last executing test programs: 2.441891598s ago: executing program 1 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="40004c060a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r3, 0x7, 0x0, @val=@tcx}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x2, 0x0, 0x1, 0x6, 0x1, 0xc, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x4f, &(0x7f00000003c0)=""/79, 0x41000, 0x6, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xb, 0x4, 0xc}, 0x10, 0x5906, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r5], &(0x7f00000005c0), 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2d38, '\x00', r1, r2, 0x3, 0x5, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x81, r9, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x2c, &(0x7f00000005c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @alu={0x4, 0x0, 0xb, 0xb, 0x4, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x4, 0x6, 0x9, 0x3, 0xffffffff}, @ldst={0x1, 0x1, 0x3, 0x4, 0xb, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@x}, @call={0x85, 0x0, 0x0, 0xc9}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x4, 0x0, 0x9, 0x6, 0x5, 0x4, 0xffffffffffffffff}], &(0x7f0000000800)='GPL\x00', 0x9, 0x18, &(0x7f0000000840)=""/24, 0x1f00, 0x11, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0x4, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001180)=[r8, r5, r4, r5, r9, r5, r6], &(0x7f00000011c0)=[{0x2, 0x1, 0xf, 0xb}, {0x4, 0x4, 0xd}], 0x10, 0x3}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000080)="29000300010003", 0x7) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000040), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000100)={@val={0x0, 0x8fe}, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1}, {0x4e24, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "7bab609c8da61762878dd4c4290502fba6481908af13a098", "4c41fee30f9b16c1af63fc61b08209779d8ad0653947e12de7ee64af1d2289ae"}}}}}}}, 0x72) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18) 2.072602323s ago: executing program 3 (id=2550): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2d) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1.894717948s ago: executing program 1 (id=2552): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x5, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x80) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 1.887676727s ago: executing program 3 (id=2553): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000000)={'dummy0\x00', @ifru_settings={0x0, 0x73, @sync=0x0}}) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xfff2}, {0xffe0}}, [{0x8, 0xb, 0x1}]}, 0x2c}}, 0x400c0) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_USERDATA={0x6b, 0xd, 0x1, 0x0, "ab28f86581a34081c8efb53d3e50e59fc8d56b5b17c16184a0280c873317a3d29d0a83b25f8b585365defe19e161d744b5adfb296efc0151edb4e9777c54e542f462d1dd31faabd35f2742070b9c1e3876d4e56fbee5869f7a6d3251d772ef9eb67f43315008cc"}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffffffffffff}]}, 0xe4}}, 0x8040) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000080)=0xfffffffc, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@loopback}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) 1.815206327s ago: executing program 0 (id=2554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) 1.691574914s ago: executing program 4 (id=2556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x14, &(0x7f00000000c0)={@random="8cf45b9b5865", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @generic="20338cfcef"}}}}, 0x0) (async) syz_emit_ethernet(0x14, &(0x7f00000000c0)={@random="8cf45b9b5865", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @generic="20338cfcef"}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x6, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040), 0x4) 1.679140206s ago: executing program 3 (id=2557): r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x40}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x200448d0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20004004) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0x2, 0x2fc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000600], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x40, 0x1, 'gre0\x00', 'bond_slave_1\x00', 'wg2\x00', 'bond_slave_1\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x9e, 0x136, 0x186, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x2, 0x4, 0x0, 0x4}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0xe0, {0x5f1}}}}, @common=@log={'log\x00', 0x28, {{0x6, "8e2cb43b195b49dc62086c0304a5066d24671aae5c93059681260ea5b1fe"}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x4964ea3a, {0x8}}}}}, {0x5, 0x20, 0x2, 'ipvlan1\x00', 'virt_wifi0\x00', 'bridge_slave_0\x00', 'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @link_local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xe6, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x27, 0x3, {0x1000}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x374) r4 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5ea39063071e922d8afb0b492ca6119fb0f33777da93adbaf7027c0a1f7399bef09dd3620bea7a043f72b5bed07fbb935e5d29abfdc43ff8f535e618bd1b7a40de2dbfb9a4fec192d385dcfa5ee348d4bd6f7bc8c6b937f11fd7eee6b293e398d2be48b977e44495034e1cdcd1735f3f9b2b8ea0be3e046376164ff5e5a5f464080f62f8c9a2bacef94664b6d326c89f176dbdbbd85d93f58e2a8d953039a04a437b14e04cd09b2ec7da00501e979d4f72a3f4fc355fb96f516e2b98fc45babd8780b2e2717247276", 0xf7}], 0x1}, 0x4000804) 1.638376936s ago: executing program 0 (id=2558): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008680)={&(0x7f0000000680)={0x18, 0x1401, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xe0, 0x64}}}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x38}}, 0x4001) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000b000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0xbb8, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @local}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="080005"], 0x24}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.414924373s ago: executing program 1 (id=2559): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e288133b734f9859bbf4159ebad0c4c205593f130aa20a5e4e1cbca146eaa06879f16720f8a957a8d95abf4dbb17392b37b932e65523a661ea1449b9d0bd48d14a252f5b52c963ae9cf236eef97e594c53f97f3078a2266128b110f6d948194440f0f6023bea76c444a6e0433b5f21fc3352596c4e3cb1eeb0c0ed748babce"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e288133b734f9859bbf4159ebad0c4c205593f130aa20a5e4e1cbca146eaa06879f16720f8a957a8d95abf4dbb17392b37b932e65523a661ea1449b9d0bd48d14a252f5b52c963ae9cf236eef97e594c53f97f3078a2266128b110f6d948194440f0f6023bea76c444a6e0433b5f21fc3352596c4e3cb1eeb0c0ed748babce"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004001) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) (async) 1.414633364s ago: executing program 2 (id=2560): r0 = socket$kcm(0x2, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000081f790936cd359e7a0fc3542af48a3bb758ebf7f55bfcc9b272c3188e50d05e11c7e5756ac5c4881386317264aaf825f67b8cde84d98852afbc60a84d2e31f15482c3d105997bf5d913765041aa283b38051522799da5d8ff278a59580b0a86b867cdfe63498dc33be7838c0e52a12f864c0dc8872a9c0e04aec8d55bf26729aba6c11b4cf57646b3c56303616ea0197a8aca7c911bcd85524e666f08622c726c29d8d55c999178b1ee8a041efbda333084963b4b176ebe709cd53e6f853e1d8d487ef67", @ANYRES16=0x0, @ANYBLOB="00070bbd7000ffdbdf0b0c00580058b8f0e73d7b098fb0041917d4"], 0x2c}, 0x1, 0x0, 0x0, 0x8091}, 0x8000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0xfffffffd}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000540)}, 0x24004024) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x640100ff}, 0x10, &(0x7f00000000c0)}, 0x20006885) 1.414060488s ago: executing program 4 (id=2561): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0xa, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0xa, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r4, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r5, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) 1.293703005s ago: executing program 0 (id=2562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x334, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x0, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24040014) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) 1.084418815s ago: executing program 2 (id=2563): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000307d98eca4017fbf00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xfff, 0x0, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x6, &(0x7f00000002c0)=@raw=[@ldst={0x1, 0x2, 0x1, 0x5, 0x9, 0x4, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x1, 0x0, 0x9, 0x0, 0x108, 0xfffffffffffffff0}], &(0x7f0000000300)='syzkaller\x00', 0x40, 0xe3, &(0x7f00000004c0)=""/227, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r6, 0x8, &(0x7f0000000600)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x3, 0x6, 0x2}, 0x10, r8, r0, 0x1, &(0x7f0000000700)=[r9, r4, r4, r4], &(0x7f0000000740)=[{0x0, 0x4, 0x3, 0x5}], 0x10, 0xa}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.034871415s ago: executing program 3 (id=2564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, r1, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0x3, 0x8001, 0x8, 0x3, 0x5, 0x6f, 0x8, {r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x88ae, 0xb, 0x1, 0x7fffffff}}, &(0x7f0000000880)=0xb0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x3, 0x0, &(0x7f0000000000)) 989.427841ms ago: executing program 0 (id=2565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xb0, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@typed={0x95, 0x7, 0x0, 0x0, @binary="eb975ded82ee95660069eff6d16c4d88607cb493cc7a8652c68e530e1d686fb9d57c2326ec068160b262576f5d271425844a7899b11d686973bd8b13884f2eab3b8a26c1f97432f00ac0a9f7e3d81fd8f5518f172089770f89812a0b9185f3bb8a11256690fc1bb38e65794e62dd3809d3f4ec0ad3f9efb8be9aeb70fd6aa56c6f2f73a92b024c1b0846983b567988afd8"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @rand_addr=0x64010102}}}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x2, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0xfffb, 0xa}, {0x7, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 970.183813ms ago: executing program 1 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff7, 0x6a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 762.930549ms ago: executing program 4 (id=2567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000008500000075030000a5000000230000009500004b"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) 759.910529ms ago: executing program 2 (id=2568): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 667.842177ms ago: executing program 1 (id=2569): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) 560.738923ms ago: executing program 2 (id=2570): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@enum64={0xf, 0x9, 0x0, 0x13, 0x1, 0x5, [{0x3, 0x2, 0x4}, {0xc, 0x0, 0x2}, {0xb, 0x10001, 0x10000}, {0xa, 0x7, 0x31}, {0x5, 0xffff}, {0x9, 0x143c, 0x2}, {0xb, 0x7, 0x27f6c120}, {0xd, 0xde}, {0x8, 0x3, 0x69}]}, @ptr={0x4}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000240)=""/231, 0xad, 0xe7, 0x0, 0x9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 482.78882ms ago: executing program 1 (id=2571): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0xd3385cd, 0x5, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0xd3385cd, 0x5, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) (async) sendmmsg$inet(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="4a460640b083dcc1010f3efc8864", 0x0, 0x2fc, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000100)="0827e0", 0x3}], 0x2}}], 0x1, 0x4400c800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000140)="222818fc13ef339b9d0789c480ff08abe7b8e655f6", 0x15, 0x3b00, 0x0, 0x0) 480.566061ms ago: executing program 4 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)={0x24d4, 0x40, 0x107, 0x70bd27, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x24a8, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}, @nested={0x249c, 0x2, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @ipv4=@remote}, @nested={0x35, 0xb9, 0x0, 0x1, [@generic="44b613a29587103649b430f5bd604d43d8e032e16d70163dae41df094041de1579d38c066f563f9e58efd0f609c93ea867"]}, @typed={0x14, 0xce, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1104, 0x64, 0x0, 0x1, [@generic="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", @typed={0xeb, 0x15d, 0x0, 0x0, @binary="3391f802a0aa73bdba21a6b31a069875b063c5e3058e8e710169655befba1eebb4a8bcfbf73e3d94f7de82645eed911b46288bede5ca8bfb30ffab0467e4242eb571ff4a15335be32bf0a51c7847ff5e1e3a0a0a6dc24d877c18368783dffa6bc50cd74420a29fbe870c35a9040a1cd2bf9744f4b89cd8cb30e7a6cdb50bba4d36b6a6565d91530d4b5c007f93a574eb387f8501e4070d3d767d006ea1b51eb4baedb7fd43b375f1c89f5e184c587e9169ae64aa812dcb26b0d2cff599f5f877a1187a455606375e6a21282c410c98974e16e381844f86ff2dee938b08ad5bb12565f936d055c5"}, @typed={0x8, 0x4e, 0x0, 0x0, @u32=0x602a}, @typed={0xc, 0x15a, 0x0, 0x0, @u64=0x5}]}, @generic="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", @nested={0xe6, 0x13, 0x0, 0x1, [@generic="6665b820ee66753287a0dedd60fd399212078d5e24e5e1e4b93a5f4c2e4e1a15ee051cf4363b6f0bcb52d4c12f58cd7cd418829c385b894ecd079c684e162558fd43e922a1628133b14b11ad902ea61e21f9d02a84b2cef99d2393529f6c7d80d59308b91684d5b3f950282a371427c99287d2ddb1be75bc650266cfa3732bb49eef4c0a73a3e4eeca2b5764525a2d0f8923c86cdfb41d1764056dbd88885c6ff46bd49bfa0bd867307a493e130868a6c964ed59aa5915b6bb285c4e591fcd65f4a84f1e5283cdd95a9502cad0e60b4d0919fd91c9c4d7fe52b0", @typed={0x8, 0xab, 0x0, 0x0, @uid}]}, @nested={0x257, 0xc3, 0x0, 0x1, [@generic="e0edbdc7f4767a9618b5f9a79e7dbb9184f02d7ec8864dadc89de69fc756f522e4328e1fd604931da2300dcf8ebfa0f98af34967ffc7af389fe9878c4946e0aa1e04217909a1bb1ffb42869cca4bb6363261853e88774c2b70c6d88c565c67a8a0e4fb59716962c52e43a18a256e4305b6a22794afd3ff29ad01309c7e5b5aaa1421f3d1edb708360a6df50930fd04286c99913cf1ed1346cca4775f9679c227738e362c73a7d18db72c01a247496b0df4b1064deb814ab91d004831d49a2c4c41c68bf32749ac1929f9dc8840c953311a5da0bde22d0179aa2505a112b888fe58c137531d6280bcd0134e76653a65aa6b356261426903a6e68b", @generic="0dc18296a0946c77c448ef993004ea91297262f50d0cf1bb00a099f68d41982e79e76ca4b2a5ad75edc09bcbbffbc86399762e09e58e62e0f91876a8bdad06ee3c5dc3ed7daac56a1ff8b2f97593670293d95f3449fd86d9172f3064df", @typed={0x5, 0x119, 0x0, 0x0, @str='\x00'}, @generic="bdbed137d4d742e0979bfa6c8c9ae886f3d32ce03313e4f956d7413b5c66a731b7020371e7046dc1e25584f3633e6846d92bc0dc5e6698f53f77400309b75e398856f8217c0eb39ccdd43db96d0eadf090ee867b9e3f9b386d499f6c9187c2147d36de18943452b59a7bc0e863240fbd919b31659ba5a132fdf4a4b300e1781420b8397fa013213121b8420fd933969c4cf00959d67805a56f86e688f4cd348dbc826208e1cacd59e093ca0e34370117f9372fe11aa1c340fa5c55faf065b8d15d2e46ac5ad0e55ac6043de0ea24a08728ce56cceac254a3d004793f78fe766a4ac86ac6f0dbecece4e74f49ce385292fac1b985"]}]}]}, @typed={0x14, 0x55, 0x0, 0x0, @ipv6=@remote}]}, 0x24d4}}, 0xc000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9feb01001800000000000e00180000001800000006000000040000009d000093010000000200000000080000e4ffffffff2d2e5f2e00"], 0x0, 0x36, 0x0, 0x1, 0x4863dbfa}, 0x28) 452.04838ms ago: executing program 3 (id=2573): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'netdevsim0\x00', {'veth1_to_batadv\x00'}, 0x1789}) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x8c56}], 0x1, 0x10020, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0x1, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv4={0x8864, @igmp={{0x5, 0x4, 0x3, 0x9, 0x1c, 0x65, 0x0, 0x2, 0x2, 0x0, @broadcast, @rand_addr=0x64010102}, {0x16, 0xf, 0x0, @local}}}}}, 0x0) 369.874432ms ago: executing program 2 (id=2574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="c9106ad160fa14ac9e972f9f5767370ff5ca988f174689aa5face9997ca07b050d34cd2ce8cd61c358670cde6983230205c7b31354a68efdbbd4fa36f7de495937b11a1333af3934d4ea6a7634f938259da4b3c186ff6f7f9160b03edc2154ac3b66fc3cd2b61d67f35683b366f7cbd233f35ceb25ffd4819f916b2e747a19ab0398a1a5a30817ce496951e661446681d3d1d7a0c07b3519a8a5f832108b899b935b29d9bcfa5c164ed99b35fa7117ab4baac2e086081e5cf11b5583b707a031f22e5b79c91b834e20db76154aecd91175980b959263764046c17efd22653ccb196a19aede83e7d220d3a7450c29cb957a19f1045ea77812"], 0x40}}, 0x0) 238.288ms ago: executing program 0 (id=2575): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 237.569726ms ago: executing program 4 (id=2576): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 179.144364ms ago: executing program 2 (id=2577): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040020001200000000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) socket$unix(0x1, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r10, 0x29, 0x4a, 0x0, &(0x7f0000000080)) socket(0x10, 0x803, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x24048810) 103.759032ms ago: executing program 4 (id=2578): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000229bd700004000100"/22], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x24000800) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x1010, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) 31.618513ms ago: executing program 0 (id=2579): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab302, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x2}, 0xfffffd91}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x70fb43, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x5, 0x25dfdbfc, {}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_SPORT={0xffffffee, 0x1c, 0x4e21}]}, 0x2c}}, 0x0) 0s ago: executing program 3 (id=2580): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x25, "8f67d730addf9947065130663387fb17cda84e8418ea696c4ce6c98b8e94214d817d33f06e"}, &(0x7f0000000040)=0x2d) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r1}, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r2, 0x22, "4a00ea406aecbce5c508778e9c3f6b7b2120654d834a5a78f23c8add3778480d298f"}, &(0x7f0000000100)=0x2a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r3, 0xe, "3d50b3baf8e6942dd14a55c33039"}, &(0x7f0000000180)=0x16) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r3, 0xe, "3d50b3baf8e6942dd14a55c33039"}, &(0x7f0000000180)=0x16) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/87, &(0x7f00000002c0)=0x57) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/87, &(0x7f00000002c0)=0x57) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x81, 0x4, 0x4, @private2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8, 0x8, 0x1, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', r5, 0x7800, 0xf77cb41f0a1bdff9, 0x8, 0xa, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x64, 0x0, 0xf4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0x7, 0xf, [@broadcast]}, @end, @timestamp_prespec={0x44, 0x1c, 0x2a, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x1}, {@empty, 0x10001}, {@multicast1, 0x400}]}, @end, @ssrr={0x89, 0x1b, 0xf7, [@private=0xa010101, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @remote]}, @lsrr={0x83, 0x1f, 0xf, [@multicast2, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast1]}, @ssrr={0x89, 0x7, 0x9e, [@multicast1]}, @lsrr={0x83, 0x17, 0x15, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @broadcast]}]}}}}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f00000004c0)={0x7, 'gre0\x00', {0xb}, 0x401}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f00000004c0)={0x7, 'gre0\x00', {0xb}, 0x401}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x954, 0x6, [0x4, 0x38, 0x80, 0x5, 0x4, 0xf4b]}, 0x14) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x1404, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004080}, 0x2008800) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x1404, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004080}, 0x2008800) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r2, 0xace}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r2, 0xace}, 0x8) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000680)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @broadcast}}, 0x1, 0x80, 0x0, 0x0, 0x7}, &(0x7f0000000780)=0x98) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @broadcast}}, 0x1, 0x80, 0x0, 0x0, 0x7}, &(0x7f0000000780)=0x98) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x178, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x77446fc, 0x7a}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x0, 0x0, {0x4, 0x723, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x1800, 0x7}}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "47999bb235"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2d92045af1"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, @NL80211_ATTR_IE={0x60, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xaa, 0xa1, 0x10}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @perr={0x84, 0x22, {0x7, 0x2, [{{}, @device_a, 0x7ff, @void, 0xe}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x8}]}}, @link_id={0x65, 0x12, {@random="9fc21947f610", @device_a, @broadcast}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x0, 0x8, 0x18, 0x4}}, @supported_rates={0x1, 0x6, [{0x34}, {0x48, 0x1}, {0x2, 0x1}, {0x1b, 0x1}, {0x1}, {0x3, 0x1}]}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x1, 0x1, 0x0, {0x10, 0x2, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x7, 0x4}}]}, 0x178}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000a40)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @private=0xa010101}, 'bond0\x00'}) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00)=0x10) (async) r10 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00)=0x10) accept$phonet_pipe(r10, 0x0, &(0x7f0000000b40)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000b80)={r2, 0x2}, &(0x7f0000000bc0)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000c00)=0xe, 0x4) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r12, 0x113, 0x1, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000cc0)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000cc0)={'virt_wifi0\x00'}) kernel console output (not intermixed with test programs): no=448 res=0 errno=0 [ 121.186275][ T7089] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 121.231952][ T7089] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 121.253462][ T7089] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 121.297821][ T5762] lo speed is unknown, defaulting to 1000 [ 121.305773][ T7047] infiniband syz0: set active [ 121.319280][ T7047] infiniband syz0: added lo [ 121.411399][ T7089] syz.1.309 (7089) used greatest stack depth: 18168 bytes left [ 121.431930][ T7047] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.458137][ T7047] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.476412][ T7047] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.534620][ T7047] RDS/IB: syz0: added [ 121.550257][ T7047] smc: adding ib device syz0 with port count 1 [ 121.557219][ T7047] smc: ib device syz0 port 1 has no pnetid [ 121.582436][ T29] lo speed is unknown, defaulting to 1000 [ 121.613363][ T7047] lo speed is unknown, defaulting to 1000 [ 121.653051][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.886564][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 121.917590][ T7117] netlink: 1 bytes leftover after parsing attributes in process `syz.2.317'. [ 122.100383][ T7126] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 122.264560][ T7128] bond5: (slave geneve3): making interface the new active one [ 122.297214][ T7128] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 122.310507][ T6635] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.337169][ T6635] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.368454][ T7047] lo speed is unknown, defaulting to 1000 [ 122.376654][ T6635] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.396404][ T6635] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.497672][ T7141] Bluetooth: MGMT ver 1.23 [ 122.517869][ T7140] netlink: 'syz.0.322': attribute type 3 has an invalid length. [ 122.749661][ T7154] veth0: entered promiscuous mode [ 122.813672][ T7153] veth0: left promiscuous mode [ 122.972173][ T7162] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 123.121269][ T7164] tipc: Enabling of bearer rejected, failed to enable media [ 123.348230][ T7047] lo speed is unknown, defaulting to 1000 [ 123.613809][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 123.619302][ T7181] syzkaller0: entered promiscuous mode [ 123.649616][ T7181] syzkaller0: entered allmulticast mode [ 124.165737][ T7216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'. [ 124.427190][ T7226] veth0: entered promiscuous mode [ 124.447409][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 124.479985][ T7047] lo speed is unknown, defaulting to 1000 [ 124.603440][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.350'. [ 124.656479][ T7227] veth0: left promiscuous mode [ 124.895697][ T7249] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 124.977174][ T7249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.158336][ T7047] lo speed is unknown, defaulting to 1000 [ 125.225974][ T7265] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.359'. [ 125.313730][ T7266] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 127.791519][ T7242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.064632][ T7292] syzkaller1: entered promiscuous mode [ 128.074712][ T7292] syzkaller1: entered allmulticast mode [ 128.198237][ T6633] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.236804][ T6633] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.270797][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'. [ 128.271779][ T7306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'. [ 128.281836][ T6633] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.305516][ T6633] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.331032][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.368'. [ 128.485937][ T7310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.549108][ T7315] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 128.559078][ T7317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.569125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.600301][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.764806][ T7326] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.775559][ T7327] ipt_REJECT: ECHOREPLY no longer supported. [ 128.782484][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 128.862916][ T7326] bond4 (unregistering): Released all slaves [ 128.905401][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 128.946081][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 129.080388][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.347410][ T7355] netlink: 256 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.468076][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.389'. [ 129.547771][ T7367] netlink: 164 bytes leftover after parsing attributes in process `syz.4.386'. [ 129.582267][ T7365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.646402][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.690679][ T7370] syzkaller0: entered promiscuous mode [ 129.711579][ T7370] syzkaller0: entered allmulticast mode [ 129.762024][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 129.772011][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 129.810713][ T7372] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 129.852025][ T7372] netlink: 224 bytes leftover after parsing attributes in process `syz.2.391'. [ 129.911640][ T7393] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 129.928288][ T7393] netlink: 760 bytes leftover after parsing attributes in process `syz.0.395'. [ 129.958582][ T7395] syzkaller1: entered promiscuous mode [ 129.994310][ T7395] syzkaller1: entered allmulticast mode [ 130.196182][ T7403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.205368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.369626][ T7412] netlink: 'syz.2.398': attribute type 12 has an invalid length. [ 130.404656][ T7412] netlink: 'syz.2.398': attribute type 29 has an invalid length. [ 130.442953][ T7412] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 130.472908][ T7412] netlink: 'syz.2.398': attribute type 2 has an invalid length. [ 130.564438][ T7422] bridge2: entered promiscuous mode [ 130.576213][ T7422] bridge2: entered allmulticast mode [ 130.679722][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.695363][ T7426] bridge3: entered promiscuous mode [ 130.715484][ T7426] bridge3: entered allmulticast mode [ 130.794816][ T7411] lo speed is unknown, defaulting to 1000 [ 131.310848][ T7459] bond5: Unable to set up delay as MII monitoring is disabled [ 131.323054][ T7459] bond5 (unregistering): Released all slaves [ 131.721821][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.798350][ T7482] lo: entered promiscuous mode [ 132.465605][ T7514] veth0: entered promiscuous mode [ 132.496187][ T7513] veth0: left promiscuous mode [ 132.921973][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.043028][ T7527] bond6: entered promiscuous mode [ 133.142854][ T7537] netlink: 'syz.4.428': attribute type 7 has an invalid length. [ 133.193327][ T7530] syz.4.428 (7530) used greatest stack depth: 17944 bytes left [ 133.501470][ T7552] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 133.799856][ T5745] net_ratelimit: 4 callbacks suppressed [ 133.799873][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.202062][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.259823][ T7599] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 134.336443][ T7599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.343328][ T7601] __nla_validate_parse: 10 callbacks suppressed [ 134.343346][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 134.343362][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.446'. [ 134.464812][ T7599] bond4: (slave geneve3): making interface the new active one [ 134.495604][ T7599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.521658][ T7599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.544720][ T7599] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 134.587288][ T6633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.645182][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.810218][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.840680][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.849756][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.123896][ T7630] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 135.153638][ T7630] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 135.164234][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.177913][ T7630] gretap1: entered promiscuous mode [ 135.191123][ T7630] gretap1: entered allmulticast mode [ 135.200162][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.456'. [ 135.251609][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.452'. [ 135.308126][ T7640] IPVS: length: 4096 != 8 [ 136.119630][ T50] Bluetooth: hci4: command tx timeout [ 138.396012][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 138.472219][ T7670] netlink: 'syz.3.464': attribute type 2 has an invalid length. [ 138.818237][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 138.860208][ T6633] net_ratelimit: 11 callbacks suppressed [ 138.860227][ T6633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.955849][ T7699] netlink: 4300 bytes leftover after parsing attributes in process `syz.2.473'. [ 139.002253][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.014087][ T7698] vlan2: entered promiscuous mode [ 139.019276][ T7698] bridge0: entered promiscuous mode [ 139.420571][ T7717] netlink: 'syz.1.480': attribute type 29 has an invalid length. [ 139.451407][ T7717] netlink: 'syz.1.480': attribute type 29 has an invalid length. [ 139.785797][ T7734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.101911][ T7744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.198437][ T7760] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 140.207299][ T7760] netlink: 'syz.4.493': attribute type 2 has an invalid length. [ 140.218492][ T7760] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 140.226597][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 140.258704][ T7762] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 140.277300][ T7751] bond1: invalid ARP target 0.0.0.0 specified for addition [ 140.284955][ T7751] bond1: option arp_ip_target: invalid value (0) [ 140.298988][ T7763] netlink: 256 bytes leftover after parsing attributes in process `syz.4.493'. [ 140.301548][ T7751] bond1 (unregistering): Released all slaves [ 140.374263][ T7766] netlink: zone id is out of range [ 140.387851][ T5762] lo speed is unknown, defaulting to 1000 [ 140.394549][ T7766] netlink: zone id is out of range [ 140.401836][ T5762] syz0: Port: 1 Link DOWN [ 140.411453][ T7766] netlink: zone id is out of range [ 140.419017][ T7766] netlink: zone id is out of range [ 140.435259][ T7766] netlink: zone id is out of range [ 140.444471][ T5762] lo speed is unknown, defaulting to 1000 [ 140.456992][ T7766] netlink: zone id is out of range [ 140.699165][ T7774] netlink: 48 bytes leftover after parsing attributes in process `syz.1.499'. [ 140.873415][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 140.893030][ T7784] erspan0: entered promiscuous mode [ 140.915059][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.502'. [ 141.488065][ T7817] sctp: [Deprecated]: syz.1.511 (pid 7817) Use of int in max_burst socket option deprecated. [ 141.488065][ T7817] Use struct sctp_assoc_value instead [ 141.523917][ T7821] netlink: 'syz.2.513': attribute type 11 has an invalid length. [ 141.561744][ T7821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.513'. [ 142.578413][ T7877] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 142.757021][ T7877] bond5: entered promiscuous mode [ 142.763691][ T7877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.799084][ T7887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.812754][ T7887] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 142.824796][ T7887] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 142.857094][ T7887] bond5: (slave vcan1): making interface the new active one [ 142.875103][ T7887] vcan1: entered promiscuous mode [ 142.889049][ T7887] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 142.907649][ T7892] veth0_to_hsr: entered promiscuous mode [ 142.916978][ T7892] veth0_to_hsr: entered allmulticast mode [ 142.947508][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 143.151248][ T7905] netlink: 144 bytes leftover after parsing attributes in process `syz.4.532'. [ 143.356953][ T7914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.455253][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.4.535'. [ 143.486278][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 143.507095][ T7926] lo speed is unknown, defaulting to 1000 [ 143.516473][ T7925] »»»»»»: renamed from lo [ 143.563570][ T7926] »»»»»» speed is unknown, defaulting to 1000 [ 143.591568][ T7926] »»»»»» speed is unknown, defaulting to 1000 [ 143.624794][ T7926] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 143.677125][ T7926] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 143.695955][ T7926] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 143.728941][ T7926] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.749008][ T7926] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.800638][ T7926] »»»»»» speed is unknown, defaulting to 1000 [ 143.811027][ T7926] »»»»»» speed is unknown, defaulting to 1000 [ 143.819268][ T7926] »»»»»» speed is unknown, defaulting to 1000 [ 143.827670][ T7926] »»»»»» speed is unknown, defaulting to 1000 [ 143.836861][ T7926] »»»»»» speed is unknown, defaulting to 1000 [ 144.078717][ T7948] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 144.099434][ T7948] netlink: 'syz.1.545': attribute type 3 has an invalid length. [ 144.117965][ T7948] NCSI netlink: No device for ifindex 813332851 [ 144.318636][ T7954] net_ratelimit: 51 callbacks suppressed [ 144.318658][ T7954] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 144.359088][ T7954] bridge2: entered promiscuous mode [ 144.365346][ T7958] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 144.372140][ T7954] bridge2: entered allmulticast mode [ 144.388866][ T7954] netlink: 'syz.2.547': attribute type 2 has an invalid length. [ 144.726190][ T7974] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 144.838519][ T7979] openvswitch: netlink: Multiple metadata blocks provided [ 144.916808][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802531e400: rx timeout, send abort [ 144.960896][ T7983] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 145.212035][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.225084][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.274812][ T7998] __nla_validate_parse: 6 callbacks suppressed [ 145.274832][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 145.417828][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a17d000: rx timeout, send abort [ 145.426778][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802531e400: abort rx timeout. Force session deactivation [ 145.616566][ T8014] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 145.624497][ T8014] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 145.717060][ T8014] batadv0: entered promiscuous mode [ 145.741510][ T8014] macsec2: entered promiscuous mode [ 145.751693][ T8014] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 145.766734][ T8014] batadv0: left promiscuous mode [ 145.808405][ T8023] netlink: 'syz.4.563': attribute type 2 has an invalid length. [ 145.926196][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a17d000: abort rx timeout. Force session deactivation [ 146.024687][ T8029] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 146.053728][ T8030] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 146.135358][ T8036] 8021q: VLANs not supported on tunl0 [ 146.150649][ T8037] 8021q: VLANs not supported on tunl0 [ 146.799217][ T8070] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 146.849114][ T8070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.119816][ T8092] sctp: [Deprecated]: syz.0.591 (pid 8092) Use of int in maxseg socket option. [ 147.119816][ T8092] Use struct sctp_assoc_value instead [ 147.140786][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 148.030466][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 148.107518][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 148.529779][ T8149] netlink: 96 bytes leftover after parsing attributes in process `syz.1.611'. [ 148.591516][ T8149] vlan2: entered allmulticast mode [ 148.613731][ T8149] gretap0: entered allmulticast mode [ 149.131731][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'. [ 149.295027][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.624'. [ 149.321693][ T8187] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 149.442659][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 149.503904][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 149.544169][ T8187] macvlan2: entered promiscuous mode [ 149.562313][ T8187] macvlan2: entered allmulticast mode [ 149.615467][ T8202] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 149.765640][ T8218] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 149.782027][ T8218] netlink: 'syz.4.631': attribute type 4 has an invalid length. [ 149.789926][ T8218] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.631'. [ 149.804800][ T8207] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 150.104156][ T8233] netlink: 'syz.3.637': attribute type 4 has an invalid length. [ 150.125528][ T8233] netlink: 'syz.3.637': attribute type 1 has an invalid length. [ 150.152645][ T8241] netlink: 'syz.3.637': attribute type 4 has an invalid length. [ 150.195315][ T8241] netlink: 'syz.3.637': attribute type 1 has an invalid length. [ 150.526513][ T8264] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 150.543381][ T8264] bond8 (unregistering): Released all slaves [ 150.751508][ T8277] __nla_validate_parse: 2 callbacks suppressed [ 150.751522][ T8277] netlink: 104 bytes leftover after parsing attributes in process `syz.3.646'. [ 150.785225][ T8277] gtp0: entered promiscuous mode [ 150.790465][ T8277] gtp0: entered allmulticast mode [ 151.125071][ T8293] h: entered promiscuous mode [ 151.251388][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.652'. [ 153.099544][ T8234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.337829][ T8322] netlink: 'syz.1.659': attribute type 2 has an invalid length. [ 153.358453][ T8322] netlink: 244 bytes leftover after parsing attributes in process `syz.1.659'. [ 153.386437][ T8320] netlink: 'syz.4.658': attribute type 83 has an invalid length. [ 153.448515][ T8323] vlan2: entered promiscuous mode [ 153.479717][ T8323] bridge0: entered promiscuous mode [ 153.661554][ T8333] tunl0: entered promiscuous mode [ 153.693606][ T8333] gre0: entered promiscuous mode [ 153.746931][ T8333] gretap0: entered promiscuous mode [ 153.781431][ T8333] erspan0: entered promiscuous mode [ 153.790720][ T8345] netlink: 52 bytes leftover after parsing attributes in process `syz.0.665'. [ 153.803457][ T8333] ip_vti0: entered promiscuous mode [ 153.838356][ T5761] »»»»»» speed is unknown, defaulting to 1000 [ 153.932175][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 153.975996][ T8345] netlink: 'syz.0.665': attribute type 5 has an invalid length. [ 154.001186][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 154.092685][ T8345] geneve4: entered promiscuous mode [ 154.098026][ T8345] geneve4: entered allmulticast mode [ 154.105700][ T57] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 154.114878][ T57] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 154.133331][ T57] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 154.143573][ T57] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 154.208947][ T8364] xt_ecn: cannot match TCP bits for non-tcp packets [ 154.413475][ T5762] »»»»»» speed is unknown, defaulting to 1000 [ 154.436828][ T8372] syzkaller0: entered promiscuous mode [ 154.475416][ T8372] syzkaller0: entered allmulticast mode [ 154.545496][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.675'. [ 157.504503][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 157.533313][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'. [ 157.554961][ T8401] tipc: Started in network mode [ 157.594206][ T8401] tipc: Node identity 7f, cluster identity 4711 [ 157.616026][ T8401] tipc: Node number set to 127 [ 157.678119][ T8405] 8021q: adding VLAN 0 to HW filter on device bond8 [ 157.854561][ T8417] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 157.866025][ T8417] netlink: 16130 bytes leftover after parsing attributes in process `syz.1.686'. [ 157.891410][ T8419] netlink: 2 bytes leftover after parsing attributes in process `syz.3.684'. [ 157.903975][ T8422] x_tables: duplicate underflow at hook 1 [ 158.070097][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'. [ 158.248525][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 158.271596][ T8439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.691'. [ 158.353087][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 158.408819][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 158.460176][ T8453] netlink: 96 bytes leftover after parsing attributes in process `syz.4.695'. [ 158.592487][ T8432] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 158.623792][ T1151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.647823][ T1151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.660047][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.687503][ T8439] gretap2: entered promiscuous mode [ 158.697477][ T8439] gretap2: entered allmulticast mode [ 158.735084][ T8453] vlan3: entered allmulticast mode [ 158.769404][ T8453] erspan0: entered allmulticast mode [ 158.990285][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.147846][ T8478] tipc: Started in network mode [ 159.174449][ T8478] tipc: Node identity fe4bf1dc7d55, cluster identity 4711 [ 159.194539][ T8478] tipc: Enabled bearer , priority 0 [ 159.320207][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.328689][ T8492] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.403364][ T8487] syzkaller0: entered promiscuous mode [ 159.408918][ T8487] syzkaller0: entered allmulticast mode [ 159.416277][ T8487] tipc: Resetting bearer [ 159.437855][ T8477] tipc: Resetting bearer [ 160.801769][ T8477] tipc: Disabling bearer [ 160.858219][ T8497] bond7: option fail_over_mac: invalid value (16) [ 160.867096][ T8497] bond7 (unregistering): Released all slaves [ 160.924106][ T10] tipc: Node number set to 2199843292 [ 161.091412][ T8508] bond0: (slave gre0): refused to change device type [ 161.107906][ T8506] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 161.121154][ T8508] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 161.446983][ T8532] bridge0: port 1(syz_tun) entered blocking state [ 161.476766][ T8532] bridge0: port 1(syz_tun) entered disabled state [ 161.495202][ T8532] syz_tun: entered allmulticast mode [ 161.521334][ T8532] syz_tun: entered promiscuous mode [ 161.538051][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.552948][ T8532] bridge0: port 1(syz_tun) entered blocking state [ 161.559598][ T8532] bridge0: port 1(syz_tun) entered forwarding state [ 161.578662][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.935076][ T8557] sch_fq: defrate 0 ignored. [ 162.398902][ T8585] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 162.433992][ T5762] IPVS: starting estimator thread 0... [ 162.441421][ T8585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.570817][ T8588] IPVS: using max 25 ests per chain, 60000 per kthread [ 162.797377][ T30] audit: type=1804 audit(1779344031.587:3): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.742" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=840 res=1 errno=0 [ 162.839823][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.879319][ T30] audit: type=1800 audit(1779344031.587:4): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.742" name="cgroup.controllers" dev="tmpfs" ino=840 res=0 errno=0 [ 163.090974][ T8623] __nla_validate_parse: 8 callbacks suppressed [ 163.090994][ T8623] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.746'. [ 163.379880][ T8639] xt_hashlimit: size too large, truncated to 1048576 [ 163.431282][ T8643] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 163.501830][ T8645] Bluetooth: MGMT ver 1.23 [ 164.138093][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 164.171439][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 164.192543][ T8683] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 164.212611][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 164.213682][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 164.230983][ T8684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.763'. [ 164.253506][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.763'. [ 164.450810][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 164.475785][ T8689] netlink: 'syz.2.765': attribute type 20 has an invalid length. [ 164.485132][ T8689] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.727208][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 164.966660][ T8722] Cannot find set identified by id 3 to match [ 165.195451][ T8731] tipc: Enabled bearer , priority 14 [ 165.231332][ T8731] netlink: 57879 bytes leftover after parsing attributes in process `syz.4.777'. [ 165.252889][ T8731] netlink: 'syz.4.777': attribute type 30 has an invalid length. [ 165.285759][ T6625] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.297415][ T6625] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.307359][ T6625] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.317158][ T6625] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.483643][ T8742] bridge3: entered allmulticast mode [ 165.510844][ T8749] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 166.182254][ T8787] xt_hashlimit: size too large, truncated to 1048576 [ 166.215100][ T8786] xt_hashlimit: size too large, truncated to 1048576 [ 166.788002][ T8824] ip6t_srh: unknown srh invflags 4000 [ 168.920913][ T8781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.106117][ T8841] tipc: Can't bind to reserved service type 0 [ 169.141563][ T8848] __nla_validate_parse: 12 callbacks suppressed [ 169.141580][ T8848] netlink: 108 bytes leftover after parsing attributes in process `syz.3.809'. [ 169.178419][ T8851] netlink: 272 bytes leftover after parsing attributes in process `syz.4.810'. [ 169.193858][ T8853] siw: device registration error -23 [ 169.264010][ T8851] tipc: Enabling of bearer rejected, media not registered [ 169.305223][ T8857] netlink: 76 bytes leftover after parsing attributes in process `syz.3.809'. [ 169.589892][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.683175][ T8879] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.817'. [ 169.717587][ T8879] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 169.782486][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.819'. [ 169.824026][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 169.978728][ T8896] Bluetooth: MGMT ver 1.23 [ 170.003362][ T8896] Bluetooth: hci1: too big key_count value 32778 [ 170.053365][ T8896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.104807][ T8900] tipc: New replicast peer: 172.20.20.187 [ 170.171436][ T8900] tipc: Enabled bearer , priority 10 [ 170.201715][ T8901] tipc: Enabling of bearer rejected, already enabled [ 170.524738][ T8924] tunl0: entered promiscuous mode [ 170.556820][ T8924] netlink: 'syz.2.830': attribute type 3 has an invalid length. [ 170.586973][ T8924] netlink: 9 bytes leftover after parsing attributes in process `syz.2.830'. [ 170.590588][ T8928] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 170.615650][ T8928] netlink: 'syz.4.831': attribute type 2 has an invalid length. [ 170.628425][ T8928] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 170.636430][ T8928] netlink: 'syz.4.831': attribute type 2 has an invalid length. [ 170.812891][ T8939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.928793][ T8941] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 171.061409][ T8950] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 171.091514][ T8952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.126231][ T8947] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 171.267807][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 171.297770][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 171.437296][ T8971] syzkaller0: entered promiscuous mode [ 171.446087][ T8971] syzkaller0: entered allmulticast mode [ 171.960109][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.741792][ T9021] netlink: 'syz.4.854': attribute type 58 has an invalid length. [ 174.397703][ T8976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.736130][ T9044] netlink: 'syz.0.861': attribute type 15 has an invalid length. [ 174.765983][ T9044] __nla_validate_parse: 5 callbacks suppressed [ 174.766001][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 174.838763][ T6629] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 174.839147][ T9044] netlink: 'syz.0.861': attribute type 15 has an invalid length. [ 174.864974][ T6629] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 174.890772][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 174.932584][ T57] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 174.964842][ T57] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 175.044520][ T9059] ip6t_rpfilter: unknown options [ 175.055909][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 175.074466][ T9058] ip6t_rpfilter: unknown options [ 175.101461][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 175.150898][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 175.394356][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 175.708500][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 175.773585][ T9101] »»»»»»: left promiscuous mode [ 175.797587][ T9101] tunl0: left promiscuous mode [ 175.823516][ T9101] gre0: left promiscuous mode [ 175.846832][ T9101] gretap0: left promiscuous mode [ 175.866935][ T9101] erspan0: left promiscuous mode [ 175.882180][ T9101] ip_vti0: left promiscuous mode [ 175.956707][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 176.001104][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.008915][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.173104][ T9112] netlink: 'syz.4.878': attribute type 10 has an invalid length. [ 176.233865][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.271177][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.712089][ T9101] bond3: left promiscuous mode [ 176.720208][ T9101] ip6tnl1: left allmulticast mode [ 176.738058][ T9101] bridge2: left promiscuous mode [ 176.743455][ T9101] bridge2: left allmulticast mode [ 176.754557][ T9101] bridge3: left promiscuous mode [ 176.760667][ T9101] bridge3: left allmulticast mode [ 176.768288][ T9101] vlan2: left allmulticast mode [ 176.777699][ T9101] gretap0: left allmulticast mode [ 176.793585][ T9112] veth1_macvtap: left promiscuous mode [ 176.824904][ T9112] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 176.886180][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.927245][ T384] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.974110][ T384] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.041224][ T384] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.297129][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.884'. [ 177.425635][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 177.530288][ T384] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.554775][ T384] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.576466][ T384] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.606913][ T384] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.924688][ T9201] openvswitch: netlink: IPv4 tunnel dst address is zero [ 177.933717][ T9201] openvswitch: netlink: IPv4 tunnel dst address is zero [ 177.968407][ T9205] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 177.978804][ T9205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.514536][ T9268] bond5: (slave »»»»»»): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.541344][ T9268] bond5: (slave »»»»»»): Enslaving as an active interface with an up link [ 179.553902][ T9268] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 179.589932][ T9138] »»»»»» speed is unknown, defaulting to 1000 [ 179.597334][ T5745] »»»»»» speed is unknown, defaulting to 1000 [ 179.619587][ T5745] syś2: Port: 1 Link ACTIVE [ 179.704687][ T9278] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 179.712605][ T9278] netlink: 'syz.0.913': attribute type 2 has an invalid length. [ 179.728863][ T9278] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 179.813597][ T9282] __nla_validate_parse: 8 callbacks suppressed [ 179.813615][ T9282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.915'. [ 180.383729][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 180.443461][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 180.455983][ T9316] lo: entered allmulticast mode [ 180.470399][ T9316] lo: left allmulticast mode [ 180.941793][ T9344] netlink: 232 bytes leftover after parsing attributes in process `syz.3.932'. [ 181.184137][ T9356] xt_hl: Unknown Hop Limit match mode: 206 [ 181.244361][ T9360] tipc: Started in network mode [ 181.250677][ T9360] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 181.258053][ T9360] tipc: Enabled bearer , priority 24 [ 181.291878][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 181.506665][ T9370] netlink: 'syz.1.942': attribute type 11 has an invalid length. [ 181.539108][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.942'. [ 181.589242][ T9374] netlink: 'syz.1.942': attribute type 11 has an invalid length. [ 181.631100][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 181.697215][ T9381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 181.935878][ T9397] netlink: 84 bytes leftover after parsing attributes in process `syz.1.949'. [ 181.954265][ T9393] netlink: 'syz.3.946': attribute type 10 has an invalid length. [ 181.979704][ T9398] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.950'. [ 182.021930][ T9398] netlink: Conntrack attr has 3 unknown bytes [ 182.048006][ T9398] ipt_rpfilter: unknown options [ 182.761448][ T5644] tipc: Node number set to 10005162 [ 182.978017][ T9427] netlink: 'syz.2.957': attribute type 21 has an invalid length. [ 182.986101][ T9427] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.706877][ T9462] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 184.804426][ T9462] netlink: 'syz.4.963': attribute type 2 has an invalid length. [ 184.952728][ T9467] __nla_validate_parse: 4 callbacks suppressed [ 184.952748][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.965'. [ 184.977918][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.967'. [ 185.063207][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 185.078395][ T9472] syzkaller0: entered allmulticast mode [ 185.325230][ T9483] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 185.355862][ T9483] nbd: error processing sock list [ 185.487795][ T9488] netlink: 'syz.2.973': attribute type 1 has an invalid length. [ 185.522183][ T9488] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.973'. [ 185.690135][ T9486] syzkaller0: entered promiscuous mode [ 185.699513][ T9486] syzkaller0: entered allmulticast mode [ 185.883032][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.980'. [ 187.880216][ T9546] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 187.914147][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 187.942145][ T9546] netlink: 'syz.2.986': attribute type 7 has an invalid length. [ 187.978426][ T9546] netlink: 'syz.2.986': attribute type 8 has an invalid length. [ 188.001580][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 188.332399][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 188.430870][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 188.484103][ T9575] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 188.614947][ T9592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'. [ 188.788293][ T9598] bridge0: port 3(gretap0) entered blocking state [ 188.800651][ T9598] bridge0: port 3(gretap0) entered disabled state [ 188.807574][ T9598] gretap0: entered allmulticast mode [ 188.817237][ T9598] gretap0: entered promiscuous mode [ 188.824734][ T9598] bridge0: port 3(gretap0) entered blocking state [ 188.831391][ T9598] bridge0: port 3(gretap0) entered forwarding state [ 189.362969][ T9631] bridge_slave_1: left allmulticast mode [ 189.370354][ T9631] bridge_slave_1: left promiscuous mode [ 189.377067][ T9631] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.390859][ T9631] bridge_slave_0: left allmulticast mode [ 189.407508][ T9631] bridge_slave_0: left promiscuous mode [ 189.424003][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.546279][ T9625] lo speed is unknown, defaulting to 1000 [ 189.867630][ T9650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.888887][ T9650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.021408][ T9657] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 190.171687][ T9660] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 190.357973][ T9625] »»»»»» speed is unknown, defaulting to 1000 [ 190.397466][ T9669] __nla_validate_parse: 5 callbacks suppressed [ 190.397484][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 190.481361][ T9670] netlink: 'syz.1.1024': attribute type 21 has an invalid length. [ 190.510494][ T9670] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1024'. [ 190.535158][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 191.438476][ T9698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1032'. [ 191.529000][ T9700] vlan2: entered promiscuous mode [ 191.536105][ T9700] hsr0: entered promiscuous mode [ 191.541852][ T9700] vlan2: entered allmulticast mode [ 191.547107][ T9700] hsr0: entered allmulticast mode [ 191.553042][ T9700] hsr_slave_0: entered allmulticast mode [ 191.558824][ T9700] hsr_slave_1: entered allmulticast mode [ 191.586513][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 191.597998][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 191.613299][ T9700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'. [ 192.083835][ T9720] netlink: 'syz.3.1038': attribute type 64 has an invalid length. [ 192.100636][ T9720] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1038'. [ 192.963087][ T9765] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 193.151085][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 193.189155][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 193.424172][ T9786] nbd: couldn't find device at index 2958377 [ 193.875657][ T9812] ip6t_srh: unknown srh match flags 4000 [ 194.364483][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.380983][ T9822] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 195.417238][ T9823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.463807][ T9828] netem: change failed [ 195.478586][ T29] IPVS: starting estimator thread 0... [ 195.593095][ T9831] IPVS: using max 25 ests per chain, 60000 per kthread [ 195.652825][ T9838] __nla_validate_parse: 4 callbacks suppressed [ 195.652843][ T9838] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1072'. [ 195.787978][ T9841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.804319][ T9844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1072'. [ 195.977741][ T9853] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 196.000112][ T9853] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 196.031294][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1077'. [ 196.064796][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1077'. [ 196.217709][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1079'. [ 196.412043][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1082'. [ 196.759088][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'. [ 196.846378][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1089'. [ 197.365131][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 197.367153][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 197.424313][ T9923] veth0_macvtap: left promiscuous mode [ 198.256972][ T9973] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 198.795029][ T9994] xt_hashlimit: overflow, rate too high: 0 [ 198.934796][T10001] vlan3: entered promiscuous mode [ 198.952898][T10001] erspan0: entered promiscuous mode [ 199.191142][T10012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.287036][T10014] hsr_slave_1 (unregistering): left promiscuous mode [ 199.385695][T10024] xt_hashlimit: size too large, truncated to 1048576 [ 199.657223][T10037] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.756822][T10046] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.764054][T10042] netlink: 'syz.1.1135': attribute type 3 has an invalid length. [ 200.987503][T10097] __nla_validate_parse: 10 callbacks suppressed [ 200.987524][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 201.055885][T10097] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 201.107004][T10104] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 201.382460][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'. [ 201.744924][T10139] sctp: [Deprecated]: syz.2.1156 (pid 10139) Use of int in max_burst socket option deprecated. [ 201.744924][T10139] Use struct sctp_assoc_value instead [ 201.799892][ T4945] Bluetooth: hci4: command 0x0405 tx timeout [ 201.952993][T10143] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 202.045899][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 202.191576][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1160'. [ 202.428720][T10174] bond0: (slave bond_slave_0): Releasing backup interface [ 202.656666][T10182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1170'. [ 202.691516][T10186] netlink: 'syz.2.1169': attribute type 11 has an invalid length. [ 202.720497][T10186] netlink: 'syz.2.1169': attribute type 11 has an invalid length. [ 202.740701][T10179] IPVS: persistence engine module ip_vs_pe_Ą not found [ 202.749937][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 202.759037][T10186] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1169'. [ 202.772767][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 202.862346][T10185] netlink: 'syz.2.1169': attribute type 11 has an invalid length. [ 202.888761][T10185] netlink: 'syz.2.1169': attribute type 11 has an invalid length. [ 202.898489][T10185] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1169'. [ 202.988681][T10161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.155152][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 203.491977][T10216] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 203.661485][T10227] erspan0: entered promiscuous mode [ 203.814307][T10235] netlink: get zone limit has 4 unknown bytes [ 203.998140][T10243] netlink: 'syz.1.1182': attribute type 2 has an invalid length. [ 204.228233][T10258] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 204.353085][T10262] blkio.reset_stats is deprecated [ 204.668240][ T29] IPVS: starting estimator thread 0... [ 204.686132][T10274] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 204.769977][T10275] IPVS: using max 26 ests per chain, 62400 per kthread [ 206.024120][T10343] __nla_validate_parse: 10 callbacks suppressed [ 206.024141][T10343] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1206'. [ 206.069501][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 206.100629][T10343] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1206'. [ 206.139916][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 206.162247][T10343] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1206'. [ 206.389965][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1208'. [ 206.680383][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 206.690497][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 206.696649][ T5628] Bluetooth: hci2: command 0x0401 tx timeout [ 206.703663][T10351] gtp0: entered promiscuous mode [ 206.755005][T10351] gtp0: entered allmulticast mode [ 206.792693][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'. [ 206.846870][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'. [ 206.958445][T10366] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 207.013851][T10364] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 207.128553][T10376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.139908][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 207.254140][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1216'. [ 207.342910][T10390] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 207.409919][T10397] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 207.648272][T10410] netlink: 'syz.1.1222': attribute type 3 has an invalid length. [ 207.678165][T10410] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 207.707432][T10408] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 207.723969][T10408] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 211.574771][T10462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.825436][T10512] __nla_validate_parse: 2 callbacks suppressed [ 211.825455][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1249'. [ 211.936607][ T30] audit: type=1800 audit(1779344080.727:5): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1247" name="memory.events" dev="tmpfs" ino=1182 res=0 errno=0 [ 212.282502][T10536] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1253'. [ 212.345735][T10542] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1253'. [ 212.671627][T10556] netlink: 'syz.3.1259': attribute type 3 has an invalid length. [ 213.011539][T10571] nbd: couldn't find a device at index 1048580 [ 213.135820][T10577] netlink: 'syz.2.1265': attribute type 11 has an invalid length. [ 213.157322][T10578] netlink: 'syz.2.1265': attribute type 11 has an invalid length. [ 213.169546][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 213.178635][T10578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1265'. [ 213.179543][T10577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1265'. [ 213.222582][T10580] block nbd0: Unsupported socket: should be TCP or UNIX. [ 213.297281][T10587] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 213.350829][T10580] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 214.355450][T10631] pimreg: entered allmulticast mode [ 214.500725][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 214.638173][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'. [ 214.856207][T10664] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1278'. [ 214.962312][T10667] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1279'. [ 215.017411][T10669] ip6t_srh: unknown srh match flags 4000 [ 215.917887][T10714] netlink: 'syz.2.1289': attribute type 33 has an invalid length. [ 216.013920][T10707] xt_CT: No such helper "snmp_trap" [ 216.143144][T10714] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 216.175982][T10714] bond2 (unregistering): Released all slaves [ 216.279271][T10725] netlink: 'syz.0.1292': attribute type 25 has an invalid length. [ 216.625272][T10739] IPv4: Oversized IP packet from 127.202.26.0 [ 216.680786][T10739] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 216.991483][T10750] __nla_validate_parse: 6 callbacks suppressed [ 216.991501][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 217.053076][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 217.252560][T10771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1304'. [ 217.433574][T10784] macvtap1: entered promiscuous mode [ 217.448261][T10784] team0: entered promiscuous mode [ 217.472735][T10784] team_slave_0: entered promiscuous mode [ 217.496297][T10784] team_slave_1: entered promiscuous mode [ 217.523849][T10784] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 217.555363][T10789] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 217.563428][T10784] team0: Device macvtap1 is already an upper device of the team interface [ 217.595233][T10784] team0: left promiscuous mode [ 217.609300][T10784] team_slave_0: left promiscuous mode [ 217.625821][T10784] team_slave_1: left promiscuous mode [ 217.652496][T10796] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1311'. [ 217.729725][T10783] macvtap1: entered promiscuous mode [ 217.740783][T10783] team0: entered promiscuous mode [ 217.746543][T10783] team_slave_0: entered promiscuous mode [ 217.753206][T10783] team_slave_1: entered promiscuous mode [ 217.761234][T10783] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 217.768930][T10783] team0: Device macvtap1 is already an upper device of the team interface [ 217.780597][T10783] team0: left promiscuous mode [ 217.789068][T10783] team_slave_0: left promiscuous mode [ 217.802703][T10783] team_slave_1: left promiscuous mode [ 217.851505][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 218.100088][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 218.126316][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 218.169414][T10812] bond0: entered promiscuous mode [ 218.182478][T10812] bond_slave_0: entered promiscuous mode [ 218.199148][T10812] bond_slave_1: entered promiscuous mode [ 218.246285][T10812] bond0: left promiscuous mode [ 218.267563][T10812] bond_slave_0: left promiscuous mode [ 218.287310][T10812] bond_slave_1: left promiscuous mode [ 218.315876][T10817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1317'. [ 218.338957][T10819] netlink: 'syz.2.1318': attribute type 8 has an invalid length. [ 218.367373][T10817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1317'. [ 218.507061][T10817] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1317'. [ 218.638633][T10817] netlink: 'syz.0.1317': attribute type 3 has an invalid length. [ 218.681085][T10817] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 218.709276][T10817] netlink: 'syz.0.1317': attribute type 9 has an invalid length. [ 218.743299][T10834] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 219.134085][T10852] netlink: 'syz.2.1329': attribute type 1 has an invalid length. [ 219.440547][T10865] openvswitch: netlink: Key type 143 is out of range max 32 [ 220.051716][T10886] xt_l2tp: missing protocol rule (udp|l2tpip) [ 220.073835][T10890] xt_l2tp: missing protocol rule (udp|l2tpip) [ 220.290591][T10895] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 220.298286][T10895] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.472134][T10910] netlink: 'syz.0.1345': attribute type 2 has an invalid length. [ 220.487059][T10911] netlink: 'syz.0.1345': attribute type 2 has an invalid length. [ 220.500083][T10910] netlink: 'syz.0.1345': attribute type 2 has an invalid length. [ 220.566346][T10907] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 220.592548][T10907] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 220.723304][T10920] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 221.035532][T10927] vlan4: entered allmulticast mode [ 221.057600][T10927] bond0: entered allmulticast mode [ 221.080832][T10927] bond_slave_0: entered allmulticast mode [ 221.103718][T10927] bond_slave_1: entered allmulticast mode [ 221.582414][T10962] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 221.747414][T10970] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 221.796917][T10971] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 221.945175][T10973] bond3: entered promiscuous mode [ 221.964371][T10973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.078422][T10979] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.111729][T10979] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 222.125457][T10979] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 222.394988][T10997] syzkaller0: entered promiscuous mode [ 222.410665][T10997] syzkaller0: entered allmulticast mode [ 222.554071][T11014] nbd: must specify a device to reconfigure [ 222.572646][T11014] __nla_validate_parse: 16 callbacks suppressed [ 222.572664][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 222.617408][T11014] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 222.682684][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1379'. [ 222.833051][T11031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1382'. [ 223.190011][T11044] xt_cgroup: path and classid specified [ 224.559732][T11057] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 224.585576][T11059] validate_nla: 1 callbacks suppressed [ 224.585594][T11059] netlink: 'syz.0.1387': attribute type 83 has an invalid length. [ 225.320668][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 225.356103][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 225.461983][T11100] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1400'. [ 225.555253][T11105] erspan0: entered allmulticast mode [ 225.617307][T11108] netlink: 212024 bytes leftover after parsing attributes in process `syz.4.1402'. [ 226.165066][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 226.185604][T11139] IPv6: sit1: Disabled Multicast RS [ 226.221098][T11139] sit1: entered allmulticast mode [ 226.232128][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 226.514419][T11142] tipc: Resetting bearer [ 226.612773][ T5745] »»»»»» speed is unknown, defaulting to 1000 [ 226.683347][T11173] netlink: 'syz.4.1415': attribute type 9 has an invalid length. [ 226.945220][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 227.173487][T11185] lo speed is unknown, defaulting to 1000 [ 227.187273][T11193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.302885][T11205] netlink: 'syz.2.1422': attribute type 1 has an invalid length. [ 227.410620][T11211] gtp1: entered promiscuous mode [ 227.437459][T11211] gtp1: entered allmulticast mode [ 227.496222][T11206] netlink: 'syz.2.1422': attribute type 13 has an invalid length. [ 227.567412][T11206] netlink: 'syz.2.1422': attribute type 58 has an invalid length. [ 227.610565][T11206] __nla_validate_parse: 33 callbacks suppressed [ 227.610583][T11206] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1422'. [ 227.676693][T11228] tun1: tun_chr_ioctl cmd 1074025675 [ 227.694827][T11228] tun1: persist disabled [ 227.816514][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 228.027276][T11239] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 228.091487][T11239] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1429'. [ 228.125451][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 228.148280][T11242] vlan2: entered allmulticast mode [ 228.160126][T11242] veth1_virt_wifi: entered allmulticast mode [ 228.200625][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.315901][T11248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.369104][T11248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.392701][T11260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1433'. [ 228.462878][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 228.481156][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 228.492556][T11255] erspan0: left promiscuous mode [ 228.515591][T11255] erspan0: entered allmulticast mode [ 228.897465][T11289] netlink: 'syz.4.1441': attribute type 1 has an invalid length. [ 228.935985][T11289] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1441'. [ 228.989909][T11289] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1441'. [ 229.058100][T11294] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 229.084504][T11297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.097690][T11294] sctp: [Deprecated]: syz.2.1442 (pid 11294) Use of int in max_burst socket option deprecated. [ 229.097690][T11294] Use struct sctp_assoc_value instead [ 229.108258][T11298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.374065][T11311] macvtap0: entered allmulticast mode [ 229.410014][T11311] veth0_macvtap: entered allmulticast mode [ 229.473171][T11312] netlink: 'syz.4.1445': attribute type 3 has an invalid length. [ 229.521997][T11312] ipvlan2: entered allmulticast mode [ 229.527540][T11312] batadv_slave_1: entered allmulticast mode [ 229.949276][T11344] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 229.962350][T11344] syzkaller1: group set to 0 [ 230.337439][T11360] xt_HMARK: spi-set and port-set can't be combined [ 231.495147][T11423] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.897621][T11448] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 232.775272][T11500] __nla_validate_parse: 12 callbacks suppressed [ 232.775290][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 233.040947][T11516] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 233.059870][T11517] SET target dimension over the limit! [ 233.250003][T11524] netlink: 'syz.4.1505': attribute type 11 has an invalid length. [ 233.269977][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'. [ 233.281994][T11524] netlink: 'syz.4.1505': attribute type 11 has an invalid length. [ 233.299519][T11524] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1505'. [ 233.916451][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 233.947336][T11555] netlink: 'syz.4.1516': attribute type 3 has an invalid length. [ 233.966380][T11555] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 233.993165][T11555] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1516'. [ 234.026029][T11555] NCSI netlink: No device for ifindex 813332851 [ 234.163193][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 234.206307][T11564] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.399414][T11579] macvlan0: entered promiscuous mode [ 234.405416][T11579] macvlan0: entered allmulticast mode [ 234.412884][T11579] veth1_vlan: entered allmulticast mode [ 234.559586][T11584] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 234.594874][T11584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.611905][T11588] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1526'. [ 234.644213][T11588] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1526'. [ 234.698526][T11589] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1526'. [ 234.746881][T11594] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 234.756686][T11595] netlink: 'syz.4.1527': attribute type 3 has an invalid length. [ 234.791559][T11594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1528'. [ 234.852496][T11594] netlink: 'syz.1.1528': attribute type 8 has an invalid length. [ 235.164430][T11611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.357065][T11619] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 235.492783][T11626] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 236.029234][T11649] syz.4.1541 (11649) used obsolete PPPIOCDETACH ioctl [ 236.254830][T11659] syzkaller0: entered promiscuous mode [ 236.278200][T11659] syzkaller0: entered allmulticast mode [ 236.454663][T11663] can: request_module (can-proto-0) failed. [ 236.696778][T11670] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.730236][T11670] bond8: (slave veth0_to_bond): making interface the new active one [ 236.751830][T11670] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 237.295675][T11705] team0: entered promiscuous mode [ 237.311163][T11705] team_slave_0: entered promiscuous mode [ 237.329568][T11706] validate_nla: 6 callbacks suppressed [ 237.329587][T11706] netlink: 'syz.0.1559': attribute type 2 has an invalid length. [ 237.332458][T11705] team_slave_1: entered promiscuous mode [ 237.353408][T11706] netlink: 'syz.0.1559': attribute type 2 has an invalid length. [ 237.426035][T11705] pimreg: entered allmulticast mode [ 237.991254][T11735] SET target dimension over the limit! [ 238.224872][T11741] vcan1: entered promiscuous mode [ 238.243823][T11741] vcan1: entered allmulticast mode [ 238.396644][T11750] veth0: entered promiscuous mode [ 238.420427][T11748] veth0: left promiscuous mode [ 238.749044][T11756] __nla_validate_parse: 8 callbacks suppressed [ 238.749064][T11756] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 238.786990][T11756] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 238.818692][T11756] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 239.424276][T11781] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 239.520292][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1584'. [ 239.624510][T11787] netlink: 'syz.3.1588': attribute type 13 has an invalid length. [ 239.699826][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'. [ 239.714387][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 239.907861][T11798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1590'. [ 239.962873][T11800] tc action pedit offset must be on 32 bit boundaries [ 240.470824][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 240.632601][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 240.771068][T11824] xt_recent: Unsupported userspace flags (000000b1) [ 240.835193][T11831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1600'. [ 240.933847][T11834] netlink: 'syz.1.1602': attribute type 27 has an invalid length. [ 241.006683][T11816] hsr_slave_0: left promiscuous mode [ 241.015087][T11816] hsr_slave_1: left promiscuous mode [ 242.977526][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'. [ 242.986943][T11866] netlink: 'syz.1.1609': attribute type 7 has an invalid length. [ 242.994931][T11866] netlink: 'syz.1.1609': attribute type 8 has an invalid length. [ 243.005599][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 243.507135][T11895] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 243.522558][T11890] bond9: option resend_igmp: invalid value (32767) [ 243.546573][T11890] bond9: option resend_igmp: allowed values 0 - 255 [ 243.563579][T11890] bond9 (unregistering): Released all slaves [ 243.610139][T11903] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 243.625277][T11903] netlink: 'syz.3.1617': attribute type 7 has an invalid length. [ 243.652563][T11903] netlink: 'syz.3.1617': attribute type 8 has an invalid length. [ 243.669497][T11903] NCSI netlink: No device for ifindex 65584 [ 244.018838][T11918] syzkaller0: entered promiscuous mode [ 244.039003][T11918] syzkaller0: entered allmulticast mode [ 244.075804][T11918] syzkaller0: left promiscuous mode [ 244.570198][T11947] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.704354][T11956] __nla_validate_parse: 36 callbacks suppressed [ 244.704375][T11956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1633'. [ 244.837918][T11961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.938972][T11969] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1638'. [ 245.202214][T11978] macvtap0: entered promiscuous mode [ 245.216090][T11978] team0: entered promiscuous mode [ 245.228564][T11978] team_slave_0: entered promiscuous mode [ 245.236090][T11978] team_slave_1: entered promiscuous mode [ 245.245544][T11978] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 245.253242][T11978] team0: Device macvtap0 is already an upper device of the team interface [ 245.274936][T11978] team0: left promiscuous mode [ 245.280708][T11994] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 245.434768][ T5729] team_slave_0: left promiscuous mode [ 245.441493][ T5729] team_slave_1: left promiscuous mode [ 245.715572][T12013] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 245.745934][T12013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.754189][T12013] IPv6: NLM_F_CREATE should be set when creating new route [ 245.768495][T12021] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 245.789125][T12021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.798275][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 245.808154][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 245.819023][T12013] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 245.833996][T12013] netlink: 'syz.0.1649': attribute type 2 has an invalid length. [ 245.857534][T12013] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.1649'. [ 245.987900][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 246.045558][T12030] tipc: Enabled bearer , priority 0 [ 246.054271][T12030] syzkaller0: entered promiscuous mode [ 246.059922][T12030] syzkaller0: entered allmulticast mode [ 246.075496][T12030] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 246.109861][T12030] tipc: Resetting bearer [ 246.813185][T12028] tipc: Resetting bearer [ 246.831981][T12028] tipc: Disabling bearer [ 270.756886][T12053] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1655'. [ 271.143288][T12073] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1661'. [ 271.174032][T12070] xt_hashlimit: size too large, truncated to 1048576 [ 271.181362][T12074] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1661'. [ 271.332086][T12076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.575266][T12094] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1668'. [ 271.871762][T12108] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1672'. [ 272.117683][T12120] bond3: entered allmulticast mode [ 272.143000][T12120] veth7: entered allmulticast mode [ 272.152929][T12120] bond3: (slave veth7): Enslaving as an active interface with an up link [ 272.172489][T12120] bond3 (unregistering): (slave veth7): Releasing backup interface [ 272.183212][T12120] bond3 (unregistering): Released all slaves [ 272.362663][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 272.411407][T12131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.436164][T12134] geneve3: entered promiscuous mode [ 272.449611][T12134] geneve3: entered allmulticast mode [ 272.465030][ T384] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 272.485443][ T384] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 272.511123][ T384] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 272.554025][ T384] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 272.666083][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 272.680520][T12109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.689811][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 273.025527][T12154] vlan3: entered allmulticast mode [ 273.043938][T12154] bond0: entered allmulticast mode [ 273.068874][T12154] bond_slave_1: entered allmulticast mode [ 273.108538][T12156] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 273.130404][T12156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1685'. [ 273.276868][T12170] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1689'. [ 273.333122][T12167] vlan0: entered promiscuous mode [ 273.349724][T12167] bridge0: entered promiscuous mode [ 273.434823][T12172] syzkaller1: entered promiscuous mode [ 273.441391][T12172] syzkaller1: entered allmulticast mode [ 273.798846][ T36] tipc: Subscription rejected, illegal request [ 273.876528][T12191] bond8: (slave veth0_to_bond): Releasing active interface [ 274.102875][T12208] netlink: zone id is out of range [ 274.108082][T12208] netlink: zone id is out of range [ 274.113803][T12208] netlink: zone id is out of range [ 274.119060][T12208] netlink: zone id is out of range [ 274.129755][T12192] netlink: 'syz.0.1696': attribute type 1 has an invalid length. [ 274.138254][T12208] netlink: zone id is out of range [ 274.143927][T12208] netlink: zone id is out of range [ 274.149151][T12192] netlink: 'syz.0.1696': attribute type 2 has an invalid length. [ 274.157815][T12208] netlink: zone id is out of range [ 274.175571][T12208] netlink: set zone limit has 4 unknown bytes [ 274.318502][ T6635] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.343111][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.352893][ T6635] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.514114][T12230] sctp: [Deprecated]: syz.3.1706 (pid 12230) Use of int in max_burst socket option. [ 274.514114][T12230] Use struct sctp_assoc_value instead [ 274.616972][T12237] sctp: [Deprecated]: syz.3.1706 (pid 12237) Use of int in max_burst socket option. [ 274.616972][T12237] Use struct sctp_assoc_value instead [ 274.638434][T12232] Cannot find map_set index 135 as target [ 274.672495][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.283942][T12270] rdma_op ffff8880216eb9f0 conn xmit_rdma 0000000000000000 [ 275.399715][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.565875][T12290] netlink: 'syz.1.1721': attribute type 2 has an invalid length. [ 275.608324][T12290] netlink: 'syz.1.1721': attribute type 11 has an invalid length. [ 276.002209][T12316] __nla_validate_parse: 12 callbacks suppressed [ 276.002230][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'. [ 276.463661][T12341] atomic_op ffff888057dac198 conn xmit_atomic 0000000000000000 [ 276.505872][T12343] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1738'. [ 276.848820][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 277.443142][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 277.482080][T12398] veth0: entered promiscuous mode [ 277.495131][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 277.596288][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 277.849108][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 277.958766][T12423] netlink: 'syz.3.1758': attribute type 19 has an invalid length. [ 277.991940][T12416] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 278.038637][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 278.108294][T12434] netlink: 'syz.2.1756': attribute type 2 has an invalid length. [ 278.359468][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.666292][T12465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1769'. [ 278.736682][T12467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1769'. [ 279.088578][T12485] bond10: entered promiscuous mode [ 279.104503][T12485] bond10: entered allmulticast mode [ 279.111429][T12485] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.150082][T12493] netlink: 'syz.0.1778': attribute type 33 has an invalid length. [ 279.297900][T12493] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 279.358168][T12493] bond9 (unregistering): Released all slaves [ 279.500484][T12507] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.545511][T12507] bond11: (slave lo): Enslaving as an active interface with an up link [ 279.567263][T12507] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 279.585660][ T5745] lo speed is unknown, defaulting to 1000 [ 279.592062][ T5745] syz0: Port: 1 Link ACTIVE [ 279.596711][ T5745] lo speed is unknown, defaulting to 1000 [ 280.361575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.372349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.445367][T12534] xt_hashlimit: overflow, rate too high: 0 [ 280.455375][T12535] batman_adv: batadv0: Adding interface: dummy0 [ 280.471508][T12535] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 280.524494][T12535] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 280.538126][T12533] tipc: Enabling of bearer rejected, already enabled [ 280.566166][T12548] x_tables: duplicate underflow at hook 2 [ 280.703253][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807949a400: rx timeout, send abort [ 281.203891][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807949b400: rx timeout, send abort [ 281.213288][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807949a400: abort rx timeout. Force session deactivation [ 281.399923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.408742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.459036][T12591] gretap3: entered promiscuous mode [ 281.472184][T12591] batman_adv: batadv0: Adding interface: gretap3 [ 281.485840][T12591] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 281.566428][T12591] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 281.668253][T12597] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 281.712216][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807949b400: abort rx timeout. Force session deactivation [ 281.782088][T12608] netlink: 'syz.2.1806': attribute type 8 has an invalid length. [ 281.822016][T12608] __nla_validate_parse: 6 callbacks suppressed [ 281.822033][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'. [ 281.895683][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 281.922045][T12592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1806'. [ 281.948508][T12610] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 281.999545][T12592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1806'. [ 282.315814][T12628] netlink: 'syz.0.1815': attribute type 7 has an invalid length. [ 282.358420][T12634] netlink: 'syz.3.1817': attribute type 4 has an invalid length. [ 282.482963][T12640] syzkaller1: entered promiscuous mode [ 282.503425][T12640] syzkaller1: entered allmulticast mode [ 282.719625][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 282.757972][T12656] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1824'. [ 282.817584][T12660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1826'. [ 282.933941][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.956771][T12669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.981275][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.010093][T12669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.151453][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 283.176049][T12684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1832'. [ 283.203939][T12687] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 283.266315][T12687] macvlan1: entered promiscuous mode [ 283.279493][T12687] macvlan1: entered allmulticast mode [ 283.307980][T12687] veth1_vlan: entered allmulticast mode [ 283.349478][T12687] team0: Port device macvlan1 added [ 283.388017][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 283.585317][T12693] syzkaller1: entered promiscuous mode [ 283.623243][T12693] syzkaller1: entered allmulticast mode [ 284.044460][T12732] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 286.118967][T12732] bond12: entered promiscuous mode [ 286.125340][T12732] 8021q: adding VLAN 0 to HW filter on device bond12 [ 286.230749][T12740] 8021q: adding VLAN 0 to HW filter on device bond12 [ 286.238266][T12740] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 286.259485][T12740] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 286.277761][T12740] bond12: (slave ip6gre2): making interface the new active one [ 286.299469][T12740] ip6gre2: entered promiscuous mode [ 286.316519][T12740] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 286.436548][T12763] netlink: 'syz.3.1849': attribute type 5 has an invalid length. [ 286.521116][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.544251][T12766] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 286.723673][T12777] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 286.813896][T12766] 8021q: adding VLAN 0 to HW filter on device bond9 [ 286.865228][T12777] bond5: (slave »»»»»»): Releasing backup interface [ 286.879781][T12777] bond5: (slave »»»»»»): last VLAN challenged slave left bond - VLAN blocking is removed [ 286.906924][T12777] batman_adv: batadv0: Removing interface: dummy0 [ 286.915835][T12777] bridge_slave_0: left allmulticast mode [ 286.927380][T12777] bridge_slave_0: left promiscuous mode [ 286.941379][T12777] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.953459][T12777] bridge_slave_1: left allmulticast mode [ 286.960460][T12777] bridge_slave_1: left promiscuous mode [ 286.966502][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.989186][T12777] bond0: (slave bond_slave_0): Releasing backup interface [ 287.005321][T12777] bond0: (slave bond_slave_1): Releasing backup interface [ 287.018360][T12777] team0: Port device team_slave_0 removed [ 287.026295][T12777] team0: Port device team_slave_1 removed [ 287.032549][T12777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.041119][T12777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.048999][T12777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.106252][ T5644] »»»»»» speed is unknown, defaulting to 1000 [ 287.114238][ T10] »»»»»» speed is unknown, defaulting to 1000 [ 287.124569][ T5644] syś2: Port: 1 Link DOWN [ 287.518723][T12821] IPVS: set_ctl: invalid protocol: 255 172.20.20.55:20002 [ 287.946175][T12842] __nla_validate_parse: 10 callbacks suppressed [ 287.946194][T12842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1874'. [ 288.100876][T12847] bond3: Removing last arp target with arp_interval on [ 288.585518][T12883] bond5 (unregistering): Released all slaves [ 288.604946][T12892] netlink: 'syz.0.1886': attribute type 3 has an invalid length. [ 288.741846][T12883] bond5 (unregistering): Released all slaves [ 288.829687][T12892] netlink: 'syz.0.1886': attribute type 3 has an invalid length. [ 288.845491][T12893] netlink: 'syz.0.1886': attribute type 3 has an invalid length. [ 288.855324][T12893] netlink: 'syz.0.1886': attribute type 3 has an invalid length. [ 288.920551][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 289.004335][T12883] bond5 (unregistering): Released all slaves [ 289.097244][T12908] : entered promiscuous mode [ 289.172871][T12883] bond5 (unregistering): Released all slaves [ 289.245399][T12929] netlink: 'syz.1.1895': attribute type 4 has an invalid length. [ 289.387460][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'. [ 289.463871][T12936] netlink: 182776 bytes leftover after parsing attributes in process `syz.3.1896'. [ 289.657829][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 289.723905][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 289.754322][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 289.966885][T12967] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 290.643160][T12973] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 290.674894][T12973] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 290.704390][T12973] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 290.827566][T13006] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 291.033287][T13019] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 291.122885][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1922'. [ 291.278308][T13036] sctp: [Deprecated]: syz.1.1927 (pid 13036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.278308][T13036] Use struct sctp_sack_info instead [ 291.431731][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 291.478468][T13040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1929'. [ 291.766457][T13064] : renamed from bond0 (while UP) [ 291.832356][T13067] xt_hashlimit: size too large, truncated to 1048576 [ 292.386496][T13093] netlink: 'syz.1.1942': attribute type 64 has an invalid length. [ 292.543587][T13098] bond13: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 292.553511][T13103] team0: entered promiscuous mode [ 292.558750][T13103] team_slave_0: entered promiscuous mode [ 292.564948][T13103] team_slave_1: entered promiscuous mode [ 293.033858][T13125] __nla_validate_parse: 3 callbacks suppressed [ 293.033878][T13125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1951'. [ 293.086819][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1951'. [ 293.110216][T13130] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1953'. [ 293.305952][T13136] netlink: 'syz.2.1954': attribute type 1 has an invalid length. [ 293.519987][T13136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.774963][T13151] syzkaller1: entered promiscuous mode [ 293.794631][T13151] syzkaller1: entered allmulticast mode [ 293.857177][T13162] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 294.093215][T13170] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 294.103099][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 294.126592][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 294.267813][T13169] syzkaller0: entered promiscuous mode [ 294.275530][T13169] syzkaller0: entered allmulticast mode [ 294.465135][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 294.713356][T13204] syz_tun: entered allmulticast mode [ 294.742683][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1977'. [ 294.757125][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1977'. [ 294.813270][T13208] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 294.825449][T13208] bond10 (unregistering): Released all slaves [ 294.858158][T13203] syz_tun: left allmulticast mode [ 295.215370][T13222] syzkaller0: entered promiscuous mode [ 295.234339][T13222] syzkaller0: entered allmulticast mode [ 295.308167][T13236] tipc: Enabled bearer , priority 11 [ 295.544106][T13252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.688981][T13300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.720496][T13303] openvswitch: netlink: IP tunnel dst address not specified [ 297.904601][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 298.384193][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.658631][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2020'. [ 298.760712][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 298.871116][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2022'. [ 298.911501][T13367] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2022'. [ 299.143326][ T30] audit: type=1107 audit(1779344167.937:6): pid=13379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='±' [ 299.209178][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 299.231447][T13388] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2028'. [ 299.421958][T13398] netlink: 'syz.2.2031': attribute type 8 has an invalid length. [ 299.436975][T13397] netlink: 'syz.2.2031': attribute type 8 has an invalid length. [ 299.892280][T13431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2036'. [ 299.919647][T13430] netlink: 'syz.4.2041': attribute type 3 has an invalid length. [ 299.973346][T13430] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2041'. [ 300.172177][T13442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2044'. [ 300.397005][ T5745] IPVS: starting estimator thread 0... [ 300.407174][T13458] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 300.511704][T13459] IPVS: using max 28 ests per chain, 67200 per kthread [ 301.018315][T13496] netlink: 'syz.0.2061': attribute type 3 has an invalid length. [ 301.050400][T13496] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2061'. [ 301.202422][T13509] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 301.322280][T13516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.753207][T13538] netlink: 'syz.2.2074': attribute type 32 has an invalid length. [ 301.879506][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.224576][T13557] bond5: entered allmulticast mode [ 302.240562][T13557] vcan1: entered allmulticast mode [ 302.260855][T13557] pimreg: left allmulticast mode [ 302.282535][T13560] can: request_module (can-proto-0) failed. [ 302.338745][T13556] bond5: left allmulticast mode [ 302.352008][T13556] vcan1: left allmulticast mode [ 302.414119][T13569] netlink: 'syz.2.2086': attribute type 8 has an invalid length. [ 302.907072][T13604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.093665][T13609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.255094][T13628] syzkaller0: entered promiscuous mode [ 303.261571][T13628] syzkaller0: entered allmulticast mode [ 303.422759][T13642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.473053][ T384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.512987][ T384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.904035][T13668] __nla_validate_parse: 31 callbacks suppressed [ 303.904056][T13668] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2114'. [ 303.942222][T13670] sock: sock_set_timeout: `syz.1.2115' (pid 13670) tries to set negative timeout [ 304.422328][T13704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.432851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.473267][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.514752][T13708] bridge10: entered promiscuous mode [ 304.533794][T13708] bridge10: entered allmulticast mode [ 304.613603][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.746075][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 304.951230][T13729] netlink: 'syz.2.2133': attribute type 8 has an invalid length. [ 305.110389][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 305.159164][T13741] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2137'. [ 305.168468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.177153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.226314][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2137'. [ 305.274149][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2137'. [ 305.501737][T13765] gre2: entered promiscuous mode [ 305.519835][T13765] gre2: entered allmulticast mode [ 305.646389][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.685552][T13777] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 305.760119][T13777] 8021q: adding VLAN 0 to HW filter on device bond11 [ 305.774753][T13783] macvlan2: entered promiscuous mode [ 305.780357][T13783] macvlan2: entered allmulticast mode [ 305.786845][T13783] bond11: entered promiscuous mode [ 305.793707][T13783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 305.809215][T13783] bond11: left promiscuous mode [ 305.928780][T13790] netlink: 'syz.2.2148': attribute type 3 has an invalid length. [ 305.948614][T13789] netlink: 'syz.2.2148': attribute type 3 has an invalid length. [ 306.369842][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.585466][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 306.648713][T13820] tipc: Enabled bearer , priority 24 [ 306.699010][T13826] netlink: 'syz.3.2156': attribute type 4 has an invalid length. [ 306.719980][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.942520][T13831] netlink: 'syz.3.2158': attribute type 11 has an invalid length. [ 306.968901][T13835] veth1_macvtap: entered allmulticast mode [ 306.975096][T13831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2158'. [ 306.997290][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'. [ 307.115847][ T30] audit: type=1107 audit(1779344175.907:7): pid=13834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 307.213921][T13847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.798278][T13865] syzkaller0: entered promiscuous mode [ 307.814562][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.826530][T13865] syzkaller0: entered allmulticast mode [ 308.106982][T13873] macvtap0: entered promiscuous mode [ 308.124325][T13873] bond0: entered promiscuous mode [ 308.135998][T13873] bond_slave_0: entered promiscuous mode [ 308.149710][T13873] bond_slave_1: entered promiscuous mode [ 308.174064][T13873] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 308.189019][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'. [ 308.207732][T13873] bond0: left promiscuous mode [ 308.270445][ T10] bond_slave_0: left promiscuous mode [ 308.277363][ T10] bond_slave_1: left promiscuous mode [ 308.639558][T13901] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 308.714183][T13901] veth0_to_bridge: entered promiscuous mode [ 308.792226][T13906] sock: sock_set_timeout: `syz.3.2180' (pid 13906) tries to set negative timeout [ 308.858121][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.960774][T13899] veth0_to_bridge: left promiscuous mode [ 309.123861][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 309.378914][T13918] syzkaller1: entered promiscuous mode [ 309.411101][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.415028][T13918] syzkaller1: entered allmulticast mode [ 309.715008][T13920] syzkaller0: entered promiscuous mode [ 309.729498][T13920] syzkaller0: entered allmulticast mode [ 309.891291][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.922885][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 310.045894][T13932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.071426][T13932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.927336][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.709777][T13946] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 311.917636][T13964] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 311.948041][T13972] netlink: 'syz.1.2194': attribute type 8 has an invalid length. [ 311.974880][T13968] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 311.996678][T13972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2194'. [ 312.002528][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.017579][T13977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 312.053939][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 312.337163][T13987] netlink: 'syz.0.2197': attribute type 5 has an invalid length. [ 312.374950][T13987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2197'. [ 312.439645][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.524032][T14006] netlink: 808 bytes leftover after parsing attributes in process `syz.0.2202'. [ 312.645812][T14009] netlink: 'syz.1.2201': attribute type 1 has an invalid length. [ 312.668125][T14009] netlink: 'syz.1.2201': attribute type 1 has an invalid length. [ 312.697535][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2201'. [ 312.896284][T14025] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2207'. [ 313.083675][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.040758][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.123621][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.163522][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.380681][T13992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.431938][T14021] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 315.450045][T14021] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 315.479869][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.854717][T14047] netem: change failed [ 315.869006][T14049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2208'. [ 316.209052][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.247933][T14094] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2222'. [ 317.247949][T14095] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2222'. [ 317.275876][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.522208][T14105] syzkaller0: entered promiscuous mode [ 317.541409][T14105] syzkaller0: entered allmulticast mode [ 318.055257][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 318.066519][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 318.078568][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 318.230883][T14121] veth0_to_hsr: mtu less than device minimum [ 318.284323][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.521230][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.652619][T14035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.663280][T14041] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 318.671314][T14041] netlink: 760 bytes leftover after parsing attributes in process `syz.0.2213'. [ 318.693310][T14041] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2213'. [ 318.933861][T14123] gtp1: entered promiscuous mode [ 318.958592][T14123] gtp1: entered allmulticast mode [ 319.025493][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.074630][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.091174][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.099808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.108196][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.117322][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.219497][T14132] vlan4: entered promiscuous mode [ 319.255833][T14132] bridge0: entered promiscuous mode [ 319.382630][T14156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2238'. [ 319.504025][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2239'. [ 319.724041][T14169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 320.313612][T14206] bridge0: port 1(syz_tun) entered disabled state [ 320.332888][T14206] syz_tun (unregistering): left allmulticast mode [ 320.340334][T14206] syz_tun (unregistering): left promiscuous mode [ 320.346945][T14206] bridge0: port 1(syz_tun) entered disabled state [ 320.875108][T14232] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 320.961744][T14232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.013811][T14234] vlan5: entered allmulticast mode [ 321.026927][T14234] bond5: entered allmulticast mode [ 321.085843][T14232] bond5: (slave geneve4): making interface the new active one [ 321.100516][T14232] geneve4: entered allmulticast mode [ 321.117807][T14232] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 321.202945][T14236] netlink: 'syz.0.2260': attribute type 2 has an invalid length. [ 321.265961][T14243] netlink: 'syz.0.2260': attribute type 2 has an invalid length. [ 321.436297][T14256] __nla_validate_parse: 3 callbacks suppressed [ 321.436319][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'. [ 321.459874][T14256] netlink: 'syz.1.2265': attribute type 6 has an invalid length. [ 321.484154][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 321.524367][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'. [ 321.566848][T14256] netlink: 'syz.1.2265': attribute type 6 has an invalid length. [ 321.587566][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 321.597267][T14262] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2266'. [ 321.854723][T14275] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2270'. [ 321.867677][T14273] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2272'. [ 321.888096][ T30] audit: type=1804 audit(1779344190.677:8): pid=14270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2271" name="/newroot/422/cgroup.controllers" dev="tmpfs" ino=2170 res=1 errno=0 [ 321.953831][ T30] audit: type=1800 audit(1779344190.677:9): pid=14270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2271" name="cgroup.controllers" dev="tmpfs" ino=2170 res=0 errno=0 [ 322.283887][ T1151] net_ratelimit: 263 callbacks suppressed [ 322.283919][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.321218][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.342834][T14300] netlink: 'syz.3.2278': attribute type 2 has an invalid length. [ 322.350955][T14296] sctp: [Deprecated]: syz.2.2277 (pid 14296) Use of int in max_burst socket option deprecated. [ 322.350955][T14296] Use struct sctp_assoc_value instead [ 322.368137][T14300] netlink: 'syz.3.2278': attribute type 2 has an invalid length. [ 322.378032][T14299] netlink: 'syz.3.2278': attribute type 2 has an invalid length. [ 322.389706][T14299] netlink: 'syz.3.2278': attribute type 2 has an invalid length. [ 322.445651][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.479824][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.604768][T14307] tipc: Enabled bearer , priority 24 [ 323.054270][T14329] netlink: 'syz.1.2287': attribute type 11 has an invalid length. [ 323.076923][T14329] netlink: 'syz.1.2287': attribute type 11 has an invalid length. [ 323.086853][T14329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2287'. [ 323.172014][T14336] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2290'. [ 323.200349][T14332] bond11 (unregistering): Released all slaves [ 323.272095][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.307244][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.511204][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.645470][T14352] gtp0: entered allmulticast mode [ 323.675015][T14352] team0: Port device gtp0 added [ 323.753734][T14361] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2299'. [ 323.921051][T14368] veth1_macvtap: entered allmulticast mode [ 324.034283][T14379] validate_nla: 1 callbacks suppressed [ 324.034303][T14379] netlink: 'syz.0.2303': attribute type 24 has an invalid length. [ 324.090561][T14377] veth1_macvtap: left allmulticast mode [ 324.429541][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.462105][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.529062][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.932686][T14424] netlink: 'syz.3.2314': attribute type 30 has an invalid length. [ 326.018855][ T5634] Bluetooth: hci4: link tx timeout [ 326.024812][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.046449][ T5634] Bluetooth: hci4: link tx timeout [ 326.051735][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.059941][ T5634] Bluetooth: hci4: link tx timeout [ 326.066436][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.077517][ T5634] Bluetooth: hci4: link tx timeout [ 326.082862][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.489690][T14511] bond0: (slave bond_slave_0): Releasing backup interface [ 326.551444][T14511] bond0: (slave bond_slave_1): Releasing backup interface [ 326.595211][T14511] team_slave_0: left promiscuous mode [ 326.652702][T14511] team0: Port device team_slave_0 removed [ 326.683981][T14511] team_slave_1: left promiscuous mode [ 326.728037][T14511] team0: Port device team_slave_1 removed [ 326.770226][T14513] team0: Mode changed to "activebackup" [ 327.046424][T14520] syzkaller1: entered promiscuous mode [ 327.068796][T14520] syzkaller1: entered allmulticast mode [ 327.081580][T14539] tap0: tun_chr_ioctl cmd 1074025676 [ 327.089961][T14539] tap0: owner set to 0 [ 327.115302][T14544] __nla_validate_parse: 10 callbacks suppressed [ 327.115322][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2343'. [ 327.305920][T14549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2344'. [ 327.570905][T14562] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 327.589872][T14560] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 327.620559][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 327.636924][T14566] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2349'. [ 327.649140][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 327.657032][ T10] net_ratelimit: 9 callbacks suppressed [ 327.657076][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.677770][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'. [ 327.691282][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.794758][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2350'. [ 327.831263][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.848935][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.987530][T14576] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 328.045241][T14576] 8021q: adding VLAN 0 to HW filter on device bond14 [ 328.076921][T14577] bond14: (slave gretap3): making interface the new active one [ 328.088724][T14577] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 328.119598][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 328.188769][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 328.198314][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 328.214629][T14583] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2354'. [ 328.224109][T14583] veth1_to_bridge: entered allmulticast mode [ 328.259089][T14585] xt_l2tp: invalid flags combination: 0 [ 328.268272][T14586] xt_l2tp: invalid flags combination: 0 [ 328.442625][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 328.469595][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 328.564761][T14589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.767947][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.779872][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.893947][T14616] bridge: RTM_NEWNEIGH with invalid ether address [ 328.937241][T14630] netlink: 'syz.2.2364': attribute type 1 has an invalid length. [ 328.941587][T14633] openvswitch: netlink: Tunnel attr 14 has unexpected len 16 expected 0 [ 328.981725][ T384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.011475][ T384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.063725][T14630] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.803663][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.589630][T14608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.977237][T14680] bridge6: entered promiscuous mode [ 331.993840][T14680] bridge6: entered allmulticast mode [ 332.042759][T14680] team0: Port device bridge6 added [ 332.074986][T14689] xt_l2tp: v2 sid > 0xffff: 1114112 [ 332.090820][T14689] netlink: 'syz.2.2384': attribute type 10 has an invalid length. [ 332.107269][T14680] bridge0: port 1(team0) entered blocking state [ 332.130763][T14680] bridge0: port 1(team0) entered disabled state [ 332.146518][T14680] team0: entered allmulticast mode [ 332.152355][T14680] team_slave_0: entered allmulticast mode [ 332.163229][T14680] team_slave_1: entered allmulticast mode [ 332.189275][T14680] team0: entered promiscuous mode [ 332.202109][T14680] team_slave_0: entered promiscuous mode [ 332.215559][T14680] team_slave_1: entered promiscuous mode [ 332.227249][T14680] bridge0: port 1(team0) entered blocking state [ 332.234963][T14680] bridge0: port 1(team0) entered forwarding state [ 332.239020][T14700] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 332.252706][T14691] __nla_validate_parse: 14 callbacks suppressed [ 332.252726][T14691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2385'. [ 332.268982][T14689] veth1_virt_wifi: entered promiscuous mode [ 332.320676][T14703] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 332.536121][T14719] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2391'. [ 332.598054][T14719] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2391'. [ 332.605597][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.687565][T14723] vcan2: entered promiscuous mode [ 332.698743][T14723] vcan2: entered allmulticast mode [ 333.150826][T14738] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 333.554162][T14744] bond12 (unregistering): Released all slaves [ 333.718612][T14747] bond10: (slave gretap4): making interface the new active one [ 333.728887][T14747] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 333.762465][T14772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'. [ 333.778268][T14750] bond10: (slave bridge11): Enslaving as an active interface with a down link [ 333.825138][T14738] macvlan2: entered promiscuous mode [ 333.836692][T14738] macvlan2: entered allmulticast mode [ 333.844535][T14738] bond10: entered promiscuous mode [ 333.850505][T14738] gretap4: entered promiscuous mode [ 333.856860][T14738] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 333.865916][T14738] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 333.915505][T14738] bond10: left promiscuous mode [ 333.924212][T14738] gretap4: left promiscuous mode [ 333.938914][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 333.952454][T14779] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 333.973286][T14779] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2406'. [ 334.397064][T14799] syzkaller0: entered promiscuous mode [ 334.406032][T14799] syzkaller0: entered allmulticast mode [ 334.676572][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'. [ 334.689893][T14820] netlink: 'syz.0.2417': attribute type 1 has an invalid length. [ 334.891397][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 334.938784][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'. [ 335.078328][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 335.107842][T14845] ip6tnl2: entered allmulticast mode [ 335.248175][T14856] xt_hashlimit: size too large, truncated to 1048576 [ 335.347187][T14862] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 335.383007][T14862] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 335.430242][T14862] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 335.452348][T14862] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 335.555159][T14867] bond15: entered promiscuous mode [ 335.581296][T14867] bond15: entered allmulticast mode [ 335.597124][T14867] 8021q: adding VLAN 0 to HW filter on device bond15 [ 335.906793][T14888] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 336.085533][T14897] af_packet: tpacket_rcv: packet too big, clamped from 596 to 4294967272. macoff=96 [ 336.464883][T14909] bond16: entered allmulticast mode [ 336.534028][T14911] veth9: entered allmulticast mode [ 336.545035][T14911] bond16: (slave veth9): Enslaving as an active interface with an up link [ 336.586143][T14919] bond16 (unregistering): (slave veth9): Releasing backup interface [ 336.616627][T14919] bond16 (unregistering): Released all slaves [ 337.161340][T14957] net_ratelimit: 10 callbacks suppressed [ 337.161361][T14957] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 337.260161][T14961] __nla_validate_parse: 10 callbacks suppressed [ 337.260356][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 337.317571][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 337.327213][T14961] netlink: 'syz.3.2457': attribute type 3 has an invalid length. [ 337.548706][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2461'. [ 338.054868][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 338.298055][T15028] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 338.598141][T15040] netlink: 'syz.0.2477': attribute type 1 has an invalid length. [ 338.687360][T15040] 8021q: adding VLAN 0 to HW filter on device bond11 [ 338.818658][T15048] bond11: (slave gretap2): making interface the new active one [ 338.883014][T15048] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 339.325164][T15076] netem: change failed [ 339.634087][T15093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2487'. [ 339.838024][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'. [ 339.902954][T15103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2490'. [ 339.942478][T15103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2490'. [ 340.014223][T15103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2490'. [ 340.055211][T15115] netlink: 'syz.3.2492': attribute type 4 has an invalid length. [ 340.251725][T15126] syzkaller1: entered promiscuous mode [ 340.270161][T15126] syzkaller1: entered allmulticast mode [ 340.353665][T15134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2498'. [ 340.603822][T15151] tipc: Disabling bearer [ 340.699536][T15151] veth1_macvtap: renamed from vlan0 [ 340.897495][T15158] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 340.932604][T15158] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 341.660478][T15199] netlink: 'syz.4.2513': attribute type 2 has an invalid length. [ 341.699244][T15199] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 341.865769][T15211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.914239][T15214] ip6t_rpfilter: unknown options [ 341.947890][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.442110][T15250] __nla_validate_parse: 3 callbacks suppressed [ 342.442130][T15250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'. [ 342.526015][T15250] netlink: 'syz.0.2525': attribute type 3 has an invalid length. [ 342.937693][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 342.978359][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'. [ 343.674738][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'. [ 344.056372][T15338] tipc: Resetting bearer [ 344.304147][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2546'. [ 344.319459][T15338] vet: renamed from veth0_vlan [ 344.334566][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'. [ 344.427861][T15355] veth0: entered promiscuous mode [ 344.708920][T15370] vlan4: entered allmulticast mode [ 344.722806][T15370] bond0: entered allmulticast mode [ 344.738572][T15347] veth0: left promiscuous mode [ 344.938062][T15388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2556'. [ 345.090117][T15394] netlink: 'syz.3.2557': attribute type 39 has an invalid length. [ 345.110365][T15395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2558'. [ 345.330878][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2561'. [ 345.377771][T15410] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 345.378215][T15401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.202264][T15461] openvswitch: netlink: Flow actions attr not present in new flow. [ 346.286081][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2573'. [ 346.321427][T15464] netlink: 'syz.3.2573': attribute type 7 has an invalid length. [ 346.531090][ T5289] vet: left promiscuous mode [ 346.555434][ T5289] vet: entered promiscuous mode [ 346.578052][T15476] netlink: 'syz.2.2577': attribute type 2 has an invalid length. [ 346.738462][T15490] bridge3: entered allmulticast mode [ 346.777969][T15491] pimreg: entered allmulticast mode [ 346.825978][T15492] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 346.837944][T15492] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 346.846415][T15492] CPU: 0 UID: 0 PID: 15492 Comm: syz.3.2580 Not tainted syzkaller #0 PREEMPT(full) [ 346.854373][T15491] bridge3: left allmulticast mode [ 346.855823][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.855839][T15492] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 346.855869][T15492] Code: 53 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 d7 52 be f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ba 52 be f8 4d 8b 1f 4c 89 f7 89 [ 346.855886][T15492] RSP: 0018:ffffc90005a5f0a8 EFLAGS: 00010202 [ 346.855918][T15492] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888036c65c40 [ 346.855932][T15492] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888059d83640 [ 346.855945][T15492] RBP: 0000000000000002 R08: ffff888037059eeb R09: 1ffff11006e0b3dd [ 346.926563][T15492] R10: dffffc0000000000 R11: ffffed1006e0b3de R12: dffffc0000000000 [ 346.934558][T15492] R13: dffffc0000000000 R14: ffff888059d83640 R15: 0000000000000068 [ 346.942549][T15492] FS: 00007fa2098ba6c0(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 346.951519][T15492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.958120][T15492] CR2: 00007fb82968bfa8 CR3: 0000000036e2a000 CR4: 00000000003526f0 [ 346.966110][T15492] Call Trace: [ 346.969417][T15492] [ 346.972370][T15492] udp_tunnel_sock_release+0x6f/0x80 [ 346.977779][T15492] rxe_net_del+0x121/0x2e0 [ 346.982214][T15492] rxe_dellink+0x15/0x20 [ 346.986467][T15492] nldev_dellink+0x304/0x3d0 [ 346.991080][T15492] ? __pfx_nldev_dellink+0x10/0x10 [ 346.996244][T15492] ? apparmor_capable+0x126/0x170 [ 347.001291][T15492] ? bpf_lsm_capable+0x9/0x20 [ 347.005995][T15492] ? security_capable+0x7e/0x2c0 [ 347.010954][T15492] ? __pfx_nldev_dellink+0x10/0x10 [ 347.016075][T15492] rdma_nl_rcv+0x6d1/0xa10 [ 347.020506][T15492] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 347.025462][T15492] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.030683][T15492] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.035923][T15492] netlink_unicast+0x75c/0x8e0 [ 347.040744][T15492] netlink_sendmsg+0x813/0xb40 [ 347.045559][T15492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.050872][T15492] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.055832][T15492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.061136][T15492] ____sys_sendmsg+0x972/0x9f0 [ 347.065927][T15492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.071237][T15492] ? import_iovec+0x73/0xa0 [ 347.075753][T15492] ___sys_sendmsg+0x2a5/0x360 [ 347.080457][T15492] ? __lock_acquire+0x6b5/0x2cf0 [ 347.085430][T15492] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.090666][T15492] ? futex_wait+0x2a2/0x390 [ 347.095199][T15492] ? __fget_files+0x2a/0x420 [ 347.099809][T15492] ? __fget_files+0x3a0/0x420 [ 347.104498][T15492] __x64_sys_sendmsg+0x1bd/0x2a0 [ 347.109459][T15492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.114953][T15492] ? rcu_is_watching+0x15/0xb0 [ 347.119738][T15492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.125824][T15492] do_syscall_64+0x15f/0xf80 [ 347.130434][T15492] ? trace_irq_disable+0x3b/0x140 [ 347.135491][T15492] ? clear_bhb_loop+0x40/0x90 [ 347.140212][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.146124][T15492] RIP: 0033:0x7fa20899ce59 [ 347.150573][T15492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.170197][T15492] RSP: 002b:00007fa2098ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.178626][T15492] RAX: ffffffffffffffda RBX: 00007fa208c16180 RCX: 00007fa20899ce59 [ 347.186647][T15492] RDX: 0000000002008800 RSI: 0000200000000600 RDI: 0000000000000006 [ 347.194674][T15492] RBP: 00007fa208a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 347.202661][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.210640][T15492] R13: 00007fa208c16218 R14: 00007fa208c16180 R15: 00007ffd3462ed28 [ 347.218632][T15492] [ 347.221655][T15492] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 347.227075][T15492] ---[ end trace 0000000000000000 ]--- [ 347.241779][T15491] pimreg: left allmulticast mode [ 347.322545][T15492] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 347.335116][T15492] Code: 53 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 d7 52 be f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ba 52 be f8 4d 8b 1f 4c 89 f7 89 [ 347.338993][T15481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.387094][T15492] RSP: 0018:ffffc90005a5f0a8 EFLAGS: 00010202 [ 347.419427][T15492] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888036c65c40 [ 347.433510][T15487] smc: removing ib device syz0 [ 347.457179][T15492] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888059d83640 [ 347.470253][T15492] RBP: 0000000000000002 R08: ffff888037059eeb R09: 1ffff11006e0b3dd [ 347.510596][T15492] R10: dffffc0000000000 R11: ffffed1006e0b3de R12: dffffc0000000000 [ 347.539035][T15492] R13: dffffc0000000000 R14: ffff888059d83640 R15: 0000000000000068 [ 347.580385][T15492] FS: 00007fa2098ba6c0(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 347.626592][T15487] smbdirect: ib_dev[syz0] removed [ 347.642482][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.669463][T15492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.719245][T15492] CR2: 0000000000000000 CR3: 0000000036e2a000 CR4: 00000000003526f0 [ 347.759357][T15492] Kernel panic - not syncing: Fatal exception [ 347.766100][T15492] Kernel Offset: disabled [ 347.770459][T15492] Rebooting in 86400 seconds..