last executing test programs: 5.711589686s ago: executing program 4 (id=4332): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc) (async, rerun: 64) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000140)=""/114, &(0x7f00000001c0)=0x72) (rerun: 64) 5.263233635s ago: executing program 4 (id=4336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x1d, 0x2, 0x6) accept$inet(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_pauseparam={0x13, 0xf1d, 0x8, 0x1}}) getsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000), &(0x7f0000000080)=0x4) 5.262616748s ago: executing program 0 (id=4337): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) r2 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8881}, 0x4c040) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r4, 0x205, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x16a4dc7d, 0x2c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c1) 5.244081289s ago: executing program 1 (id=4338): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x30, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x1c) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x7, 0x0, 0x3, 0x70, "c0ed9c", 0x6, [0x744, 0x9ec9, 0x2, 0x2, 0x8]}}) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0xa27, 0xf, {{0x2e, 0x4, 0x3, 0x17, 0xb8, 0x67, 0x0, 0x26, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x1, 0x11, "952eb567bb45286d9e0a7f29f2dc6a"}, {0x2, 0x10, "d0c7a55fa19c2a0e03681a26a3ff"}]}, @generic={0x83, 0x8, "3ad9dcb4827e"}, @timestamp={0x44, 0x18, 0x27, 0x0, 0x7, [0x213, 0x9, 0x7fffffff, 0x1bb3, 0x2]}, @end, @timestamp_prespec={0x44, 0x2c, 0xff, 0x3, 0x0, [{@local, 0x6}, {@multicast2, 0x1000}, {@broadcast, 0x81}, {@multicast2, 0xb}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}]}, @timestamp={0x44, 0x1c, 0xbc, 0x0, 0x9, [0x7, 0x0, 0x8, 0x0, 0x757, 0x8]}, @ssrr={0x89, 0x13, 0x4a, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010101]}]}}}}}) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x803, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TARGET={0x8, 0x1, 0xfffffe00}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1e, 0x81}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x60}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000100)=r10, 0x8) setsockopt$sock_attach_bpf(r9, 0x1, 0x25, &(0x7f0000000100)=r8, 0x4) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x2, r4, 0x1f, r5}, 0x10) 4.963868275s ago: executing program 4 (id=4340): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) (async) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0083a60000000000000000070000001c"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0083a60000000000000000070000001c"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.953446378s ago: executing program 0 (id=4341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000ae000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4.787646551s ago: executing program 1 (id=4343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000680)="fc51f294d6164436859406318bdcb6bc0deff65a3b8c9fab47d1b15ea6cb8915dc95241ca330f649d995a7cbf8f8807a89ed8397f1e0cfdc98b7dd788f15f1e45ddca69696f7cc94090827b018709ebbddf16ad4cb30a775a17de44d0308f60de5e6832f3565be29055024a6acdff7a97567b6bc5f9dc670c37d54c5e68c6adcdeb7db230d9ffdcf7397e20d38c8d57533bfca7c69211fad3b3f9e167a115da7673813ae64800cccdaad5299c452e10d2f864e774e183719df2e8912e98c80913f05384a22feeb3e1cc8af9bf6f656bba06fe8da9f5bdc4b70254797d162fe2370414b8cd20e5af5540ee846f05fce43a0b053f7c733eff43b966589723180cc6ef1e3c20ecb36d689707e70a66620dccd816156d51352ea867d375ff5bbe59f6c856a487fcfef92230a38cdd6de5d765e278fc918d1d2f23ba73a0624cd1067c93fec3c11175176e46a372e3e9be02b11380c5e0997aa221e2e59debb6049e8f66349fa8271a247d2df8d3f2e77c612412e84ec62a40a6a3c94474dbadcb73224fe73d458f8cb28456b17eb15df0a0c040701edf3394c6eedce2263fb6c34b022b2a45e050739a53073f44c32872b45a7104116b32ffec398d4704b0cb294ae671a5f735189dd80f290de7701835138118aeba5e0c5b79c24f68e595a68649ff2b0b0e18d45984be103cf1e1fce95be5c2d279f8ee4ffa27e15e37147d43d665c867daa3268dc89addf0978a6807f12bfbd9b4c20467e14aa0aa03664ed47df7eadc2f0d124f02527061811d21bf7cf99c16d26e87e435260a94eb94403aac898c03eb95330bce859c7400acbd6c675cc5244881cc4300cfb86436d5b4cb3dd7c03cce2754dcd2fb62460e4bb711d56d7edbe8587211ce918843d340ab88da2a7664b281c58eee3ffe35f3f463b574020a89664b427d464e022e4a60107c468e9ab9e97e5c0cd5576157e3bd3992711a28d866f8fad7ddb2314c0f7542894112b2a3f777c72590314bc7a1d2a035c0a151ed6bf1117f9a1fe4655c4036c6030efecadf845dd952b330703c62130de985ebc2d1903adf2d38a7f194a2f7d76fcf770dc8b1f9bb0da50d0aea7c329e26decabfdcbc36a82bcb837f2f2042611bf18f807bd4a0c859adc59a5972cbba8e84e6688614cae6f614a6f9eea73d13e6811e44d3f344373986049ef3e1912464a79ecb706ed4325f87fbe51b23b4ba23567b0155354529bba7c79f7e9d47c28815ede5aa2f6c83753acee84559fa11189dc42353d5476b43ff450511413682fecca372f64faef4b298b39e9840c56a3207f0ce5a77c069db8ce17512241e132d6a0f509a72e8fe2eb84d0f33a9c1c821e75eb8708e132f450bab154ef6f1a3bd640b016a21c86dc95985b0a35f9e136800988f22eb7dc403e0d15316ba40d786538f1daa132924c83fa566aff3355e0014a021b33213d5323477fcb4cd15bc21d0c388690bb1d5f48aec11bbb5958d74a874c1f4f55a1eb744d96aef376565f2249039ee88202a8aa906bb2ffff915a9a99ff4815a7e4f951641a8dbeb908909b953883dc2334e6f2ad43ba37135679a3d0f696ea6ecaccd3d78837f733ba5e62f202fc369ad26746c41cb05cd71c5ba62e21cf2cc7e7ed5f5ac5ff56709770aa4b49681ebc98c814e8430a9617bd31c8ac08f18395b7d8a4f1cc44b55ad3cc6f73c495016cac12983f1285ad6ff5beafda6dd87ff5fbbf9910e4b4aeabb9725a0b33700e2afd1c0dd4f8e55fa7fdbde23c8cd933fb0a6adc78f79a5070502256299feda7568c412061f1bc327269756110d689bf61ffe8c29879913e995b67828ed172aae19f18763807772074666cee474cb002021421730528de46bfb562ec685d0b30664e42eabba25bb25fd7864f0ff6fce3c6182edcb19432d32fde29b957c7184cc39ab784d17e64bc3b2f04870b71c4a377d40f36c25ceb7e60f6c3664ecec25955f186850ac97b3c1e457a775bfac047421f6c449f6ab4dd177f04aa0db7831bdb364838cef8af7228afff828e98899d623030295dd88123a85e07abb4640fdec6baaf5763427f7f00fd0833208817e95408678e1237fc592997761d8d3410ce472c4f6c87943a544fbc434f9c4171c585de3d115e260df8c7d7e9871a6cf0d3224634f616627ca7a71371a2630e4769adf3451038b314fe14a53f1657197db74e43ea6c938cb32d5a1b79dd6e16da53ddd6efd3278cf7e63baf3dac9e5eeecc89dfa9b9ce0f5dd827f5356b755b8cc30da78d4fffed0e00bfd83cbf40e9972e75129b28321b93652910e074bc72fa3a8916bdfe039dca3517fe4c11c092017fc1d61dbdf8de1744d637404ab26d1d17fa4165d31cb9bdf1927d68c37af9e3424aebc9fdaf5269b46e721a9ea955cd2affd488ac525bb6697bb84b94ba1274acd24822dd6d170f947a2201d7a24b4f7ea8938d87e09a3ab23a5f5ffb361dbfb1bcbb4f2babc294d375853ea53e5d61d7b5358ca93187ebabebc0678e9805602d5d4df3255468bc24b5f99f96900bef868bfbea25c25a17d67a7383e466f810b416bf8b8422bd6083f3d35419832f9973b30eddfb51473b5ee7cd768511de250551f9e3c4cc0deb9ee4f89279397791e9d7f4bc22b1685fce284a4c5f0b6202e24f4ec8ef41bc208169353a4c95c9a9f92d5dd533a1c35a2cc090936f462f1ddcd9a28cf6067abd3f9c84ec945d70940494e24922e6d624d6f93924a9a8be9d84663d2b2176776b1dc919cc77ba77dda95b78c77b91e2269992982c7265c2a190c4b759592ab618f2987f4056067fb6ec81e17fe43a58966f8a3d884fa565a4a56f2f1898515bd658f8b4d6baf5f66502d129ffee955f9fac537a2f4b5dc2783c0efe6d5ba1e1fa135bea42f62622a3c25d8e7751fed58c6582bda553fb9feab6413b534e6841da18d382a6a46d7ee264bd7d4e9ebc1f178a1b6af0e24d94fde0a0037a658f8c9b8b1b2a1c13c682a4aae48e0a41ebd905b375cd7fade6294bb42f0bead2842d0f07e299ecaf6d52cbb0d6945e00a256ba3426a94b91661381f73d18ca68c054f1b4483a6d01852083fbb2c976b482fd61f8efd9318bf34b3d1ee43e9c173244ae4ccb2fa599043581ab2bf48d2b0e85782af505d80d6151a553bbf6a0f99624474fa9720ce9e560fc2aa682b55df6f4ec30f0e59000e908fe77c39e9e77c2519c6da7cb883bbdc37d9fe7d50334510f4d69d6607851b4d839afed9b26af41ff130e1f6e18d8a02aec781196aac0b7574a75cca67ffd099bce760b806ce5680d6a06878494479e4a1e9349cfc233e9a2f41478337dddc12c2f9e200ca8fa6150f28d0f59102f40af6bb3162cacacec7a37874b83b8b51927b001f8d7b45faaa7fdbbac156410b9d6b0d6af1a31ac2d9c04897a667e52a87e07e170621981be03daae077bc2cfc0008635061a131caffbb3d882bebf7ee0aa26d5f4958e42c16e9c46f182536a0385341412a0604e809112d796188eb0fb0718d1f9f3e3cee72e06e25f2f526ed60a4bd3b0902a42bdf15008e03ce15319023cd6cd3378bcd7b43388b4dd7aee717e0c935a0dc1854ee72796a6cb7431f95b47e3dd13f67aabbc2c1682a3d832c891829428b516b8916898a6a64be07d9b42bab12f6af0d577cf49e3f50dfd857cbf8750578b64a63dff7df54410d43aac43f08dc26167148ebffbedc94eed73d3262e01c81ffb3e5a00fd46073fa56df1b8eb7ab183874e8de68e92728e79dfd7bdea0e907028b234360d807851685fb0a38cf211026899ee07b4d70c210aebd08ae2c45fbe00d6a0d58df519f85e1063bee12638807fa3a84b86ce039fd2860184550a63ffd7791bc7211213702f39944e396420fc73e57b8f99f57182c8fc03c7b7ee6658f38625a2622d8babc0b981580288ec7bf9ea96afa598424d3e67739dfdeea043e7fbb939ad2362e5696d39ae9cf0d1f725f3c9fc34f3c54c6579677b0672d76a3f04ff24e7211b5bb03a836ee43d8ac9afacdcd9b84219b335c5de986d6133e5c7e7ca63003ac8850ee68d7b374beff60327f7da6c25c0cd4b91fd29e3d862c595b823db29d14d41a0a14c0cd61c9cefce3c3d6d0f1cb520174698de31fc115c443ea5d85b5b38f18c827aa633f58efc5591c09f3d95040d9907aace37d5c1d436513be31c2c0a89fecc17002902d007b9612793629d4f29279ebfcf71f753e52c6b1ee0d2d251bb55ebadb2864de2175e82211882ce277881e9104424e97e51a9a0818019135befd5707a0aa9275080d9b18aff506aa84d7a81b9088d08a20098a9e54988285702cc1e129a72f2842f85a969557f9ea5b54f6cf26ec3af913245a585dcd4ca0c54fd60807f4c0066bb392632050647516ec98745cf4195ceb40b6c9e2de1987efb064fc81a6e3a94aca19f9bfeecb41843747f649a0e9258b07b510f1f7013f035fe44ed440dc0eb5940417550f2ac7526736833cea1fed1b2a760a4d514b568969eb388538f60670132bb0eefbc50693677094202f68a81f3a292903d9481a5d847454a9b5cf93628e8c41136d0e67bf8fcd1f24602f122cb46136224d96adcf4971956ab49237bdb33ba52ad724461cb9b2da897c116bd0aca93b82e99fb208fd7318d9c3636ece7ea97a83657253566daa6fb5dcf08e65156798718f46962065ddd3f9a2ec68922a340f46c188bc72988cea367a4d5f25ca8a0708b67930fd4efe3ba2cd3e3ab0417c1351ed2454dd4500028386eb2585a425ec9953391f212274be048572e11c89fa11c43c524e6bd6279ecc6090f7e7ca85ad948214e9a81b0ad2e018be0897da4454e4313365f55af65bff4b7e52a2a5d3f655d720e072661f7d7170c2bc8815f83395d172d689d5c7c4bf5b4c3452fe9fc1e0e2a85d6771c0584794de581851b9a6dfd62554ef06a456f2d73bebfcce10ca03b081e271b9a49dec9629ee0f107838171408f8bf43a2ff787a85b80bf1ad993ae09ab36ee4e15d4db8d5012139c8a32f6c39e08b99682ffc472f80a2239257ac56262ae3332f2a7245f9f109fb37e0ceab544938aa41dacb09182acb68dc220c73f6a471d1535802ab586ed51dec9b9f35a8e0b90beff28df16523455a598414e322d342244ca0bd15fbf32310bcc5d19ffdbde6d93e1536d51f92ea97185eba46c1d26b3dc74145eb98d3e032512b059e6c604e9eea31cf2b01c12ce232922230d1f8a5cb62fe50cf41da0645190456ca4c37cd1ada6c618addbe0d3eefdb01bf596286eec2497ba2f4970e7ce84fa0bc342c84bf7819f930ba596fdd72abadd10538b4d3558897cee5e18ff0d575c92e77d449b84cd177fc834508851ac599527a92529a7c38287e80f5db27a28c94ffe72e2adf79018ca660f43b5a52dc8c777687750ffe11d5bbda920f3e74a5c4babde5bab052438a916826a56b215a2e65591392aa4fbc8f6d40c5ddf70e06f930ca136e24abecd41407391b8e497f853ee7a1ee3c14b9c5f1602391fed4ece997467930fc93f27dada451189aa93e4528362e23c4bd27c8234da1cd2ea66f2042f3447af817fdcb834abe9e7a4969e17ecf59bf3cda8d0f0d65c21298f5848f4685bf3da5dde6754be4c77e2c21a2678fd97d5a41c8def1d47bea37f750a41763fdc548be8d9eba0c9aec61841a8cd1c5a5dc479f926822a7395233a42266dcd136fa93ab2f54c41621989763f73b4cea0efa3a5925be524ab90b5b00b8b0a71c38f4681a6f3b8374a2e3f46af9937f3d5d5eafeb27b0a65b0e7945f4f122a2b1cc559e1956f", 0x1000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 4.631102194s ago: executing program 0 (id=4345): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xca, &(0x7f00000000c0)=""/202, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.580019102s ago: executing program 2 (id=4346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffff9, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 4.579775753s ago: executing program 4 (id=4347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f00000000c0), &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x20e6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 4.451642021s ago: executing program 1 (id=4348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000d1000000b700000000000000950000000fffffffb7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4.378941956s ago: executing program 0 (id=4349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="b511a51def573c5dac3afddeee46e9da7ca9f61dd27a6006574d478408f6ed06cac396dec12b5b0b34224f863904ac74bda7905448b7e8b6038ff08fbc1c7d3715b28de7201ef26bc655379c15f84ad741538e3bff32e281e007640bcf10b521efb695d1d92e653ab4dad759cfd36f0c02783f393c431bc33096f814b2eeab", @ANYRESDEC], 0xf0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4.299905862s ago: executing program 2 (id=4350): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x1000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0xc084}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002780)={&(0x7f00000000c0), 0xc, &(0x7f0000002740)={&(0x7f0000000500)={0x10b0, 0x3f, 0x100, 0x70bd25, 0x25dfdbfd, {0x3}, [@typed={0x14, 0x139, 0x0, 0x0, @ipv6=@local}, @generic="8b053126e34afef72ca6d851e7a8f36e11f68149427bd3f8f8c6730eb6f5f75e4a37db69f1fd31e46ec49db9200e5a5550fd644c14d09d3c601132e4cdcc8491e57f292fbf61071a86fb72c88c59ecace6f7ffbebd5f3cc47c53700821b192ce2ebac5fafe18b74bf6acacf8b350634aaf1ffb647b04bb9651", @typed={0x1004, 0x12, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x88}, @typed={0x4, 0x125}]}, 0x10b0}, 0x1, 0x0, 0x0, 0x8045}, 0x4000) 4.082665997s ago: executing program 1 (id=4352): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000262584cd5a78394ac49db0cb86b7000000000000000004000004"], 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r2, 0x2}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x6a, 0xfffff034}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r4, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x40, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d13f"}}}}}}}, 0x52) (async, rerun: 64) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) (rerun: 64) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500810300000000000000000c000000"], 0x14}}, 0x0) 3.9688294s ago: executing program 2 (id=4353): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="90", 0x1}, {&(0x7f0000000180)="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", 0xfd}], 0x2}, 0x24004011) 3.962762135s ago: executing program 0 (id=4354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000400), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="000126bd7000fedbdf25160000000c00990000800000260000000a001a0008021100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000100000a00060008021100000000000a001a000802110000000000"], 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x24, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4009}, 0xe) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c00028005801400018008000100ac141faa08000200ac1414000c0002800500010000000000080007400000000010001700"/119], 0x84}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 3.7958439s ago: executing program 4 (id=4355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff1, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffff7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x5}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3e}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x200c4010) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d080006400000008c080004400000001705000200940000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 3.722766621s ago: executing program 3 (id=4356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b4000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.712713114s ago: executing program 2 (id=4357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x3, 0xdd57, 0x0, 0x64090, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x1a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff070000000000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000fd00008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018550000070000000000000000000000186800000500000000000000bd0000008520000002000000850000003c000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 3.475165258s ago: executing program 3 (id=4358): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f000000b800)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd19}}}, 0x80, &(0x7f0000000100)}}, {{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x2, {0xa, 0x4e22, 0x4, @private2, 0x3}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000001c0)="3ad88b5caf69ce0a43089f8336c001d3b28299e6b46fe8055150192e78bd8a5bf52c1d71f0d4cbfe77679141363d2f9abfdcaf7296d33140ba3572be83035403d4f811364d01f229677c76ba65c2228bf49e73dce29f0eee42b116630602c38399cdfd029495fa225a59f9f40ae60c56ea4146b0e2c0c73c4bd1f1030014143e", 0x80}], 0x1}}], 0x2, 0x4004000) 3.403914935s ago: executing program 1 (id=4359): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000003c0)={{0x8, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x28, 0x3a6, 0x3}, {@private=0xa010300, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff77, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000050) 3.317105258s ago: executing program 2 (id=4360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000ecad48ac2201963fce"], 0x8) close(0x3) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x78bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2f, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) 3.237768679s ago: executing program 0 (id=4361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000640)={@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, {0x0}, 0x0, 0x59}, 0xa0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x9, 0x1}]}, @enum64={0xa, 0x0, 0x0, 0x13, 0x1}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x60, 0x0, 0x0, 0x0, 0x10000}, 0x28) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="0b0029bd7000fcdbdf25250000000a00060008021100000000000a000600ffffffffffff000018006e80040001000400010004000100040002000400020009000700ff80dd62b200000005000800010000000800370001000000091007004f9938893900000015003400de32e3f5f1e4ac9bfac22f1fa8b7a891470000000800350004000000080022018503000008002600f81600000800a100090000000a0006001c0e91258a3500000800a0000800000008002201470000000800a1000800000008009f0005000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40084}, 0x4004) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x10000040) r11 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) write(r11, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmmsg(r9, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}}], 0x2, 0x0) 2.994536992s ago: executing program 4 (id=4362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r2, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0xa348, &(0x7f0000000040)=0x2) 2.943429779s ago: executing program 1 (id=4363): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000001000)=@newqdisc={0x2a0, 0x24, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x7, 0x9}, {0x0, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x10, 0x5, 0x3, 0x1, 0x5, 0x5, 0x3}}, {0xa, 0x2, [0x2, 0xfff7, 0x7]}}, {{0x1c, 0x1, {0x5, 0x5, 0x6, 0xc00, 0x2, 0x0, 0x1ff, 0x1}}, {0x6, 0x2, [0x7c10]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7fffffff}]}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xff, 0x6, 0x9, 0x0, 0x9, 0xffff, 0x6}}, {0x10, 0x2, [0x4, 0x84, 0x0, 0x6, 0x6, 0x2]}}, {{0x1c, 0x1, {0x7, 0xe4, 0x7, 0x3, 0x1, 0x3, 0x7, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x3, 0xde69, 0x9613, 0xfd00]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x843a}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6d, 0x33, 0x45, 0x6dcf, 0x0, 0x3, 0xe615, 0x7}}, {0x12, 0x2, [0x100, 0x8000, 0xfff9, 0x4, 0x1ff, 0x3, 0x90]}}, {{0x1c, 0x1, {0xd, 0xd0, 0x5, 0x7, 0x0, 0xff, 0x8001, 0x6}}, {0x7, 0x2, [0x1, 0x4, 0x8, 0x6, 0x0, 0x8001]}}, {{0x1c, 0x1, {0x0, 0x9, 0x63c0, 0x53c1, 0x3, 0x8000, 0xa69, 0x4}}, {0xc, 0x2, [0x4, 0x1257, 0xfff, 0x3aa]}}, {{0x1c, 0x1, {0x5, 0xa1, 0x3, 0x8, 0x2, 0x6, 0x1, 0x7}}, {0x12, 0x2, [0x8, 0x40, 0xff00, 0x0, 0x8000, 0x7, 0x7fd]}}, {{0x1c, 0x1, {0xf3, 0xf, 0x8, 0x3, 0x1, 0x4, 0x3, 0x6}}, {0x10, 0x2, [0x2e, 0x5a35, 0xbed, 0x2, 0x2, 0xff]}}, {{0x1c, 0x1, {0xb, 0x2, 0x411, 0x7, 0x2, 0x9, 0xfbe0, 0x4}}, {0xc, 0x2, [0x4, 0xc289, 0x8, 0xfff]}}, {{0x1c, 0x1, {0x3c, 0x5, 0x2, 0x1, 0x2, 0x82c9, 0xfffff5e1, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x27, 0x7, 0x7fff, 0x1, 0x2, 0x2, 0xffffd514, 0x4}}, {0xc, 0x2, [0x401, 0x1, 0x32, 0xe0]}}, {{0x1c, 0x1, {0xc, 0x9, 0x9, 0x100, 0x2, 0x0, 0x41, 0xe}}, {0x20, 0x2, [0x200, 0x81, 0x8, 0x10, 0x9, 0x0, 0x4009, 0x6, 0x1, 0x0, 0x6, 0x7, 0x4, 0x3ff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x29, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x10000, 0x1000, 0x3, 0x7}, 0x20) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r9, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7ff, 0xa42, 0x3f}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7ff, 0xa42, 0x3f}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendto$packet(r6, &(0x7f0000000640)="01", 0x1, 0x4004855, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x8, 0x6, @random}, 0x14) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r12) sendmsg$NFC_CMD_ACTIVATE_TARGET(r12, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r13, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x410) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r12, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r13, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x410) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x20000000) r14 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8, {0x0, 0xffffffff, 0x0, 0x0, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffff8}}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x1e}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c40000002700090025bd7000fddbdf2512000000b0000100e470c475ff61c878688eb63b9cb55c294ae58f01cf1314e07c94dadda792f18ce708d650dc01809bde85fd452f7fd20f027e59ba9c27ddb576a3af3b0697981206f16fa4ce66cdd281f2da705a97ec421ad628562df6ce4a5c22e9b657f61b60ff3391315e4dd5362c79615f48edb6498155418c68f7059e2b5d6905901a283427b4adbebcb49da29abdfa17c260e9172b4e158bb9f23a5c88cba14fee80c78fc6e4475cf186e8aea51b47d558094f0100"], 0xc4}}, 0x4000080) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c40000002700090025bd7000fddbdf2512000000b0000100e470c475ff61c878688eb63b9cb55c294ae58f01cf1314e07c94dadda792f18ce708d650dc01809bde85fd452f7fd20f027e59ba9c27ddb576a3af3b0697981206f16fa4ce66cdd281f2da705a97ec421ad628562df6ce4a5c22e9b657f61b60ff3391315e4dd5362c79615f48edb6498155418c68f7059e2b5d6905901a283427b4adbebcb49da29abdfa17c260e9172b4e158bb9f23a5c88cba14fee80c78fc6e4475cf186e8aea51b47d558094f0100"], 0xc4}}, 0x4000080) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2.845549493s ago: executing program 3 (id=4364): accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x10000, 0x7fffffffffffffff, 0x90ac, 0x78, 0x8}], 0x1, 0x28, 0x1, 0x1}) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x10000, 0x7fffffffffffffff, 0x90ac, 0x78, 0x8}], 0x1, 0x28, 0x1, 0x1}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000100)) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={'dvmrp1\x00', 0x870, 0x6}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)={@empty, @broadcast, 0x1, 0x4, [@loopback, @multicast2, @multicast2, @loopback]}, 0x20) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000340)={{r2}, {@void, @max}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000003c0)={0x10002012}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x252004c1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x400cc44) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x252004c1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x400cc44) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e24, @remote}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x3}, &(0x7f0000000600)=0x8) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x3}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000640)={0x10, 0x1, 0xefc0, 0x52, r6}, 0x10) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000680)) (async) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000680)) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000006c0)) ioctl$XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f0000000800)={r3, &(0x7f0000000700)='blkio.bfq.io_wait_time_recursive\x00', 0x480400, &(0x7f0000000740)={@_ha_fsid={[0x60, 0x6]}, {0x93, 0x0, 0x1, 0x6c01}}, 0x5, &(0x7f0000000780), &(0x7f00000007c0)=0x5}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000840)=@req={0x6, 0x2, 0x4c2d, 0x5}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x1}, {&(0x7f0000000880)=""/233, 0xe9}, &(0x7f0000000980), 0x4}, 0xa0) openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000ac0)={r6, @in={{0x2, 0x4e22, @local}}, 0x7f, 0x0, 0xf, 0x7, 0x99}, &(0x7f0000000b80)=0x98) ioctl$FICLONE(r2, 0x40049409, r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000bc0)={r7, 0x13, "4a69d8f1286d038f31c2fd6be3f8258d8e3eb0"}, &(0x7f0000000c00)=0x1b) accept(r3, 0x0, &(0x7f0000000c40)) (async) r8 = accept(r3, 0x0, &(0x7f0000000c40)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000000c80)) getsockname$packet(r8, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d80)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000001080)={&(0x7f0000000d00), 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1ac, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4050}, 0x20080004) 2.319494332s ago: executing program 3 (id=4365): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r3 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001900010000000014c559dd3895b23175d50ab8e058c83600000000001dc501000005000d0004000000"], 0x1c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r5, &(0x7f0000000200)="58000000000000000000080a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/88, 0xffffffffffffffaa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000c0000001fff000000008000000000000000", @ANYRES32=r2, @ANYBLOB="00000000003f00001c0012800b00010062726964676500000c00028005002900fe000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0e30000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf250400000014000300fc000000000000000000000000000000080004000a0101011f00070073797374656d5f753a6f626a6563745f723a746d705f743a73300000080005007f0000012d00070073797374656d5f753a6f626a6563745f723a64686370645f696e697472635f657865635f743a733000000000140002000000000000000000000000000000000008000400ac1e00011400060070696d7265673000000000000000000008000500e0000001"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x23388362729e9563) 2.139341142s ago: executing program 3 (id=4366): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}, {&(0x7f0000001180)={0x7d4, 0x18, 0x200, 0x70bd27, 0x25dfdbfe, "", [@generic="8618849f24a8159287756e3c16a55f6f0ae8d76284028940126e0db7d431fbacfc9530693e2cdd3c682678df02552935656864be6437a6dcee4788166537290eb06589c96d3e809f9b54ff6d89b917305713cd845250c1d8c2cd400a72ff82213792cd7fccad28f3925d2419f247edb1c1fa54b073dc43e44501d96e0c5e0159f6bb6a7db131755b502e027c9bd969f0b47e024822484a1f3bb14142ed35da35d00af7b6049ef4ba5674b48f4e76e6ec3886da4e88d08635c473e70a79b80e", @typed={0xc, 0x59, 0x0, 0x0, @u64=0xc9}, @nested={0x201, 0xaa, 0x0, 0x1, [@generic="4bad51fa24a7d55742f96b91b7413b57289a6e9fc39b17ed2da07642e37b7e94e23a6a58b6efe3a85a2e5ef6ff82462ac738e61e01ee7129558522059770db530bd5b2aa50f41d16b6fa39f99570f8337f449e69a6aad91855", @generic="808489769aaca8964a9229f67507a11f6f9b3288bd15a119589871668d799137ccb907de37fa6abc1c53df8a806af25de37e6a9bf7ecbeebd0a71942d678f878c017194e2750f35980a975a1adecd226524a6e0d80aada65107076505e6e18c3b33ffb9caf1228cb910dbbb18327bf4f83a495d189cdb917d86940686a64c8ac30b3d67e0549b7b2f13a66d17451365730c3a8665ff53ae66943fccf6727249638a1e483fbdf49385ac632f9875a494451a26aeb83d48a7ade9f67c295d2b4a8bb5e634fa4b5ecf07f093a63576f3287611625636bb7faa9148ef99725ca388ab0151b98e6939b3be43477d1", @typed={0xb5, 0xa, 0x0, 0x0, @binary="7a085c8e537ea69c3e5333b558830a8505b5036b73e5c84f6ca5b05a0af89eb2d3b4ecbc1c58f8a2aea2cfb23d28797310161f89ea2d9e394c5e417c4c73110f1b8b5ec862e2eef4e62391d8a9afc1efe77da3af7240b62556fd7f40c607524882b50edd056b5009cc2e39b6969710128e1e21dcda27dc574353da4f9c1d9be2e3c164ce7f077a0f105b6662adf0ad6d00b3f1e335e93176d4234634a21f3bfe9fa2fb612625c4139b1408a93fce0199e8"}]}, @generic="f11386777a23a24a7ab1fbcf7d928e70dd1c2dc6c1c054137071ba4bd7529d75b5d79e1b9bd92806e388eb27f6674cd5fd2fdd23c51ee68faa60271cf883c93689207e3862ac1e8ea548402b29d91e5cc8249ba16ecd5950609f88be0f5dde79ab5c4fc722cd211ca2300ce928accbeb399294745154a1b65c46ea7a4ff824f4cc96eb24467a618140740f0d3235aa28b24c52", @nested={0x169, 0xb4, 0x0, 0x1, [@generic="65de57101d4818679ac095f9391f2c37a9e0741aec6f9e9ddbacac83e5a68ac0a5ffb7f6cb38b068abff85af566c5fa9104a31114a07d9b736c24ce53872645d8e7bf75e4e6cdc7e141af5c85b2e62f28dee716e849678bca81544a94df94b175e0a2189541a3311095e13972751a88b940730a125af420b305efcfdd9ba1f0136234267", @generic="9a29957cdad683f8070573f4ba2155cd8d148fd758d9227f262bf43b5c24180a2f62e25e12874bb33025aeba8500c771bc7251872ca38a6f7a7c89484bf9261c4c6cc013f5723c67cabc41c850123cb7a1d75b80f9a03f7089c2f04fa54a8f1e65e39b4e82102305ff0d3f8db329865f2bafd953019184422da4841601c0fbb0986a61c8f593693819d89994af9327cd1d1c9e2c08de026f99dc5a3a7f128a217152c768c8dcdd48396274b1f41f45abc17fca8870dcf5a5ac0851c77e855b16f543948baec727664a811f54a00d0f5cc3fcb7c968081253b9f00d2e38", @nested={0x4, 0x3f}]}, @nested={0x83, 0x15f, 0x0, 0x1, [@nested={0x4, 0x28}, @generic="0453ca2f5c9c85f0579753de4d1b78b1c307f9cd2b4ca796da5c536d3010f1fe7e9e351b3a339e7b2a26b1f2f19c9a97f75fa1bfc416c141fd7bea1306ec0382fc211cfdeb5aa57511bbe67160dc32cd41498e04407119666bad15e0a7bbe46b2196a6bc5ec0202cc80fad04f48efc759e09a6cf3697600beb8b32"]}, @generic="bb5d618a6ca9b2a32ec909e9ca0050b4a2c7169283f6e476b5f5ee3abfce38f206ae3a8516edcef463dfc327", @nested={0x174, 0xdc, 0x0, 0x1, [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0x1}, @generic="8d82aeb9ca34dc1136276d037cae4588b04d6fa2b29fcf25cadb17a203c0256d38f932aeba0543e1c30fcf6cebc4f2edc0da43a2ffc914d5261273fc8fdbbe32a2108b90527d498dd5fdb2600c8c4e4f53d965f2b2a2b0510c6ecde26a26f51fb3e7f38f5fb9b21c03597b70b9ff3f08b37cccc9250330eeef889d16af22b2ad", @generic="3071e82677f68391b102873549fd9964271ba71374baa81e3ad8f09e5fa817fc8d8cf0d1cdd8c0b6da91591fadb8371081a1d49778c8e8197a65ed69b059ab54fad45c331567f843e3d3df26fa87bb9cba2b2d5219fb8374b93ef7c9b593255cbdf3955d38bb500434c2e8a0eb36c6f5b7e6f040871b7103eadc3d1c2252212ec18e5cef560f06dcb7085039519478352c3abc393b2a6f7f14bd8da0bdd1b1991c4545d23e10e753a084c1523acb7df11c60d35c47a4d04081c51d9c36d9ebd2b8a2d8bf7a36cafcc0728c1c6d83575bd408202e57cd4aba", @typed={0x8, 0x10c, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x46}]}, @generic="81bc8466bd87c499b6449495af9a9004f6cf2657d3e339a5c984c68110e717b638d8c11dc9f1acd19c924da34926b686ffcbb50afe8e07fceb8cbb5c73c7418d54b43178fff408e4b8f7111fc2abece632dfea94ead52f030c4e8bb276becdddfae1fa2ae614de57c21f68e68bf2f4c5918dcaa61cc275a7816554b09e7eef2f084b7feea61e1926afcda42a7e8d7b0f49067ce01fcb06970fa76c3a607d925cc3bcf7055014476bf6c430ac81ea98e36311fee23e321a", @nested={0x18, 0xe5, 0x0, 0x1, [@typed={0x14, 0xc0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x7d4}, {&(0x7f0000001b00)={0x111c, 0x13, 0x100, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x136, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x53, 0x160, 0x0, 0x1, [@generic="075ca2fe798fa57e5364e88c96b331543c44a2d89d858cac758f632a438ca605f129650a1291a9d50de2e1a4c5b150a06fa8170baaba06bba106c111e43921dd0aa870dc2e5baf7ba3d0c532223030"]}, @typed={0x4, 0xc3}, @nested={0x71, 0x82, 0x0, 0x1, [@typed={0x52, 0xbe, 0x0, 0x0, @binary="6d2a046c58e061f6d3e97b7a4d3b16c6e70e526da10ad0c1199b4bf959b00b2be0f39f755b1157e254c243aaa5a3b21535e044d339cf99d7f39a25225a63d9e1517baf009a088cbb50f51fa4bab4"}, @generic="3a0eaf99e321ab7f79f2607e7f9cecb47ac3f0d1874f904757"]}, @nested={0x1038, 0x159, 0x0, 0x1, [@generic="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", @nested={0x4, 0x121}, @nested={0x4, 0x47}, @nested={0x4, 0x134}, @nested={0x4, 0x48}, @typed={0x7, 0xa, 0x0, 0x0, @str='%,\x00'}, @typed={0x8, 0x58, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private1}]}]}, 0x111c}], 0x3}, 0x0) 1.933052575s ago: executing program 3 (id=4367): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000700"], 0x0, 0x51}, 0x28) bind$inet6(r1, &(0x7f00000006c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', 0x400}) shutdown(r1, 0x1) 0s ago: executing program 2 (id=4368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) kernel console output (not intermixed with test programs): [T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 444.114773][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 444.240671][T16899] erspan0: entered promiscuous mode [ 444.268597][T16899] erspan0: left promiscuous mode [ 444.317128][ T8674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.345661][T16911] bridge0: port 1(vlan2) entered blocking state [ 444.356638][T16911] bridge0: port 1(vlan2) entered disabled state [ 444.366108][T16911] vlan2: entered allmulticast mode [ 444.374181][T16911] geneve0: entered allmulticast mode [ 444.396742][T16911] vlan2: entered promiscuous mode [ 444.405495][T16911] geneve0: entered promiscuous mode [ 444.417418][T16883] veth1_to_bond: left promiscuous mode [ 444.417640][T16883] veth1_to_bond: left allmulticast mode [ 444.652964][T16920] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2848'. [ 444.775672][T16926] tipc: Enabling of bearer rejected, already enabled [ 444.851944][ T8674] batadv2: left promiscuous mode [ 444.937747][T16933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2853'. [ 445.297875][T16951] netlink: 'syz.0.2856': attribute type 2 has an invalid length. [ 445.430049][T16959] Bluetooth: hci0: unsupported parameter 5134 [ 445.430093][T16959] Bluetooth: hci0: unsupported parameter 8192 [ 445.430127][T16959] Bluetooth: hci0: unsupported parameter 5134 [ 445.430146][T16959] Bluetooth: hci0: unsupported parameter 8192 [ 445.457478][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 445.557356][T16962] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 445.632873][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2858'. [ 445.821998][ C0] net_ratelimit: 5 callbacks suppressed [ 445.822051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.889684][T16982] __nla_validate_parse: 4 callbacks suppressed [ 445.890280][T16982] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2862'. [ 446.861986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.872012][T16314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.933696][T17015] netlink: 'syz.3.2867': attribute type 5 has an invalid length. [ 447.019099][T17015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2867'. [ 447.166792][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 447.167255][T17018] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.348400][T17022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2867'. [ 447.348455][T17022] nbd: nbd64 already in use [ 447.901981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.061047][T16320] udevd[16320]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 448.751727][T17073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2878'. [ 448.778933][T17081] C: left allmulticast mode [ 448.941951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.957210][ T990] lwtunnel_output(): recursion limit reached on datapath [ 449.902006][T16314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.981900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.063085][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.021909][ C0] net_ratelimit: 1 callbacks suppressed [ 451.021975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.352927][ T8674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.353202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.960973][T17094] veth1_vlan: left allmulticast mode [ 452.061921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.625775][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 452.943161][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.007643][T17149] netlink: 'syz.3.2889': attribute type 2 has an invalid length. [ 453.024417][T17148] netlink: 'syz.3.2889': attribute type 4 has an invalid length. [ 453.069744][T17149] netlink: 'syz.3.2889': attribute type 4 has an invalid length. [ 453.101889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.549723][T17183] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2892'. [ 453.795958][T17162] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 453.922357][T17162] bond10 (unregistering): Released all slaves [ 454.063138][T17216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2893'. [ 454.142000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.679714][T17220] netlink: 'syz.2.2895': attribute type 1 has an invalid length. [ 454.688029][T17220] netlink: 'syz.2.2895': attribute type 7 has an invalid length. [ 454.688080][T17220] netlink: 'syz.2.2895': attribute type 8 has an invalid length. [ 454.688112][T17220] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2895'. [ 454.688135][T17220] NCSI netlink: No device for ifindex 65584 [ 454.732236][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 454.732293][T17220] netlink: 'syz.2.2895': attribute type 30 has an invalid length. [ 454.732330][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2895'. [ 455.182046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.182565][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 455.182622][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 455.182662][T17237] netlink: 'syz.3.2899': attribute type 3 has an invalid length. [ 455.511076][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 455.681469][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'. [ 455.824260][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.824528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.221910][ C0] net_ratelimit: 1 callbacks suppressed [ 456.221974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.462749][ T8674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.463050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.261913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.302109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.062922][T17196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.342094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.480293][T17280] C speed is unknown, defaulting to 1000 [ 459.804543][T17296] __nla_validate_parse: 11 callbacks suppressed [ 459.804595][T17296] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2915'. [ 459.904258][T17298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2915'. [ 460.169879][T17302] syzkaller0: entered promiscuous mode [ 460.169924][T17302] syzkaller0: entered allmulticast mode [ 460.382084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.700496][T17316] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2921'. [ 460.804575][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 460.978615][T17323] bond12: entered promiscuous mode [ 460.984052][T17323] bond12: entered allmulticast mode [ 461.035652][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2922'. [ 461.045706][T17319] syzkaller1: entered promiscuous mode [ 461.045747][T17319] syzkaller1: entered allmulticast mode [ 461.116850][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2922'. [ 461.366580][T17321] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 461.421904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.586898][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.587111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.992661][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 462.145203][T17197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.290980][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.291312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.331697][T17353] bond9: option xmit_hash_policy: invalid value (64) [ 462.345576][T17353] bond9 (unregistering): Released all slaves [ 462.461956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.786124][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2931'. [ 462.795749][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2931'. [ 462.806342][T17366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2931'. [ 462.821744][T17366] netlink: 'syz.3.2931': attribute type 3 has an invalid length. [ 462.935487][T17370] ipvlan2: entered allmulticast mode [ 462.935546][T17370] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 462.975267][T17370] batman_adv: batadv0: Adding interface: ipvlan2 [ 462.975313][T17370] batman_adv: batadv0: Interface activated: ipvlan2 [ 463.025746][T17374] netlink: 'syz.0.2930': attribute type 3 has an invalid length. [ 463.150194][T17372] ipvlan3: entered allmulticast mode [ 463.160248][T17372] batman_adv: batadv0: Adding interface: ipvlan3 [ 463.160296][T17372] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 463.160313][T17372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.160327][T17372] batman_adv: batadv0: Interface activated: ipvlan3 [ 463.502210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.681263][T17394] openvswitch: netlink: Actions may not be safe on all matching packets [ 464.364597][T17419] netlink: 'syz.4.2943': attribute type 2 has an invalid length. [ 464.483386][T17428] tipc: Enabled bearer , priority 0 [ 464.496222][T17425] syzkaller0: entered promiscuous mode [ 464.496267][T17425] syzkaller0: entered allmulticast mode [ 464.541902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.566765][T17428] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 464.756398][T17425] syzkaller0: left allmulticast mode [ 464.860447][T17433] tipc: Resetting bearer [ 465.017783][T17423] tipc: Resetting bearer [ 465.124782][T17440] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2948'. [ 465.137847][T17423] tipc: Disabling bearer [ 465.293682][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.306983][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.323046][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.337316][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.346095][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 465.596149][T17449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2950'. [ 465.742695][T17451] geneve4: entered promiscuous mode [ 465.782450][ T3357] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 52041 - 0 [ 465.782576][ T3357] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 52041 - 0 [ 465.782637][ T3357] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 52041 - 0 [ 465.782679][ T3357] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 52041 - 0 [ 466.061911][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.621901][ C0] net_ratelimit: 2 callbacks suppressed [ 466.621952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.217973][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.218070][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.342838][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.343038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.343623][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.343848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.426889][ T52] Bluetooth: hci5: command tx timeout [ 467.489644][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 467.538359][T17497] bond12: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 467.596447][T17497] bond12 (unregistering): Released all slaves [ 467.661995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.798874][T17508] --map-set only usable from mangle table [ 468.035436][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.100156][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.223998][T17195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.481153][T17521] netlink: 'syz.1.2964': attribute type 83 has an invalid length. [ 468.701941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.869324][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.891794][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.308192][T17544] ip_tables: iptables: counters copy to user failed while replacing table [ 469.313166][T17543] ip_tables: iptables: counters copy to user failed while replacing table [ 469.503419][ T52] Bluetooth: hci5: command tx timeout [ 470.089941][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 470.128089][T17441] C speed is unknown, defaulting to 1000 [ 470.270239][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'. [ 470.305036][ T12] bridge_slave_1: left allmulticast mode [ 470.315602][ T12] bridge_slave_1: left promiscuous mode [ 470.328616][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.386869][ T12] bridge_slave_0: left allmulticast mode [ 470.395761][ T12] bridge_slave_0: left promiscuous mode [ 470.399175][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.456430][T17569] netlink: 'syz.2.2976': attribute type 21 has an invalid length. [ 470.757248][T17575] netlink: 'syz.4.2980': attribute type 2 has an invalid length. [ 471.176607][T17582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2982'. [ 471.399644][T17592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2984'. [ 471.581824][ T52] Bluetooth: hci5: command tx timeout [ 471.822030][ C0] net_ratelimit: 2 callbacks suppressed [ 471.822090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.878016][ T12] bond4 (unregistering): (slave ipip1): Releasing backup interface [ 471.892654][ T12] ipip1 (unregistering): left promiscuous mode [ 472.100566][ T12] bond9 (unregistering): (slave vlan2): Releasing active interface [ 472.123225][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.140241][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.154159][ T12] bond0 (unregistering): Released all slaves [ 472.171477][ T12] bond1 (unregistering): Released all slaves [ 472.193189][ T12] bond2 (unregistering): Released all slaves [ 472.221153][ T12] bond3 (unregistering): Released all slaves [ 472.243859][ T12] bond4 (unregistering): Released all slaves [ 472.276534][ T12] bond5 (unregistering): Released all slaves [ 472.298490][ T12] bond6 (unregistering): Released all slaves [ 472.321346][ T12] bond7 (unregistering): Released all slaves [ 472.357075][ T12] bond8 (unregistering): Released all slaves [ 472.378991][ T12] bond9 (unregistering): Released all slaves [ 472.401454][ T12] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 472.412325][ T12] veth0_to_bond: left promiscuous mode [ 472.426453][ T12] veth0_to_bond: left allmulticast mode [ 472.442994][ T12] bond10 (unregistering): Released all slaves [ 472.464215][ T12] bond11 (unregistering): Released all slaves [ 472.485136][ T12] bond12 (unregistering): Released all slaves [ 472.507326][ T12] bond13 (unregistering): Released all slaves [ 472.565069][T17565] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 472.568407][T17569] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2976'. [ 472.742985][T17588] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 472.863181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.997287][ T12] tipc: Disabling bearer [ 472.997629][ T12] tipc: Left network mode [ 473.670850][ T52] Bluetooth: hci5: command tx timeout [ 473.962619][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2989'. [ 473.962868][T17636] netlink: 'syz.2.2989': attribute type 7 has an invalid length. [ 473.963084][T17636] netlink: 'syz.2.2989': attribute type 8 has an invalid length. [ 473.963279][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 474.601938][T17653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2991'. [ 474.602166][T17653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2991'. [ 474.739772][T17653] gretap2: entered promiscuous mode [ 474.745783][T17653] gretap2: entered allmulticast mode [ 475.178136][T17666] bridge_slave_1: entered promiscuous mode [ 475.187148][T17441] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.197432][T17441] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.205994][T17441] bridge_slave_0: entered allmulticast mode [ 475.224762][T17441] bridge_slave_0: entered promiscuous mode [ 475.280867][T17441] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.280994][T17441] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.281178][T17441] bridge_slave_1: entered allmulticast mode [ 475.337948][T17441] bridge_slave_1: entered promiscuous mode [ 475.508930][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2996'. [ 475.587148][T17441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.606230][T17441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.895170][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 476.379940][T17441] team0: Port device team_slave_0 added [ 476.405004][T17441] team0: Port device team_slave_1 added [ 476.418915][T17695] veth1_to_bond: entered allmulticast mode [ 476.425917][T17694] veth1_to_bond: left allmulticast mode [ 477.057921][ T12] hsr_slave_0: left promiscuous mode [ 477.066861][ T12] hsr_slave_1: left promiscuous mode [ 477.074927][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.082580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.123305][ T12] veth1_macvtap: left promiscuous mode [ 477.130933][ T12] veth0_macvtap: left promiscuous mode [ 477.131117][ T12] veth1_vlan: left promiscuous mode [ 477.131319][ T12] veth0_vlan: left promiscuous mode [ 477.442429][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 477.499181][T17732] netlink: 'syz.3.3008': attribute type 13 has an invalid length. [ 478.079361][ T156] smc: removing ib device syz1 [ 478.173004][T17708] sch_fq: defrate 0 ignored. [ 478.188404][T17441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.200465][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.201229][T17441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.273755][T17441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.273794][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.273843][T17441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.356810][ T156] smbdirect: ib_dev[syz1] removed [ 478.368197][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3006'. [ 478.368706][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3006'. [ 478.368757][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3006'. [ 478.442703][T17731] netlink: 'syz.3.3008': attribute type 4 has an invalid length. [ 478.471819][T17195] C speed is unknown, defaulting to 1000 [ 478.471879][T17195] syz1: Port: 1 Link DOWN [ 479.105168][T17441] hsr_slave_0: entered promiscuous mode [ 479.119424][T17441] hsr_slave_1: entered promiscuous mode [ 479.135985][T17441] debugfs: 'hsr0' already exists in 'hsr' [ 479.136024][T17441] Cannot create hsr debugfs directory [ 479.244455][T17749] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 481.340617][T17787] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 481.496332][T17817] Bluetooth: hci0: unsupported parameter 5135 [ 481.496378][T17817] Bluetooth: hci0: unsupported parameter 8192 [ 481.496412][T17817] Bluetooth: hci0: unsupported parameter 5135 [ 481.496430][T17817] Bluetooth: hci0: unsupported parameter 8192 [ 481.829949][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 481.982299][T17831] xt_NETMAP: bad rangesize 37. [ 482.351419][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 482.417082][T17850] netlink: 'syz.2.3025': attribute type 8 has an invalid length. [ 482.622716][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3025'. [ 482.622767][T17854] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3025'. [ 482.906955][T17846] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 483.399083][T17846] bond13 (unregistering): Released all slaves [ 484.082421][T17888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3029'. [ 484.124520][T17890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3030'. [ 485.331016][ T12] IPVS: stop unused estimator thread 0... [ 485.761984][T17904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.381972][T17945] netlink: 'syz.3.3041': attribute type 21 has an invalid length. [ 486.576288][T17441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.609911][T17441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.628575][T17441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.703495][T17441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.715198][T17441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.817070][T17441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.832603][T17441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 486.906966][T17441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.179401][T17961] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 487.203990][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3045'. [ 487.696207][T17441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.837131][T17441] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.887051][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.887178][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.894788][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.895571][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.896767][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.901413][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.904052][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.916849][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.918013][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.927032][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 487.943963][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 488.152522][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.152659][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.254755][T17981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.258104][T18035] netlink: 'syz.3.3058': attribute type 83 has an invalid length. [ 489.288060][T18037] syzkaller1: entered promiscuous mode [ 489.288102][T18037] syzkaller1: entered allmulticast mode [ 490.504124][T17441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.531148][T18080] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 490.539517][T18080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.852261][T17441] veth0_vlan: entered promiscuous mode [ 490.914406][T17441] veth1_vlan: entered promiscuous mode [ 491.070452][T17441] veth0_macvtap: entered promiscuous mode [ 491.127567][T17441] veth1_macvtap: entered promiscuous mode [ 491.260114][T17441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.320017][T17441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.414794][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.414863][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.414924][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.414968][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.466758][T18093] syzkaller0: entered promiscuous mode [ 491.467683][T18093] syzkaller0: entered allmulticast mode [ 492.473791][T18124] netlink: NAT attribute has 5 unknown bytes [ 492.480051][T18124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.582887][ T8680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.582927][ T8680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.795499][T18132] __nla_validate_parse: 7 callbacks suppressed [ 492.810619][T18132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3078'. [ 492.831977][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.840022][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.868208][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3078'. [ 493.536315][T18155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3082'. [ 493.755393][T18135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.900439][T18166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'. [ 493.996816][T18169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3086'. [ 494.125734][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 494.586984][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.603024][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.607360][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.630545][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.639312][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 495.003546][T18200] openvswitch: netlink: Message has 8 unknown bytes. [ 496.013064][T18227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3097'. [ 496.703953][ T52] Bluetooth: hci4: command tx timeout [ 496.769251][T18246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3101'. [ 496.873053][T16696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.895543][T16696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.110720][T18244] bond1: option mode: invalid value (10) [ 497.137813][T18244] bond1 (unregistering): Released all slaves [ 497.242405][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 497.306753][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 497.566163][T16696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.566416][T16696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.675646][T18259] 8021q: adding VLAN 0 to HW filter on device bond18 [ 497.834937][T18264] 8021q: adding VLAN 0 to HW filter on device bond19 [ 498.206957][T16696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.207446][T16696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.231595][T18289] netlink: 'syz.2.3107': attribute type 3 has an invalid length. [ 498.232606][T18289] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3107'. [ 498.398042][T18289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3107'. [ 498.738559][T18305] netlink: zone id is out of range [ 498.738687][T18305] netlink: zone id is out of range [ 498.781872][ T52] Bluetooth: hci4: command tx timeout [ 498.834726][T16696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.846858][T16696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.171941][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 499.366498][T18325] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 499.380530][T18325] bond1 (unregistering): Released all slaves [ 499.508541][T18331] netlink: 'syz.2.3113': attribute type 4 has an invalid length. [ 499.508754][T18331] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3113'. [ 499.610304][T18331] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 499.941102][T18346] Cannot find set identified by id 0 to match [ 499.997787][T18340] netlink: 'syz.4.3118': attribute type 4 has an invalid length. [ 500.861872][ T52] Bluetooth: hci4: command tx timeout [ 500.947430][T16696] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 501.056422][T16696] bond1 (unregistering): (slave geneve3): Releasing active interface [ 501.214152][T16696] bond0 (unregistering): (slave ): Releasing backup interface [ 501.228388][T16696] : left allmulticast mode [ 501.237396][T16696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.247145][T16696] bond_slave_1: left allmulticast mode [ 501.255918][T16696] bond0 (unregistering): Released all slaves [ 501.277435][T16696] bond1 (unregistering): Released all slaves [ 501.299683][T16696] bond2 (unregistering): Released all slaves [ 501.346222][T16696] bond3 (unregistering): Released all slaves [ 501.377116][T16696] bond4 (unregistering): (slave veth3): Releasing active interface [ 501.386790][T16696] batadv1: entered promiscuous mode [ 501.401299][T16696] bond4 (unregistering): (slave batadv1): Releasing active interface [ 501.410108][T16696] batadv1: left promiscuous mode [ 501.422896][T16696] bond4 (unregistering): (slave veth5): Releasing active interface [ 501.438198][T16696] bond4 (unregistering): (slave veth7): Releasing active interface [ 501.454266][T16696] bond4 (unregistering): Released all slaves [ 501.475385][T16696] bond5 (unregistering): Released all slaves [ 501.496202][T16696] bond6 (unregistering): Released all slaves [ 501.521476][T16696] bond7 (unregistering): Released all slaves [ 501.553031][T16696] bond8 (unregistering): Released all slaves [ 501.579017][T16696] bond9 (unregistering): (slave veth9): Releasing active interface [ 501.597918][T16696] batadv2: entered promiscuous mode [ 501.608460][T16696] bond9 (unregistering): (slave veth11): Releasing active interface [ 501.631767][T16696] bond9 (unregistering): (slave batadv2): Releasing active interface [ 501.640224][T16696] batadv2: left promiscuous mode [ 501.649422][T16696] bond9 (unregistering): (slave batadv3): Releasing active interface [ 501.661206][T16696] bond9 (unregistering): Released all slaves [ 501.693260][T18355] netlink: 'syz.2.3123': attribute type 1 has an invalid length. [ 501.874864][T18386] xt_NETMAP: bad rangesize 37. [ 501.913447][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.103272][T18391] sock: sock_timestamping_bind_phc: sock not bind to device [ 502.124391][T18394] sock: sock_timestamping_bind_phc: sock not bind to device [ 502.151434][T18394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3132'. [ 502.205884][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 502.211384][T18396] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3130'. [ 502.622374][T18391] team0 (unregistering): Port device team_slave_0 removed [ 502.713260][T18391] team0 (unregistering): Port device team_slave_1 removed [ 502.768522][T18188] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.770850][T18188] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.773161][T18188] bridge_slave_0: entered allmulticast mode [ 502.815476][T18188] bridge_slave_0: entered promiscuous mode [ 502.882239][T18188] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.883814][T18188] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.884694][T18188] bridge_slave_1: entered allmulticast mode [ 502.920618][T18188] bridge_slave_1: entered promiscuous mode [ 502.942217][ T52] Bluetooth: hci4: command tx timeout [ 503.105738][T16696] tipc: Disabling bearer [ 503.115422][T16696] tipc: Left network mode [ 503.331086][T18418] bond20: entered promiscuous mode [ 503.331278][T18418] bond20: entered allmulticast mode [ 503.334088][T18418] 8021q: adding VLAN 0 to HW filter on device bond20 [ 503.523462][T18188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.560714][T18188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.738891][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 503.907771][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3141'. [ 503.908316][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3141'. [ 503.940015][T18188] team0: Port device team_slave_0 added [ 503.959077][T18188] team0: Port device team_slave_1 added [ 504.047123][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 504.415553][T18472] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 504.425510][T18472] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3144'. [ 505.029632][T18454] syzkaller0: entered promiscuous mode [ 505.029677][T18454] syzkaller0: entered allmulticast mode [ 505.054191][T18188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.054430][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.055541][T18188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.298205][T18483] syzkaller0: entered promiscuous mode [ 505.298276][T18483] syzkaller0: entered allmulticast mode [ 505.353774][T18188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.354000][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.361751][T18188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.174933][T18188] hsr_slave_0: entered promiscuous mode [ 506.199426][T18188] hsr_slave_1: entered promiscuous mode [ 506.209898][T18188] debugfs: 'hsr0' already exists in 'hsr' [ 506.219116][T18188] Cannot create hsr debugfs directory [ 506.219376][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'. [ 506.869124][T16696] hsr_slave_0: left promiscuous mode [ 506.870100][T16696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.870144][T16696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.893575][T16696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.903640][T16696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.035191][T16696] veth1_macvtap: left promiscuous mode [ 507.035751][T16696] veth0_macvtap: left promiscuous mode [ 507.739063][T16696] smc: removing net device veth1_vlan with user defined pnetid SYZ1 [ 508.454240][T18524] geneve0: entered allmulticast mode [ 508.577527][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 508.583208][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.608271][ T8679] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.608788][ T8679] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.608901][ T8679] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.608996][ T8679] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.609103][ T8679] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.783699][T18579] erspan0: entered promiscuous mode [ 508.821817][ T1154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.832674][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.349596][T18595] Cannot find set identified by id 0 to match [ 509.496492][T18611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3165'. [ 509.588313][T18188] netdevsim netdevsim1 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.141623][T18625] erspan0: entered promiscuous mode [ 510.143546][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 510.196062][T16696] IPVS: stop unused estimator thread 0... [ 510.303291][T18188] netdevsim netdevsim1 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.504247][T18641] bridge0: port 2(ipvlan4) entered blocking state [ 510.505312][T18641] bridge0: port 2(ipvlan4) entered disabled state [ 510.505521][T18641] ipvlan4: entered allmulticast mode [ 510.505561][T18641] bridge0: entered allmulticast mode [ 510.544327][T18641] ipvlan4: left allmulticast mode [ 510.544838][T18641] bridge0: left allmulticast mode [ 511.025581][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 511.207302][T18188] netdevsim netdevsim1 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.326193][T18678] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 511.341482][T18678] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 511.631225][T18188] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.894967][T18699] netlink: 'syz.3.3180': attribute type 11 has an invalid length. [ 512.244016][T18712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.606662][T18188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.641147][T18188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.686829][T18188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.777758][T18188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.859474][T18188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.011229][T18188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.095004][T18188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.116025][T18188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.523679][T18188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.587240][T18188] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.629629][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.629872][ T6431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.723273][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.723516][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.155215][T18784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3201'. [ 514.500694][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.501328][T18790] bond0: Caught tx_queue_len zero misconfig [ 514.501528][T18790] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.536050][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.536875][T18790] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.643309][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.644103][T18790] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.668242][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.668589][T18790] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.852705][T18188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.964928][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3202'. [ 514.965107][T18790] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3202'. [ 515.463780][T18814] gretap1: entered promiscuous mode [ 515.491062][T18814] batman_adv: batadv0: Adding interface: gretap1 [ 515.491554][T18814] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.503234][T18814] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 515.556695][T18819] smc: net device lo applied user defined pnetid SYZ0 [ 515.564103][T18819] smc: smcd device lo applied user defined pnetid SYZ0 [ 515.781356][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 516.775333][T18843] syzkaller0: entered promiscuous mode [ 516.776264][T18843] syzkaller0: entered allmulticast mode [ 517.321978][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3216'. [ 521.640616][T18188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.080887][T18934] sctp: [Deprecated]: syz.2.3223 (pid 18934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.080887][T18934] Use struct sctp_sack_info instead [ 522.310839][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 522.310895][T18939] netlink: 'syz.3.3224': attribute type 30 has an invalid length. [ 522.359180][T18188] veth0_vlan: entered promiscuous mode [ 522.378693][T18188] veth1_vlan: entered promiscuous mode [ 522.419779][T18188] veth0_macvtap: entered promiscuous mode [ 522.484809][T18946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3227'. [ 522.530911][T18188] veth1_macvtap: entered promiscuous mode [ 522.607806][T18188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.627622][T18188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.832762][ T8679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.891446][ T6431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.904072][ T6431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.075182][ T8679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.415845][ T6431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.415899][ T6431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.573574][ T3357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.588967][ T3357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.971969][T18974] IPVS: set_ctl: invalid protocol: 41 172.30.1.3:20002 [ 524.010648][T18974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3231'. [ 524.174386][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 524.575333][T18998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.584367][T18998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.593168][T18998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.606288][T18998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.618465][T18998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.098440][T19010] batadv0: entered promiscuous mode [ 525.329435][T19015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3237'. [ 525.356480][T19015] netlink: 'syz.3.3237': attribute type 32 has an invalid length. [ 526.701767][ T52] Bluetooth: hci2: command tx timeout [ 527.439568][T19090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3249'. [ 528.782884][ T52] Bluetooth: hci2: command tx timeout [ 530.870364][ T52] Bluetooth: hci2: command tx timeout [ 531.209291][T19093] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 531.615213][T19123] netlink: 'syz.1.3253': attribute type 30 has an invalid length. [ 531.671418][T19129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3253'. [ 531.727584][T19130] x_tables: duplicate entry at hook 3 [ 531.885271][T19127] pimreg: entered allmulticast mode [ 531.948152][T19130] bridge0: port 3(vlan2) entered blocking state [ 531.959220][T19130] bridge0: port 3(vlan2) entered disabled state [ 531.971146][T19130] vlan2: entered allmulticast mode [ 531.976835][T19130] geneve0: entered allmulticast mode [ 531.999309][T19130] vlan2: entered promiscuous mode [ 532.004855][T19130] geneve0: entered promiscuous mode [ 532.163619][T19142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3257'. [ 532.267479][ T156] IPVS: starting estimator thread 0... [ 532.274264][T19143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3258'. [ 532.295733][T19149] netlink: 'syz.3.3261': attribute type 1 has an invalid length. [ 532.367086][T19147] IPVS: using max 25 ests per chain, 60000 per kthread [ 532.401916][T19141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3258'. [ 532.508652][T19149] bond13: entered promiscuous mode [ 532.516200][T19149] 8021q: adding VLAN 0 to HW filter on device bond13 [ 532.692393][T19159] 8021q: adding VLAN 0 to HW filter on device bond13 [ 532.692919][T19159] bond13: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 532.692964][T19159] bond13: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 532.761477][T19159] bond13: (slave ip6gre4): making interface the new active one [ 532.761524][T19159] ip6gre4: entered promiscuous mode [ 532.783111][T19159] bond13: (slave ip6gre4): Enslaving as an active interface with an up link [ 532.942225][ T52] Bluetooth: hci2: command tx timeout [ 533.779995][T19207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3269'. [ 534.007032][T18996] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.022250][T18996] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.031003][T18996] bridge_slave_0: entered allmulticast mode [ 534.050283][T18996] bridge_slave_0: entered promiscuous mode [ 534.077449][T19218] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 534.098442][T18996] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.108322][T18996] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.120819][T18996] bridge_slave_1: entered allmulticast mode [ 534.137055][T18996] bridge_slave_1: entered promiscuous mode [ 534.149588][T19213] netlink: 'syz.1.3270': attribute type 7 has an invalid length. [ 534.162389][T19214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3269'. [ 534.342071][T19218] veth3: entered allmulticast mode [ 534.482168][T18996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.509817][T18996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.929756][T18996] team0: Port device team_slave_0 added [ 534.951368][T18996] team0: Port device team_slave_1 added [ 534.961751][T19237] xt_hashlimit: overflow, try lower: 3/0 [ 535.051209][ T52] block nbd2: Receive control failed (result -32) [ 535.122146][T18996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.129419][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.156601][T18996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.169683][T18996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.178186][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.208474][T18996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.345648][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.345843][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.346028][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.346225][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.346379][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.346531][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.346702][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.346857][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.347005][T19244] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 535.595866][T19250] netlink: 5428 bytes leftover after parsing attributes in process `syz.2.3278'. [ 535.596392][T19250] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 535.810965][T19242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.957753][T18996] hsr_slave_0: entered promiscuous mode [ 535.972238][T18996] hsr_slave_1: entered promiscuous mode [ 535.985281][T18996] debugfs: 'hsr0' already exists in 'hsr' [ 535.991818][T18996] Cannot create hsr debugfs directory [ 537.146755][T18996] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52041 - 0 [ 537.321412][T19300] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.534004][T19300] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 537.534047][T19300] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3288'. [ 537.636203][T18996] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52041 - 0 [ 537.913391][ T3357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.114920][T18996] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52041 - 0 [ 538.257226][T18996] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52041 - 0 [ 538.729824][T19327] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 538.920215][T19353] ipt_ECN: cannot use operation on non-tcp rule [ 538.959028][T19354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 539.223951][T18996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 539.250707][T18996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.260939][T18996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 539.290759][T18996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.299839][T18996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 539.327675][T18996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.338545][T18996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 539.374485][T18996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.948711][T18996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.988249][T19389] netlink: Only one type of NAT may be specified [ 539.995254][T19389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.027343][T18996] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.043441][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.043593][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.061805][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 540.077095][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.077220][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.109050][T19389] netlink: 'syz.2.3304': attribute type 4 has an invalid length. [ 540.198300][T19389] netlink: 'syz.2.3304': attribute type 4 has an invalid length. [ 540.843021][T19408] bond3: Removing last arp target with arp_interval on [ 541.156659][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 541.170429][T19424] xt_CT: No such helper "netbios-ns" [ 541.629519][T19444] x_tables: duplicate underflow at hook 2 [ 541.631252][T19444] x_tables: duplicate underflow at hook 2 [ 541.632493][T19444] x_tables: duplicate underflow at hook 2 [ 541.633488][T19444] x_tables: duplicate underflow at hook 2 [ 541.634553][T19444] x_tables: duplicate underflow at hook 2 [ 541.635557][T19444] x_tables: duplicate underflow at hook 2 [ 541.635983][T19444] x_tables: duplicate underflow at hook 2 [ 541.636420][T19444] x_tables: duplicate underflow at hook 2 [ 541.636847][T19444] x_tables: duplicate underflow at hook 2 [ 541.637639][T19444] x_tables: duplicate underflow at hook 2 [ 542.310515][T19468] bond4 (unregistering): Released all slaves [ 542.475385][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 542.732834][T19493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3322'. [ 542.994246][T18996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.792614][T19526] xt_hashlimit: invalid interval [ 543.933237][T19535] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3329'. [ 543.951267][T19535] Cannot find add_set index 4 as target [ 543.965071][T19535] tipc: Enabling of bearer rejected, failed to enable media [ 544.131349][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 544.454950][T19532] 8021q: adding VLAN 0 to HW filter on device bond9 [ 544.980431][T18996] veth0_vlan: entered promiscuous mode [ 545.123883][T18996] veth1_vlan: entered promiscuous mode [ 545.364651][T18996] veth0_macvtap: entered promiscuous mode [ 545.396405][T18996] veth1_macvtap: entered promiscuous mode [ 545.446289][T18996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.556471][T19575] netlink: 380 bytes leftover after parsing attributes in process `syz.3.3337'. [ 545.578187][T18996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.639272][T16696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.693714][ T3357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.702763][T16696] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.705486][ T6431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.892686][T19584] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 546.184407][ T5727] openvswitch: cpu_id mismatch with handler threads [ 546.197158][ T5727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.414270][ T5720] openvswitch: cpu_id mismatch with handler threads [ 546.423782][ T5720] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.472527][T17197] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.789354][T17195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.898803][T16696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.907642][T16696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.939216][T19603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3343'. [ 546.939726][T19603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3343'. [ 547.044133][T19604] xt_CT: No such helper "netbios-ns" [ 547.059435][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.059476][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.223863][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 547.864239][T19625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 547.864298][T19625] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 548.535916][T19646] netlink: 'syz.0.3348': attribute type 10 has an invalid length. [ 548.536138][T19646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3348'. [ 548.536693][T19646] dummy0: entered promiscuous mode [ 548.938077][T18998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 548.950498][T18998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 548.958399][T18998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 548.959386][T18998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 548.960728][T18998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.416004][T19667] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3352'. [ 549.949144][T19680] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3354'. [ 550.428739][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3356'. [ 550.567284][T19696] sctp: [Deprecated]: syz.2.3356 (pid 19696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.567284][T19696] Use struct sctp_sack_info instead [ 550.719239][ T6431] bridge_slave_1: left allmulticast mode [ 550.725055][ T6431] bridge_slave_1: left promiscuous mode [ 550.731155][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.820134][ T6431] bridge_slave_0: left allmulticast mode [ 550.820188][ T6431] bridge_slave_0: left promiscuous mode [ 550.820428][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.963402][ T6431] pim6reg: left allmulticast mode [ 550.970424][ T6431] dvmrp0: left allmulticast mode [ 551.021906][T18998] Bluetooth: hci1: command tx timeout [ 551.092058][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'. [ 551.154759][T19720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.500086][T19720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.679066][ T6431] bond13 (unregistering): (slave ip6gre4): Releasing backup interface [ 551.688546][ T6431] ip6gre4 (unregistering): left promiscuous mode [ 551.840078][T19720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.886605][T19720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 552.068075][ T6431] bond4 (unregistering): (slave geneve2): Releasing active interface [ 552.205874][ T6431] bond10 (unregistering): (slave bridge3): Releasing active interface [ 552.216221][ T6431] bridge3 (unregistering): left promiscuous mode [ 552.216276][ T6431] bridge3 (unregistering): left allmulticast mode [ 552.286855][ T6431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.299911][ T6431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.313682][ T6431] bond0 (unregistering): Released all slaves [ 552.330486][ T6431] bond1 (unregistering): Released all slaves [ 552.353644][ T6431] bond2 (unregistering): Released all slaves [ 552.383375][ T6431] bond3 (unregistering): Released all slaves [ 552.422533][ T6431] bond4 (unregistering): Released all slaves [ 552.444671][ T6431] bond5 (unregistering): Released all slaves [ 552.474012][ T6431] bond6 (unregistering): Released all slaves [ 552.499885][ T6431] bond7 (unregistering): Released all slaves [ 552.526664][ T6431] bond8 (unregistering): Released all slaves [ 552.549365][ T6431] bond9 (unregistering): Released all slaves [ 552.597729][ T6431] bond10 (unregistering): Released all slaves [ 552.633739][ T6431] bond11 (unregistering): Released all slaves [ 552.657657][ T6431] bond12 (unregistering): Released all slaves [ 552.687356][ T6431] bond13 (unregistering): Released all slaves [ 552.713525][T19711] batadv_slave_0: entered promiscuous mode [ 552.713624][T19711] batadv_slave_0: left promiscuous mode [ 552.733632][T19715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.826727][T19715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.123586][T18998] Bluetooth: hci1: command tx timeout [ 553.389559][ T6431] tipc: Disabling bearer [ 553.389718][ T6431] tipc: Left network mode [ 553.607429][T19737] netlink: 'syz.2.3362': attribute type 2 has an invalid length. [ 553.607886][T19737] netlink: 'syz.2.3362': attribute type 8 has an invalid length. [ 553.607933][T19737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3362'. [ 553.670128][ T6431] IPVS: stopping master sync thread 9307 ... [ 554.070715][T19750] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 554.290932][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3366'. [ 554.444655][T19757] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 554.453190][T19757] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3371'. [ 554.464188][T19757] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3371'. [ 554.612304][T19767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3372'. [ 555.181837][T18998] Bluetooth: hci1: command tx timeout [ 556.081411][T19796] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3375'. [ 556.090812][T19796] tipc: Invalid UDP bearer configuration [ 556.091132][T19796] tipc: Enabling of bearer rejected, failed to enable media [ 556.441063][ T6431] hsr_slave_0: left promiscuous mode [ 557.064834][T19836] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 557.065059][T19836] netlink: 'syz.2.3382': attribute type 3 has an invalid length. [ 557.069450][T19836] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3382'. [ 557.262070][T18998] Bluetooth: hci1: command tx timeout [ 557.315286][ T6431] team0 (unregistering): Port device team_slave_1 removed [ 557.355072][ T6431] team0 (unregistering): Port device team_slave_0 removed [ 557.606072][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.614680][T19815] syzkaller1: entered promiscuous mode [ 557.614739][T19815] syzkaller1: entered allmulticast mode [ 557.856000][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 557.887921][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 557.888741][T19846] xt_cgroup: path and classid specified [ 558.919990][T19658] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.920174][T19658] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.920380][T19658] bridge_slave_0: entered allmulticast mode [ 558.954485][T19658] bridge_slave_0: entered promiscuous mode [ 558.972701][T19658] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.980129][T19658] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.988639][T19658] bridge_slave_1: entered allmulticast mode [ 558.997347][T19658] bridge_slave_1: entered promiscuous mode [ 559.042609][T19658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.055117][T19658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.099937][T19658] team0: Port device team_slave_0 added [ 559.108889][T19658] team0: Port device team_slave_1 added [ 559.144309][T19658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.151404][T19658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.180122][T19658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.195300][T19658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.202409][T19658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.214725][T19658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.326062][T19658] hsr_slave_0: entered promiscuous mode [ 559.332969][T19658] hsr_slave_1: entered promiscuous mode [ 559.339544][T19658] debugfs: 'hsr0' already exists in 'hsr' [ 559.345759][T19658] Cannot create hsr debugfs directory [ 559.894764][T19884] netlink: 'syz.4.3392': attribute type 8 has an invalid length. [ 559.897720][T19886] netlink: 'syz.4.3392': attribute type 8 has an invalid length. [ 560.291457][T19658] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.638087][T19658] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.244072][T19658] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.430674][T19938] openvswitch: netlink: EtherType 300 is less than min 600 [ 561.604625][T19658] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.433651][T19658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.485637][T19658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.496239][T19658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.532717][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 562.538595][T19658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.877313][T19658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 562.901190][T19658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.907824][T19658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 562.945689][T19658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.283306][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.283381][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.292577][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.292630][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.345605][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.348254][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 563.440833][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 563.461628][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 563.513878][T20005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3411'. [ 564.174413][T19658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.281965][T19658] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.317588][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.317720][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.460866][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.462271][ T8680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.673168][T20020] IPVS: set_ctl: invalid protocol: 108 172.30.1.3:20003 [ 564.930680][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'. [ 565.351059][T20041] netlink: 'syz.0.3420': attribute type 11 has an invalid length. [ 565.388723][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 565.491163][T20042] netlink: 'syz.0.3420': attribute type 11 has an invalid length. [ 565.949892][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3423'. [ 565.966130][T20062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3423'. [ 565.989071][T20063] netlink: 'syz.0.3424': attribute type 2 has an invalid length. [ 566.032662][T20063] netlink: 'syz.0.3424': attribute type 2 has an invalid length. [ 566.083178][T20074] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3426'. [ 566.739728][T20088] xt_HMARK: spi-set and port-set can't be combined [ 567.103637][T20105] xt_check_table_hooks: 23 callbacks suppressed [ 567.103738][T20105] x_tables: duplicate entry at hook 3 [ 567.172696][T19658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.298071][T19658] veth0_vlan: entered promiscuous mode [ 567.578832][T19658] veth1_vlan: entered promiscuous mode [ 567.736811][T19658] veth0_macvtap: entered promiscuous mode [ 567.763498][T19658] veth1_macvtap: entered promiscuous mode [ 567.917111][T19658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.997497][T19658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.046483][ T8680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.055591][ T8680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.161776][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.172624][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.877042][T20150] netlink: 'syz.4.3447': attribute type 1 has an invalid length. [ 568.933299][ T8680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.933770][ T8680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.023163][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.023387][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.948698][T20178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.949130][T20178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.949594][T20178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.950007][T20178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.187969][T20192] x_tables: duplicate underflow at hook 2 [ 570.204087][T20191] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 570.344084][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.356079][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 570.367295][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 570.379570][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 570.414121][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.735144][T20227] Cannot find set identified by id 0 to match [ 572.284582][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'. [ 572.461987][ T5632] Bluetooth: hci0: command tx timeout [ 572.489662][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3471'. [ 573.066602][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3475'. [ 573.077067][T20281] netlink: 'syz.0.3475': attribute type 3 has an invalid length. [ 573.085236][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3475'. [ 573.099601][T20281] netlink: 'syz.0.3475': attribute type 3 has an invalid length. [ 573.475692][T20300] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.3478'. [ 573.764461][T20308] netlink: 'syz.4.3481': attribute type 24 has an invalid length. [ 574.541725][ T5632] Bluetooth: hci0: command tx timeout [ 574.768090][T20348] syzkaller0: entered promiscuous mode [ 574.768136][T20348] syzkaller0: entered allmulticast mode [ 574.875391][T20355] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3486'. [ 575.302069][T20341] syzkaller1: entered promiscuous mode [ 575.307871][T20341] syzkaller1: entered allmulticast mode [ 575.323517][T20365] syzkaller0: entered promiscuous mode [ 575.323560][T20365] syzkaller0: entered allmulticast mode [ 575.342505][T20355] tipc: Started in network mode [ 575.351388][T20355] tipc: Node identity c230901a75e8, cluster identity 4711 [ 575.363332][T20355] tipc: Enabled bearer , priority 0 [ 575.486408][T20197] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.495095][T20197] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.506886][T20197] bridge_slave_0: entered allmulticast mode [ 575.508839][T20197] bridge_slave_0: entered promiscuous mode [ 575.526360][T20197] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.533895][T20197] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.541188][T20197] bridge_slave_1: entered allmulticast mode [ 575.551311][T20197] bridge_slave_1: entered promiscuous mode [ 575.599636][T20197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.612735][T20197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.640533][T20346] tipc: Resetting bearer [ 575.728930][T20346] tipc: Disabling bearer [ 575.974390][T20197] team0: Port device team_slave_0 added [ 575.999697][T20197] team0: Port device team_slave_1 added [ 576.109361][T20197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.119218][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.119276][T20197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.166625][T20197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.173887][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.200441][T20197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.621816][ T5632] Bluetooth: hci0: command tx timeout [ 576.693925][T20197] hsr_slave_0: entered promiscuous mode [ 576.701149][T20197] hsr_slave_1: entered promiscuous mode [ 576.707918][T20197] debugfs: 'hsr0' already exists in 'hsr' [ 576.715302][T20197] Cannot create hsr debugfs directory [ 577.258544][T20421] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3498'. [ 577.678104][T20197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.694225][T20197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.694751][T20197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.070829][T20447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3502'. [ 578.326668][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3504'. [ 578.331433][T20454] netlink: 'syz.1.3504': attribute type 32 has an invalid length. [ 578.386570][T20197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.397185][T20197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.407749][T20197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.635294][T20463] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 578.722100][ T5632] Bluetooth: hci0: command tx timeout [ 578.784731][T20197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.795383][T20197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.806118][T20197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.939820][T20468] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 579.313406][T20197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.313918][T20197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.314000][T20197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 580.357698][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3511'. [ 580.997453][T20197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 581.050761][T20197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.067058][T20197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 581.143417][T20197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.171896][T20197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 581.269306][T20197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.323022][T20197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 581.402977][T20197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.774617][T20542] tap0: tun_chr_ioctl cmd 1074025676 [ 581.774666][T20542] tap0: owner set to 0 [ 581.877935][T20551] tipc: Enabling of bearer rejected, failed to enable media [ 582.229797][T20197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.257104][T20197] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.278404][T20564] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 582.320008][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.320235][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.419141][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.419296][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.878706][T20579] netlink: 'syz.4.3527': attribute type 1 has an invalid length. [ 583.373996][T20596] openvswitch: netlink: IPv6 tunnel dst address is zero [ 583.480810][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 583.545315][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 583.883858][T20622] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3538'. [ 584.091291][T20622] syzkaller1: entered promiscuous mode [ 584.091335][T20622] syzkaller1: entered allmulticast mode [ 584.137309][T20630] team0: entered promiscuous mode [ 584.137435][T20630] team_slave_0: entered promiscuous mode [ 584.137696][T20630] team_slave_1: entered promiscuous mode [ 585.265640][T20197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.400921][T20670] : renamed from bond0 (while UP) [ 585.438666][T20197] veth0_vlan: entered promiscuous mode [ 585.466400][T20197] veth1_vlan: entered promiscuous mode [ 585.694358][T20682] Bluetooth: MGMT ver 1.23 [ 585.715801][T20197] veth0_macvtap: entered promiscuous mode [ 585.769307][T20197] veth1_macvtap: entered promiscuous mode [ 586.088704][T20197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.148674][T20197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.184434][ T8679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.194487][ T6431] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.262713][ T6431] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.263824][ T6431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.450371][T20700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.876430][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.876917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.280418][ T8679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.280641][ T8679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.798955][T20773] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 588.822478][T20773] bond3: (slave lo): Enslaving as an active interface with an up link [ 588.839455][T20773] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 590.129525][T20822] netlink: 'syz.3.3580': attribute type 4 has an invalid length. [ 590.698599][T20834] netlink: 'syz.0.3584': attribute type 2 has an invalid length. [ 591.021716][T18998] Bluetooth: hci5: command 0x0406 tx timeout [ 591.061001][T20845] xt_hashlimit: max too large, truncated to 1048576 [ 591.069760][T20845] No such timeout policy "syz1" [ 591.382623][T20834] : entered promiscuous mode [ 591.819380][T20859] syz_tun: entered allmulticast mode [ 592.000697][T20870] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3590'. [ 592.496199][T20881] veth1_to_bond: entered allmulticast mode [ 592.513203][T20881] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3595'. [ 592.537985][T20886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3597'. [ 592.538628][T20886] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 592.560829][T20881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 592.614769][T20882] can: request_module (can-proto-0) failed. [ 592.774683][T20881] veth1_to_bond (unregistering): left allmulticast mode [ 592.832948][T20896] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 592.868743][T20881] : (slave bond_slave_1): Releasing backup interface [ 593.095566][T20855] syz_tun: left allmulticast mode [ 593.298684][T20909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3601'. [ 593.970360][T20937] netlink: 'syz.4.3609': attribute type 2 has an invalid length. [ 593.970404][T20937] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3609'. [ 594.258912][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 594.774830][T20966] netlink: 'syz.1.3617': attribute type 39 has an invalid length. [ 595.332633][T20808] IPVS: starting estimator thread 0... [ 595.422474][T20984] IPVS: using max 25 ests per chain, 60000 per kthread [ 595.685919][T20998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3626'. [ 596.045338][T21004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3628'. [ 596.067925][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 596.932789][T21046] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 597.040974][T21049] __nla_validate_parse: 2 callbacks suppressed [ 597.041506][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3638'. [ 597.043940][T21052] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 597.355217][T21070] netlink: 'syz.2.3643': attribute type 2 has an invalid length. [ 597.371336][T21069] netlink: 'syz.2.3643': attribute type 2 has an invalid length. [ 597.389672][T21069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3643'. [ 597.475612][T21078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3646'. [ 597.558798][T21069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3643'. [ 597.800560][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'. [ 598.604049][T21114] xt_l2tp: v2 sid > 0xffff: 1114112 [ 599.272174][T21131] netlink: 'syz.4.3657': attribute type 1 has an invalid length. [ 601.000206][T21091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.010574][T21099] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.3652'. [ 601.010618][T21099] netlink: 'syz.2.3652': attribute type 2 has an invalid length. [ 601.334986][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3661'. [ 601.361921][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3662'. [ 601.374050][T21151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3664'. [ 601.396446][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3664'. [ 601.557323][T21149] veth0_vlan: left promiscuous mode [ 602.056546][T21174] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 602.056705][T21174] gretap1: entered promiscuous mode [ 602.056769][T21174] gretap1: entered allmulticast mode [ 602.152421][T20807] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.153453][T20807] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.153515][T20807] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.153624][T20807] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.156097][T21176] __nla_validate_parse: 7 callbacks suppressed [ 602.156149][T21176] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3672'. [ 602.251939][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3673'. [ 602.273563][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3673'. [ 602.433608][T21182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3675'. [ 602.738428][T21189] netlink: 'syz.1.3677': attribute type 2 has an invalid length. [ 603.193743][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 603.208188][T21213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3682'. [ 603.375323][T21223] ip_tables: iptables: counters copy to user failed while replacing table [ 604.125121][T21232] netlink: 'syz.1.3688': attribute type 9 has an invalid length. [ 604.125172][T21232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3688'. [ 604.149969][T21232] netlink: 'syz.1.3688': attribute type 9 has an invalid length. [ 604.150023][T21232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3688'. [ 605.751901][T21202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.806433][T21228] netlink: 'syz.0.3686': attribute type 11 has an invalid length. [ 605.806490][T21228] netlink: 'syz.0.3686': attribute type 4 has an invalid length. [ 605.806524][T21228] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3686'. [ 606.152054][T21244] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3691'. [ 606.428805][T21261] batman_adv: batadv0: Adding interface: veth0 [ 606.428849][T21261] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.428998][T21261] batman_adv: batadv0: Interface activated: veth0 [ 606.733719][T21246] syzkaller1: entered promiscuous mode [ 606.733764][T21246] syzkaller1: entered allmulticast mode [ 607.279868][ T31] audit: type=1800 audit(1788554389.901:6): pid=21264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3697" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 607.358653][T21264] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 607.358719][T21264] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 607.358774][T21264] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 607.565248][T21283] netlink: 'syz.4.3700': attribute type 1 has an invalid length. [ 607.581476][T21283] __nla_validate_parse: 2 callbacks suppressed [ 607.581588][T21283] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3700'. [ 607.689823][T21287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3700'. [ 607.699751][T21264] syz.3.3697 (21264) used greatest stack depth: 17984 bytes left [ 607.756621][T21283] veth3: entered promiscuous mode [ 608.034694][T21298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.252223][T21298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.295082][T21315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3707'. [ 608.438298][T21304] ip6_vti0: entered promiscuous mode [ 608.464878][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 608.684857][T21325] netlink: 'syz.1.3711': attribute type 1 has an invalid length. [ 609.102389][T21331] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 609.139399][T21328] syzkaller1: entered promiscuous mode [ 609.139464][T21328] syzkaller1: entered allmulticast mode [ 609.356037][T21356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3713'. [ 609.727308][T21361] syz_tun: entered allmulticast mode [ 609.970434][T21360] lo: entered allmulticast mode [ 610.020394][T21359] syz_tun: left allmulticast mode [ 610.512357][T21387] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 610.532052][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'. [ 610.692992][T21403] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 610.750216][T21390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3724'. [ 610.793056][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 610.835069][T21398] syzkaller0: entered promiscuous mode [ 610.840753][T21398] syzkaller0: entered allmulticast mode [ 610.899339][T21413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3728'. [ 610.914550][T21413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3728'. [ 611.505724][T21437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.613142][T21422] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.681501][T21448] Bluetooth: MGMT ver 1.23 [ 611.681768][T21448] Bluetooth: hci0: unsupported parameter 5135 [ 611.681831][T21448] Bluetooth: hci0: unsupported parameter 8192 [ 611.681850][T21448] Bluetooth: hci0: unsupported parameter 5135 [ 611.681868][T21448] Bluetooth: hci0: unsupported parameter 8192 [ 612.009477][T21461] netlink: 'syz.2.3737': attribute type 21 has an invalid length. [ 612.021303][T21462] netlink: 'syz.2.3737': attribute type 21 has an invalid length. [ 612.029099][T21433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.153664][T21492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.282823][T21501] __nla_validate_parse: 8 callbacks suppressed [ 613.289221][T21501] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3748'. [ 613.777917][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 613.793003][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 614.141271][T21543] veth1_macvtap: left promiscuous mode [ 614.219723][T21548] syz_tun: entered allmulticast mode [ 614.296127][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3761'. [ 614.306027][T21553] netlink: 'syz.4.3761': attribute type 5 has an invalid length. [ 614.306054][T21553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3761'. [ 614.335098][T21512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.544767][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.775628][T21566] tc_dump_action: action bad kind [ 614.813897][T21557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3762'. [ 617.333331][T21541] syz_tun: left allmulticast mode [ 617.500413][T21591] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3771'. [ 617.673345][T21566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.018555][T21603] netlink: 'syz.1.3774': attribute type 1 has an invalid length. [ 618.220024][T21615] netlink: 'syz.3.3777': attribute type 1 has an invalid length. [ 619.656257][T21627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3779'. [ 621.434553][T21603] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 621.459824][T21615] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 621.523767][T21627] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 621.741849][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 621.856335][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 621.868143][T21641] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3782'. [ 621.899695][T21641] netlink: Invalid conntrack timeout [ 621.899750][T21641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.966186][T21635] bond2: Removing last ns target with arp_interval on [ 621.975033][T21636] syz_tun: entered allmulticast mode [ 622.049233][T21645] dvmrp8: entered allmulticast mode [ 622.071953][T21634] syz_tun: left allmulticast mode [ 622.334300][T21656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3787'. [ 622.360133][T21658] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.932041][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3795'. [ 622.960617][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3795'. [ 624.238918][T21710] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3805'. [ 624.371899][T21716] IPv6: sit1: Disabled Multicast RS [ 624.787017][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.145619][T21731] vlan1: entered promiscuous mode [ 625.155796][T21731] bridge0: entered promiscuous mode [ 625.162921][T21731] vlan1: entered allmulticast mode [ 625.168469][T21731] bridge0: entered allmulticast mode [ 625.251837][T21736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3810'. [ 625.569295][T21752] netlink: 'syz.2.3814': attribute type 21 has an invalid length. [ 625.578643][T21752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3814'. [ 625.858887][T21762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.911888][T21766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3818'. [ 627.788391][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3823'. [ 628.660555][T21754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.956273][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3827'. [ 628.978415][T21825] netlink: 'syz.2.3827': attribute type 16 has an invalid length. [ 629.335172][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3833'. [ 629.347366][T21841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3833'. [ 629.647419][T21848] netlink: 'syz.4.3834': attribute type 3 has an invalid length. [ 629.655381][T21848] netlink: 'syz.4.3834': attribute type 1 has an invalid length. [ 629.655404][T21848] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3834'. [ 629.708171][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3836'. [ 629.793274][T21854] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3834'. [ 630.079772][T21867] syzkaller0: entered allmulticast mode [ 630.643767][T21857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.817838][T21883] __nla_validate_parse: 1 callbacks suppressed [ 630.818413][T21883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3844'. [ 631.115153][T21895] netlink: 'syz.2.3845': attribute type 16 has an invalid length. [ 631.115208][T21895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3845'. [ 631.115266][T21895] veth0_macvtap: entered allmulticast mode [ 631.489912][T21901] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3849'. [ 631.997265][T21915] ip6t_srh: unknown srh match flags 4000 [ 632.039957][T21924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3854'. [ 632.199265][T21934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3854'. [ 633.074528][T21949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.111895][T21949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3859'. [ 633.184944][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3861'. [ 633.361376][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3862'. [ 633.380809][T21969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3865'. [ 633.786056][T21979] netlink: 'syz.0.3868': attribute type 21 has an invalid length. [ 633.786103][T21979] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.838884][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3880'. [ 635.180051][T22019] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 635.198025][T22019] bond1 (unregistering): Released all slaves [ 635.363134][T22047] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.387973][T22033] syzkaller1: entered promiscuous mode [ 636.018351][T22068] netlink: 'syz.1.3893': attribute type 1 has an invalid length. [ 636.134215][T22068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.199357][T22068] bond4: (slave geneve3): making interface the new active one [ 636.221935][T22068] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 636.262604][T22075] __nla_validate_parse: 1 callbacks suppressed [ 636.266821][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 636.349826][T22081] veth0_to_bridge: entered allmulticast mode [ 636.381317][T22083] syzkaller0: entered promiscuous mode [ 636.387174][T22083] syzkaller0: entered allmulticast mode [ 636.583008][T22090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'. [ 636.658067][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3898'. [ 636.673133][T22095] netlink: NAT attribute has 5 unknown bytes [ 636.680020][T22095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.784127][T22104] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3902'. [ 636.879552][T22072] veth0_to_bridge: left allmulticast mode [ 637.830184][T22139] netlink: 'syz.4.3912': attribute type 12 has an invalid length. [ 638.061349][ T31] audit: type=1107 audit(1788554420.681:7): pid=22147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4⻥PHoBaW)y%}*HZڥ`8ω4ퟟO|2Ku' [ 638.150507][T22148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3914'. [ 638.175428][T22148] ip6gre1: entered promiscuous mode [ 638.180785][T22148] ip6gre1: entered allmulticast mode [ 638.242746][T22154] syzkaller1: entered promiscuous mode [ 638.242790][T22154] syzkaller1: entered allmulticast mode [ 639.170296][T22182] openvswitch: netlink: Unknown nsh attribute 0 [ 639.523531][T22190] bridge2: entered promiscuous mode [ 639.523595][T22190] bridge2: entered allmulticast mode [ 639.759188][T22208] Cannot find set identified by id 4 to match [ 640.295883][T22223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3930'. [ 640.369456][T22223] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3930'. [ 640.370100][T22223] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3930'. [ 640.374714][T22223] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 640.733211][T22232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3931'. [ 641.209250][T22248] netlink: 'syz.2.3937': attribute type 2 has an invalid length. [ 641.218255][T22248] netlink: 'syz.2.3937': attribute type 2 has an invalid length. [ 641.232145][T22250] syzkaller0: entered promiscuous mode [ 641.232185][T22250] syzkaller0: entered allmulticast mode [ 641.517041][T22263] netlink: 'syz.1.3941': attribute type 1 has an invalid length. [ 641.797444][T22265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3942'. [ 641.814529][T22266] bond5: (slave geneve4): making interface the new active one [ 641.823489][T22266] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 641.839484][T20817] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.872185][T20817] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.872489][T20817] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.873112][T20817] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 642.399750][T22282] netlink: 'syz.2.3946': attribute type 32 has an invalid length. [ 642.657738][T22295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.916094][T22296] netlink: 'syz.1.3948': attribute type 1 has an invalid length. [ 642.916902][T22296] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3948'. [ 643.518742][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 643.532524][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 643.566366][T22324] netlink: 'syz.1.3955': attribute type 29 has an invalid length. [ 643.586131][T22324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 643.610187][T22330] openvswitch: netlink: Multiple metadata blocks provided [ 643.635774][T22331] openvswitch: netlink: Multiple metadata blocks provided [ 643.751857][T22330] sctp: [Deprecated]: syz.3.3958 (pid 22330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.751857][T22330] Use struct sctp_sack_info instead [ 643.888856][T22334] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.406893][T22358] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 644.664516][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3968'. [ 644.766681][T22376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3972'. [ 644.777615][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'. [ 644.894761][T22376] IPv6: Can't replace route, no match found [ 645.139107][T22390] syzkaller1: entered promiscuous mode [ 645.139154][T22390] syzkaller1: entered allmulticast mode [ 645.336203][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 645.336251][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 645.709388][T22416] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.813700][T22429] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 646.299685][T22448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.316933][T22442] netlink: 'syz.0.3983': attribute type 4 has an invalid length. [ 646.393541][T22442] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 646.737574][T22467] xt_LOG: prefix is not null-terminated [ 646.804460][T22459] __nla_validate_parse: 1 callbacks suppressed [ 646.814123][T22459] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3989'. [ 647.348500][T18998] Bluetooth: hci2: command 0x0406 tx timeout [ 647.848367][T22475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.059899][T22507] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4001'. [ 648.115894][T22507] gretap0: entered promiscuous mode [ 648.186094][T22506] netlink: 'syz.1.4000': attribute type 2 has an invalid length. [ 648.186138][T22506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'. [ 648.337127][T22507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.402126][T22517] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4001'. [ 648.523093][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 649.979513][T22573] xt_hashlimit: size too large, truncated to 1048576 [ 650.696089][T22583] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4013'. [ 650.966850][T22592] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4014'. [ 650.988888][T22596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4014'. [ 651.283558][T22602] v: renamed from veth0_vlan (while UP) [ 651.732982][T22618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4022'. [ 651.733063][T22618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4022'. [ 652.566210][T20807] IPVS: starting estimator thread 0... [ 652.585983][T22639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4027'. [ 652.586096][T22639] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 652.663076][T22640] IPVS: using max 33 ests per chain, 79200 per kthread [ 653.969863][T22679] netlink: 'syz.0.4037': attribute type 3 has an invalid length. [ 653.969913][T22679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4037'. [ 654.125813][T22682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4039'. [ 654.152997][T22682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4039'. [ 654.508136][T22693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.974049][T22712] netlink: 'syz.2.4045': attribute type 23 has an invalid length. [ 655.257129][T22714] xt_hashlimit: size too large, truncated to 1048576 [ 655.516242][T22721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 655.600283][T22720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4049'. [ 655.600351][T22720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4049'. [ 655.785469][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'. [ 656.108287][T22745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.193294][T22787] nftables ruleset with unbound set [ 657.249386][T22787] ip6gre1: entered allmulticast mode [ 657.580088][T22796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.859646][T22798] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4068'. [ 658.872445][T22825] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 658.886296][T22825] bond3 (unregistering): Released all slaves [ 659.170094][T22829] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4074'. [ 659.959618][T22782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.260042][T22838] netlink: 'syz.3.4076': attribute type 4 has an invalid length. [ 660.260087][T22838] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4076'. [ 660.366495][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4080'. [ 660.468133][T22849] netlink: 'syz.2.4079': attribute type 1 has an invalid length. [ 660.563362][T22846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4079'. [ 660.936151][T22856] bond1: (slave veth0_to_bond): making interface the new active one [ 660.967943][T22856] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 661.399657][T22870] syzkaller0: entered promiscuous mode [ 661.405483][T22870] syzkaller0: entered allmulticast mode [ 661.429965][T22870] tipc: Started in network mode [ 661.430022][T22870] tipc: Node identity f6d85092efb5, cluster identity 4711 [ 661.451646][T22870] tipc: Enabled bearer , priority 0 [ 661.558149][T22877] tipc: Resetting bearer [ 661.578852][T22880] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 661.720339][T22867] tipc: Resetting bearer [ 661.890958][T22867] tipc: Disabling bearer [ 662.117112][T22888] netlink: 'syz.2.4089': attribute type 23 has an invalid length. [ 662.550204][T22900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4092'. [ 662.707578][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 662.858575][T22915] netlink: 'syz.1.4097': attribute type 2 has an invalid length. [ 663.203575][T22926] sctp: [Deprecated]: syz.3.4102 (pid 22926) Use of int in max_burst socket option deprecated. [ 663.203575][T22926] Use struct sctp_assoc_value instead [ 663.207557][T22925] sctp: [Deprecated]: syz.3.4102 (pid 22925) Use of int in max_burst socket option deprecated. [ 663.207557][T22925] Use struct sctp_assoc_value instead [ 663.402719][T22934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.463105][T22934] bridge3: entered promiscuous mode [ 663.468674][T22934] bridge3: entered allmulticast mode [ 663.708940][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 663.857180][T22955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4108'. [ 664.060204][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.060428][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.060650][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.091337][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.091786][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.091979][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.092163][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.092341][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4104'. [ 664.696445][T22979] netlink: 'syz.3.4116': attribute type 1 has an invalid length. [ 664.998568][T22979] bond3: entered promiscuous mode [ 664.999042][T22979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.035847][T22988] netlink: 'syz.2.4117': attribute type 10 has an invalid length. [ 665.085137][T22986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.120016][T22986] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 665.132129][T22986] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 665.154317][T22986] bond3: (slave xfrm1): making interface the new active one [ 665.154370][T22986] xfrm1: entered promiscuous mode [ 665.193336][T22986] xfrm1: left promiscuous mode [ 665.362681][T22984] team0 (unregistering): Port device team_slave_0 removed [ 665.423770][T22984] team0 (unregistering): Port device team_slave_1 removed [ 666.050524][T23021] mac80211_hwsim hwsim38 : renamed from wlan1 (while UP) [ 666.505543][T23038] tipc: Failed to remove unknown binding: 66,0,0/0:660866428/660866429 [ 666.513304][T23038] tipc: Failed to remove unknown binding: 66,0,0/0:660866428/660866429 [ 666.563630][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.311918][T23066] netlink: 'syz.1.4146': attribute type 2 has an invalid length. [ 667.330933][T23069] netlink: 'syz.1.4146': attribute type 2 has an invalid length. [ 667.756590][T23073] syzkaller0: entered promiscuous mode [ 667.756637][T23073] syzkaller0: entered allmulticast mode [ 668.104758][T23113] Bluetooth: hci0: unsupported parameter 5135 [ 668.105310][T23113] Bluetooth: hci0: unsupported parameter 8192 [ 668.105360][T23113] Bluetooth: hci0: unsupported parameter 5135 [ 668.105393][T23113] Bluetooth: hci0: unsupported parameter 8192 [ 668.798114][T23126] tipc: Started in network mode [ 668.798167][T23126] tipc: Node identity ea28f09a4d21, cluster identity 4711 [ 668.798353][T23126] tipc: Enabled bearer , priority 0 [ 668.825684][T23126] syzkaller0: entered promiscuous mode [ 668.825730][T23126] syzkaller0: entered allmulticast mode [ 669.126234][T23144] __nla_validate_parse: 63 callbacks suppressed [ 669.126292][T23144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'. [ 669.232302][T23124] tipc: Resetting bearer [ 669.388853][T23124] tipc: Disabling bearer [ 669.551127][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'. [ 669.551288][T23154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.822860][T23154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.775179][T23170] netlink: 'syz.3.4169': attribute type 4 has an invalid length. [ 670.775224][T23170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4169'. [ 670.801279][T23170] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 671.493364][T23204] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4183'. [ 671.514397][T23198] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4183'. [ 671.888291][T23221] netlink: 'syz.0.4187': attribute type 1 has an invalid length. [ 672.045525][T23221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 672.140903][T23221] netlink: 'syz.0.4187': attribute type 10 has an invalid length. [ 672.140974][T23221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'. [ 672.297804][T23226] bond5: (slave veth5): Enslaving as an active interface with a down link [ 672.437510][T23235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4189'. [ 672.783992][T23237] macsec1: entered promiscuous mode [ 672.943569][T18998] Bluetooth: hci1: command 0x0406 tx timeout [ 672.957855][T23247] syzkaller0: entered promiscuous mode [ 672.958197][T23247] syzkaller0: entered allmulticast mode [ 673.088488][T23257] xt_cgroup: path and classid specified [ 673.100052][T23257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4196'. [ 673.114489][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'. [ 673.129253][T23257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4196'. [ 674.557153][ T5632] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 674.557207][ T5632] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 674.760409][T23321] xt_connbytes: Forcing CT accounting to be enabled [ 674.769800][T23321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.331111][T23343] tipc: Enabling of bearer rejected, failed to enable media [ 675.445863][T23343] set match dimension is over the limit! [ 675.506807][T23343] __nla_validate_parse: 2 callbacks suppressed [ 675.507271][T23343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4213'. [ 675.515297][T23343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4213'. [ 675.689142][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4213'. [ 675.845713][T23365] netlink: 'syz.3.4219': attribute type 39 has an invalid length. [ 676.265932][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'. [ 678.288581][T23343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.530981][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4226'. [ 679.223534][T23425] macvlan0: entered promiscuous mode [ 679.553185][T23441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4237'. [ 679.553248][T23441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4237'. [ 679.649286][T23442] netlink: 'syz.4.4238': attribute type 10 has an invalid length. [ 679.799812][T23442] dummy0: entered promiscuous mode [ 679.919636][T23442] team0: Port device dummy0 added [ 680.144305][T23456] gre0: entered promiscuous mode [ 680.149420][T23456] gre0: entered allmulticast mode [ 680.310280][T23458] ip6t_hbh: unknown flags 38 [ 680.378305][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4243'. [ 680.378535][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4243'. [ 680.688932][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4249'. [ 680.875199][T23474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4247'. [ 680.888673][T23468] netlink: 'syz.3.4249': attribute type 2 has an invalid length. [ 681.287875][T23481] netlink: 'syz.3.4252': attribute type 1 has an invalid length. [ 681.287919][T23481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4252'. [ 682.472241][T23481] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4252'. [ 682.482539][T23481] openvswitch: netlink: Message has 4 unknown bytes. [ 682.631695][T23512] syzkaller0: entered promiscuous mode [ 682.632751][T23512] syzkaller0: entered allmulticast mode [ 682.691962][T23520] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 683.409928][T23536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.566859][T23539] bridge4: entered promiscuous mode [ 683.566921][T23539] bridge4: entered allmulticast mode [ 683.683763][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4272'. [ 683.775243][T23550] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 683.800976][T23553] netlink: 'syz.3.4274': attribute type 32 has an invalid length. [ 683.809526][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4274'. [ 683.811325][T23551] netlink: 'syz.3.4274': attribute type 32 has an invalid length. [ 683.811383][T23551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4274'. [ 683.965435][T23551] bond4: Setting coupled_control to off (0) [ 684.126724][T23553] bond5: Setting coupled_control to off (0) [ 684.137208][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'. [ 684.248979][T23564] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 684.324866][T23564] bond6 (unregistering): Released all slaves [ 684.722916][T23591] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4282'. [ 685.211320][T23595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4283'. [ 685.225442][T23591] smbdirect: ib_dev[syz0] renamed to [syz2] [ 686.341564][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.951153][T23609] __nla_validate_parse: 1 callbacks suppressed [ 686.961390][T23609] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4286'. [ 687.273264][T23616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 687.273307][T23616] IPv6: NLM_F_CREATE should be set when creating new route [ 687.861867][T23639] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4298'. [ 687.876135][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 687.899801][T23639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4298'. [ 687.927496][T23639] netlink: 'syz.1.4298': attribute type 1 has an invalid length. [ 687.927573][T23639] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4298'. [ 688.234012][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.235455][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.236831][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.238186][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.239557][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.240908][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.302822][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.306033][T23658] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4302'. [ 688.322537][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.332215][T23651] netlink: 'syz.3.4301': attribute type 25 has an invalid length. [ 688.353597][T23652] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4301'. [ 688.428702][T23651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4301'. [ 688.428765][T23651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4301'. [ 688.430026][T23651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4301'. [ 688.856033][T23669] batman_adv: batadv0: Interface deactivated: veth0 [ 688.856440][T23669] batman_adv: batadv0: Removing interface: veth0 [ 688.892783][T23669] bridge0: port 3(veth0) entered blocking state [ 688.904402][T23669] bridge0: port 3(veth0) entered disabled state [ 688.914033][T23669] veth0: entered allmulticast mode [ 688.927555][T23669] veth0: entered promiscuous mode [ 688.946689][T23669] bridge0: port 3(veth0) entered blocking state [ 688.946832][T23669] bridge0: port 3(veth0) entered forwarding state [ 689.129404][T23677] erspan0: entered promiscuous mode [ 689.184698][T23677] vlan1: entered promiscuous mode [ 689.410063][T23678] vlan1: entered promiscuous mode [ 689.814472][T23695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.735823][ T31] audit: type=1804 audit(1788554473.361:8): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4321" name="/newroot/138/cgroup.controllers" dev="tmpfs" ino=726 res=1 errno=0 [ 690.758802][ T31] audit: type=1800 audit(1788554473.361:9): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4321" name="cgroup.controllers" dev="tmpfs" ino=726 res=0 errno=0 [ 692.190949][T23770] __nla_validate_parse: 7 callbacks suppressed [ 692.191010][T23770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4338'. [ 692.368595][T23777] sit1: entered promiscuous mode [ 692.368641][T23777] sit1: entered allmulticast mode [ 692.840687][T23789] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4344'. [ 692.999132][T23806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4350'. [ 693.014679][T23803] tipc: Failed to obtain node identity [ 693.014725][T23803] tipc: Enabling of bearer rejected, failed to enable media [ 693.132211][T23809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4351'. [ 693.617721][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4355'. [ 694.049194][T23833] bond6: entered allmulticast mode [ 694.060289][T23833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 694.642984][T23864] validate_nla: 8 callbacks suppressed [ 694.648674][T23864] netlink: 'syz.1.4363': attribute type 83 has an invalid length. [ 694.656764][T23865] netlink: 'syz.1.4363': attribute type 83 has an invalid length. [ 695.353527][T23838] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.354695][T23838] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.986401][T23838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.068946][T23838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.605077][T23838] veth0_macvtap: left allmulticast mode [ 696.979762][T23838] sit1: left promiscuous mode [ 696.990446][T23838] sit1: left allmulticast mode [ 697.177911][T23851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.194457][T20798] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.194515][T20798] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.194557][T20798] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.194598][T20798] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.241591][T23850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.276681][T23876] ------------[ cut here ]------------ [ 697.276725][T23876] verifier bug: backtracking misuse [ 697.276743][T23876] WARNING: kernel/bpf/backtrack.c:819 at bpf_mark_chain_precision+0x5c90/0x7c20, CPU#0: syz.2.4368/23876 [ 697.299329][T23876] Modules linked in: [ 697.304225][T23876] CPU: 0 UID: 0 PID: 23876 Comm: syz.2.4368 Not tainted syzkaller #0 PREEMPT(full) [ 697.314880][T23876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.325105][T23876] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 697.331822][T23876] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 697.352204][T23876] RSP: 0018:ffffc9000fc0f220 EFLAGS: 00010283 [ 697.358400][T23876] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 697.367003][T23876] RDX: ffffc90004611000 RSI: 00000000000044f1 RDI: ffffffff907e1490 [ 697.375137][T23876] RBP: 0000000000000003 R08: ffff88803b0eddc0 R09: 0000000000000003 [ 697.383533][T23876] R10: 0000000000000007 R11: 0000000000000002 R12: ffff88802b90f850 [ 697.391578][T23876] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 697.399585][T23876] FS: 00007f75b6f246c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 697.409320][T23876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.416346][T23876] CR2: 000000110c2e9508 CR3: 0000000074820000 CR4: 00000000003526f0 [ 697.424820][T23876] Call Trace: [ 697.428226][T23876] [ 697.431317][T23876] ? update_loop_inline_state+0x22a/0x610 [ 697.437232][T23876] do_check_insn+0x12c6d/0x17d70 [ 697.442301][T23876] ? __pfx_do_check_insn+0x10/0x10 [ 697.447503][T23876] ? verbose+0x11d/0x1a0 [ 697.452224][T23876] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 697.458178][T23876] ? __pfx_verbose+0x10/0x10 [ 697.462856][T23876] ? bpf_vlog_reset+0x2aa/0x340 [ 697.467760][T23876] ? print_insn_state+0x106/0x170 [ 697.472907][T23876] do_check_common+0x3c19/0x5d30 [ 697.477953][T23876] ? __pfx_do_check_common+0x10/0x10 [ 697.483694][T23876] ? __pfx_verbose+0x10/0x10 [ 697.488345][T23876] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 697.494314][T23876] bpf_check+0x2639/0x2e10 [ 697.498790][T23876] ? ktime_get_with_offset+0x93/0x2d0 [ 697.504565][T23876] ? __pfx_bpf_check+0x10/0x10 [ 697.510048][T23876] ? bpf_obj_name_cpy+0x194/0x1e0 [ 697.515874][T23876] bpf_prog_load+0x14d6/0x1c20 [ 697.520720][T23876] ? __pfx_bpf_prog_load+0x10/0x10 [ 697.525949][T23876] ? do_raw_spin_lock+0x100/0x2f0 [ 697.531028][T23876] __sys_bpf+0xd0d/0xd90 [ 697.535386][T23876] ? do_raw_spin_lock+0x100/0x2f0 [ 697.540461][T23876] ? __pfx___sys_bpf+0x10/0x10 [ 697.545660][T23876] ? do_futex+0x3e7/0x4e0 [ 697.550043][T23876] ? do_raw_spin_lock+0x100/0x2f0 [ 697.555253][T23876] ? rcu_is_watching+0x16/0xb0 [ 697.560073][T23876] __x64_sys_bpf+0xba/0xd0 [ 697.564690][T23876] do_syscall_64+0x166/0x520 [ 697.569461][T23876] ? trace_irq_disable+0x3b/0x140 [ 697.574922][T23876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.581048][T23876] ? clear_bhb_loop+0x70/0xc0 [ 697.585951][T23876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.592179][T23876] RIP: 0033:0x7f75b5f9e159 [ 697.596631][T23876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.617493][T23876] RSP: 002b:00007f75b6f24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.626382][T23876] RAX: ffffffffffffffda RBX: 00007f75b6225fa0 RCX: 00007f75b5f9e159 [ 697.634481][T23876] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 697.642884][T23876] RBP: 00007f75b6035024 R08: 0000000000000000 R09: 0000000000000000 [ 697.650902][T23876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.659018][T23876] R13: 00007f75b6226038 R14: 00007f75b6225fa0 R15: 00007ffdf162e048 [ 697.667129][T23876] [ 697.670208][T23876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 697.677516][T23876] CPU: 0 UID: 0 PID: 23876 Comm: syz.2.4368 Not tainted syzkaller #0 PREEMPT(full) [ 697.686929][T23876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.697021][T23876] Call Trace: [ 697.700341][T23876] [ 697.703299][T23876] vpanic+0x56d/0xa60 [ 697.707337][T23876] ? __pfx__printk+0x10/0x10 [ 697.711965][T23876] ? __pfx_vpanic+0x10/0x10 [ 697.716507][T23876] ? is_bpf_text_address+0x292/0x2b0 [ 697.721836][T23876] ? is_bpf_text_address+0x26/0x2b0 [ 697.727098][T23876] panic+0xc5/0xd0 [ 697.730905][T23876] ? __pfx_panic+0x10/0x10 [ 697.735390][T23876] __warn+0x315/0x4c0 [ 697.739422][T23876] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 697.745364][T23876] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 697.751297][T23876] __report_bug+0x276/0x570 [ 697.755968][T23876] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 697.761904][T23876] ? __pfx___report_bug+0x10/0x10 [ 697.766981][T23876] ? number+0xc60/0xed0 [ 697.771250][T23876] ? __pfx_number+0x10/0x10 [ 697.775793][T23876] report_bug_entry+0x19b/0x290 [ 697.780699][T23876] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 697.786625][T23876] ? bpf_mark_chain_precision+0x5c95/0x7c20 [ 697.792557][T23876] handle_bug+0xce/0x200 [ 697.796879][T23876] exc_invalid_op+0x1a/0x50 [ 697.801448][T23876] asm_exc_invalid_op+0x1a/0x20 [ 697.806358][T23876] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 697.812908][T23876] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 697.832640][T23876] RSP: 0018:ffffc9000fc0f220 EFLAGS: 00010283 [ 697.838761][T23876] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 697.846790][T23876] RDX: ffffc90004611000 RSI: 00000000000044f1 RDI: ffffffff907e1490 [ 697.854804][T23876] RBP: 0000000000000003 R08: ffff88803b0eddc0 R09: 0000000000000003 [ 697.862810][T23876] R10: 0000000000000007 R11: 0000000000000002 R12: ffff88802b90f850 [ 697.870837][T23876] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 697.878855][T23876] ? bpf_mark_chain_precision+0x5c89/0x7c20 [ 697.884829][T23876] ? update_loop_inline_state+0x22a/0x610 [ 697.890608][T23876] do_check_insn+0x12c6d/0x17d70 [ 697.895628][T23876] ? __pfx_do_check_insn+0x10/0x10 [ 697.900813][T23876] ? verbose+0x11d/0x1a0 [ 697.905100][T23876] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 697.911063][T23876] ? __pfx_verbose+0x10/0x10 [ 697.915711][T23876] ? bpf_vlog_reset+0x2aa/0x340 [ 697.920619][T23876] ? print_insn_state+0x106/0x170 [ 697.925686][T23876] do_check_common+0x3c19/0x5d30 [ 697.930713][T23876] ? __pfx_do_check_common+0x10/0x10 [ 697.936066][T23876] ? __pfx_verbose+0x10/0x10 [ 697.940701][T23876] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 697.946578][T23876] bpf_check+0x2639/0x2e10 [ 697.951043][T23876] ? ktime_get_with_offset+0x93/0x2d0 [ 697.956481][T23876] ? __pfx_bpf_check+0x10/0x10 [ 697.961287][T23876] ? bpf_obj_name_cpy+0x194/0x1e0 [ 697.966400][T23876] bpf_prog_load+0x14d6/0x1c20 [ 697.971219][T23876] ? __pfx_bpf_prog_load+0x10/0x10 [ 697.976390][T23876] ? do_raw_spin_lock+0x100/0x2f0 [ 697.981468][T23876] __sys_bpf+0xd0d/0xd90 [ 697.985758][T23876] ? do_raw_spin_lock+0x100/0x2f0 [ 697.990828][T23876] ? __pfx___sys_bpf+0x10/0x10 [ 697.995655][T23876] ? do_futex+0x3e7/0x4e0 [ 698.000029][T23876] ? do_raw_spin_lock+0x100/0x2f0 [ 698.005113][T23876] ? rcu_is_watching+0x16/0xb0 [ 698.009911][T23876] __x64_sys_bpf+0xba/0xd0 [ 698.014379][T23876] do_syscall_64+0x166/0x520 [ 698.019008][T23876] ? trace_irq_disable+0x3b/0x140 [ 698.024061][T23876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.030174][T23876] ? clear_bhb_loop+0x70/0xc0 [ 698.034884][T23876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.040809][T23876] RIP: 0033:0x7f75b5f9e159 [ 698.045246][T23876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.064879][T23876] RSP: 002b:00007f75b6f24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.073325][T23876] RAX: ffffffffffffffda RBX: 00007f75b6225fa0 RCX: 00007f75b5f9e159 [ 698.081325][T23876] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 698.089321][T23876] RBP: 00007f75b6035024 R08: 0000000000000000 R09: 0000000000000000 [ 698.097319][T23876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.105313][T23876] R13: 00007f75b6226038 R14: 00007f75b6225fa0 R15: 00007ffdf162e048 [ 698.113317][T23876] [ 698.116962][T23876] Kernel Offset: disabled [ 698.121304][T23876] Rebooting in 86400 seconds..