): Released all slaves [ 457.007747][T19882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3356'. [ 457.446927][T19914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3366'. [ 457.467244][T19914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3366'. [ 457.559861][ T13] IPVS: starting estimator thread 0... [ 457.572405][T19926] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 457.624815][T19926] bond6: (slave geneve3): making interface the new active one [ 457.634361][T19926] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 457.645182][T19928] IPVS: using max 34 ests per chain, 81600 per kthread [ 457.652124][T19926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3367'. [ 457.673959][T19926] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.675493][ T142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.675561][ T142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.675593][ T142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.675624][ T142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.883806][T19938] syzkaller0: entered promiscuous mode [ 457.883840][T19938] syzkaller0: entered allmulticast mode [ 458.054167][T19949] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003 [ 458.138022][T19955] Bluetooth: MGMT ver 1.23 [ 459.206870][T20023] Bluetooth: MGMT ver 1.23 [ 459.206908][T20023] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 459.887271][T20049] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 459.888823][T20049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.927906][T20051] pim6reg1: entered promiscuous mode [ 459.927926][T20051] pim6reg1: entered allmulticast mode [ 460.403387][T20069] netlink: zone id is out of range [ 460.578103][T19544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 460.682943][T20076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 460.698713][T20081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.703501][T20082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.843773][T20084] netlink: 'syz.3.3405': attribute type 4 has an invalid length. [ 460.843796][T20084] __nla_validate_parse: 11 callbacks suppressed [ 460.843809][T20084] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3405'. [ 460.853915][T10150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 460.952586][T20092] netlink: 'syz.0.3406': attribute type 5 has an invalid length. [ 460.957850][T20092] netlink: 'syz.0.3406': attribute type 39 has an invalid length. [ 460.997921][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 461.343519][T20107] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3411'. [ 461.365460][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3411'. [ 461.365482][T20109] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 461.490589][T20112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3412'. [ 461.490612][T20112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3412'. [ 461.547143][T19544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 461.787036][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 461.895830][T10160] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 461.896072][T10160] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 461.903948][T20127] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:8189 [ 461.930318][T10150] IPVS: starting estimator thread 0... [ 462.009219][T14980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 462.024458][T20129] IPVS: using max 25 ests per chain, 60000 per kthread [ 462.303988][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3419'. [ 462.309695][T20143] ip_tables: iptables: counters copy to user failed while replacing table [ 462.312546][T20143] netlink: 'syz.3.3420': attribute type 1 has an invalid length. [ 462.313825][T20143] syzkaller1: entered promiscuous mode [ 462.313843][T20143] syzkaller1: entered allmulticast mode [ 462.738151][T20159] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.738854][T20159] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.782429][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 462.784390][T20175] netlink: 'syz.2.3425': attribute type 1 has an invalid length. [ 462.836678][T20159] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 462.851900][T20165] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 462.932697][T20172] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 462.934694][T20172] bond2 (unregistering): Released all slaves [ 462.963890][T20174] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 462.971489][T20174] erspan0: entered promiscuous mode [ 463.014533][T20175] bond1: entered promiscuous mode [ 463.022348][T20175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.033364][T20181] IPVS: Unknown mcast interface: rose0 [ 463.171527][T20189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.171544][T20189] IPv6: NLM_F_CREATE should be set when creating new route [ 463.171586][T20189] IPv6: NLM_F_CREATE should be set when creating new route [ 463.171611][T20189] IPv6: NLM_F_CREATE should be set when creating new route [ 463.384570][T20202] ¬0Ù: renamed from bond_slave_1 [ 463.404965][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 463.501281][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'. [ 463.925370][T10150] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.925415][T10150] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.925447][T10150] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.925945][T10150] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 464.770113][T20272] pimreg1: tun_chr_ioctl cmd 1074025677 [ 464.770198][T20272] pimreg1: linktype set to 6 [ 464.810284][T20266] syzkaller1: entered promiscuous mode [ 464.810305][T20266] syzkaller1: entered allmulticast mode [ 464.853100][T20274] x_tables: duplicate underflow at hook 1 [ 464.870774][T20278] sctp: [Deprecated]: syz.0.3458 (pid 20278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.870774][T20278] Use struct sctp_sack_info instead [ 464.986225][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 465.276599][T20300] bridge0: port 3(vlan2) entered blocking state [ 465.276722][T20300] bridge0: port 3(vlan2) entered disabled state [ 465.276829][T20300] vlan2: entered allmulticast mode [ 465.276844][T20300] geneve0: entered allmulticast mode [ 465.277878][T20300] vlan2: entered promiscuous mode [ 465.277892][T20300] geneve0: entered promiscuous mode [ 465.279079][T20306] syz_tun: entered allmulticast mode [ 465.354636][T20306] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 465.354707][T20306] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 465.354751][T20306] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 465.499176][T20316] syzkaller1: entered promiscuous mode [ 465.499201][T20316] syzkaller1: entered allmulticast mode [ 465.627277][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 465.640583][T10178] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.640648][T10178] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.640688][T10178] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.640720][T10178] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.744012][T20334] ip_tables: iptables: counters copy to user failed while replacing table [ 465.823982][T20306] syz_tun: left allmulticast mode [ 465.865275][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 465.871506][T20342] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.874866][T20342] __nla_validate_parse: 5 callbacks suppressed [ 465.874880][T20342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3476'. [ 465.874900][T20342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3476'. [ 465.956262][T20346] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.984733][T20346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3476'. [ 465.984760][T20346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3476'. [ 466.023025][T20342] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 466.024700][T20342] bond1 (unregistering): Released all slaves [ 466.065587][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 466.156712][T20346] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 466.160902][T20346] bond1 (unregistering): Released all slaves [ 466.516611][T20375] netlink: 'syz.3.3481': attribute type 1 has an invalid length. [ 466.516633][T20375] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3481'. [ 466.550035][T20378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3478'. [ 466.724832][T20386] Bluetooth: hci0: unsupported parameter 5135 [ 466.724853][T20386] Bluetooth: hci0: unsupported parameter 8192 [ 466.724865][T20386] Bluetooth: hci0: unsupported parameter 5135 [ 466.724878][T20386] Bluetooth: hci0: unsupported parameter 8192 [ 466.941259][T20400] ip_tables: iptables: counters copy to user failed while replacing table [ 467.191561][T20403] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úéiÆâxà?ZøË_½á†˜ow¾Äº| [ 467.248802][T20406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3487'. [ 467.427837][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3489'. [ 467.591549][T20429] pimreg0: tun_chr_ioctl cmd 1074025677 [ 467.591634][T20429] pimreg0: linktype set to 823 [ 468.001936][T20453] ip_tables: iptables: counters copy to user failed while replacing table [ 468.033060][T20454] hsr0: entered promiscuous mode [ 468.044158][T20454] hsr0: entered allmulticast mode [ 468.044180][T20454] hsr_slave_0: entered allmulticast mode [ 468.044197][T20454] hsr_slave_1: entered allmulticast mode [ 468.048604][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'. [ 468.076316][T20454] hsr_slave_0: left promiscuous mode [ 468.078318][T20454] hsr_slave_1: left promiscuous mode [ 468.133717][T20454] hsr0 (unregistering): left promiscuous mode [ 468.133761][T20454] hsr0 (unregistering): left allmulticast mode [ 468.217815][T20453] bridge: RTM_NEWNEIGH with invalid ether address [ 469.185062][T20517] ip6gre1: entered allmulticast mode [ 469.281406][T20526] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 469.312932][T20526] bond2: option mode: invalid value (38) [ 469.322835][T20526] bond2 (unregistering): Released all slaves [ 469.402401][T20526] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 469.464899][T20539] ip_tables: iptables: counters copy to user failed while replacing table [ 469.563939][T20526] bond2: option mode: invalid value (38) [ 469.567118][T20526] bond2 (unregistering): Released all slaves [ 469.655360][T20526] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 469.711119][T20526] bond2: option mode: invalid value (38) [ 469.712932][T20526] bond2 (unregistering): Released all slaves [ 469.768951][T20526] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 469.838875][T20526] bond2: option mode: invalid value (38) [ 469.843354][T20526] bond2 (unregistering): Released all slaves [ 470.468858][T20579] macvtap1: entered allmulticast mode [ 470.468894][T20579] syz_tun: entered allmulticast mode [ 470.688098][T20579] syz_tun: left allmulticast mode [ 470.808953][T20574] sit0: entered promiscuous mode [ 470.869014][T20592] syzkaller1: entered promiscuous mode [ 470.869036][T20592] syzkaller1: entered allmulticast mode [ 470.887273][T20592] __nla_validate_parse: 10 callbacks suppressed [ 470.887291][T20592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3529'. [ 471.420689][T20632] netlink: 'syz.1.3539': attribute type 12 has an invalid length. [ 472.160720][T20684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.161124][T20684] bond_slave_0: left promiscuous mode [ 472.163026][T20684] bond0 (unregistering): (slave 5¬0Ù): Releasing backup interface [ 472.163773][T20684] ¬0Ù: left promiscuous mode [ 472.164393][T20684] bond0 (unregistering): Released all slaves [ 472.269104][T20681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3547'. [ 472.441842][ T5295] veth0_macvtap: left promiscuous mode [ 472.787394][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.787414][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.788753][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.788770][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.788910][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.788922][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.790424][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.790440][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.790584][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.790597][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.790731][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.790743][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.791555][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.791570][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.791703][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.791716][T20713] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 472.791850][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 472.793137][T20713] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 473.371059][T20757] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 473.405683][T20753] syzkaller1: entered promiscuous mode [ 473.405708][T20753] syzkaller1: entered allmulticast mode [ 473.945377][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.344608][T20803] xt_connbytes: Forcing CT accounting to be enabled [ 475.149611][T20853] ip6gre1: entered promiscuous mode [ 475.149638][T20853] ip6gre1: entered allmulticast mode [ 475.971531][T20899] __nla_validate_parse: 65 callbacks suppressed [ 475.971552][T20899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3592'. [ 476.533863][T20919] batman_adv: batadv0: Adding interface: syzkaller0 [ 476.533881][T20919] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.533914][T20919] batman_adv: batadv0: Interface activated: syzkaller0 [ 476.851369][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3599'. [ 477.462316][T20923] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 477.510751][T20919] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 477.578874][T20919] batman_adv: batadv0: Removing interface: syzkaller0 [ 477.608986][T20963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3606'. [ 477.729868][T20949] syzkaller1: entered promiscuous mode [ 477.729890][T20949] syzkaller1: entered allmulticast mode [ 477.767323][T20968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3607'. [ 478.308674][T20996] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 478.309109][T20996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.372239][T20998] macvtap1: entered allmulticast mode [ 478.372262][T20998] veth0_to_bridge: entered allmulticast mode [ 478.391869][T20998] veth0_to_bridge: left allmulticast mode [ 478.417585][T21001] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 479.177268][T21033] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 479.229102][T21033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3626'. [ 479.886227][T21069] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 479.886628][T21069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.889247][T21069] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 480.399700][T21093] xt_connbytes: Forcing CT accounting to be enabled [ 480.599615][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 480.648987][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'. [ 481.020180][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'. [ 481.213526][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 481.312545][T21139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3651'. [ 481.453417][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 481.584013][T21153] bond2: option broadcast_neighbor: invalid value (4) [ 481.599022][T21153] bond2 (unregistering): Released all slaves [ 481.659860][T21162] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 481.683768][T21167] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3657'. [ 482.112622][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3665'. [ 482.129920][T21195] syz_tun: entered promiscuous mode [ 482.130185][T21195] macvtap1: entered allmulticast mode [ 482.130201][T21195] syz_tun: entered allmulticast mode [ 482.154833][T21195] syz_tun: left allmulticast mode [ 482.154860][T21195] syz_tun: left promiscuous mode [ 482.331006][T21205] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3668'. [ 482.368422][T21207] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3669'. [ 482.711124][T21233] validate_nla: 55 callbacks suppressed [ 482.711145][T21233] netlink: 'syz.4.3675': attribute type 1 has an invalid length. [ 482.774613][T21233] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.783747][T21237] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 482.784854][T21237] bond7: entered allmulticast mode [ 482.832359][T21233] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 482.959816][T21241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3678'. [ 482.959850][T21241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3678'. [ 483.069340][T21253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.502899][T21239] netlink: 'syz.3.3677': attribute type 27 has an invalid length. [ 484.079006][ T5654] Bluetooth: hci0: link tx timeout [ 484.079024][ T5654] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.562763][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.562786][T21307] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.562943][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.563084][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.563235][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.563443][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.563575][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.563713][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.563841][T21307] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 484.919171][T21321] syzkaller0: entered promiscuous mode [ 484.919194][T21321] syzkaller0: entered allmulticast mode [ 484.948722][T10176] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.948778][T10176] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.948812][T10176] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.948845][T10176] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.044531][ T5654] Bluetooth: hci5: unexpected cc 0x203d length: 9 > 1 [ 485.564622][T21358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.745028][T21358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.792680][T21383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.861967][T21358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.978107][T21358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.020521][T21393] vlan2: left allmulticast mode [ 486.020542][T21393] geneve0: left allmulticast mode [ 486.020559][T21393] vlan2: left promiscuous mode [ 486.020570][T21393] geneve0: left promiscuous mode [ 486.020946][T21393] bridge0: port 3(vlan2) entered disabled state [ 486.056186][T21393] bridge_slave_1: left allmulticast mode [ 486.056203][T21393] bridge_slave_1: left promiscuous mode [ 486.056355][T21393] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.058904][T21393] bridge_slave_0: left allmulticast mode [ 486.058924][T21393] bridge_slave_0: left promiscuous mode [ 486.059107][T21393] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.259521][T10151] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.325330][T10178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.436055][T10151] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.448970][T21410] __nla_validate_parse: 10 callbacks suppressed [ 486.448987][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'. [ 486.514189][T21422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3721'. [ 486.514265][T21422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3721'. [ 486.527390][T21358] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.622163][T21358] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.644013][T21422] tipc: Enabling of bearer rejected, failed to enable media [ 486.694268][T21358] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.751262][ T5654] Bluetooth: hci0: command 0x0405 tx timeout [ 486.856189][T21431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3724'. [ 486.865365][T21448] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 487.126605][T21433] Set syz1 is full, maxelem 6117 reached [ 487.838756][T21506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 488.185111][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 488.185151][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 488.188157][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 488.205678][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 488.205787][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 488.205807][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 488.296593][T21521] validate_nla: 26 callbacks suppressed [ 488.296611][T21521] netlink: 'syz.3.3735': attribute type 2 has an invalid length. [ 488.459369][T21544] netlink: 'syz.4.3740': attribute type 13 has an invalid length. [ 488.461232][T21544] netlink: 'syz.4.3740': attribute type 1 has an invalid length. [ 488.525832][T21547] netlink: 'syz.4.3740': attribute type 13 has an invalid length. [ 488.531209][T21544] netlink: 'syz.4.3740': attribute type 1 has an invalid length. [ 488.558774][T21555] hsr0: entered promiscuous mode [ 488.613113][T21549] hsr0: left promiscuous mode [ 488.810265][T21564] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 488.957304][T21570] batman_adv: batadv0: Adding interface: syzkaller0 [ 488.957323][T21570] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.957354][T21570] batman_adv: batadv0: Interface activated: syzkaller0 [ 489.031975][T21567] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 489.112595][T21567] batman_adv: batadv0: Removing interface: syzkaller0 [ 489.470474][T21591] veth0_to_bond: entered allmulticast mode [ 489.497864][T21590] ip_tables: iptables: counters copy to user failed while replacing table [ 489.920918][T21602] nbd: socks must be embedded in a SOCK_ITEM attr [ 489.945270][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 490.150363][T21608] bond0: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 490.153598][T21608] bond0 (unregistering): Released all slaves [ 490.245855][T21616] ip6gre2: entered promiscuous mode [ 490.245877][T21616] ip6gre2: entered allmulticast mode [ 490.278748][T10154] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.278959][T10154] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.305431][T14980] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.346547][T21624] ip6gre2: entered allmulticast mode [ 490.439306][T21633] netlink: 'syz.4.3767': attribute type 4 has an invalid length. [ 490.493012][T21634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.724500][T21661] x_tables: duplicate underflow at hook 1 [ 490.758081][T21639] macvtap1: entered promiscuous mode [ 490.875310][T14980] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.882806][T21668] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 491.034088][T21675] bridge0: port 3(syz_tun) entered blocking state [ 491.034268][T21675] bridge0: port 3(syz_tun) entered disabled state [ 491.034464][T21675] syz_tun: entered allmulticast mode [ 491.062267][T21675] syz_tun: entered promiscuous mode [ 491.070962][T14980] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 491.080670][T21675] bridge0: port 3(syz_tun) entered blocking state [ 491.080786][T21675] bridge0: port 3(syz_tun) entered forwarding state [ 491.134223][T21679] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 491.170296][T21677] ±ÿ: renamed from lo (while UP) [ 491.388871][T21682] netlink: 'syz.2.3783': attribute type 1 has an invalid length. [ 491.425455][T21688] ±ÿ: entered allmulticast mode [ 491.453807][T21687] ±ÿ: left allmulticast mode [ 491.532202][T21694] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 492.182992][T21727] netlink: 'syz.0.3796': attribute type 4 has an invalid length. [ 492.201647][T21727] netlink: 'syz.0.3796': attribute type 4 has an invalid length. [ 492.235767][T21733] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 492.283347][T21737] netlink: 'syz.3.3798': attribute type 4 has an invalid length. [ 492.334329][T21737] __nla_validate_parse: 9 callbacks suppressed [ 492.334347][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3798'. [ 492.487860][T21741] !: entered promiscuous mode [ 492.492623][T21741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3800'. [ 492.492701][T21741] !: left promiscuous mode [ 493.193222][T21761] syzkaller1: entered allmulticast mode [ 493.408720][T21781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.413379][T21782] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.493198][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 493.516721][T21786] block nbd2: shutting down sockets [ 493.533549][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 493.593625][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 493.694077][T21796] validate_nla: 2 callbacks suppressed [ 493.694097][T21796] netlink: 'syz.1.3815': attribute type 7 has an invalid length. [ 493.803545][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3816'. [ 493.992183][T21811] bridge0: entered allmulticast mode [ 494.218675][T21820] team0: entered promiscuous mode [ 494.218698][T21820] team_slave_0: entered promiscuous mode [ 494.224545][T21820] team_slave_1: entered promiscuous mode [ 494.257856][T21820] team0: entered allmulticast mode [ 494.257876][T21820] team_slave_0: entered allmulticast mode [ 494.258751][T21820] team_slave_1: entered allmulticast mode [ 494.426188][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 496.345499][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 496.743368][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 496.889138][T21852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3828'. [ 496.889253][T21852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3828'. [ 496.889355][T21852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3828'. [ 497.186309][T21878] netlink: 'syz.2.3831': attribute type 10 has an invalid length. [ 497.232191][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.244638][T21878] team0: Port device netdevsim1 added [ 497.562700][T21907] __nla_validate_parse: 62 callbacks suppressed [ 497.562719][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 497.568448][T21906] netlink: 'syz.1.3840': attribute type 1 has an invalid length. [ 497.612426][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 497.859449][T21914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'. [ 497.919654][T21914] netlink: 'syz.4.3842': attribute type 1 has an invalid length. [ 497.919676][T21914] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3842'. [ 499.441723][T21970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3855'. [ 499.626088][T21977] erspan0: entered promiscuous mode [ 499.630951][T21975] erspan0: left promiscuous mode [ 500.059931][T21991] ip6gre3: entered allmulticast mode [ 500.167948][ T29] audit: type=1804 audit(1793922383.156:30): pid=21993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3864" name="/newroot/158/cgroup.controllers" dev="tmpfs" ino=819 res=1 errno=0 [ 500.192437][ T29] audit: type=1800 audit(1793922383.156:31): pid=21993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3864" name="cgroup.controllers" dev="tmpfs" ino=819 res=0 errno=-22 [ 500.192484][ T29] audit: type=1800 audit(1793922383.166:32): pid=21993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3864" name="cgroup.controllers" dev="tmpfs" ino=819 res=0 errno=-22 [ 500.358129][T22004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3867'. [ 500.391805][T22009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 500.581925][T22017] ip6t_rt: unknown flags 1F [ 500.595944][T22017] netlink: 'syz.1.3872': attribute type 32 has an invalid length. [ 500.963053][T22044] bond8: option ad_user_port_key: invalid value (65535) [ 500.963071][T22044] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 500.964083][T22044] bond8 (unregistering): Released all slaves [ 501.032043][T22047] syzkaller0: entered promiscuous mode [ 501.032065][T22047] syzkaller0: entered allmulticast mode [ 501.411771][T22057] netlink: 'syz.3.3881': attribute type 5 has an invalid length. [ 501.588549][T22061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3884'. [ 501.654390][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 501.675513][T22067] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3885'. [ 501.675729][T22067] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3885'. [ 502.076309][T22087] geneve2: entered promiscuous mode [ 502.896446][T22091] __nla_validate_parse: 1 callbacks suppressed [ 502.896468][T22091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3890'. [ 503.093440][T22105] block nbd0: reconnected socket [ 503.093550][T22105] block nbd0: reconnected socket [ 503.100386][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 503.100406][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 503.147464][ T5654] block nbd0: Receive control failed (result -32) [ 503.148449][ T5635] block nbd0: Receive control failed (result -32) [ 503.238486][T10181] bond0: left allmulticast mode [ 503.244492][T10181] bond0: left promiscuous mode [ 503.247003][T10181] bridge0: port 1(bond0) entered disabled state [ 503.368313][T22127] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 503.386382][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 503.853475][T22136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3901'. [ 503.853557][T22136] nbd: socks must be embedded in a SOCK_ITEM attr [ 503.853807][T22136] block nbd2: shutting down sockets [ 504.032796][T22139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3902'. [ 504.314154][T10181] erspan0 (unregistering): left promiscuous mode [ 504.411471][T10181] 0ªX¹¦Dö» (unregistering): left promiscuous mode [ 504.480174][T10181] bond10 (unregistering): (slave geneve4): Releasing active interface [ 504.643208][T10181] bond0 (unregistering): Released all slaves [ 504.653049][T10181] bond1 (unregistering): Released all slaves [ 504.671664][T10181] bond2 (unregistering): Released all slaves [ 504.702500][T10181] bond3 (unregistering): Released all slaves [ 504.719225][T10181] bond4 (unregistering): Released all slaves [ 504.753259][T10181] bond5 (unregistering): Released all slaves [ 504.772943][T10181] bond6 (unregistering): Released all slaves [ 504.790683][T10181] bond7 (unregistering): Released all slaves [ 504.822136][T10181] bond8 (unregistering): (slave lo): Releasing active interface [ 504.822593][T10181] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 504.824809][T10181] bond8 (unregistering): Released all slaves [ 504.855470][T10181] bond9 (unregistering): Released all slaves [ 504.876930][T10181] bond10 (unregistering): Released all slaves [ 504.901572][T10181] bond11 (unregistering): Released all slaves [ 504.922833][T22112] syzkaller0: entered promiscuous mode [ 504.922867][T22112] syzkaller0: entered allmulticast mode [ 505.130667][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 505.171427][T22156] syz.2.3904: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 505.171520][T22156] CPU: 0 UID: 0 PID: 22156 Comm: syz.2.3904 Not tainted syzkaller #0 PREEMPT(full) [ 505.171562][T22156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 505.171585][T22156] Call Trace: [ 505.171593][T22156] [ 505.171603][T22156] dump_stack_lvl+0xe8/0x150 [ 505.171653][T22156] warn_alloc+0x24d/0x270 [ 505.171678][T22156] ? stack_depot_save_flags+0x33/0x810 [ 505.171712][T22156] ? __pfx_warn_alloc+0x10/0x10 [ 505.171734][T22156] ? kasan_save_track+0x4f/0x80 [ 505.171765][T22156] ? __kasan_kmalloc+0x93/0xb0 [ 505.171794][T22156] ? xsk_init_queue+0x8a/0xe0 [ 505.171817][T22156] ? xsk_setsockopt+0x52a/0x960 [ 505.171838][T22156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.171874][T22156] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 505.171932][T22156] ? rcu_is_watching+0x16/0xb0 [ 505.171971][T22156] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.171994][T22156] ? __kmalloc_cache_noprof+0x31c/0x600 [ 505.172021][T22156] ? __kmalloc_cache_noprof+0x148/0x600 [ 505.172047][T22156] ? xskq_create+0x56/0x220 [ 505.172075][T22156] xskq_create+0x148/0x220 [ 505.172099][T22156] ? xsk_init_queue+0x8a/0xe0 [ 505.172122][T22156] xsk_init_queue+0x8a/0xe0 [ 505.172147][T22156] xsk_setsockopt+0x52a/0x960 [ 505.172172][T22156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 505.172194][T22156] ? __pfx_aa_sk_perm+0x10/0x10 [ 505.172239][T22156] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 505.172266][T22156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 505.172288][T22156] do_sock_setsockopt+0x17c/0x1b0 [ 505.172318][T22156] __x64_sys_setsockopt+0x13d/0x1b0 [ 505.172346][T22156] do_syscall_64+0x166/0x520 [ 505.172372][T22156] ? trace_irq_disable+0x3b/0x140 [ 505.172401][T22156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.172423][T22156] ? clear_bhb_loop+0x70/0xc0 [ 505.172450][T22156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.172472][T22156] RIP: 0033:0x7fcb2e19fb19 [ 505.172493][T22156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.172512][T22156] RSP: 002b:00007fcb2f14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 505.172533][T22156] RAX: ffffffffffffffda RBX: 00007fcb2e425fa0 RCX: 00007fcb2e19fb19 [ 505.172549][T22156] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 505.172562][T22156] RBP: 00007fcb2e237b70 R08: 0000000000000004 R09: 0000000000000000 [ 505.172576][T22156] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 505.172589][T22156] R13: 00007fcb2e426038 R14: 00007fcb2e425fa0 R15: 00007fffd5cc7988 [ 505.172634][T22156] [ 505.177263][T22156] Mem-Info: [ 505.177276][T22156] active_anon:6086 inactive_anon:0 isolated_anon:0 [ 505.177276][T22156] active_file:18 inactive_file:43472 isolated_file:0 [ 505.177276][T22156] unevictable:0 dirty:229 writeback:0 [ 505.177276][T22156] slab_reclaimable:13537 slab_unreclaimable:127474 [ 505.177276][T22156] mapped:29596 shmem:530 pagetables:1293 [ 505.177276][T22156] sec_pagetables:0 bounce:0 [ 505.177276][T22156] kernel_misc_reclaimable:0 [ 505.177276][T22156] free:1286245 free_pcp:8822 free_cma:0 [ 505.177336][T22156] Node 0 active_anon:24344kB inactive_anon:0kB active_file:72kB inactive_file:173700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118384kB dirty:916kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17404kB pagetables:5036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 505.180099][T22156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 505.180156][T22156] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.180216][T22156] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 505.180252][T22156] Node 0 DMA32 free:1185152kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24344kB inactive_anon:0kB active_file:72kB inactive_file:173700kB unevictable:0kB writepending:916kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:35056kB local_pcp:16584kB free_cma:0kB [ 505.180313][T22156] lowmem_reserve[]: 0 0 1 1 1 [ 505.180345][T22156] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.180401][T22156] lowmem_reserve[]: 0 0 0 0 0 [ 505.180434][T22156] Node 1 Normal free:3944468kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 505.180557][T22156] lowmem_reserve[]: 0 0 0 0 0 [ 505.180591][T22156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 505.180719][T22156] Node 0 DMA32: 2726*4kB (UME) 1141*8kB (UME) 496*16kB (UM) 712*32kB (UME) 211*64kB (UM) 51*128kB (UME) 37*256kB (UME) 18*512kB (UME) 10*1024kB (UME) 4*2048kB (UM) 263*4096kB (UM) = 1185152kB [ 505.180876][T22156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 505.180970][T22156] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 10*16kB (UM) 10*32kB (UM) 8*64kB (UM) 6*128kB (UM) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3944468kB [ 505.182880][T22156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.182897][T22156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.182913][T22156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.182928][T22156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.182944][T22156] 44016 total pagecache pages [ 505.182959][T22156] 0 pages in swap cache [ 505.182966][T22156] Free swap = 124996kB [ 505.182974][T22156] Total swap = 124996kB [ 505.182982][T22156] 2097051 pages RAM [ 505.182988][T22156] 0 pages HighMem/MovableOnly [ 505.182995][T22156] 434241 pages reserved [ 505.183002][T22156] 0 pages cma reserved [ 505.221393][T22160] x_tables: duplicate underflow at hook 2 [ 505.221497][T22161] x_tables: duplicate underflow at hook 2 [ 505.299355][T22156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3904'. [ 505.308211][T22156] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3904'. [ 505.349385][T10181] tipc: Left network mode [ 505.642908][T22170] netlink: 'syz.3.3908': attribute type 1 has an invalid length. [ 505.729368][T22177] xt_ecn: cannot match TCP bits for non-tcp packets [ 505.733076][T22179] xt_ecn: cannot match TCP bits for non-tcp packets [ 505.827536][T22176] ip_tables: iptables: counters copy to user failed while replacing table [ 505.876948][T22170] bond2: entered promiscuous mode [ 505.877392][T22170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.002328][T22176] macvtap1: entered allmulticast mode [ 506.027054][T22170] macvtap2: entered allmulticast mode [ 506.123634][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 506.140752][T22176] bond2: (slave bridge1): making interface the new active one [ 506.140776][T22176] bridge1: entered promiscuous mode [ 506.153306][T22176] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 506.587953][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3919'. [ 507.178046][T22234] netlink: 'syz.0.3925': attribute type 10 has an invalid length. [ 507.199836][T22234] batman_adv: batadv0: Adding interface: vlan0 [ 507.199853][T22234] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.199879][T22234] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 508.051838][T10181] veth1_macvtap: left promiscuous mode [ 508.051872][T10181] veth0_macvtap: left promiscuous mode [ 508.052004][T10181] veth1_vlan: left promiscuous mode [ 508.052069][T10181] veth0_vlan: left promiscuous mode [ 508.236663][T22284] __nla_validate_parse: 1 callbacks suppressed [ 508.236681][T22284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'. [ 509.218902][T22309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3940'. [ 509.540415][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3944'. [ 509.558429][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3944'. [ 509.720666][T22328] bridge_slave_0: left allmulticast mode [ 509.720694][T22328] bridge_slave_0: left promiscuous mode [ 509.722600][T22328] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.820876][T22337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3946'. [ 509.821888][T22337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3946'. [ 510.029338][T22348] netlink: 'syz.4.3947': attribute type 1 has an invalid length. [ 510.166900][T22348] 8021q: adding VLAN 0 to HW filter on device bond8 [ 510.167547][T22349] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 510.168846][T22349] bond8: (slave wlan1): Opening slave failed [ 510.360228][T22365] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3950'. [ 510.391913][T22364] syzkaller0: entered promiscuous mode [ 510.391934][T22364] syzkaller0: entered allmulticast mode [ 510.423265][T10181] IPVS: stop unused estimator thread 0... [ 510.614972][T22370] netlink: 'syz.2.3954': attribute type 1 has an invalid length. [ 510.713438][T22378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3954'. [ 510.740507][T22370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.741251][T22378] bond2: entered promiscuous mode [ 510.741269][T22378] bond2: entered allmulticast mode [ 510.789904][T22370] bond2: (slave dummy0): making interface the new active one [ 510.789927][T22370] dummy0: entered promiscuous mode [ 510.791341][T22370] dummy0: entered allmulticast mode [ 510.792900][T22370] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 510.833804][T22370] netlink: 'syz.2.3954': attribute type 10 has an invalid length. [ 510.833823][T22370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3954'. [ 510.854061][T22370] bond2: (slave dummy0): Releasing active interface [ 510.854273][T22370] dummy0: left allmulticast mode [ 511.001183][T22397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 512.892589][T22341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.034901][T22422] netlink: 'syz.2.3962': attribute type 1 has an invalid length. [ 513.034924][T22422] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3962'. [ 513.415778][T22449] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 513.466292][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 513.799457][T22442] veth7: entered allmulticast mode [ 513.878583][T22449] bond9: entered promiscuous mode [ 513.879120][T22449] 8021q: adding VLAN 0 to HW filter on device bond9 [ 513.902341][T22433] 8021q: adding VLAN 0 to HW filter on device bond9 [ 513.904248][T22433] bond9: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 513.904269][T22433] bond9: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 513.924999][T22433] bond9: (slave ip6gre4): making interface the new active one [ 513.925021][T22433] ip6gre4: entered promiscuous mode [ 513.927163][T22433] bond9: (slave ip6gre4): Enslaving as an active interface with an up link [ 514.112988][T22462] bridge0: left allmulticast mode [ 514.164201][T22464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3973'. [ 514.333906][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3976'. [ 514.613848][T22495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3978'. [ 514.711524][T22498] [ 514.713893][T22498] ====================================================== [ 514.720908][T22498] WARNING: possible circular locking dependency detected [ 514.727923][T22498] syzkaller #0 Not tainted [ 514.732338][T22498] ------------------------------------------------------ [ 514.739335][T22498] syz.1.3979/22498 is trying to acquire lock: [ 514.745381][T22498] ffff88805220b918 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 514.749824][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3979'. [ 514.763163][T22498] [ 514.763163][T22498] but task is already holding lock: [ 514.770525][T22498] ffff88802e987548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 514.780039][T22498] [ 514.780039][T22498] which lock already depends on the new lock. [ 514.780039][T22498] [ 514.790438][T22498] [ 514.790438][T22498] the existing dependency chain (in reverse order) is: [ 514.799446][T22498] [ 514.799446][T22498] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 514.807260][T22498] __mutex_lock+0x197/0x15a0 [ 514.812437][T22498] elevator_change+0x1af/0x480 [ 514.817726][T22498] elevator_set_none+0xb5/0x140 [ 514.823108][T22498] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 514.829519][T22498] nbd_start_device+0x189/0xb30 [ 514.834974][T22498] nbd_genl_connect+0x167d/0x1cd0 [ 514.840565][T22498] genl_family_rcv_msg_doit+0x233/0x340 [ 514.846718][T22498] genl_rcv_msg+0x614/0x7a0 [ 514.851744][T22498] netlink_rcv_skb+0x226/0x4a0 [ 514.857026][T22498] genl_rcv+0x28/0x40 [ 514.861520][T22498] netlink_unicast+0x8ef/0xa80 [ 514.866810][T22498] netlink_sendmsg+0x7f0/0xb20 [ 514.872110][T22498] sock_sendmsg_nosec+0x14e/0x190 [ 514.877656][T22498] ____sys_sendmsg+0x54e/0x850 [ 514.882931][T22498] ___sys_sendmsg+0x2a5/0x360 [ 514.888124][T22498] __x64_sys_sendmsg+0x1b1/0x290 [ 514.893583][T22498] do_syscall_64+0x166/0x520 [ 514.898702][T22498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.905205][T22498] [ 514.905205][T22498] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 514.913823][T22498] blk_alloc_queue+0x544/0x690 [ 514.919192][T22498] __blk_mq_alloc_disk+0x194/0x390 [ 514.924824][T22498] nbd_dev_add+0x494/0xb60 [ 514.929846][T22498] nbd_init+0x168/0x1f0 [ 514.934607][T22498] do_one_initcall+0x250/0x870 [ 514.939890][T22498] do_initcall_level+0x10a/0x1a0 [ 514.945421][T22498] do_initcalls+0x59/0xa0 [ 514.950274][T22498] kernel_init_freeable+0x29d/0x3e0 [ 514.955991][T22498] kernel_init+0x22/0x1d0 [ 514.960844][T22498] ret_from_fork+0x514/0xb70 [ 514.965980][T22498] ret_from_fork_asm+0x1a/0x30 [ 514.971273][T22498] [ 514.971273][T22498] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 514.978493][T22498] fs_reclaim_acquire+0x71/0x100 [ 514.983955][T22498] __kmalloc_cache_node_noprof+0x66/0x620 [ 514.990199][T22498] create_worker+0x112/0x7c0 [ 514.995335][T22498] workqueue_prepare_cpu+0xe4/0x170 [ 515.001058][T22498] cpuhp_invoke_callback+0x434/0x810 [ 515.006880][T22498] _cpu_up+0x2ce/0x5b0 [ 515.011466][T22498] cpu_up+0x1d2/0x220 [ 515.015970][T22498] cpuhp_bringup_mask+0xb2/0x1a0 [ 515.021534][T22498] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 515.027868][T22498] bringup_nonboot_cpus+0x17/0x30 [ 515.033417][T22498] smp_init+0x32/0x110 [ 515.038084][T22498] kernel_init_freeable+0x27f/0x3e0 [ 515.043804][T22498] kernel_init+0x22/0x1d0 [ 515.048669][T22498] ret_from_fork+0x514/0xb70 [ 515.053780][T22498] ret_from_fork_asm+0x1a/0x30 [ 515.059057][T22498] [ 515.059057][T22498] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 515.066796][T22498] cpus_read_lock+0x3d/0x160 [ 515.071914][T22498] static_key_slow_inc+0x12/0x30 [ 515.077398][T22498] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 515.083704][T22498] nbd_genl_foreach_sock+0x265/0x450 [ 515.089507][T22498] nbd_genl_reconfigure+0xbbb/0x1040 [ 515.095314][T22498] genl_family_rcv_msg_doit+0x233/0x340 [ 515.101386][T22498] genl_rcv_msg+0x614/0x7a0 [ 515.106411][T22498] netlink_rcv_skb+0x226/0x4a0 [ 515.111703][T22498] genl_rcv+0x28/0x40 [ 515.116205][T22498] netlink_unicast+0x8ef/0xa80 [ 515.121502][T22498] netlink_sendmsg+0x7f0/0xb20 [ 515.126793][T22498] sock_sendmsg_nosec+0x14e/0x190 [ 515.132343][T22498] ____sys_sendmsg+0x54e/0x850 [ 515.137620][T22498] ___sys_sendmsg+0x2a5/0x360 [ 515.142803][T22498] __x64_sys_sendmsg+0x1b1/0x290 [ 515.148249][T22498] do_syscall_64+0x166/0x520 [ 515.153353][T22498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.159759][T22498] [ 515.159759][T22498] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 515.167398][T22498] __mutex_lock+0x197/0x15a0 [ 515.172511][T22498] nbd_queue_rq+0x373/0xff0 [ 515.177526][T22498] blk_mq_dispatch_rq_list+0x499/0x1990 [ 515.183676][T22498] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 515.190514][T22498] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 515.197004][T22498] blk_mq_run_work_fn+0x167/0x2f0 [ 515.202540][T22498] process_scheduled_works+0xc3d/0x1630 [ 515.208605][T22498] worker_thread+0xa47/0xfb0 [ 515.213712][T22498] kthread+0x38b/0x480 [ 515.218293][T22498] ret_from_fork+0x514/0xb70 [ 515.223397][T22498] ret_from_fork_asm+0x1a/0x30 [ 515.228668][T22498] [ 515.228668][T22498] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 515.235866][T22498] __mutex_lock+0x197/0x15a0 [ 515.240966][T22498] nbd_queue_rq+0xc1/0xff0 [ 515.245890][T22498] blk_mq_dispatch_rq_list+0x499/0x1990 [ 515.251950][T22498] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 515.258786][T22498] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 515.265283][T22498] blk_mq_run_work_fn+0x167/0x2f0 [ 515.270828][T22498] process_scheduled_works+0xc3d/0x1630 [ 515.276890][T22498] worker_thread+0xa47/0xfb0 [ 515.281997][T22498] kthread+0x38b/0x480 [ 515.286575][T22498] ret_from_fork+0x514/0xb70 [ 515.291673][T22498] ret_from_fork_asm+0x1a/0x30 [ 515.296946][T22498] [ 515.296946][T22498] -> #0 (set->srcu){.+.+}-{0:0}: [ 515.304073][T22498] __lock_acquire+0x164c/0x2de0 [ 515.309436][T22498] lock_sync+0xb3/0x130 [ 515.314103][T22498] __synchronize_srcu+0xca/0x2f0 [ 515.319554][T22498] elevator_switch+0x1e8/0x7b0 [ 515.324834][T22498] elevator_change+0x2fa/0x480 [ 515.330115][T22498] elevator_set_default+0x375/0x440 [ 515.335828][T22498] blk_register_queue+0x404/0x4f0 [ 515.341359][T22498] __add_disk+0x6b8/0xdb0 [ 515.346267][T22498] add_disk_fwnode+0x100/0x3a0 [ 515.351542][T22498] nbd_dev_add+0x733/0xb60 [ 515.356463][T22498] nbd_genl_connect+0x96c/0x1cd0 [ 515.361917][T22498] genl_family_rcv_msg_doit+0x233/0x340 [ 515.367973][T22498] genl_rcv_msg+0x614/0x7a0 [ 515.372991][T22498] netlink_rcv_skb+0x226/0x4a0 [ 515.378267][T22498] genl_rcv+0x28/0x40 [ 515.382755][T22498] netlink_unicast+0x8ef/0xa80 [ 515.388029][T22498] netlink_sendmsg+0x7f0/0xb20 [ 515.393309][T22498] sock_sendmsg_nosec+0x14e/0x190 [ 515.398846][T22498] ____sys_sendmsg+0x54e/0x850 [ 515.404118][T22498] ___sys_sendmsg+0x2a5/0x360 [ 515.409316][T22498] __x64_sys_sendmsg+0x1b1/0x290 [ 515.414763][T22498] do_syscall_64+0x166/0x520 [ 515.419874][T22498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.426276][T22498] [ 515.426276][T22498] other info that might help us debug this: [ 515.426276][T22498] [ 515.436658][T22498] Chain exists of: [ 515.436658][T22498] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 515.436658][T22498] [ 515.450292][T22498] Possible unsafe locking scenario: [ 515.450292][T22498] [ 515.457722][T22498] CPU0 CPU1 [ 515.463068][T22498] ---- ---- [ 515.468415][T22498] lock(&q->elevator_lock); [ 515.473020][T22498] lock(&q->q_usage_counter(io)#50); [ 515.480903][T22498] lock(&q->elevator_lock); [ 515.488005][T22498] sync(set->srcu); [ 515.491888][T22498] [ 515.491888][T22498] *** DEADLOCK *** [ 515.491888][T22498] [ 515.500014][T22498] locks held by syz.1.3979/22498: 6, last CPU#0: [ 515.506325][T22498] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.514499][T22498] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.523450][T22498] #2: ffff88807c4b0978 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 515.533792][T22498] #3: ffff88802e9875d0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 515.543609][T22498] #4: ffff88802e987058 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 515.554482][T22498] #5: ffff88802e987548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 515.564311][T22498] [ 515.564311][T22498] stack backtrace: [ 515.570185][T22498] CPU: 0 UID: 0 PID: 22498 Comm: syz.1.3979 Not tainted syzkaller #0 PREEMPT(full) [ 515.579546][T22498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 515.589586][T22498] Call Trace: [ 515.592852][T22498] [ 515.595771][T22498] dump_stack_lvl+0xe8/0x150 [ 515.600362][T22498] print_circular_bug+0x2e2/0x300 [ 515.605389][T22498] check_noncircular+0x12f/0x150 [ 515.610323][T22498] __lock_acquire+0x164c/0x2de0 [ 515.615190][T22498] lock_sync+0xb3/0x130 [ 515.619349][T22498] ? __synchronize_srcu+0xb6/0x2f0 [ 515.624453][T22498] ? __synchronize_srcu+0xb6/0x2f0 [ 515.629558][T22498] __synchronize_srcu+0xca/0x2f0 [ 515.634490][T22498] ? __pfx___synchronize_srcu+0x10/0x10 [ 515.640028][T22498] ? preempt_schedule_thunk+0x16/0x40 [ 515.645392][T22498] ? preempt_schedule_common+0x7f/0xd0 [ 515.650841][T22498] ? preempt_schedule_thunk+0x16/0x40 [ 515.656206][T22498] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 515.661755][T22498] ? synchronize_srcu+0x20c/0x270 [ 515.666777][T22498] elevator_switch+0x1e8/0x7b0 [ 515.671547][T22498] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 515.676995][T22498] elevator_change+0x2fa/0x480 [ 515.681757][T22498] ? do_raw_spin_unlock+0xf5/0x200 [ 515.686862][T22498] elevator_set_default+0x375/0x440 [ 515.692062][T22498] ? __pfx_elevator_set_default+0x10/0x10 [ 515.697785][T22498] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 515.704870][T22498] ? blk_crypto_sysfs_register+0x11c/0x170 [ 515.710746][T22498] blk_register_queue+0x404/0x4f0 [ 515.715765][T22498] __add_disk+0x6b8/0xdb0 [ 515.720094][T22498] add_disk_fwnode+0x100/0x3a0 [ 515.724851][T22498] nbd_dev_add+0x733/0xb60 [ 515.729258][T22498] ? __pfx_nbd_dev_add+0x10/0x10 [ 515.734199][T22498] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 515.739994][T22498] ? bpf_lsm_capable+0x9/0x20 [ 515.744657][T22498] ? security_capable+0x7e/0x2c0 [ 515.749689][T22498] ? radix_tree_lookup+0x240/0x290 [ 515.754843][T22498] nbd_genl_connect+0x96c/0x1cd0 [ 515.759784][T22498] ? __pfx_nbd_genl_connect+0x10/0x10 [ 515.765191][T22498] ? rcu_is_watching+0x16/0xb0 [ 515.769968][T22498] ? trace_kmalloc+0x2a/0xf0 [ 515.774551][T22498] ? __kmalloc_noprof+0x387/0x710 [ 515.779569][T22498] ? __nla_parse+0x40/0x60 [ 515.783983][T22498] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 515.790363][T22498] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 515.796683][T22498] genl_family_rcv_msg_doit+0x233/0x340 [ 515.802230][T22498] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 515.808290][T22498] ? __lock_acquire+0x747/0x2de0 [ 515.813231][T22498] genl_rcv_msg+0x614/0x7a0 [ 515.817725][T22498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.822741][T22498] ? __pfx_nbd_genl_connect+0x10/0x10 [ 515.828119][T22498] netlink_rcv_skb+0x226/0x4a0 [ 515.832879][T22498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.837893][T22498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.843178][T22498] ? down_read+0x2b9/0x320 [ 515.847651][T22498] genl_rcv+0x28/0x40 [ 515.851620][T22498] netlink_unicast+0x8ef/0xa80 [ 515.856384][T22498] netlink_sendmsg+0x7f0/0xb20 [ 515.861145][T22498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.866426][T22498] ? aa_sock_msg_perm+0x144/0x210 [ 515.871446][T22498] ? apparmor_socket_sendmsg+0x98/0x360 [ 515.877039][T22498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.882319][T22498] sock_sendmsg_nosec+0x14e/0x190 [ 515.887340][T22498] ____sys_sendmsg+0x54e/0x850 [ 515.892095][T22498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.897372][T22498] ? import_iovec+0x73/0xa0 [ 515.901870][T22498] ___sys_sendmsg+0x2a5/0x360 [ 515.906534][T22498] ? __lock_acquire+0x747/0x2de0 [ 515.911467][T22498] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.916663][T22498] ? futex_wait+0x2a2/0x390 [ 515.921220][T22498] ? __fget_files+0x3a2/0x420 [ 515.925901][T22498] ? __fget_files+0x2a/0x420 [ 515.930495][T22498] __x64_sys_sendmsg+0x1b1/0x290 [ 515.935453][T22498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.940917][T22498] do_syscall_64+0x166/0x520 [ 515.945503][T22498] ? trace_irq_disable+0x3b/0x140 [ 515.950536][T22498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.956593][T22498] ? clear_bhb_loop+0x70/0xc0 [ 515.961270][T22498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.967156][T22498] RIP: 0033:0x7fd6dfd9fb19 [ 515.971578][T22498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.991184][T22498] RSP: 002b:00007fd6e0b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.999599][T22498] RAX: ffffffffffffffda RBX: 00007fd6e0025fa0 RCX: 00007fd6dfd9fb19 [ 516.007563][T22498] RDX: 0000000000004040 RSI: 0000200000000280 RDI: 0000000000000004 [ 516.015522][T22498] RBP: 00007fd6dfe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 516.023483][T22498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.031442][T22498] R13: 00007fd6e0026038 R14: 00007fd6e0025fa0 R15: 00007fffab2236a8 [ 516.039415][T22498] [ 520.665201][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 521.945292][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 524.035478][ T5654] Bluetooth: hci5: command 0x0406 tx timeout