last executing test programs: 3m50.766208332s ago: executing program 2 (id=5474): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4000, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3m50.512220444s ago: executing program 2 (id=5476): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x83aac31b6e18a292, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 3m50.357296717s ago: executing program 2 (id=5478): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000180)="4490", 0x2}], 0x1}}], 0x1, 0x24006010) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x2e3}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 3m49.133372011s ago: executing program 2 (id=5487): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_key={0x5, 0x8, 0x100, 0x0, "301808a358d0d95a6de98cb4e1b8dc43d23b31c3f5ac65ca3257c1d705eb53d9"}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x70}, 0x1, 0x7}, 0x0) 3m48.883199533s ago: executing program 2 (id=5490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xff, 0x200000, 0x6, 0x8}}]}]}}}]}, 0x68}}, 0x0) 3m48.565679955s ago: executing program 2 (id=5492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x81, 0x0) close(0x4) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) mmap(&(0x7f0000dbc000/0x3000)=nil, 0x3000, 0xc, 0x10, r3, 0xde521000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x3000000, @mcast2}, 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r5, 0x3fcb7000) 3m33.503527692s ago: executing program 32 (id=5492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x81, 0x0) close(0x4) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) mmap(&(0x7f0000dbc000/0x3000)=nil, 0x3000, 0xc, 0x10, r3, 0xde521000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x3000000, @mcast2}, 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r5, 0x3fcb7000) 22.608132902s ago: executing program 3 (id=6239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x0, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0xc8, r4, 0x204, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r8, @ANYRESOCT=r5, @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfc, {0x2, 0x10, 0xa0, 0x7, 0xfd, 0x2, 0x36, 0xa, 0xc00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x81) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x4000000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000800) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r10, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x10001}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40000005) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0xe44, 0x4a8) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000007c006400002c09069078e0000002e00000024e234e240000000000000000000000006bfe73022a375aedff16d2083b223a438400c407771ea80d36793853fefbfc268ca647d061357462149a5d50a6b605dab447e492a3a9011e08593c6a9b65876746b6f0e53e29fdabde5ae44c71e1cfe91bc4e50aa8cc3a1293d4bcda963f97c7f8e841137cf36156801662284e781091f0a589dcdacbb97ea2889cc00a0e19c4fcb059af56dfdf9227aee900bd616c24385eaff975bb80a7d19677bc7501c103b0586af216ceffd882900c5e5588e692a5", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="7004000690780008fe06e2d4c3d900000714c7c1eb6ca24c99da454a6653e79d14a1cc0da8a4c6c9da036d120d4dfadaf8ad29661ebe03cef133e5e5406ce0d0d19fb85ac5898e5c328e0af7f0e2af79546b6da4732635f29c2b7bca"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 21.210602044s ago: executing program 3 (id=6244): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r4) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c0007800500070008000000050001000700000005000500010000000c00078008001240fffffffa11000300686173683a69702c706f7274000000000100040000000000f268d5d1e480fc5780dc856ed8db089189429ec9d3bfddd87909833d83eb71c0e497fc1d47d73051d7136f51667b54cf2bdb655385c720f93dcd7e0f2b6d6548412286f7d2c27b612890452d16f162782107b9f9dd9e60f80f6918422813b56f71f22a89c0f269406c5e3fd90b46839ae1f327de766fc16ffe76ba795e8ffe7d45afa72e2dcca929013894e4ac37935e89eec1a7b4fb22abba7e94ac"], 0x58}}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0xd0, 0xd0, 0xd0, 0x1b8, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@empty, @local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bridge_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x5, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xee5f356c6f495b18, 0x100fffe00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x1d, 0x6, 0x1, 0x19}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @common=@ipv6header={{0x28}, {0x22, 0x2, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 18.82848777s ago: executing program 3 (id=6246): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c61b34f3154b4f81001000080049b4003800000000a30690786cb0793eac1414aa070f09e00000027f0000010000009e749ca185b704be7e8d99dbdb37117917df94d7e39b48cd161cf776dfc8b94fae6a4b88bb7d8dcd3b8cb72668a73a048d0bf89369da81b73a24e39cb88155ab932cc067686da1e6930b1e28feea037c5a9aa0a6a569b301045838bc17ad2eba4611a88297efcaca57173b8d705452431875c230abb3eab5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 18.223887815s ago: executing program 3 (id=6250): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x20, 0x5e, 0xe25, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24040044}, 0x24008844) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x33e0}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x8030) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0xc0, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'vxcan0\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0147f3398f4fb4931076484b581085c2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "00000000000000000000000002abdfd3"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6gre\x00'}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0xc0}}, 0x0) accept4$x25(r5, &(0x7f0000000340)={0x9, @remote}, &(0x7f0000000380)=0x12, 0x0) 17.143522364s ago: executing program 3 (id=6253): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101ed0000003c"], 0xfc}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000000340000000400"], 0x18}, 0x48814) 16.075098871s ago: executing program 3 (id=6256): bpf$PROG_LOAD(0x25, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @local, 0x1}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000340)={0x8, [0x6, 0x101, 0x6, 0x9, 0x4, 0x3ff, 0x2, 0x0]}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.323461192s ago: executing program 5 (id=6296): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8400}, {r0, 0x20}, {r1, 0x4008}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0x2]}, 0x8) 4.892926093s ago: executing program 4 (id=6300): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r0, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.65638552s ago: executing program 1 (id=6301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0xe4, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xe4}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.420018162s ago: executing program 1 (id=6302): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r2, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00077f08000500878f000008000600df0000deef545593897e48ab203c249037bcc867a4c9a42971a288a4"], 0x10c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="05001300840000000a00060008021100000100000600100080050000060012000100000010001180"], 0x50}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="1709000000000000ffff03000000050007000000000008000900fbff"], 0x5c}, 0x1, 0x620b, 0x0, 0x40004}, 0x0) 4.351542607s ago: executing program 1 (id=6303): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0xec}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) connect$unix(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000440), &(0x7f0000000140)=r1}, 0x20) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) 4.209809455s ago: executing program 5 (id=6304): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c004}, 0x8804) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001100050004000001feffffff07000000", @ANYRES32=r7, @ANYBLOB="681422de2264001a80"], 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0xf65440210f293c8) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r8, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2000}, {r2, 0xa}, {r6, 0x82}, {r8, 0x99}, {r2, 0x80}], 0x5, 0x5) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000240)={0x9, 0x4, 0x6, 0x5, 0x5, 0x3, 0x8, 0xee, 0x7, 0xf4, 0x64, 0x8, 0xfb, 0x10}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, &(0x7f00000000c0)={r13}, &(0x7f0000000200)=0x8) socket$kcm(0x10, 0x2, 0x4) 4.127066132s ago: executing program 1 (id=6305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'netpci0\x00', @local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x18}, @val={0x3, 0x0, 0xfffc, 0x9, 0x6, 0x1bbe}, @ipv4=@icmp={{0x16, 0x4, 0x1, 0x1f, 0x60, 0x67, 0x0, 0x9, 0x1, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x4, 0xd1, 0x0, 0xc}, @cipso={0x86, 0x22, 0x2, [{0x1, 0x11, "71b332bf1d61874874f2d71faeb2b0"}, {0x1, 0x2}, {0x7, 0x9, "369032727f9d1f"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0x7, [{@private=0xa010101, 0x3}, {@loopback, 0xf1}]}]}}, @info_reply={0x10, 0x0, 0x0, 0x4, 0x200}}}, 0x6e) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x4c}}, 0x2000a100) 3.472178263s ago: executing program 5 (id=6307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x42, 0x0, &(0x7f0000000080)) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) recvmsg(r3, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f0000000200)=""/202, 0xca}], 0x1}, 0x40) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) 3.469431489s ago: executing program 4 (id=6308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 3.097236674s ago: executing program 4 (id=6309): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x9, 0xbb) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="020b0e090600000025bd7000fedbdf25040003000400000005000000000000000f000000000000000100200000001000f12553e995ca7dd87a914b89b6a71b7c091966ca1ce2a5402dd6a3ec1d20f867870a8166a18a0af6dfb7ee177b738bfb18e5c55acdd40bea88681d8ff1e43b230e2f8106"], 0x30}}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00e000", @ANYRES16=r4, @ANYBLOB="010127bd7000fedbdf254b00000008000300410000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="08002abd7000fbdbdf2501000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x28000001}, 0x11) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000002060500000000000000000073ec000000000000080006400000eaa7050001000600000005000500020000000500040000000000"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="3800000041000701feffff018006000600800a000014000280100003800c208694a7fde9b285c41d752ad81c84b116e1f65b067254bd7ec7ac4224423d72936f61b81185ec92f8f3d26212e6cd160c7870d0955fdc3e46908883dbd9d140ca65d434a2b36bab96e525f74d5ba6e208af18855021cf468f1eb7bede81094be4ad26ce9eba530507a7a1d6cbe8b239752f4ebf28a32c9c892d2ff06c4ccef64cab0bfbe97831cbb8eb497f4749178415c964a393184610be049dfa3a7160e306ff2cc6be4414061aaa82ed16007ca0e4c2b836299063965a1d1cd553c3e55d6aa5612238b11a33855345594198a29867a72aa0729a6468"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYRES16=0x0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711002000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x2d, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket(0x2, 0x4, 0x0) ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f00000003c0)={0x0, r11, r8, 0x7ff, 0x10, '\x00', {0x0, 0xf, 0x1, 0x5, 0x9, 0x1, 0x45, 0x9bef, {0x1, 0x6}, {0x1eb, 0x7}, {0xffffffff, 0x7ff}, 0x1, 0xfff, 0x6, 0x4, 0x60, 0x4, 0x1, 0xa7c0, 0x4, 0x80, '\x00', 0x4, 0x7a4, 0x81, 0xa}}) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) 3.095515887s ago: executing program 5 (id=6310): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x4c, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 3.058016956s ago: executing program 0 (id=6311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a80200001801400030000000000000008000100000000000000040008"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.904995125s ago: executing program 1 (id=6312): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x7800, 0x8, 0x9, 0x0, {{0xc, 0x4, 0x3, 0x3e, 0x30, 0x65, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x23, [@private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r2}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r2, 0x2f) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x1b6}, 0xc) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xf8e6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x9, 0x5, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0xc35, 0x5, 0x2, 0x0, 0xe, 0x6, 0xcec3]}, &(0x7f0000000140)=0x100) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r9}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) (rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000500)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11ab}}, @ldst={0x3, 0x0, 0x2, 0x8, 0x1, 0xffffffffffffff68, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x4, 0x1, 0x40}], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x30, '\x00', r1, 0x25, r3, 0x8, &(0x7f00000006c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x4, 0x7f, 0xfffffff0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r4, r5, 0xffffffffffffffff, r6, r9, r10, r11], &(0x7f00000009c0), 0x10, 0x3ff}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x33) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) sendmsg$nl_xfrm(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in=@local}, {@in6=@empty, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'pcrypt(rfc4309(ccm_base(cbc(aes-aesni),wp384)))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 2.720348285s ago: executing program 5 (id=6313): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) getsockopt$sock_buf(r0, 0x1, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x15, 0x3240, 0x3a}, {@empty, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000200)=""/192, 0xc0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0x1}, 0x18) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={0x0, 0x1b0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) getsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000001300), &(0x7f0000001340)=0x4) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bind$can_raw(r2, &(0x7f0000000040), 0x10) recvmsg$can_j1939(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/4096, 0x1000}, {0x0}], 0x3}, 0x2062) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r6, 0x2, {0x1, 0x1, 0x5}, 0xfd}, 0x18) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r6, 0x2, {0x0, 0xf0, 0x2}, 0xfd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 2.537429603s ago: executing program 0 (id=6314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac0000000a0000000d000000000000120400000004000000020000840500000001000063d600000021b700000c0000000500000005000000050000000100000501000000020000000100000002000000050000000000000a03000000060000000000000a010000000200000001000093080000000200000005000000010001000f0000000000000e04000000020000000000000000000f030000000001000000030000000e00000002000000000000120100000000055f2e005f5f613000"], &(0x7f0000000640)=""/218, 0xce, 0xda, 0x1, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000080a625b19fcc1188000000000000000000000000000000000000230201ec5f91ffe766c45e7593ac95889147811e84a213985642c3bf4aca15b07089dbe7bcf5131f15132672978875f849239600000000001400000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x27, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000a0000000000000001000000850000006500000003250f00040000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000001865000005000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ab0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018480000f8ffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70000ddffffffff84000000a50000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xd, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x21, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x2, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r2, r0, r2, r3], &(0x7f0000000900)=[{0x3, 0x1, 0x9, 0xb}], 0x10, 0x9}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000b40)={'wg2\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x244}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1b4, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x39c4709298897d32}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) connect$unix(r14, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r14, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r13], 0x18, 0x8800}}], 0x1, 0x0) accept(r5, 0x0, 0x0) r15 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r16, 0x2b5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.996030685s ago: executing program 1 (id=6315): bpf$PROG_LOAD(0x25, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @local, 0x1}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000340)={0x8, [0x6, 0x101, 0x6, 0x9, 0x4, 0x3ff, 0x2, 0x0]}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.832311098s ago: executing program 5 (id=6316): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r4, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000b42a5a589eb91ccbda3780115467f1000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="07b4e4f6fd95de77b7554d00ea44bd5d9300"/29, @ANYRES64=0x0], 0x10) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r14, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r15}, 0x14) 1.821949486s ago: executing program 0 (id=6317): r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r3 = socket(0x2, 0x3, 0x0) (rerun: 64) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000640)={'broute\x00', 0x0, 0x0, 0x0, [0x403b, 0x6, 0x0, 0x2, 0xd911, 0xb218], 0x7, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r4, 0xb5}, 0x8) bind$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e1f}, 0x6e) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000300)="3a3934085d30252773a929334e23858f2e4eeeb0c4c4e6b5fd3fbb9f266036991e2c2965462e4c5337e6ff001132b326884041daebc70e275e3f7ecb520131ef0e0fbff488603feb6a8a116ab0892ff62ec351a0d0c077945a0b02d7c157859619bf38ae6a69bb333e028cb41232db2e0ccf1a04ce5247958ffdeea631dc2a26775ace0d5b2471582ae4910f12f9", 0x8e}], 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x309c000) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x158, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x128, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x1a, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x0) nanosleep(&(0x7f0000000200), 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0xffffffffffffffba, &(0x7f0000001b40)=[{&(0x7f0000000100)="557aaf2ee116688ba8f4eda4508def374c4c5c1cb055d4c1fb3bce34ee6b631ee918b9266fde0ad15dc52d618c99ba592921e0f085048e7737204c419718dc3aded38861d17f6d1797a704f7cd453662e1683ae69e9ba4af9fed3835d9309e6d65f8cf2beea58a9f60d9ed41506053351d798e370a34c5b7fbe24c7b51e5277e8df373", 0x83}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000002c00)="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", 0x10a1}, {&(0x7f0000002b40)="52b2e256c7956814cb9c1b4a34", 0xd}, {&(0x7f0000000500)="96fec4ca6200197e041b619bfb1d906a9e415ba3d79b451b2ac8c6352afae378ccc1e695fb5fe326c6bf69", 0x2b}, {&(0x7f0000000840)="5bcd4f45e5bd3e9b215ec4ace532c6e4039369d979c1b1b7ae0c21be0c21a7057b51a7e3d57bf176a1995228b5c8aec7520d70a012c059771a8e4ba7cf2b9240cfd3139abd22162272affdf2e0170dc6cab956960f6c6a43af59d83bd366d3f0e5e8a135b455767308622dd31bb24de2711b344de90c28af789f92373459cf3bc98e", 0xd8}], 0x6, 0x0, 0x0, 0x80}, 0x38) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c00000000d90690780a210104ac1414aa83039e0000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7480000090780000"], 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES8=r8, @ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000001108000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.655316258s ago: executing program 4 (id=6318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000014f8000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a30000000003fd42f55becc8c9824a29f2a0daf22b16aaf871dde1aec28f1034b51f1228575a4c783c5a66ce5076dec97cac55ff2a163d758b82059c27df3ea53571a26e983544871fc11905b68aaad00d7f4"], 0x6c}}, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01062dbd7000fddbdf256000000008000300", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x8004000}, 0x24000800) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000014f8000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a30000000003fd42f55becc8c9824a29f2a0daf22b16aaf871dde1aec28f1034b51f1228575a4c783c5a66ce5076dec97cac55ff2a163d758b82059c27df3ea53571a26e983544871fc11905b68aaad00d7f4"], 0x6c}}, 0x4000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_udp_int(r2, 0x11, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01062dbd7000fddbdf256000000008000300", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x8004000}, 0x24000800) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) 1.114272615s ago: executing program 0 (id=6319): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002540)={{r0}, 0x0, 0x18, @unused=[0xfffffffffffffff5, 0x8000, 0x3, 0x2], @subvolid=0xe127}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002540)={{r0}, 0x0, 0x18, @unused=[0xfffffffffffffff5, 0x8000, 0x3, 0x2], @subvolid=0xe127}) 557.783412ms ago: executing program 0 (id=6320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 383.149615ms ago: executing program 0 (id=6321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 303.983444ms ago: executing program 4 (id=6322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24008096) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 0s ago: executing program 4 (id=6323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x50) close(0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x80}, 0xfffff4f4, 0x1, 0xff, 0x2, 0x1008, 0x1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r4, 0x1, 0x48, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@RTM_GETNSID={0x14, 0x5a, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x20000081) kernel console output (not intermixed with test programs): 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.002474][T22271] RSP: 002b:00007f9689fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 792.002497][T22271] RAX: ffffffffffffffda RBX: 00007f9689425fa0 RCX: 00007f968919de59 [ 792.002512][T22271] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 792.002526][T22271] RBP: 00007f9689fef090 R08: 0000000000000000 R09: 0000000000000000 [ 792.002539][T22271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.002551][T22271] R13: 00007f9689426038 R14: 00007f9689425fa0 R15: 00007fff1b6bb818 [ 792.002586][T22271] [ 792.327804][ T9168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.438098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.007129][ T1028] bond0: (slave dummy0): interface is now down [ 793.028232][T22283] netlink: 'syz.0.5101': attribute type 21 has an invalid length. [ 793.073231][T22283] netlink: 'syz.0.5101': attribute type 22 has an invalid length. [ 793.081119][T22283] netlink: 'syz.0.5101': attribute type 23 has an invalid length. [ 793.166366][T22283] netlink: 'syz.0.5101': attribute type 25 has an invalid length. [ 793.174351][T22283] netlink: 'syz.0.5101': attribute type 26 has an invalid length. [ 793.182468][T22283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5101'. [ 793.571701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.918406][ T9167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.151586][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5107'. [ 795.029822][ T9] net_ratelimit: 1 callbacks suppressed [ 795.029845][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.072341][ T9167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.105845][T22336] netlink: 6208 bytes leftover after parsing attributes in process `syz.2.5112'. [ 795.196536][T22336] netlink: 'syz.2.5112': attribute type 1 has an invalid length. [ 795.630828][ T1046] bond0: (slave dummy0): interface is now down [ 795.728169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.986124][T22336] 8021q: adding VLAN 0 to HW filter on device bond21 [ 796.094542][T22368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.243910][T22369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.375229][T22372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5121'. [ 796.605454][T22380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5124'. [ 796.645924][T22382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5126'. [ 796.722363][T22382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5126'. [ 796.804780][T22380] bond17: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 796.816519][T22380] bond17: (slave ip_vti0): Error -95 calling set_mac_address [ 797.055403][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5127'. [ 797.072319][T22388] xfrm1: entered promiscuous mode [ 797.103843][T22388] xfrm1: entered allmulticast mode [ 797.117078][T22397] gtp1: entered promiscuous mode [ 797.122096][T22397] gtp1: entered allmulticast mode [ 797.250707][T22392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5122'. [ 797.470163][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5127'. [ 798.135806][ T1028] bond0: (slave dummy0): interface is now down [ 798.142526][ T1028] bond0: now running without any active interface! [ 798.322712][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5133'. [ 798.382097][T22423] netlink: 'syz.4.5135': attribute type 21 has an invalid length. [ 798.390124][T22423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5135'. [ 799.010834][T22428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5136'. [ 799.286106][T22442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5140'. [ 800.560830][T22487] netlink: 'syz.2.5151': attribute type 21 has an invalid length. [ 800.568734][T22487] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5151'. [ 800.578122][T22487] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5151'. [ 801.330552][T22504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5158'. [ 801.724962][T22522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5164'. [ 801.783532][T22523] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5162'. [ 801.927984][T22532] netlink: 'syz.0.5164': attribute type 1 has an invalid length. [ 802.746313][T22527] batadv_slave_1: left promiscuous mode [ 802.807794][T22527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.859109][T22527] tipc: Resetting bearer [ 803.248854][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.267218][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.386141][T22527] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 803.412921][T22527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 803.506584][T22527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 803.520093][T22527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 803.529286][T22527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 803.556820][T22527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 803.664216][T22527] 8021q: adding VLAN 0 to HW filter on device bond9 [ 803.678786][T22527] geneve3: left promiscuous mode [ 803.720138][T22527] 8021q: adding VLAN 0 to HW filter on device bond10 [ 803.736541][T22527] 8021q: adding VLAN 0 to HW filter on device bond11 [ 803.752289][T22527] 8021q: adding VLAN 0 to HW filter on device bond12 [ 803.790167][T22527] 8021q: adding VLAN 0 to HW filter on device bond15 [ 803.837078][T22527] 8021q: adding VLAN 0 to HW filter on device bond16 [ 803.848850][T22527] 8021q: adding VLAN 0 to HW filter on device bond17 [ 803.874102][T20335] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.881321][T20335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.046498][ T9167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.652980][T22572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5170'. [ 804.737974][T22562] netlink: 'syz.2.5170': attribute type 7 has an invalid length. [ 804.803472][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.117175][T20336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.184424][T21111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.259495][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5176'. [ 805.419521][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5177'. [ 806.063204][T22584] bond17: entered promiscuous mode [ 806.068958][T22584] 8021q: adding VLAN 0 to HW filter on device bond17 [ 806.243979][T22591] 8021q: adding VLAN 0 to HW filter on device bond17 [ 806.251275][T22591] bond17: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 806.262911][T22591] bond17: (slave ip6gre2): Error -95 calling set_mac_address [ 806.458027][T22605] netlink: 'syz.1.5181': attribute type 10 has an invalid length. [ 806.792392][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5185'. [ 809.012054][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.021115][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.122155][T22605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.131330][T22605] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 809.461875][T22615] syzkaller0: entered promiscuous mode [ 809.467414][T22615] syzkaller0: entered allmulticast mode [ 809.504518][T21111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.658020][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 809.667379][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 809.676693][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 809.686074][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 809.695355][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 809.704665][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 809.713954][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 810.013863][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 810.023412][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 810.032921][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 810.042359][T22621] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5187'. [ 811.528654][T22656] netlink: 'syz.1.5199': attribute type 10 has an invalid length. [ 812.460547][T22659] tunl0: entered promiscuous mode [ 812.542849][T22659] netlink: 'syz.3.5201': attribute type 3 has an invalid length. [ 812.708283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.018942][T22696] bond0: (slave batadv0): Releasing backup interface [ 813.122688][T22696] bridge_slave_0: left allmulticast mode [ 813.128490][T22696] bridge_slave_0: left promiscuous mode [ 813.134511][T22696] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.143983][T22702] netlink: 'syz.2.5212': attribute type 12 has an invalid length. [ 813.245685][T22696] bridge_slave_1: left allmulticast mode [ 813.251414][T22696] bridge_slave_1: left promiscuous mode [ 813.257255][T22696] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.340847][T22696] bond11: (slave veth0_to_bond): Releasing active interface [ 813.357072][T22696] bond0: (slave bond_slave_0): Releasing backup interface [ 813.423137][T22696] bond0: (slave bond_slave_1): Releasing backup interface [ 813.443112][T22696] team_slave_0: left promiscuous mode [ 813.454283][T22696] team0: Port device team_slave_0 removed [ 813.460794][T22696] team_slave_1: left promiscuous mode [ 813.467977][T22696] team0: Port device team_slave_1 removed [ 813.474284][T22696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.486829][T22696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.532772][T22696] bond2: (slave bridge1): Releasing backup interface [ 813.544905][T22696] batadv1: left allmulticast mode [ 813.550011][T22696] batadv1: left promiscuous mode [ 813.555322][T22696] bridge0: port 3(batadv1) entered disabled state [ 813.574925][T22696] bond15: (slave vti0): Releasing backup interface [ 813.582024][T22696] vti0: left promiscuous mode [ 813.597325][T22704] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 814.511962][T22715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.658775][T22715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.669458][T22715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 815.161589][T22743] netlink: 'syz.0.5224': attribute type 1 has an invalid length. [ 815.189353][T22715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.251784][T22715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.262208][T22715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 815.473197][T22755] sctp: [Deprecated]: syz.3.5227 (pid 22755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 815.473197][T22755] Use struct sctp_sack_info instead [ 815.529302][T22748] ÿÿÿÿÿÿ: renamed from vlan1 [ 815.637032][T22750] bond18: (slave geneve2): making interface the new active one [ 815.703180][T22750] bond18: (slave geneve2): Enslaving as an active interface with an up link [ 815.719674][T20336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.736492][T20336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.756650][T20336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 816.328674][T22768] netlink: 'syz.4.5231': attribute type 32 has an invalid length. [ 816.336573][T22768] __nla_validate_parse: 25 callbacks suppressed [ 816.336594][T22768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5231'. [ 816.587804][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.632114][T22778] netlink: 'syz.0.5235': attribute type 10 has an invalid length. [ 816.750620][T22715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.760967][T22715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.771261][T22715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 816.850502][T20336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 816.919257][T22768] bond18: Setting coupled_control to off (0) [ 817.005279][T22778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.014483][T22778] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 817.198433][T22715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.208890][T22715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.219879][T22715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 817.311512][T22786] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 817.433769][T22790] netlink: 'syz.4.5238': attribute type 1 has an invalid length. [ 817.632693][T22790] 8021q: adding VLAN 0 to HW filter on device bond19 [ 817.796532][T22791] bond18: (slave veth3): Enslaving as an active interface with a down link [ 817.814046][T22788] macvlan2: entered promiscuous mode [ 817.819418][T22788] macvlan2: entered allmulticast mode [ 817.826127][T22788] bond19: entered promiscuous mode [ 818.014622][T22788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 818.084079][ T1654] block nbd1: Possible stuck request ffff888027d50000: control (read@0,1024B). Runtime 90 seconds [ 818.094771][ T1654] block nbd1: Possible stuck request ffff888027d501c0: control (read@1024,1024B). Runtime 90 seconds [ 818.105659][ T1654] block nbd1: Possible stuck request ffff888027d50380: control (read@2048,1024B). Runtime 90 seconds [ 818.116541][ T1654] block nbd1: Possible stuck request ffff888027d50540: control (read@3072,1024B). Runtime 90 seconds [ 818.135235][T22788] bond19: left promiscuous mode [ 818.279047][T22786] 8021q: adding VLAN 0 to HW filter on device bond18 [ 818.650565][T22808] ip6t_rpfilter: unknown options [ 818.657462][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5241'. [ 818.667621][T22808] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5241'. [ 819.005392][T20349] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.014081][T20349] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 819.022723][T20349] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 819.064466][T22811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5242'. [ 819.150584][T20349] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.158840][T20349] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 819.167211][T20349] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 819.175433][T20349] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.183715][T20349] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 819.191992][T20349] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 819.925352][T20349] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.933777][T20349] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 819.942063][T20349] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 820.087367][T22833] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 820.320710][T22830] netlink: 'syz.3.5248': attribute type 8 has an invalid length. [ 820.390254][T22830] sch_fq: defrate 0 ignored. [ 820.650950][T22841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5251'. [ 820.842997][T22841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5251'. [ 821.162737][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5255'. [ 822.082083][T20336] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.091888][T20336] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.100712][T20336] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.110139][T20336] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.141611][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5255'. [ 822.635934][T22866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5260'. [ 824.006779][T22895] xt_TCPMSS: Only works on TCP SYN packets [ 824.795643][T22909] netlink: 'syz.2.5274': attribute type 1 has an invalid length. [ 825.160995][T22921] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5277'. [ 825.257759][T22909] 8021q: adding VLAN 0 to HW filter on device bond22 [ 825.854973][T22931] syzkaller0: entered promiscuous mode [ 825.860528][T22931] syzkaller0: entered allmulticast mode [ 826.301157][T22937] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5279'. [ 826.664489][T22934] bond22: (slave geneve4): making interface the new active one [ 826.674290][T22934] bond22: (slave geneve4): Enslaving as an active interface with an up link [ 826.683227][T20350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.693398][T20350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.702203][T20350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.710977][T20350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.847125][T22968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5288'. [ 832.956275][T22970] syzkaller0: entered promiscuous mode [ 832.961925][T22970] syzkaller0: entered allmulticast mode [ 832.991144][T22968] mac80211_hwsim hwsim27 ÿ: renamed from wlan1 (while UP) [ 833.299000][T22975] netlink: 'syz.2.5289': attribute type 21 has an invalid length. [ 833.307101][T22975] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5289'. [ 833.715708][T22982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 833.727607][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 833.736513][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5293'. [ 833.745493][T22982] netlink: 'syz.2.5293': attribute type 14 has an invalid length. [ 833.753418][T22982] netlink: 'syz.2.5293': attribute type 13 has an invalid length. [ 834.106882][T23000] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5298'. [ 834.443316][T23013] netlink: 'syz.2.5304': attribute type 17 has an invalid length. [ 834.963763][T23027] bond19: Removing last ns target with arp_interval on [ 835.103045][T23031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 836.172378][T23061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5317'. [ 836.181493][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5317'. [ 836.244589][T23054] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 836.509951][T23062] bond16: entered promiscuous mode [ 836.561923][T23062] 8021q: adding VLAN 0 to HW filter on device bond16 [ 836.599223][T23074] netlink: 'syz.1.5318': attribute type 10 has an invalid length. [ 836.618047][T23069] bond16: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 836.632934][T23076] netlink: 'syz.2.5323': attribute type 13 has an invalid length. [ 836.640872][T23069] bond16: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 836.693224][T23077] netlink: 'syz.2.5323': attribute type 13 has an invalid length. [ 836.706035][T23069] bond16: (slave ipvlan2): Error -95 calling set_mac_address [ 836.766025][T23073] bond19: Unable to set peer notification delay as MII monitoring is disabled [ 836.813624][T23073] bond19 (unregistering): Released all slaves [ 836.846969][T23076] gretap0: refused to change device tx_queue_len [ 836.853536][T23076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 836.869638][T23071] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5320'. [ 836.879475][T23077] gretap0: refused to change device tx_queue_len [ 836.885887][T23077] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 837.727118][T23102] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5328'. [ 838.328181][T23122] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5331'. [ 838.349126][T23122] nbd: illegal input index -8454144 [ 838.653691][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'. [ 838.941431][T23137] bond20: entered promiscuous mode [ 838.956095][T23137] 8021q: adding VLAN 0 to HW filter on device bond20 [ 839.010395][T23137] bond20: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 839.023233][T23137] bond20: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 839.035578][T23137] bond20: (slave ipvlan2): Error -95 calling set_mac_address [ 839.118185][T23140] netlink: 'syz.3.5335': attribute type 10 has an invalid length. [ 839.182777][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5339'. [ 839.677152][T23154] ip6_vti0: entered allmulticast mode [ 839.706656][T23154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5343'. [ 839.823540][T23161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5345'. [ 839.850093][T20335] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.951704][T23164] netlink: 'syz.0.5340': attribute type 17 has an invalid length. [ 839.959762][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 839.968653][T23164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5340'. [ 839.977769][T23165] netlink: 'syz.0.5340': attribute type 17 has an invalid length. [ 839.985608][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 840.066812][T23165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5340'. [ 840.247648][T23169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5346'. [ 840.423645][T23179] netlink: 'syz.4.5348': attribute type 1 has an invalid length. [ 840.487786][T23179] netlink: 'syz.4.5348': attribute type 3 has an invalid length. [ 840.495674][T23179] NCSI netlink: No device for ifindex 813332851 [ 841.906373][T23211] vlan2: entered allmulticast mode [ 841.911659][T23211] veth1_virt_wifi: entered allmulticast mode [ 842.976498][T23252] netlink: 'syz.3.5369': attribute type 10 has an invalid length. [ 843.492085][T23259] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 843.514100][T23259] team0: Device ipvlan2 is already an upper device of the team interface [ 843.844041][T23267] bond17: entered promiscuous mode [ 843.906228][T23272] netlink: 'syz.1.5376': attribute type 10 has an invalid length. [ 843.928339][T23267] 8021q: adding VLAN 0 to HW filter on device bond17 [ 844.006635][T23275] __nla_validate_parse: 8 callbacks suppressed [ 844.006657][T23275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5378'. [ 844.161211][T23269] bond17: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 844.173788][T23269] bond17: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 844.237549][T23269] bond17: (slave ipvlan2): Error -95 calling set_mac_address [ 844.586182][T23284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5381'. [ 844.938963][T23293] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5384'. [ 845.049744][T23297] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 845.078276][T23297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5385'. [ 846.094452][T23324] xt_l2tp: invalid flags combination: 8 [ 846.394993][T23332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5396'. [ 846.932268][T23341] netlink: 'syz.4.5400': attribute type 13 has an invalid length. [ 848.258294][T23368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.269621][T23368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5407'. [ 848.278712][T23368] openvswitch: netlink: Flow key attribute not present in set flow. [ 848.286220][T23365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5406'. [ 848.640360][T23365] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5406'. [ 849.012875][ T1654] block nbd1: Possible stuck request ffff888027d50000: control (read@0,1024B). Runtime 120 seconds [ 849.023744][ T1654] block nbd1: Possible stuck request ffff888027d501c0: control (read@1024,1024B). Runtime 120 seconds [ 849.034905][ T1654] block nbd1: Possible stuck request ffff888027d50380: control (read@2048,1024B). Runtime 120 seconds [ 849.046459][ T1654] block nbd1: Possible stuck request ffff888027d50540: control (read@3072,1024B). Runtime 120 seconds [ 849.397701][T23384] bridge0: port 3(gretap0) entered blocking state [ 849.404304][T23384] bridge0: port 3(gretap0) entered disabled state [ 849.410965][T23384] gretap0: entered allmulticast mode [ 849.491437][T23384] gretap0: entered promiscuous mode [ 849.497945][T23384] bridge0: port 3(gretap0) entered blocking state [ 849.504675][T23384] bridge0: port 3(gretap0) entered forwarding state [ 850.727170][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5420'. [ 850.736127][T23414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5420'. [ 850.788325][T23415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5422'. [ 850.797423][T23415] batadv_slave_0: Caught tx_queue_len zero misconfig [ 850.804140][T23415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5422'. [ 850.902630][T23415] netlink: 'syz.4.5422': attribute type 29 has an invalid length. [ 851.239465][T23429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5427'. [ 851.259900][T23424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5425'. [ 851.462155][T23437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5430'. [ 851.566702][T23437] team0: Port device team_slave_0 removed [ 851.684485][T23443] netlink: 'syz.2.5432': attribute type 2 has an invalid length. [ 851.692692][T23443] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5432'. [ 851.815475][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5433'. [ 851.977468][T23451] syzkaller0: entered promiscuous mode [ 851.983089][T23451] syzkaller0: entered allmulticast mode [ 852.024665][T23455] lo: Caught tx_queue_len zero misconfig [ 852.536555][T23464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5438'. [ 853.005331][T23473] x_tables: duplicate underflow at hook 2 [ 853.621006][T23484] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 853.926755][T23487] vlan2: entered promiscuous mode [ 853.931865][T23487] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 854.388059][T23491] wg2 speed is unknown, defaulting to 1000 [ 855.052113][T23493] wg2 speed is unknown, defaulting to 1000 [ 855.153180][T23517] mac80211_hwsim hwsim33 ÿ: renamed from wlan1 [ 855.231531][T23519] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 855.832960][T23524] netlink: 'syz.3.5459': attribute type 10 has an invalid length. [ 856.133142][T23531] __nla_validate_parse: 3 callbacks suppressed [ 856.133165][T23531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5463'. [ 856.148370][T23531] openvswitch: netlink: Missing key (keys=40, expected=100) [ 857.056748][T23543] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 857.241396][T23539] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 858.083585][T23557] netlink: 'syz.4.5468': attribute type 4 has an invalid length. [ 858.141467][T23556] netlink: 'syz.4.5468': attribute type 4 has an invalid length. [ 859.084092][T23574] netlink: 'syz.2.5472': attribute type 10 has an invalid length. [ 859.627571][T23586] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 859.672973][T23586] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5475'. [ 859.854551][T23586] syzkaller0: entered promiscuous mode [ 859.860212][T23586] syzkaller0: entered allmulticast mode [ 860.602491][T23602] netlink: 'syz.4.5484': attribute type 10 has an invalid length. [ 860.921657][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5486'. [ 861.029203][T23610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5485'. [ 861.109036][T23614] netlink: 'syz.0.5488': attribute type 83 has an invalid length. [ 861.329754][T23622] netlink: 'syz.4.5489': attribute type 21 has an invalid length. [ 861.581300][T23629] netlink: 'syz.4.5493': attribute type 11 has an invalid length. [ 861.589185][T23629] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5493'. [ 861.606674][T23631] lo speed is unknown, defaulting to 1000 [ 861.612796][T23631] lo speed is unknown, defaulting to 1000 [ 861.620618][T23631] lo speed is unknown, defaulting to 1000 [ 861.629644][T23631] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 861.691981][T23631] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 861.709833][T23631] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 861.740878][T23631] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 863.043604][T23611] Bluetooth: hci3: command 0x0406 tx timeout [ 869.028578][T23634] ±ÿª¨úrBº“: renamed from lo [ 869.037835][T23631] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 869.075000][T23631] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 869.084536][T23631] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 869.093205][T23631] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 869.101801][T23631] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 869.113541][T23631] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 869.349086][T23641] syzkaller0: entered promiscuous mode [ 869.396032][T23641] syzkaller0: entered allmulticast mode [ 869.499024][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5496'. [ 869.778462][T23645] syzkaller0: entered promiscuous mode [ 869.784178][T23645] syzkaller0: entered allmulticast mode [ 869.848909][T23652] netlink: 'syz.3.5499': attribute type 10 has an invalid length. [ 869.896561][T23651] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 870.556947][T23661] xt_bpf: check failed: parse error [ 870.712516][T23665] syzkaller1: entered promiscuous mode [ 870.718055][T23665] syzkaller1: entered allmulticast mode [ 870.771734][T23665] netlink: 'syz.0.5506': attribute type 9 has an invalid length. [ 871.861685][T23675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5507'. [ 872.245406][T23695] syzkaller0: entered promiscuous mode [ 872.250961][T23695] syzkaller0: entered allmulticast mode [ 872.418499][T23697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.782206][T23708] netlink: 'syz.1.5517': attribute type 1 has an invalid length. [ 872.813756][T23708] netlink: 'syz.1.5517': attribute type 2 has an invalid length. [ 873.223142][T23721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5523'. [ 873.316643][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5525'. [ 873.420751][T23724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5525'. [ 873.680562][T23733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5528'. [ 873.794768][T23739] nbd: nbd1 already in use [ 873.813544][T23735] block nbd1: NBD_DISCONNECT [ 873.981477][T23735] block nbd1: Send disconnect failed -32 [ 873.987529][T23735] block nbd1: shutting down sockets [ 874.104603][T23748] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 874.313900][T23753] x_tables: duplicate underflow at hook 1 [ 874.446644][T23756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5536'. [ 874.805737][T23765] syzkaller0: entered promiscuous mode [ 874.811459][T23765] syzkaller0: entered allmulticast mode [ 874.906537][T23765] TC_ACT_REPEAT abuse ? [ 876.810066][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 876.827249][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 876.835695][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 876.844106][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 876.851867][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 877.400036][T23794] wg2 speed is unknown, defaulting to 1000 [ 877.729124][T23794] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 878.190878][T23794] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.198175][T23794] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.205446][T23794] bridge_slave_0: entered allmulticast mode [ 878.213623][T23794] bridge_slave_0: entered promiscuous mode [ 878.223986][T23794] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.231591][T23794] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.238885][T23794] bridge_slave_1: entered allmulticast mode [ 878.276641][T23794] bridge_slave_1: entered promiscuous mode [ 878.321936][T23794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.340107][T23794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.408633][T23794] team0: Port device team_slave_0 added [ 878.418193][T23794] team0: Port device team_slave_1 added [ 878.464525][T23794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.471705][T23794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.536417][T23794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.549438][T23794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.556419][T23794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.582320][T23794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.679599][T23794] hsr_slave_0: entered promiscuous mode [ 878.686618][T23794] hsr_slave_1: entered promiscuous mode [ 878.978188][ T5628] Bluetooth: hci4: command tx timeout [ 881.012201][ T5628] Bluetooth: hci4: command tx timeout [ 883.178678][ T5628] Bluetooth: hci4: command tx timeout [ 885.316570][T23611] Bluetooth: hci4: command tx timeout [ 886.011473][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.021463][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 886.029428][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.038999][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 886.046850][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.056160][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 886.064801][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.074229][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 886.163458][ T1654] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.173859][ T1654] Buffer I/O error on dev nbd1, logical block 0, async page read [ 886.189390][ T1654] Buffer I/O error on dev nbd1, logical block 1, async page read [ 886.197449][ T1654] Buffer I/O error on dev nbd1, logical block 2, async page read [ 886.230698][ T1654] Buffer I/O error on dev nbd1, logical block 3, async page read [ 886.240664][ T1654] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.249916][ T1654] Buffer I/O error on dev nbd1, logical block 0, async page read [ 886.257728][ T1654] Buffer I/O error on dev nbd1, logical block 1, async page read [ 886.265992][ T1654] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.275839][ T1654] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.286021][ T1654] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.298650][ T1654] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.308673][T21096] ldm_validate_partition_table(): Disk read failed. [ 886.353310][T21096] Dev nbd1: unable to read RDB block 0 [ 886.464119][T21096] nbd1: unable to read partition table [ 886.921595][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5554'. [ 886.947471][T21096] ldm_validate_partition_table(): Disk read failed. [ 886.956815][T21096] Dev nbd1: unable to read RDB block 0 [ 886.965188][T21096] nbd1: unable to read partition table [ 887.080016][T23829] xt_CT: No such helper "snmp_trap" [ 888.610984][T23794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 888.635363][T23794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.888493][T23633] team0: Port device syz_tun removed [ 888.919800][T23794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 888.984405][T23794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.035443][T23836] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 889.066830][T23794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 889.091769][T23794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.113853][T23794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 889.157036][T23794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.217023][T23841] netlink: 'syz.3.5556': attribute type 10 has an invalid length. [ 889.304234][T23845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5558'. [ 889.452941][T23847] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 889.734446][ T1046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.783419][T23858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5563'. [ 890.051359][T23868] syzkaller0: entered promiscuous mode [ 890.057081][T23868] syzkaller0: entered allmulticast mode [ 890.235788][T23858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5563'. [ 890.283248][T23877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5566'. [ 890.389643][T23878] netlink: 'syz.0.5565': attribute type 10 has an invalid length. [ 890.632439][ T1046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.313126][ T1046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.377443][T23899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5573'. [ 891.815226][T23899] netlink: 'syz.0.5573': attribute type 10 has an invalid length. [ 892.540672][T23909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5575'. [ 892.704921][T23794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.033013][T23794] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.076264][T23926] netlink: 'syz.1.5577': attribute type 10 has an invalid length. [ 893.095225][T20349] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.102449][T20349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.192128][T20349] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.199345][T20349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.357532][T23929] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5580'. [ 894.362882][T23951] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5583'. [ 894.463545][T23954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5585'. [ 894.680762][T23950] netlink: 'syz.0.5585': attribute type 10 has an invalid length. [ 894.928794][ T1046] bridge_slave_1: left promiscuous mode [ 894.934680][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.065368][ T1046] bridge_slave_0: left allmulticast mode [ 895.071172][ T1046] bridge_slave_0: left promiscuous mode [ 895.077001][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.294321][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5589'. [ 895.709634][T23977] netlink: 'syz.3.5590': attribute type 10 has an invalid length. [ 896.866412][ T1046] bond22 (unregistering): (slave geneve4): Releasing active interface [ 896.903922][ T1046] bond3 (unregistering): (slave geneve2): Releasing active interface [ 896.930316][ T1046] team0: Port device geneve1 removed [ 897.103217][ T1046] bond0 (unregistering): (slave ªªªªªª): Releasing backup interface [ 897.126101][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.142252][ T1046] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 897.154507][ T1046] bond0 (unregistering): Released all slaves [ 897.209522][ T1046] bond1 (unregistering): Released all slaves [ 897.232132][ T1046] bond2 (unregistering): Released all slaves [ 897.255053][ T1046] bond3 (unregistering): Released all slaves [ 897.276429][ T1046] bond4 (unregistering): Released all slaves [ 897.339484][ T1046] bond5 (unregistering): Released all slaves [ 897.360646][ T1046] bond6 (unregistering): Released all slaves [ 897.382056][ T1046] bond7 (unregistering): Released all slaves [ 897.475237][ T1046] bond8 (unregistering): Released all slaves [ 897.506313][ T1046] bond9 (unregistering): Released all slaves [ 897.604004][ T1046] bond10 (unregistering): Released all slaves [ 897.738919][ T1046] bond11 (unregistering): Released all slaves [ 897.823631][ T1046] bond12 (unregistering): Released all slaves [ 897.932566][ T1046] bond13 (unregistering): Released all slaves [ 897.957856][ T1046] bond14 (unregistering): Released all slaves [ 898.116546][ T1046] bond15 (unregistering): Released all slaves [ 898.139214][ T1046] bond16 (unregistering): Released all slaves [ 898.160991][ T1046] bond17 (unregistering): Released all slaves [ 898.184008][ T1046] bond18 (unregistering): Released all slaves [ 898.245875][ T1046] bond19 (unregistering): Released all slaves [ 898.272315][ T1046] bond20 (unregistering): Released all slaves [ 898.299412][ T1046] bond21 (unregistering): Released all slaves [ 898.402449][ T1046] bond22 (unregistering): Released all slaves [ 898.774762][T23966] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 898.867220][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 898.970167][T23998] bond0: entered promiscuous mode [ 898.975458][T23998] bond_slave_0: entered promiscuous mode [ 898.981877][T23998] bond_slave_1: entered promiscuous mode [ 898.987796][T23998] batadv0: entered promiscuous mode [ 898.993295][T23998] dummy0: entered promiscuous mode [ 899.166776][T23998] bond0: left promiscuous mode [ 899.171982][T23998] bond_slave_0: left promiscuous mode [ 899.178029][T23998] bond_slave_1: left promiscuous mode [ 899.183746][T23998] batadv0: left promiscuous mode [ 899.189149][T23998] dummy0: left promiscuous mode [ 899.315355][T24010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5598'. [ 899.426149][ T1046] tipc: Disabling bearer [ 899.607583][ T1046] tipc: Left network mode [ 900.183792][T24028] netlink: 'syz.4.5600': attribute type 10 has an invalid length. [ 901.746235][T23794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.810405][T24062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5607'. [ 901.931023][T24065] netlink: 'syz.4.5607': attribute type 10 has an invalid length. [ 902.510432][T24067] netlink: 'syz.3.5609': attribute type 1 has an invalid length. [ 902.518419][T24067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5609'. [ 902.651536][T24075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5611'. [ 902.970159][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 903.434618][T24080] bond19: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 903.446076][T24080] bond19: (slave ip_vti0): Error -95 calling set_mac_address [ 904.247104][T24103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.358536][T23794] veth0_vlan: entered promiscuous mode [ 904.535331][T23794] veth1_vlan: entered promiscuous mode [ 904.571536][T23794] veth0_macvtap: entered promiscuous mode [ 904.583054][T23794] veth1_macvtap: entered promiscuous mode [ 904.606237][T23794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.796449][T24117] netlink: 'syz.3.5620': attribute type 58 has an invalid length. [ 904.835076][T24117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5620'. [ 905.017231][T24118] netlink: 'syz.4.5623': attribute type 1 has an invalid length. [ 905.826294][T24118] 8021q: adding VLAN 0 to HW filter on device bond22 [ 905.905434][T24125] macvlan2: entered promiscuous mode [ 905.910983][T24125] macvlan2: entered allmulticast mode [ 905.919229][T24125] bond22: entered promiscuous mode [ 906.031744][T24125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 906.161194][T24125] bond22: left promiscuous mode [ 906.402899][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.487339][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.217979][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 907.291757][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 907.660692][T23794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.791717][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 907.900918][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.911208][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.141028][T20335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.155703][T20335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.717223][T20350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.780573][T20350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.953314][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5637'. [ 909.118859][T20335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.138061][T20335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.296810][T24190] netlink: 'syz.3.5637': attribute type 21 has an invalid length. [ 909.304781][T24190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5637'. [ 909.485029][ T1046] IPVS: stop unused estimator thread 0... [ 909.737751][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5637'. [ 910.061037][T24198] tc action pedit offset must be on 32 bit boundaries [ 910.172715][T24203] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 910.213910][ T30] audit: type=1107 audit(1783936130.636:9): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 910.364906][T24209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5548'. [ 911.006119][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 911.074397][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 911.110495][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 911.194005][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 911.230813][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 912.156491][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 913.062315][T24254] syzkaller0: entered promiscuous mode [ 913.067968][T24254] syzkaller0: entered allmulticast mode [ 913.333423][T23611] Bluetooth: hci3: command tx timeout [ 913.359436][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5653'. [ 913.404500][T24262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5653'. [ 913.598136][T24211] wg2 speed is unknown, defaulting to 1000 [ 914.524112][T24211] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 914.705718][T24283] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 915.171234][T24293] tc action pedit offset must be on 32 bit boundaries [ 915.320695][T24211] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.328003][T24211] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.335544][T24211] bridge_slave_0: entered allmulticast mode [ 915.343816][T24211] bridge_slave_0: entered promiscuous mode [ 915.387226][T24211] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.394566][T24211] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.402023][T24211] bridge_slave_1: entered allmulticast mode [ 915.410370][T24211] bridge_slave_1: entered promiscuous mode [ 915.456279][T24211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.486044][T24253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.541721][T23611] Bluetooth: hci3: command tx timeout [ 915.757962][T24211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.073324][T24306] FAULT_INJECTION: forcing a failure. [ 916.073324][T24306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.086977][T24306] CPU: 1 UID: 0 PID: 24306 Comm: syz.3.5664 Not tainted syzkaller #0 PREEMPT(full) [ 916.087007][T24306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 916.087020][T24306] Call Trace: [ 916.087029][T24306] [ 916.087040][T24306] dump_stack_lvl+0xe8/0x150 [ 916.087084][T24306] should_fail_ex+0x40c/0x560 [ 916.087116][T24306] _copy_from_user+0x2d/0xb0 [ 916.087148][T24306] ___sys_recvmsg+0x173/0x5a0 [ 916.087185][T24306] ? ktime_get_ts64+0xa9/0x410 [ 916.087220][T24306] ? __pfx____sys_recvmsg+0x10/0x10 [ 916.087257][T24306] ? __fget_files+0x2a/0x420 [ 916.087307][T24306] ? __fget_files+0x3a2/0x420 [ 916.087354][T24306] do_recvmmsg+0x31a/0x7f0 [ 916.087384][T24306] ? __pfx_do_recvmmsg+0x10/0x10 [ 916.087419][T24306] ? get_timespec64+0x119/0x1b0 [ 916.087448][T24306] ? __pfx_get_timespec64+0x10/0x10 [ 916.087489][T24306] __x64_sys_recvmmsg+0x1b7/0x250 [ 916.087514][T24306] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 916.087545][T24306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.087569][T24306] do_syscall_64+0x174/0x580 [ 916.087602][T24306] ? trace_irq_disable+0x3b/0x140 [ 916.087630][T24306] ? clear_bhb_loop+0x40/0x90 [ 916.087655][T24306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.087677][T24306] RIP: 0033:0x7f501819de59 [ 916.087698][T24306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.087715][T24306] RSP: 002b:00007f5019083028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 916.087739][T24306] RAX: ffffffffffffffda RBX: 00007f5018426090 RCX: 00007f501819de59 [ 916.087754][T24306] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 916.087768][T24306] RBP: 00007f5019083090 R08: 0000200000003700 R09: 0000000000000000 [ 916.087782][T24306] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 916.087795][T24306] R13: 00007f5018426128 R14: 00007f5018426090 R15: 00007ffe1e112af8 [ 916.087829][T24306] [ 916.475866][T24211] team0: Port device team_slave_0 added [ 916.485415][T24211] team0: Port device team_slave_1 added [ 916.550210][T24211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.557420][T24211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.583501][T24211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.596394][T24211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.603392][T24211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.649665][T24211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.720697][T24211] hsr_slave_0: entered promiscuous mode [ 916.727672][T24211] hsr_slave_1: entered promiscuous mode [ 916.734179][T24211] debugfs: 'hsr0' already exists in 'hsr' [ 916.739941][T24211] Cannot create hsr debugfs directory [ 917.249590][T24318] FAULT_INJECTION: forcing a failure. [ 917.249590][T24318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.262787][T24318] CPU: 1 UID: 0 PID: 24318 Comm: syz.5.5667 Not tainted syzkaller #0 PREEMPT(full) [ 917.262817][T24318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 917.262829][T24318] Call Trace: [ 917.262838][T24318] [ 917.262849][T24318] dump_stack_lvl+0xe8/0x150 [ 917.262886][T24318] should_fail_ex+0x40c/0x560 [ 917.262917][T24318] _copy_from_user+0x2d/0xb0 [ 917.262949][T24318] ___sys_sendmsg+0x1c6/0x360 [ 917.262981][T24318] ? __lock_acquire+0x683/0x2cf0 [ 917.263017][T24318] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.263054][T24318] ? kstrtouint+0x6e/0xe0 [ 917.263105][T24318] ? __fget_files+0x2a/0x420 [ 917.263131][T24318] ? __fget_files+0x3a2/0x420 [ 917.263166][T24318] __sys_sendmmsg+0x273/0x4d0 [ 917.263204][T24318] ? __pfx___sys_sendmmsg+0x10/0x10 [ 917.263246][T24318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 917.263358][T24318] ? ksys_write+0x242/0x270 [ 917.263393][T24318] ? __pfx_ksys_write+0x10/0x10 [ 917.263446][T24318] __x64_sys_sendmmsg+0xa0/0xc0 [ 917.263476][T24318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.263500][T24318] do_syscall_64+0x174/0x580 [ 917.263528][T24318] ? trace_irq_disable+0x3b/0x140 [ 917.263555][T24318] ? clear_bhb_loop+0x40/0x90 [ 917.263587][T24318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.263609][T24318] RIP: 0033:0x7f9a7e39de59 [ 917.263630][T24318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.263649][T24318] RSP: 002b:00007f9a7f350028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 917.263673][T24318] RAX: ffffffffffffffda RBX: 00007f9a7e625fa0 RCX: 00007f9a7e39de59 [ 917.263689][T24318] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 917.263704][T24318] RBP: 00007f9a7f350090 R08: 0000000000000000 R09: 0000000000000000 [ 917.263717][T24318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.263729][T24318] R13: 00007f9a7e626038 R14: 00007f9a7e625fa0 R15: 00007ffc11e52a08 [ 917.263763][T24318] [ 917.736250][T24324] openvswitch: netlink: Key type 153 is out of range max 32 [ 917.744096][T23611] Bluetooth: hci3: command tx timeout [ 917.916975][T24316] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5666'. [ 918.833354][T24211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 919.086096][T24352] FAULT_INJECTION: forcing a failure. [ 919.086096][T24352] name failslab, interval 1, probability 0, space 0, times 0 [ 919.098943][T24352] CPU: 1 UID: 0 PID: 24352 Comm: syz.1.5677 Not tainted syzkaller #0 PREEMPT(full) [ 919.098972][T24352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 919.098985][T24352] Call Trace: [ 919.098994][T24352] [ 919.099004][T24352] dump_stack_lvl+0xe8/0x150 [ 919.099042][T24352] should_fail_ex+0x40c/0x560 [ 919.099072][T24352] should_failslab+0xa8/0x100 [ 919.099105][T24352] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 919.099131][T24352] ? local_lock_release+0x9c/0x160 [ 919.099161][T24352] ? __alloc_skb+0x1d7/0x7a0 [ 919.099187][T24352] ? __alloc_skb+0x1d7/0x7a0 [ 919.099221][T24352] __alloc_skb+0x1d7/0x7a0 [ 919.099253][T24352] netlink_sendmsg+0x5d4/0xb40 [ 919.099296][T24352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.099322][T24352] ? aa_sock_msg_perm+0xf1/0x1b0 [ 919.099352][T24352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.099371][T24352] sock_sendmsg_nosec+0x13a/0x180 [ 919.099399][T24352] ____sys_sendmsg+0x54e/0x850 [ 919.099437][T24352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 919.099478][T24352] ? import_iovec+0x73/0xa0 [ 919.099513][T24352] ___sys_sendmsg+0x2a5/0x360 [ 919.099542][T24352] ? __lock_acquire+0x683/0x2cf0 [ 919.099575][T24352] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.099612][T24352] ? kstrtouint+0x6e/0xe0 [ 919.099664][T24352] ? __fget_files+0x2a/0x420 [ 919.099688][T24352] ? __fget_files+0x3a2/0x420 [ 919.099725][T24352] __sys_sendmmsg+0x273/0x4d0 [ 919.099761][T24352] ? __pfx___sys_sendmmsg+0x10/0x10 [ 919.099801][T24352] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 919.099845][T24352] ? ksys_write+0x242/0x270 [ 919.099878][T24352] ? __pfx_ksys_write+0x10/0x10 [ 919.099915][T24352] __x64_sys_sendmmsg+0xa0/0xc0 [ 919.099945][T24352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.099965][T24352] do_syscall_64+0x174/0x580 [ 919.099993][T24352] ? trace_irq_disable+0x3b/0x140 [ 919.100018][T24352] ? clear_bhb_loop+0x40/0x90 [ 919.100043][T24352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.100063][T24352] RIP: 0033:0x7f4da8b9de59 [ 919.100084][T24352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.100102][T24352] RSP: 002b:00007f4da99a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 919.100124][T24352] RAX: ffffffffffffffda RBX: 00007f4da8e25fa0 RCX: 00007f4da8b9de59 [ 919.100140][T24352] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 919.100153][T24352] RBP: 00007f4da99a0090 R08: 0000000000000000 R09: 0000000000000000 [ 919.100166][T24352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.100179][T24352] R13: 00007f4da8e26038 R14: 00007f4da8e25fa0 R15: 00007fff52993248 [ 919.100214][T24352] [ 919.523174][T24350] tc action pedit offset must be on 32 bit boundaries [ 919.664258][T24211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 919.880537][ T5628] Bluetooth: hci3: command tx timeout [ 919.981293][T24360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5678'. [ 920.003944][T24357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5678'. [ 920.068148][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5680'. [ 920.343865][T24211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 920.881285][T24211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 921.851573][T24396] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 921.894965][T24394] bond21: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 921.920405][T24399] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5688'. [ 921.929507][T24399] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5688'. [ 921.938587][T24399] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5688'. [ 921.949633][T24394] bond21 (unregistering): Released all slaves [ 922.357177][T24211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 922.379421][T24211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.581851][T24211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 922.594165][T24211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.602650][T24401] tc action pedit offset must be on 32 bit boundaries [ 922.640529][T24211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 922.735653][T24211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 922.967391][T24211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 922.983144][T24211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 926.279134][T24211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.383034][T24211] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.492460][T24211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 926.502961][T24211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 926.559383][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.566583][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.579001][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.586194][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.198402][T24499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5709'. [ 928.596841][T24525] netlink: 'syz.1.5714': attribute type 3 has an invalid length. [ 928.705775][T24534] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5716'. [ 928.739228][T24534] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5716'. [ 930.576971][T24211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.781427][T24585] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5727'. [ 930.894071][T24211] veth0_vlan: entered promiscuous mode [ 930.919599][T24211] veth1_vlan: entered promiscuous mode [ 930.951988][T24211] veth0_macvtap: entered promiscuous mode [ 931.406520][T24211] veth1_macvtap: entered promiscuous mode [ 931.826874][T24211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.839199][T24211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.083584][T24612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5732'. [ 932.170131][T20349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.180566][T20349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.189775][T20349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.198511][T20349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.571959][T24619] netlink: 'syz.3.5735': attribute type 16 has an invalid length. [ 932.661637][T24617] bond21: option fail_over_mac: invalid value (16) [ 933.110012][T24628] netlink: 'syz.4.5738': attribute type 1 has an invalid length. [ 933.198945][T24617] bond21 (unregistering): Released all slaves [ 933.279599][T24629] netlink: 'syz.4.5738': attribute type 10 has an invalid length. [ 933.729109][T24628] bond23: entered promiscuous mode [ 933.765730][T24628] 8021q: adding VLAN 0 to HW filter on device bond23 [ 934.185208][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.193192][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.486988][T20336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.678330][T20336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.717472][T24688] netlink: 'syz.1.5751': attribute type 1 has an invalid length. [ 936.011006][T24695] netlink: 'syz.1.5751': attribute type 10 has an invalid length. [ 936.082815][T24688] bond19: entered promiscuous mode [ 936.300723][T24688] 8021q: adding VLAN 0 to HW filter on device bond19 [ 937.036680][T24716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5757'. [ 937.543076][T24730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5762'. [ 937.842358][T24735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5763'. [ 938.050221][T24735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5763'. [ 938.393539][T24747] netlink: 'syz.3.5768': attribute type 1 has an invalid length. [ 938.644680][T24752] netlink: 'syz.3.5768': attribute type 10 has an invalid length. [ 938.783002][T24747] bond21: entered promiscuous mode [ 938.810740][T24747] 8021q: adding VLAN 0 to HW filter on device bond21 [ 939.034216][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5773'. [ 939.043319][T24763] bridge: RTM_NEWNEIGH with invalid ether address [ 939.161029][T24767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5773'. [ 939.273810][T24767] bridge: RTM_NEWNEIGH with invalid ether address [ 939.472163][T24771] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5776'. [ 939.944986][T24784] syzkaller0: entered promiscuous mode [ 939.950526][T24784] syzkaller0: entered allmulticast mode [ 940.244816][T24794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5782'. [ 941.035317][T24802] netlink: 'syz.1.5785': attribute type 1 has an invalid length. [ 941.159574][T24802] bond20: entered promiscuous mode [ 941.165425][T24802] 8021q: adding VLAN 0 to HW filter on device bond20 [ 941.307799][T24801] netlink: 'syz.1.5785': attribute type 10 has an invalid length. [ 941.671412][T24812] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 941.790196][T24808] syzkaller0: entered promiscuous mode [ 941.903291][T24808] syzkaller0: entered allmulticast mode [ 942.424200][T24828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5796'. [ 942.981769][T24839] netlink: 'syz.4.5800': attribute type 1 has an invalid length. [ 943.038121][T24839] bond24: entered promiscuous mode [ 943.046637][T24839] 8021q: adding VLAN 0 to HW filter on device bond24 [ 943.113663][T24843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5801'. [ 943.150245][T24843] x_tables: unsorted entry at hook 2 [ 943.268219][T24839] netlink: 'syz.4.5800': attribute type 10 has an invalid length. [ 943.460822][T24848] veth0_macvtap: entered allmulticast mode [ 943.467279][T24848] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 944.379014][T24862] netlink: 'syz.3.5804': attribute type 1 has an invalid length. [ 944.397642][T24862] netlink: 'syz.3.5804': attribute type 1 has an invalid length. [ 944.512982][T24862] netlink: 'syz.3.5804': attribute type 1 has an invalid length. [ 944.520812][T24862] netlink: 'syz.3.5804': attribute type 1 has an invalid length. [ 944.705077][T24875] netlink: 'syz.0.5808': attribute type 23 has an invalid length. [ 944.878681][T24879] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5811'. [ 944.966718][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5809'. [ 945.139367][T24868] syzkaller1: entered promiscuous mode [ 945.145165][T24868] syzkaller1: entered allmulticast mode [ 945.504737][T24893] netlink: 'syz.4.5813': attribute type 1 has an invalid length. [ 945.637111][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5813'. [ 946.069769][T24893] bond25: entered promiscuous mode [ 946.075755][T24893] 8021q: adding VLAN 0 to HW filter on device bond25 [ 946.097971][T24906] validate_nla: 1 callbacks suppressed [ 946.098002][T24906] netlink: 'syz.1.5817': attribute type 1 has an invalid length. [ 946.111926][T24906] netlink: 'syz.1.5817': attribute type 2 has an invalid length. [ 946.753532][T24922] bridge0: entered promiscuous mode [ 946.762483][T24922] bridge0: entered allmulticast mode [ 947.564425][T24932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5826'. [ 948.728149][T24952] netlink: 'syz.1.5830': attribute type 1 has an invalid length. [ 948.869428][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5830'. [ 949.101365][T24961] netlink: 'syz.1.5830': attribute type 10 has an invalid length. [ 949.109913][T24952] bond21: entered promiscuous mode [ 949.115833][T24952] 8021q: adding VLAN 0 to HW filter on device bond21 [ 949.383656][T24963] nbd: must specify an index to disconnect [ 949.809023][T24972] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 949.947290][T24970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5836'. [ 949.956411][T24970] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5836'. [ 949.965550][T24970] netlink: 'syz.1.5836': attribute type 6 has an invalid length. [ 950.094522][T24978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5838'. [ 950.219994][T24970] netlink: 'syz.1.5836': attribute type 5 has an invalid length. [ 950.292610][T24970] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5836'. [ 950.552538][T24984] macvlan0: entered promiscuous mode [ 950.960289][T24994] netlink: 'syz.3.5846': attribute type 1 has an invalid length. [ 951.145674][T24994] bond22: entered promiscuous mode [ 951.163251][T25005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5846'. [ 951.511852][T24994] 8021q: adding VLAN 0 to HW filter on device bond22 [ 951.561412][T24994] netlink: 'syz.3.5846': attribute type 10 has an invalid length. [ 952.672442][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5854'. [ 952.682042][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5854'. [ 952.692279][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5854'. [ 953.534053][T25044] bond23: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 953.659056][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5857'. [ 953.759391][T25059] netlink: 'syz.5.5862': attribute type 1 has an invalid length. [ 953.862307][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5862'. [ 953.878191][T25064] netlink: 'syz.4.5857': attribute type 2 has an invalid length. [ 953.893570][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5859'. [ 954.158456][T25072] netlink: 'syz.5.5862': attribute type 10 has an invalid length. [ 954.176674][T25044] bond23 (unregistering): Released all slaves [ 954.283934][T25073] netlink: 'syz.1.5863': attribute type 1 has an invalid length. [ 954.409584][T25059] bond1: entered promiscuous mode [ 954.434853][T25059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 954.574202][T25077] netlink: 'syz.4.5864': attribute type 5 has an invalid length. [ 954.587345][T25072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.596854][T25072] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 954.728522][T25080] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 954.812384][T25073] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 954.987036][T25080] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5866'. [ 955.120882][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5868'. [ 955.511717][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5870'. [ 955.522690][T25094] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 955.644498][T25097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5871'. [ 956.828341][T25119] netlink: 'syz.3.5877': attribute type 1 has an invalid length. [ 957.153700][T25125] netlink: 'syz.3.5877': attribute type 10 has an invalid length. [ 958.373068][T25119] bond23: entered promiscuous mode [ 958.379111][T25119] 8021q: adding VLAN 0 to HW filter on device bond23 [ 959.331157][T25142] __nla_validate_parse: 1 callbacks suppressed [ 959.331179][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5881'. [ 959.866738][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5885'. [ 959.934703][T25161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'. [ 959.991734][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5885'. [ 960.001641][T25161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'. [ 960.131678][T25163] netlink: 'syz.0.5886': attribute type 10 has an invalid length. [ 960.504711][T25171] netlink: 'syz.4.5888': attribute type 1 has an invalid length. [ 960.933672][T25183] netlink: 'syz.1.5890': attribute type 1 has an invalid length. [ 961.178018][T25171] bond26: entered promiscuous mode [ 961.191791][T25171] 8021q: adding VLAN 0 to HW filter on device bond26 [ 961.283045][T25183] bond22: entered promiscuous mode [ 961.299204][T25183] 8021q: adding VLAN 0 to HW filter on device bond22 [ 961.526266][T25193] FAULT_INJECTION: forcing a failure. [ 961.526266][T25193] name failslab, interval 1, probability 0, space 0, times 0 [ 961.541629][T25193] CPU: 1 UID: 0 PID: 25193 Comm: syz.5.5891 Not tainted syzkaller #0 PREEMPT(full) [ 961.541658][T25193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 961.541671][T25193] Call Trace: [ 961.541681][T25193] [ 961.541692][T25193] dump_stack_lvl+0xe8/0x150 [ 961.541731][T25193] should_fail_ex+0x40c/0x560 [ 961.541761][T25193] should_failslab+0xa8/0x100 [ 961.541794][T25193] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 961.541818][T25193] ? local_lock_release+0x9c/0x160 [ 961.541850][T25193] ? __alloc_skb+0x1d7/0x7a0 [ 961.541875][T25193] ? __alloc_skb+0x1d7/0x7a0 [ 961.541909][T25193] __alloc_skb+0x1d7/0x7a0 [ 961.541951][T25193] netlink_sendmsg+0x5d4/0xb40 [ 961.541984][T25193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.542010][T25193] ? aa_sock_msg_perm+0xf1/0x1b0 [ 961.542038][T25193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.542057][T25193] sock_sendmsg_nosec+0x13a/0x180 [ 961.542086][T25193] ____sys_sendmsg+0x54e/0x850 [ 961.542124][T25193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.542165][T25193] ? import_iovec+0x73/0xa0 [ 961.542199][T25193] ___sys_sendmsg+0x2a5/0x360 [ 961.542229][T25193] ? __lock_acquire+0x683/0x2cf0 [ 961.542263][T25193] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.542332][T25193] ? __fget_files+0x2a/0x420 [ 961.542359][T25193] ? __fget_files+0x3a2/0x420 [ 961.542398][T25193] __x64_sys_sendmsg+0x1b1/0x290 [ 961.542431][T25193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 961.542480][T25193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.542503][T25193] do_syscall_64+0x174/0x580 [ 961.542532][T25193] ? trace_irq_disable+0x3b/0x140 [ 961.542559][T25193] ? clear_bhb_loop+0x40/0x90 [ 961.542586][T25193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.542607][T25193] RIP: 0033:0x7f9a7e39de59 [ 961.542629][T25193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.542646][T25193] RSP: 002b:00007f9a7f30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.542670][T25193] RAX: ffffffffffffffda RBX: 00007f9a7e626180 RCX: 00007f9a7e39de59 [ 961.542685][T25193] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 961.542699][T25193] RBP: 00007f9a7f30e090 R08: 0000000000000000 R09: 0000000000000000 [ 961.542712][T25193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.542724][T25193] R13: 00007f9a7e626218 R14: 00007f9a7e626180 R15: 00007ffc11e52a08 [ 961.542758][T25193] [ 961.578495][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5890'. [ 962.387717][T25195] syzkaller0: entered promiscuous mode [ 962.393283][T25195] syzkaller0: entered allmulticast mode [ 963.000509][T25221] netlink: 'syz.1.5890': attribute type 10 has an invalid length. [ 963.570731][T25229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5899'. [ 964.110174][T25245] xt_bpf: check failed: parse error [ 964.696559][T25257] xt_hashlimit: size too large, truncated to 1048576 [ 965.672666][T25271] netlink: 'syz.0.5911': attribute type 1 has an invalid length. [ 965.756736][T25275] netlink: 'syz.1.5913': attribute type 24 has an invalid length. [ 965.911248][T25271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.920599][T25282] netlink: 'syz.4.5912': attribute type 1 has an invalid length. [ 965.946695][T25278] macvlan2: entered promiscuous mode [ 965.952063][T25278] macvlan2: entered allmulticast mode [ 965.959060][T25278] bond1: entered promiscuous mode [ 965.964974][T25278] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 966.055582][T25278] bond1: left promiscuous mode [ 966.288891][T25291] netlink: 'syz.4.5912': attribute type 10 has an invalid length. [ 966.305035][T25282] bond27: entered promiscuous mode [ 966.310891][T25282] 8021q: adding VLAN 0 to HW filter on device bond27 [ 968.869843][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 968.928631][T23611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 969.002855][T23611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 969.083301][T25343] netlink: 'syz.3.5935': attribute type 3 has an invalid length. [ 969.114024][T23611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 969.201546][T25347] FAULT_INJECTION: forcing a failure. [ 969.201546][T25347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.215273][T25347] CPU: 1 UID: 0 PID: 25347 Comm: syz.4.5934 Not tainted syzkaller #0 PREEMPT(full) [ 969.215301][T25347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 969.215315][T25347] Call Trace: [ 969.215324][T25347] [ 969.215333][T25347] dump_stack_lvl+0xe8/0x150 [ 969.215381][T25347] should_fail_ex+0x40c/0x560 [ 969.215411][T25347] _copy_from_iter+0x1d3/0x1660 [ 969.215436][T25347] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 969.215464][T25347] ? rcu_is_watching+0x15/0xb0 [ 969.215497][T25347] ? trace_kmem_cache_alloc+0x29/0xe0 [ 969.215524][T25347] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 969.215549][T25347] ? __pfx__copy_from_iter+0x10/0x10 [ 969.215576][T25347] ? __alloc_skb+0x276/0x7a0 [ 969.215602][T25347] ? __alloc_skb+0x276/0x7a0 [ 969.215643][T25347] ? netlink_sendmsg+0x650/0xb40 [ 969.215664][T25347] ? skb_put+0x112/0x210 [ 969.215696][T25347] netlink_sendmsg+0x6c0/0xb40 [ 969.215723][T25347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 969.215747][T25347] ? aa_sock_msg_perm+0xf1/0x1b0 [ 969.215775][T25347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 969.215795][T25347] sock_sendmsg_nosec+0x13a/0x180 [ 969.215823][T25347] ____sys_sendmsg+0x54e/0x850 [ 969.215860][T25347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 969.215901][T25347] ? import_iovec+0x73/0xa0 [ 969.215935][T25347] ___sys_sendmsg+0x2a5/0x360 [ 969.215965][T25347] ? __lock_acquire+0x683/0x2cf0 [ 969.215998][T25347] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.216067][T25347] ? __fget_files+0x2a/0x420 [ 969.216095][T25347] ? __fget_files+0x3a2/0x420 [ 969.216133][T25347] __x64_sys_sendmsg+0x1b1/0x290 [ 969.216167][T25347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 969.216218][T25347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.216242][T25347] do_syscall_64+0x174/0x580 [ 969.216272][T25347] ? trace_irq_disable+0x3b/0x140 [ 969.216307][T25347] ? clear_bhb_loop+0x40/0x90 [ 969.216333][T25347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.216362][T25347] RIP: 0033:0x7f6c0679de59 [ 969.216383][T25347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.216401][T25347] RSP: 002b:00007f6c076c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.216425][T25347] RAX: ffffffffffffffda RBX: 00007f6c06a26090 RCX: 00007f6c0679de59 [ 969.216440][T25347] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 969.216454][T25347] RBP: 00007f6c076c7090 R08: 0000000000000000 R09: 0000000000000000 [ 969.216467][T25347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.216480][T25347] R13: 00007f6c06a26128 R14: 00007f6c06a26090 R15: 00007ffc59290628 [ 969.216514][T25347] [ 969.244642][T23611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 970.718818][T25365] netlink: 'syz.4.5939': attribute type 10 has an invalid length. [ 971.868294][ T5647] Bluetooth: hci5: command tx timeout [ 972.039242][T25397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5946'. [ 972.246492][ T1046] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.256915][ T1046] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 972.269895][ T1046] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.401138][T25401] Cannot find add_set index 0 as target [ 973.095618][T25408] netlink: 'syz.0.5948': attribute type 10 has an invalid length. [ 973.216572][ T1046] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.226477][ T1046] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 973.236347][ T1046] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 973.335112][T25413] ip6tnl0: Caught tx_queue_len zero misconfig [ 973.372459][T25329] wg2 speed is unknown, defaulting to 1000 [ 973.565063][T25418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5951'. [ 973.995484][ T5647] Bluetooth: hci5: command tx timeout [ 974.096100][T25426] netlink: 524 bytes leftover after parsing attributes in process `syz.4.5954'. [ 974.691124][ T1046] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.701291][ T1046] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 974.924771][ T1046] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 975.176925][T25329] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 975.214873][T25444] x_tables: unsorted underflow at hook 4 [ 975.334885][ T1046] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.411833][ T1046] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 975.421831][ T1046] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 975.760692][T25451] syzkaller0: entered promiscuous mode [ 975.766407][T25451] syzkaller0: entered allmulticast mode [ 975.994343][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5963'. [ 976.083606][ T5647] Bluetooth: hci5: command tx timeout [ 976.952290][T25476] netlink: 'syz.5.5966': attribute type 2 has an invalid length. [ 976.960093][T25476] netlink: 'syz.5.5966': attribute type 2 has an invalid length. [ 977.152359][ T1046] dummy0: left allmulticast mode [ 977.159655][ T1046] dummy0: left promiscuous mode [ 977.198027][ T1046] bridge0: port 3(dummy0) entered disabled state [ 977.297546][ T1046] bridge_slave_1: left allmulticast mode [ 977.303267][ T1046] bridge_slave_1: left promiscuous mode [ 977.309275][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.595719][ T1046] bridge_slave_0: left allmulticast mode [ 977.601535][ T1046] bridge_slave_0: left promiscuous mode [ 977.607330][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.205316][ T5647] Bluetooth: hci5: command tx timeout [ 978.312415][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5975'. [ 978.627787][T25512] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 979.458592][ T1046] tipc: Disabling bearer [ 979.696280][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.715796][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.800089][ T1046] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 979.811395][ T1046] bond0 (unregistering): Released all slaves [ 979.825873][ T1046] bond1 (unregistering): Released all slaves [ 979.847247][ T1046] bond2 (unregistering): Released all slaves [ 979.920549][ T1046] bond3 (unregistering): Released all slaves [ 979.942124][ T1046] bond4 (unregistering): Released all slaves [ 979.963794][ T1046] bond5 (unregistering): Released all slaves [ 979.986887][ T1046] bond6 (unregistering): Released all slaves [ 980.078577][ T1046] bond7 (unregistering): Released all slaves [ 980.099691][ T1046] bond8 (unregistering): Released all slaves [ 980.124543][ T1046] bond9 (unregistering): Released all slaves [ 980.208324][ T1046] bond10 (unregistering): Released all slaves [ 980.234390][ T1046] bond11 (unregistering): Released all slaves [ 980.259700][ T1046] bond12 (unregistering): Released all slaves [ 980.344708][ T1046] bond13 (unregistering): Released all slaves [ 980.367317][ T1046] bond14 (unregistering): Released all slaves [ 980.388699][ T1046] bond15 (unregistering): Released all slaves [ 980.489579][ T1046] bond16 (unregistering): Released all slaves [ 980.511211][ T1046] bond17 (unregistering): Released all slaves [ 980.533001][ T1046] bond18 (unregistering): Released all slaves [ 980.617519][ T1046] bond19 (unregistering): Released all slaves [ 980.639030][ T1046] bond20 (unregistering): Released all slaves [ 980.660664][ T1046] bond21 (unregistering): Released all slaves [ 980.735354][ T1046] bond22 (unregistering): Released all slaves [ 981.191811][T21116] wg2 speed is unknown, defaulting to 1000 [ 981.197797][T21116] syz2: Port: 1 Link DOWN [ 981.263461][T25504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5975'. [ 981.272631][T25504] ip6gre0: Caught tx_queue_len zero misconfig [ 981.590411][ T1046] tipc: Disabling bearer [ 982.469336][ T1046] tipc: Left network mode [ 982.477696][ T9168] wg2 speed is unknown, defaulting to 1000 [ 982.635679][T25519] bond0: (slave gre0): refused to change device type [ 983.924177][T25329] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.945005][T25567] netlink: 'syz.4.5989': attribute type 1 has an invalid length. [ 983.952805][T25567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5989'. [ 983.961866][T25567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5989'. [ 984.018436][T25329] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.025968][T25329] bridge_slave_0: entered allmulticast mode [ 984.035799][T25329] bridge_slave_0: entered promiscuous mode [ 984.045899][T25329] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.053174][T25329] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.060561][T25329] bridge_slave_1: entered allmulticast mode [ 984.068704][T25329] bridge_slave_1: entered promiscuous mode [ 984.561718][T25574] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 985.005779][T25576] bond25: Unable to set up delay as MII monitoring is disabled [ 985.082651][T25586] netlink: 'syz.4.5994': attribute type 1 has an invalid length. [ 985.090461][T25586] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5994'. [ 985.343378][T25576] bond25 (unregistering): Released all slaves [ 985.527206][T25329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.688596][T25586] netlink: 'syz.4.5994': attribute type 4 has an invalid length. [ 987.259640][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 987.270242][T25329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.680188][T25608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 988.604027][T25329] team0: Port device team_slave_0 added [ 988.629754][T25329] team0: Port device team_slave_1 added [ 988.815261][T25632] netlink: 'syz.4.6006': attribute type 1 has an invalid length. [ 989.118509][T25329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.125642][T25329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.151984][T25329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.244107][T25640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6008'. [ 989.389968][T25329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.397113][T25329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.562236][T25329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.789325][T25632] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 989.790144][T25634] batadv_slave_0: entered promiscuous mode [ 991.508222][T25634] batadv_slave_0: left promiscuous mode [ 991.655037][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 991.912482][ T5647] block nbd1: Receive control failed (result -32) [ 992.052908][T25678] netlink: 'syz.4.6014': attribute type 1 has an invalid length. [ 992.188664][T25682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6014'. [ 992.198639][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6014'. [ 992.287524][T25684] netlink: 'syz.4.6014': attribute type 10 has an invalid length. [ 992.408523][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6013'. [ 992.420668][T25678] bond28: entered promiscuous mode [ 992.426437][T25678] 8021q: adding VLAN 0 to HW filter on device bond28 [ 992.661301][T25688] netlink: 'syz.0.6016': attribute type 1 has an invalid length. [ 993.205424][T25696] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 993.289641][T25699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6022'. [ 993.565878][T25329] hsr_slave_0: entered promiscuous mode [ 993.672588][T25329] hsr_slave_1: entered promiscuous mode [ 993.775694][T25329] debugfs: 'hsr0' already exists in 'hsr' [ 993.781913][T25329] Cannot create hsr debugfs directory [ 993.791031][T25688] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 993.928443][T25697] macsec1: entered promiscuous mode [ 993.942194][T25697] hsr0: entered promiscuous mode [ 993.962638][T25709] netlink: 'syz.0.6024': attribute type 29 has an invalid length. [ 994.218024][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.225778][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.607568][ T1046] veth1_macvtap: left promiscuous mode [ 994.613328][ T1046] veth0_macvtap: left promiscuous mode [ 994.619067][ T1046] veth1_vlan: left promiscuous mode [ 994.624374][ T1046] veth0_vlan: left promiscuous mode [ 996.585998][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 996.618901][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 996.757763][T20336] smc: removing ib device syz2 [ 996.781425][T20336] smbdirect: ib_dev[syz2] removed [ 997.545923][T25742] netlink: 'syz.0.6028': attribute type 1 has an invalid length. [ 997.676441][T25743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6028'. [ 997.689617][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6028'. [ 997.789773][T25744] netlink: 'syz.0.6028': attribute type 10 has an invalid length. [ 998.199765][T25748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6029'. [ 998.217796][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 998.596572][T25742] bond2: entered promiscuous mode [ 998.611877][T25742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.730533][T25744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.752083][T25744] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 998.847410][T25748] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 999.353621][T25765] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1000.592231][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 1002.980444][T25810] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6042'. [ 1003.023019][T25812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6043'. [ 1003.410978][T25808] syzkaller0: entered promiscuous mode [ 1003.431375][T25808] syzkaller0: entered allmulticast mode [ 1004.663305][T25832] netlink: 'syz.5.6046': attribute type 1 has an invalid length. [ 1004.671109][T25832] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6046'. [ 1005.263473][T25853] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1006.220174][T25864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6053'. [ 1006.847152][T25878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.196828][ T1046] IPVS: stop unused estimator thread 0... [ 1007.327971][T25329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1007.579264][T25893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6061'. [ 1007.593220][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.965989][T25904] netlink: 'syz.0.6062': attribute type 1 has an invalid length. [ 1007.997562][T25329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1008.057431][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.109680][T25900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6062'. [ 1008.162873][T25329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1008.207592][T25910] netlink: 'syz.0.6062': attribute type 10 has an invalid length. [ 1008.269293][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.499155][T25904] bond3: entered promiscuous mode [ 1008.506761][T25904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1008.615342][T25329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1009.019783][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1009.542067][T25942] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1010.213264][T25956] x_tables: duplicate underflow at hook 1 [ 1019.261744][T26020] netlink: 7087 bytes leftover after parsing attributes in process `syz.4.6082'. [ 1019.271554][T26020] netlink: 7087 bytes leftover after parsing attributes in process `syz.4.6082'. [ 1019.849219][T26037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1021.219376][T26062] tc action pedit offset must be on 32 bit boundaries [ 1021.233834][T25329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.310651][T25329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.360847][T25329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1021.764516][T25329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.797799][T20348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.805713][T20348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.816613][T20348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.823978][T20348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.827016][T26140] Bluetooth: MGMT ver 1.23 [ 1025.263452][T26152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6109'. [ 1025.833375][T26151] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6109'. [ 1025.842410][T26151] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6109'. [ 1026.600022][T26183] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6114'. [ 1027.001653][T25329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.166537][T25329] veth0_vlan: entered promiscuous mode [ 1027.259820][T25329] veth1_vlan: entered promiscuous mode [ 1027.403353][T26199] can: request_module (can-proto-0) failed. [ 1027.478549][T25329] veth0_macvtap: entered promiscuous mode [ 1027.599885][T25329] veth1_macvtap: entered promiscuous mode [ 1027.622363][T25329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.636392][T25329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.845215][T20348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.856201][T20348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.865814][T20348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.054355][T20348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.448639][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1029.459948][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1029.468900][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1029.540639][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1029.550532][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1030.302812][T26243] netlink: 'syz.3.6125': attribute type 21 has an invalid length. [ 1030.467975][T26240] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1030.478708][T26240] bond0: (slave bond29): Enslaving as an active interface with a down link [ 1030.490816][T26243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'. [ 1030.894671][T26258] netlink: 'syz.0.6126': attribute type 1 has an invalid length. [ 1031.034984][T26253] netlink: 'syz.0.6126': attribute type 10 has an invalid length. [ 1031.256976][T26258] bond4: entered promiscuous mode [ 1031.277441][T26258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1031.738796][ T5647] Bluetooth: hci1: command tx timeout [ 1032.697244][T26298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6137'. [ 1032.776363][T26231] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1032.824079][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6137'. [ 1033.511704][T26298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6137'. [ 1033.521294][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6137'. [ 1033.844221][ T5647] Bluetooth: hci1: command tx timeout [ 1034.029125][T26324] netlink: 'syz.5.6143': attribute type 1 has an invalid length. [ 1034.293989][T26330] netlink: 'syz.5.6143': attribute type 10 has an invalid length. [ 1034.640479][T26341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6147'. [ 1035.870529][ T5628] Bluetooth: hci1: command tx timeout [ 1036.152941][T26324] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1036.246029][T26341] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1036.453082][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 1036.644214][T26356] netlink: 'syz.0.6150': attribute type 8 has an invalid length. [ 1036.858914][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1036.941229][T26356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.949877][T26356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.067758][ T5647] Bluetooth: hci1: command tx timeout [ 1038.221286][T26385] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6156'. [ 1038.457763][T26231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.464991][T26231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.618501][T26231] bridge_slave_0: entered allmulticast mode [ 1038.631170][T26231] bridge_slave_0: entered promiscuous mode [ 1038.663674][T26396] netlink: 'syz.5.6158': attribute type 1 has an invalid length. [ 1038.671812][T26396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6158'. [ 1038.690311][T26231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.697606][T26231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.803707][T26231] bridge_slave_1: entered allmulticast mode [ 1038.858069][T26231] bridge_slave_1: entered promiscuous mode [ 1039.591236][T26409] netlink: 'syz.4.6160': attribute type 4 has an invalid length. [ 1039.599487][T26409] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6160'. [ 1040.023919][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.326731][T26231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.340623][T26231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.385631][T26231] team0: Port device team_slave_0 added [ 1040.394959][T26231] team0: Port device team_slave_1 added [ 1040.677922][T26414] sit0: entered promiscuous mode [ 1040.706024][T26414] netlink: 'syz.5.6162': attribute type 1 has an invalid length. [ 1040.713988][T26414] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1041.401409][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.656106][T26231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.663302][T26231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.842302][T26447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1041.851540][T26231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.018096][T26451] bond5: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 1042.095911][T26451] bond5: (slave ip_vti0): Error -95 calling set_mac_address [ 1042.309192][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.407282][T26231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.414295][T26231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.440417][T26231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.790420][T26456] syzkaller0: entered promiscuous mode [ 1042.795972][T26456] syzkaller0: entered allmulticast mode [ 1042.941911][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6170'. [ 1043.263698][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.370353][T26231] hsr_slave_0: entered promiscuous mode [ 1043.378073][T26231] hsr_slave_1: entered promiscuous mode [ 1043.384925][T26231] debugfs: 'hsr0' already exists in 'hsr' [ 1043.390864][T26231] Cannot create hsr debugfs directory [ 1043.572000][T26474] syzkaller0: entered promiscuous mode [ 1043.577541][T26474] syzkaller0: entered allmulticast mode [ 1050.241522][T26503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6181'. [ 1050.555821][T26506] bond25: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 1050.571067][T26506] bond25: (slave ip_vti0): Error -95 calling set_mac_address [ 1050.916104][T26512] netlink: 'syz.0.6185': attribute type 1 has an invalid length. [ 1051.012280][T26518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6185'. [ 1051.157756][T26519] x_tables: unsorted underflow at hook 4 [ 1051.166281][T26512] bond6: entered promiscuous mode [ 1051.180950][T26512] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1051.314021][T26512] netlink: 'syz.0.6185': attribute type 10 has an invalid length. [ 1051.621161][T26535] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1051.830935][ T13] bridge_slave_1: left allmulticast mode [ 1051.836924][ T13] bridge_slave_1: left promiscuous mode [ 1051.842742][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.947544][ T13] bridge_slave_0: left allmulticast mode [ 1051.974714][ T13] bridge_slave_0: left promiscuous mode [ 1051.981784][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.542332][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.559629][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.574285][ T13] bond0 (unregistering): Released all slaves [ 1053.995217][T26520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1054.411699][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6193'. [ 1054.420821][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6193'. [ 1054.565588][T26561] netlink: 'syz.0.6194': attribute type 21 has an invalid length. [ 1054.573584][T26561] IPv6: NLM_F_CREATE should be specified when creating new route [ 1055.636554][ T13] hsr_slave_0: left promiscuous mode [ 1055.657692][ T13] hsr_slave_1: left promiscuous mode [ 1055.666136][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.673564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.815158][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.822698][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.955477][ T13] veth1_macvtap: left promiscuous mode [ 1055.961139][ T13] veth0_macvtap: left promiscuous mode [ 1055.967633][ T13] veth1_vlan: left promiscuous mode [ 1055.973121][ T13] veth0_vlan: left promiscuous mode [ 1057.092199][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1057.119919][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1057.474231][T26576] tipc: Started in network mode [ 1057.479433][T26576] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 1057.486903][T26576] tipc: Enabled bearer , priority 0 [ 1057.496081][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1057.611234][T26571] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1058.188187][T26600] netlink: 'syz.4.6201': attribute type 58 has an invalid length. [ 1058.333839][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1058.401531][T26600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6201'. [ 1059.208767][ T9168] tipc: Node number set to 11905706 [ 1060.233313][T26644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6210'. [ 1060.416657][T26653] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6210'. [ 1060.425782][T26653] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6210'. [ 1060.984848][T26660] netlink: 'syz.4.6214': attribute type 62 has an invalid length. [ 1061.261889][T26671] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6216'. [ 1061.720987][T26231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1061.769411][T26231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.937693][T26673] tipc: Enabled bearer , priority 10 [ 1062.145854][T26681] netlink: 'syz.5.6219': attribute type 1 has an invalid length. [ 1062.236815][T26684] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6219'. [ 1062.572544][T26691] netlink: 'syz.5.6219': attribute type 10 has an invalid length. [ 1063.088386][T26677] tipc: Disabling bearer [ 1063.260457][T26677] team0: Port device vlan0 removed [ 1063.301654][T26231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1063.324196][T26231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.369161][T26673] tipc: Enabling of bearer rejected, already enabled [ 1063.378344][T26681] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1063.513350][T26231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1063.615081][T26231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.671521][T26231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1063.841612][T26231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.854546][T20349] tipc: Subscription rejected, illegal request [ 1063.948555][T26701] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6222'. [ 1064.289514][T26702] bond0: entered promiscuous mode [ 1064.294705][T26702] bond_slave_0: entered promiscuous mode [ 1064.300647][T26702] bond_slave_1: entered promiscuous mode [ 1064.306590][T26702] batadv0: entered promiscuous mode [ 1065.019181][T26729] netlink: 'syz.4.6228': attribute type 32 has an invalid length. [ 1065.031794][T26729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6228'. [ 1065.180117][T26729] bond30: Setting coupled_control to off (0) [ 1065.219656][T26231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.239816][T26231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.570842][T20336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.578218][T20336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.587878][T20336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.595396][T20336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.789762][T26231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1065.800177][T26231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.953757][T26737] netlink: 'syz.0.6231': attribute type 1 has an invalid length. [ 1065.985695][T26723] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6226'. [ 1066.009480][T26723] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6226'. [ 1066.129570][T26745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1066.237144][T26747] netlink: 'syz.5.6232': attribute type 13 has an invalid length. [ 1066.245813][T26747] netlink: 'syz.5.6232': attribute type 58 has an invalid length. [ 1066.253735][T26747] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6232'. [ 1066.266321][T26737] bond8: entered promiscuous mode [ 1066.274176][T26748] netlink: 'syz.0.6231': attribute type 10 has an invalid length. [ 1066.283722][T26737] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1066.291740][T26741] syzkaller1: entered promiscuous mode [ 1066.297527][T26741] syzkaller1: entered allmulticast mode [ 1066.439982][T26751] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1067.772225][T26774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1068.687590][T20350] tipc: Resetting bearer [ 1068.749547][T26231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.759259][T26789] netlink: 'syz.4.6243': attribute type 1 has an invalid length. [ 1069.011071][T26795] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6243'. [ 1069.095941][T26789] bond31: entered promiscuous mode [ 1069.139205][T26789] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1069.308710][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6244'. [ 1069.322828][T26789] netlink: 'syz.4.6243': attribute type 10 has an invalid length. [ 1069.331410][T26802] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1070.997866][ T5286] veth0_vlan: left promiscuous mode [ 1071.034437][T21111] veth0_vlan: entered promiscuous mode [ 1071.415313][T26231] veth0_vlan: entered promiscuous mode [ 1071.455961][T26231] veth1_vlan: entered promiscuous mode [ 1071.488944][T26231] veth0_macvtap: entered promiscuous mode [ 1071.499872][T26231] veth1_macvtap: entered promiscuous mode [ 1071.520884][T26231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.532912][T26231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.835896][T26826] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1071.847742][T26836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1071.856845][T26836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1071.987730][T26835] netlink: 'syz.3.6250': attribute type 1 has an invalid length. [ 1072.028226][T26836] geneve2: entered promiscuous mode [ 1072.166311][ T1028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.408256][ T1028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.417351][ T1028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.426087][ T1028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.984846][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.992990][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.001062][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.008918][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.332366][T26859] FAULT_INJECTION: forcing a failure. [ 1073.332366][T26859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.467414][T26859] CPU: 1 UID: 0 PID: 26859 Comm: syz.5.6254 Not tainted syzkaller #0 PREEMPT(full) [ 1073.467455][T26859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1073.467469][T26859] Call Trace: [ 1073.467478][T26859] [ 1073.467488][T26859] dump_stack_lvl+0xe8/0x150 [ 1073.467533][T26859] should_fail_ex+0x40c/0x560 [ 1073.467567][T26859] _copy_from_iter+0x1d3/0x1660 [ 1073.467593][T26859] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1073.467623][T26859] ? rcu_is_watching+0x15/0xb0 [ 1073.467656][T26859] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1073.467683][T26859] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1073.467708][T26859] ? __pfx__copy_from_iter+0x10/0x10 [ 1073.467733][T26859] ? __alloc_skb+0x276/0x7a0 [ 1073.467764][T26859] ? __alloc_skb+0x276/0x7a0 [ 1073.467797][T26859] ? netlink_sendmsg+0x650/0xb40 [ 1073.467820][T26859] ? skb_put+0x112/0x210 [ 1073.467851][T26859] netlink_sendmsg+0x6c0/0xb40 [ 1073.467882][T26859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.467907][T26859] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1073.467936][T26859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.467955][T26859] sock_sendmsg_nosec+0x13a/0x180 [ 1073.467985][T26859] ____sys_sendmsg+0x54e/0x850 [ 1073.468023][T26859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1073.468064][T26859] ? import_iovec+0x73/0xa0 [ 1073.468097][T26859] ___sys_sendmsg+0x2a5/0x360 [ 1073.468128][T26859] ? __lock_acquire+0x683/0x2cf0 [ 1073.468161][T26859] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.468230][T26859] ? __fget_files+0x2a/0x420 [ 1073.468257][T26859] ? __fget_files+0x3a2/0x420 [ 1073.468295][T26859] __x64_sys_sendmsg+0x1b1/0x290 [ 1073.468329][T26859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1073.468379][T26859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.468405][T26859] do_syscall_64+0x174/0x580 [ 1073.468447][T26859] ? trace_irq_disable+0x3b/0x140 [ 1073.468475][T26859] ? clear_bhb_loop+0x40/0x90 [ 1073.468501][T26859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.468522][T26859] RIP: 0033:0x7f9a7e39de59 [ 1073.468542][T26859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.468560][T26859] RSP: 002b:00007f9a7f32f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.468583][T26859] RAX: ffffffffffffffda RBX: 00007f9a7e626090 RCX: 00007f9a7e39de59 [ 1073.468599][T26859] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1073.468613][T26859] RBP: 00007f9a7f32f090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.468625][T26859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.468637][T26859] R13: 00007f9a7e626128 R14: 00007f9a7e626090 R15: 00007ffc11e52a08 [ 1073.468671][T26859] [ 1074.114944][T26867] netlink: 'syz.3.6256': attribute type 1 has an invalid length. [ 1074.528123][T26862] netlink: 'syz.3.6256': attribute type 10 has an invalid length. [ 1074.881238][T26867] bond26: entered promiscuous mode [ 1074.887764][T26867] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1074.972501][T26874] bond26: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1074.985172][T26874] bond26: (slave ipvlan6): The slave device specified does not support setting the MAC address [ 1074.995625][T26874] bond26: (slave ipvlan6): Setting fail_over_mac to active for active-backup mode [ 1075.324134][T26900] netlink: 'syz.1.5926': attribute type 32 has an invalid length. [ 1077.178425][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6270'. [ 1077.688431][T26940] netlink: 'syz.0.6271': attribute type 1 has an invalid length. [ 1077.876097][T25349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1078.037278][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1078.047990][T26946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6271'. [ 1078.089660][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1078.149691][T26946] veth0_virt_wifi: entered promiscuous mode [ 1078.155763][T26946] veth0_virt_wifi: entered allmulticast mode [ 1078.214879][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1078.270369][T26948] netlink: 'syz.1.6273': attribute type 1 has an invalid length. [ 1078.300852][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1078.992490][T26960] netlink: 'syz.0.6274': attribute type 6 has an invalid length. [ 1079.085155][T26962] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1079.692823][T15341] bridge0: port 3(syz_tun) entered disabled state [ 1079.888887][T15341] syz_tun (unregistering): left allmulticast mode [ 1079.895473][T15341] syz_tun (unregistering): left promiscuous mode [ 1079.906786][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6278'. [ 1079.921970][T15341] bridge0: port 3(syz_tun) entered disabled state [ 1079.969310][T26975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6278'. [ 1080.415303][ T5628] Bluetooth: hci5: command tx timeout [ 1081.719915][T26977] veth0: Caught tx_queue_len zero misconfig [ 1081.727948][T26977] netlink: 'syz.4.6280': attribute type 3 has an invalid length. [ 1081.801044][T26987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.870296][T26939] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1082.391637][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6284'. [ 1082.485390][ T5628] Bluetooth: hci5: command tx timeout [ 1083.123866][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.223328][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.233756][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1083.628926][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6291'. [ 1083.638033][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6291'. [ 1083.791443][T27029] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1084.342218][T27043] netlink: 'syz.4.6295': attribute type 1 has an invalid length. [ 1084.354154][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.364566][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.374943][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1084.464752][T27031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6292'. [ 1084.555311][ T5628] Bluetooth: hci5: command tx timeout [ 1084.680252][T27027] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1084.755534][T27027] bond1 (unregistering): Released all slaves [ 1085.025540][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1085.137598][T27054] netlink: 'syz.0.6298': attribute type 1 has an invalid length. [ 1085.221614][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.231946][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.242485][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1085.340661][T27060] netlink: 'syz.0.6298': attribute type 10 has an invalid length. [ 1085.398247][T27054] bond10: entered promiscuous mode [ 1085.404353][T27054] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1085.524227][T27065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6302'. [ 1085.568719][T27065] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6302'. [ 1085.703417][T27057] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1085.716003][T27057] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1085.726544][T27057] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1086.312687][T26939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.320288][T26939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.328023][T26939] bridge_slave_0: entered allmulticast mode [ 1086.418606][T27086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.516703][T26939] bridge_slave_0: entered promiscuous mode [ 1086.597085][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.607458][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.618380][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1086.719084][ T5628] Bluetooth: hci5: command tx timeout [ 1086.820551][T26939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.828218][T26939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.836306][T26939] bridge_slave_1: entered allmulticast mode [ 1086.975523][T26939] bridge_slave_1: entered promiscuous mode [ 1087.058715][T27098] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1087.110516][T27099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6311'. [ 1087.344974][T27105] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1087.352272][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1087.411123][T26939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.424294][T26939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.620782][T27111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6313'. [ 1087.660586][T27107] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6313'. [ 1087.677968][T26939] team0: Port device team_slave_0 added [ 1087.754746][T26939] team0: Port device team_slave_1 added [ 1088.447344][T27119] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6316'. [ 1088.466664][T27118] netlink: 'syz.1.6315': attribute type 1 has an invalid length. [ 1088.539813][T27119] netlink: 'syz.5.6316': attribute type 1 has an invalid length. [ 1088.703801][T26939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.711082][T26939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.169290][T27140] netlink: 'syz.1.6315': attribute type 10 has an invalid length. [ 1089.181990][T26939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.251006][T26939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.258106][T26939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.284354][T26939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.527644][T27124] tipc: Enabled bearer , priority 10 [ 1089.831390][T27119] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1090.044133][T27130] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1090.060531][T27140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.079306][T27140] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1090.203568][T27158] netlink: 'syz.4.6323': attribute type 1 has an invalid length. [ 1090.211781][T27158] netlink: 'syz.4.6323': attribute type 4 has an invalid length. [ 1090.238917][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1090.250980][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1090.259599][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 1090.269009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1090.279179][ C1] RIP: 0010:dst_dev_put+0x27/0x2b0 [ 1090.284397][ C1] Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 30 c8 20 f8 49 89 dd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 48 89 df e8 c9 54 8e f8 4c 8b 33 48 8d 7b [ 1090.304129][ C1] RSP: 0018:ffffc900001d7aa0 EFLAGS: 00010246 [ 1090.310322][ C1] RAX: ffffffff89a5aa10 RBX: 0000000000000001 RCX: ffff88801e298000 [ 1090.318327][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1090.326337][ C1] RBP: 1ffffffff1c9f1de R08: ffff88802e2e86fb R09: 1ffff11005c5d0df [ 1090.334335][ C1] R10: dffffc0000000000 R11: ffffed1005c5d0e0 R12: dffffc0000000000 [ 1090.342338][ C1] R13: 0000000000000000 R14: 0000607edacd9040 R15: 0000000000000000 [ 1090.350336][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 1090.359373][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.366157][ C1] CR2: 0000200000010000 CR3: 0000000075e58000 CR4: 00000000003526f0 [ 1090.374243][ C1] Call Trace: [ 1090.377545][ C1] [ 1090.380497][ C1] fib_nh_common_release+0x1ed/0x420 [ 1090.385980][ C1] free_fib_info_rcu+0xe3/0x2f0 [ 1090.390866][ C1] ? __pfx_free_fib_info_rcu+0x10/0x10 [ 1090.396457][ C1] ? rcu_core+0x70d/0x10a0 [ 1090.401005][ C1] rcu_core+0x78b/0x10a0 [ 1090.405543][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1090.410252][ C1] handle_softirqs+0x225/0x840 [ 1090.415065][ C1] ? run_ksoftirqd+0x36/0x60 [ 1090.419686][ C1] run_ksoftirqd+0x36/0x60 [ 1090.424215][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1090.429180][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1090.434410][ C1] kthread+0x388/0x470 [ 1090.438506][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1090.443998][ C1] ? __pfx_kthread+0x10/0x10 [ 1090.448615][ C1] ret_from_fork+0x514/0xb70 [ 1090.453279][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1090.458422][ C1] ? __switch_to+0xc89/0x1420 [ 1090.463125][ C1] ? __pfx_kthread+0x10/0x10 [ 1090.467743][ C1] ret_from_fork_asm+0x1a/0x30 [ 1090.472545][ C1] [ 1090.475605][ C1] Modules linked in: [ 1090.496937][ C1] ---[ end trace 0000000000000000 ]--- [ 1090.502520][ C1] RIP: 0010:dst_dev_put+0x27/0x2b0 [ 1090.507669][ C1] Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 30 c8 20 f8 49 89 dd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 48 89 df e8 c9 54 8e f8 4c 8b 33 48 8d 7b [ 1090.527344][ C1] RSP: 0018:ffffc900001d7aa0 EFLAGS: 00010246 [ 1090.533706][ C1] RAX: ffffffff89a5aa10 RBX: 0000000000000001 RCX: ffff88801e298000 [ 1090.541705][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1090.549704][ C1] RBP: 1ffffffff1c9f1de R08: ffff88802e2e86fb R09: 1ffff11005c5d0df [ 1090.557755][ C1] R10: dffffc0000000000 R11: ffffed1005c5d0e0 R12: dffffc0000000000 [ 1090.566058][ C1] R13: 0000000000000000 R14: 0000607edacd9040 R15: 0000000000000000 [ 1090.574073][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 1090.583220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.590107][ C1] CR2: 0000200000010000 CR3: 0000000075e58000 CR4: 00000000003526f0 [ 1090.605736][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1090.613236][ C1] Kernel Offset: disabled [ 1090.617564][ C1] Rebooting in 86400 seconds..