last executing test programs: 1m33.440009932s ago: executing program 3 (id=1529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="375f31a3b70f4842db62dfca2f9eb4b915ef2c7210b51f2151b9dead2b48ebd70967a64c7e93a913e3b48225252aa468edac681bd6949e2a01b67a4db5b1da9c472fc5b8bfa7566e8d7684d2c660a96661245cf43ec8c63f2307972e3860cf3c49ca7f9a2e6e19f571b2bdbe9fa2cfd3943ae02f07aee521a0d95b61d69df6720be2bcdc0593e6935ad6d20e6bcad16c0ec5099fccd59684b126e92b89eeee5c1c1c98355b37ae9f9d1b", 0xaa}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="375f31a3b70f4842db62dfca2f9eb4b915ef2c7210b51f2151b9dead2b48ebd70967a64c7e93a913e3b48225252aa468edac681bd6949e2a01b67a4db5b1da9c472fc5b8bfa7566e8d7684d2c660a96661245cf43ec8c63f2307972e3860cf3c49ca7f9a2e6e19f571b2bdbe9fa2cfd3943ae02f07aee521a0d95b61d69df6720be2bcdc0593e6935ad6d20e6bcad16c0ec5099fccd59684b126e92b89eeee5c1c1c98355b37ae9f9d1b", 0xaa}], 0x1) (async) 1m32.787088338s ago: executing program 3 (id=1533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) recvmmsg(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000002f40)=""/145, 0x91}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/4067, 0xfe3}, {&(0x7f0000001c00)=""/119, 0x77}, {&(0x7f0000001c80)=""/250, 0xfa}, {&(0x7f0000001d80)=""/239, 0xef}], 0x9}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x0, 0x3b8, 0x2a8, 0x3b8, 0x1e0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @local, 0xff000000, 0xff, 'dvmrp1\x00', 'syzkaller1\x00', {}, {}, 0xc, 0x2, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x7, 0x3}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "5e95", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x2, 0x7, 0x3, 0x6, 0x6], 0x5, 0x7}, {0x3, [0x5, 0x1, 0x7, 0x3, 0x1, 0x4], 0x6, 0x3}}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff, 0x0, 'veth0_to_hsr\x00', 'veth0_vlan\x00', {0xff}, {}, 0x67, 0x0, 0x4c}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0xb, 0x4], 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x1, 0x2}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x5, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x7f, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1m32.260834837s ago: executing program 2 (id=1537): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)=""/196, 0xc4}], 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic='\x00\x00']}, 0x18}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xa89, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r8, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000600)=""/133, 0x85, 0x0, &(0x7f00000006c0)=""/173, 0xad}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x8, 0x5, 0xa, 0x1020, 0x1, 0x101, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xa4, 0x0, 0x0, 0xd241131fdd030662, 0x26, '\x00', r1, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x140000, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x596e, 0x5}, 0x10, r9, r10, 0x8, &(0x7f0000000980)=[r11, r2], &(0x7f00000009c0)=[{0x0, 0x4, 0xc, 0xa}, {0x5, 0x2, 0xd}, {0x5, 0x1, 0xf, 0x4}, {0x5, 0x5, 0x7, 0x7}, {0x7, 0x3, 0x2, 0x9}, {0x1, 0x5, 0x1, 0xb}, {0x3, 0x3, 0x10, 0x9}, {0x5, 0x2, 0x5, 0xa}], 0x10, 0x7}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r14, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r14, 0x480, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x10000, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000044) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000006800050400000000000000000a0000000000000008000500", @ANYRES32=0x1, @ANYBLOB="060007000300000010000880"], 0x38}}, 0x0) 1m32.218724351s ago: executing program 3 (id=1538): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7, 0x7, 0x80000000, 0x9, 0x80000001}, 0x14) sendto$inet6(r0, &(0x7f0000000000)="e7f777266858e6c7fd13a8737f451e80a80a82f56859f899b63e9534993081787968d641fde687202c844c2ee7cfc25cd4c5f5ef4ffcff8d3517dc5b0d4d1a259b223dca7cd07f732737864002f0109b05b575347c976713369378336fea300ac1bcbaaa0f9102284286c4124a66583a3a73b37261c96779c5823dfd677aaa986ef6e76e60eac45549692128e5bf7bc053d7b13e99712c7319fe95571e55d018d997f73efc31f5ae51718c005b1f80feb47032af98cf0a7d87e4ef454ccb436ebcd5267d153c90d65d84", 0xca, 0x8080, 0x0, 0x0) 1m31.76559578s ago: executing program 1 (id=1539): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0xa00, {0x0, 0x0, 0x100}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xa6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff3}, {0x10}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$inet6(0xa, 0x5, 0x7) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_netdev_private(r0, 0x89e1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0xa00, {0x0, 0x0, 0x100}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xa6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x40000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff3}, {0x10}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000000c0), 0x8) (async) socket$inet6(0xa, 0x5, 0x7) (async) 1m29.259009579s ago: executing program 0 (id=1541): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, 0x0, 0x40, 0x58, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="61a000fe00000000691085000000000095000000000000007240d9331442e09f3014605b4b34ea5dc91c51281f2878067191833384a03255500bcf3f"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) connect(r0, &(0x7f0000000400)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000100000001800018014000200776c61c73c0f9e0cd69759f66e3000000000000000100000"], 0x34}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r9, 0xffffe000) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus640-sse2\x00'}}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0xf}, {0xfff2, 0xc}, {0xb, 0xfff3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m29.155742764s ago: executing program 3 (id=1542): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x0, 0x84}, 0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)='\'\x00\x00\x00', 0x4) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x1}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m26.907378503s ago: executing program 2 (id=1543): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'vlan1\x00', @broadcast}) 1m26.175569547s ago: executing program 1 (id=1544): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000000040)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x440, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000ff080028000010c4153075f0"], 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 1m24.165224157s ago: executing program 0 (id=1546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c00038008000140000000001800038014000100776c616e31000000000000000000000008000240000000005c000000160a0101000b000000000000010000000900020073797a31000000000900010073797a3000000000300003802c0003801400010076657468315f746f5f626f6e4d000000140001"], 0xfc}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000aaaaaaaa1973c863778c10afaa30ffffffffffff080045f8007800000000082f9078ac1e0001e0000001000086dd00649078020000000300000000000000818f58832ef40812355f4ae3d11ba131f939f4368a035d682cd3c246c28e0086ed2c8c760c185d774a6e2c52b340b6a1d432129a7cc202c2bf8c39fa1b24aca19042cd6b94a5e2e9"], 0xca) 1m24.139540124s ago: executing program 2 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x48}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffcc1, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000810400c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4044015, &(0x7f0000000180)={0x11, 0x4, r3, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000047b274321c240080", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003da0000000000000007000200000000000197da17cff598ab14c9c814d72150c8661b41767c22a51d38cc43e69c785e2fbabe41785437db0539103372454e6b7642743090a06c0237b3d8f59df55588d7281037beeb7f3f231b7b2debb7d1c9", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r11, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 1m23.525257334s ago: executing program 1 (id=1549): unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="f08100000002"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x36, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @ldst={0x0, 0x2, 0x6, 0x8, 0x2, 0xfffffffffffffff0, 0xfffffffffffffff0}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @tail_call, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x93, &(0x7f0000000a80)=""/147, 0x41000, 0x44, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x3, 0xc70, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000bc0)=[{0x3, 0x1, 0x4, 0x7}, {0x5, 0x4, 0xb, 0x4}, {0x3, 0x4, 0xa, 0x8}, {0x1, 0x1, 0xc, 0x1}], 0x10, 0x1ff}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x80, 0x8, 0xfc, 0x1, 0x0, 0x4, 0x300}, [@RTA_PRIORITY={0x8, 0x6, 0x23f}, @RTA_DST={0x8, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4, 0x5}, &(0x7f0000000100)=0x8) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r12, 0x4c, "b43ec72bc3fb2ec7cdb3d6d64cb854a70ce55f43b77cc637bfcd091f68096c1fd822a06fea2b4119a4a386faf9045b173e07cdb1fcfa0d378919784bb54767502140d981b55a095a835aae40"}, &(0x7f0000000300)=0x54) write(0xffffffffffffffff, &(0x7f0000000000)="543c571ff2ca350a78d6178f1629b684c45735d53ec151538bd7386a41db22360619998a19019b3f942e8ac06bfa20d742e889f2e0450911a056bc55688e264fef218e0cb4c0481d97946e9a0d9be5bd49e2eb24b19fe716132df15dffefe2a2ee04cd6a03ec0fc17bf4959050c3a7d114fa469d05885697ea19ccef1775580489389f942ec8278c81a3766aa736bb6f89127e54a9eb682143c5a8faf938cc53e5c47431aea4b3be8321c5c365d6e868dda67e707a69", 0xb6) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) unshare(0x20000500) 1m21.85290069s ago: executing program 4 (id=1551): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='\n', 0xfffffffffffffdaa, 0x20000000, &(0x7f0000000300)={0xa, 0x4e20, 0xffffff01, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0xffffff04) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000002900)=0xfffffffc, 0x4) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @long}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) 1m21.211413465s ago: executing program 0 (id=1552): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000906010200000000000000000000ffff1800078014001700766c616e7e1a82102a3bcef940b0483000000000000000000000000900020073797a31000000000500010007000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) unshare(0x2040400) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000c00)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x48041) socket$inet6(0xa, 0x800, 0x87) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x80000, 0x800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/12, 0xc}], 0x3) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x1, @broadcast}, 0x6a, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 'wlan0\x00'}) 1m20.713242105s ago: executing program 4 (id=1553): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x940a505bf821a6d2, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0xccde, 0x4) listen(r1, 0x50) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a", 0x5}], 0x1}, 0x4000) 1m20.645071646s ago: executing program 1 (id=1554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x66, @empty, 0x5}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf2502202fc8", @ANYRES32=r6, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x2400c000) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x1f8, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20005}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x73}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1dd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000fb}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x221bbfbe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4004000}, 0xa0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = accept4$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) accept4$vsock_stream(r9, &(0x7f00000003c0)={0x28, 0x0, 0x2710}, 0x10, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01020000000000000000000000000900020073797a3100000000080003400000004008000a4000000000080005400000002c0900010073797a310000000014000000110001000a000000000000000000000a"], 0x6c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="06d7179aabdb", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x24000000) 1m20.226879061s ago: executing program 2 (id=1555): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r1, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 1m18.874667421s ago: executing program 0 (id=1556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdfe0000010200010008000600fe7f00000c0014009320fbecc6a0c1fe"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000007c0)) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000cc0)={0x460, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfcd}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) connect$nfc_llcp(r2, &(0x7f00000005c0)={0x27, r3, 0x1, 0x4, 0x0, 0xff, "3528ff87a6a05a1f09fc70f891b2c6f1820075691c1a86279f345f4197d50454f9a61767a76256582ff49960f3d39616300938b628c1148ebf9df26a38601c", 0x9}, 0x60) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="080029bd7000fbdbdf2559000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="080029bd7000fbdbdf2559000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x700, 0x20, 0x1fa, 0x4, {{0x30, 0x4, 0x1, 0x3e, 0xc0, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @remote, {[@timestamp={0x44, 0x2c, 0x9b, 0x0, 0x8, [0x6, 0xffffffff, 0x8, 0x0, 0x7ff, 0x8, 0x793, 0x0, 0x100, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x8d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x1c, 0xb8, 0x1, 0x2, [{@private=0xa010101, 0x400}, {@multicast1, 0x26b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x54, 0x98, 0x1, 0x6, [{@private=0xa010100, 0x80000001}, {@loopback, 0x800}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x2}, {@local, 0x5}, {@broadcast, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}, {@remote, 0x3}]}]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0xd8, 0x24, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x1, 0x8}, {0xffff, 0xfff2}}, [@q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x480}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000084}, 0x40004) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0xd8, 0x24, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x1, 0x8}, {0xffff, 0xfff2}}, [@q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x480}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000084}, 0x40004) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x8040000}, 0xc000) 1m17.620580766s ago: executing program 4 (id=1557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) 1m16.500819022s ago: executing program 0 (id=1558): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESOCT, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002000a", 0x3f, 0x0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf25410000000e0001006e65746483767369630000696d3000000d0087006c325f64726f707300000000"], 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x4080) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004890}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000300)=0x3) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000500)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000080000000000000ff02000000000000ffff000000000001fe8000000000000000000000000000aaffff0000000000000000002002000600", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000240700000000000000014000e"], 0x104}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m16.111184468s ago: executing program 4 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfe, {0x7, r1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 1m15.154400388s ago: executing program 2 (id=1560): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0xa17, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0xc114) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c081}, 0x20) 1m14.999314097s ago: executing program 3 (id=1561): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000500)={'tunl0\x00', r1, 0x1, 0x1, 0x0, 0x7fff, {{0x34, 0x4, 0x3, 0x20, 0xd0, 0x64, 0x0, 0x41, 0x0, 0x0, @local, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0x5d, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010102, 0xffffffff}]}, @generic={0x83, 0x9, "0f5854534a86c3"}, @ssrr={0x89, 0x23, 0x6e, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}]}, @end, @cipso={0x86, 0x1b, 0x1, [{0x7, 0xc, "8eed813906c0b46094da"}, {0x1, 0x9, "b592518ec56c6c"}]}, @lsrr={0x83, 0x7, 0x4f, [@loopback]}, @generic={0x83, 0x4, "aa73"}, @timestamp_prespec={0x44, 0x54, 0x59, 0x3, 0x7, [{@remote, 0xfff}, {@multicast2, 0x8}, {@broadcast, 0x1}, {@loopback, 0x400}, {@multicast2, 0x3}, {@empty, 0x6}, {@multicast2, 0xb}, {@local, 0x9}, {@private=0xa010101, 0x7}, {@local, 0x2}]}]}}}}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000440)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r4 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80d0000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, 0x0, 0xa, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24048000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000040)={r8, 0x8001}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x2400e0d5) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(r2, &(0x7f0000000080), &(0x7f0000000180)=0x10) 1m14.897271966s ago: executing program 4 (id=1562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) close(0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="588000000000000000000000000000aa000000000000000000c04bffe000000100000000000000001fd3c5ec892a958d000000000000000000000000000019274de90000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000335000002000000af000000000000001c001700000000000000000000000000fdffffff00000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010000"], 0x158}}, 0x0) 1m14.793110029s ago: executing program 1 (id=1563): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@float={0x5, 0x0, 0x0, 0x10, 0x10}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x0, 0xc4}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x41, 0x1, 0x8070bd29, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01001000f0004d5bf37b679d00000c00990001"], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r5, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x6, 0xd, 0xfff, 0x8001, 0xda67]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc650}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8d4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5b6f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc080}, 0x4040001) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0xff, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) sendmmsg$inet(r3, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000004) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a80)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 1m14.238732232s ago: executing program 0 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 1m13.480089559s ago: executing program 2 (id=1565): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9cc8fb"], 0x0, 0x26}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x2d8, 0x2e0, 0x2e0, 0x2d8, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xf0, 0x158, 0x0, {0x1000000}, [@common=@unspec=@limit={{0x48}, {0x2000007a, 0x0, 0x40, 0x8, 0xe6, 0x75800a43, 0xfffffffffffffff9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x8, 0x6, 0x462, 'syz1\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'nr0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x3, 0x3d}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x5, 0x9, 0x81, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 0x46, 0x2001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6cb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @multicast1, 0x1, "626fd6aa25504a3d742d2a2ea5dc0c791538a6de3d17a5f7c87112729f7c0664", 0xc, 0x1, 0x80, 0x4}, 0x3c) 1m13.030015707s ago: executing program 1 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="2f5e2750f5af2f53fad68f5579b0eba07da346e4e17ee663fa30", 0x1a}, {&(0x7f00000001c0)="592c7a20dbe0b1ce9cbed5d889b5a5d334accdb774cd4d76e13ade9edfa478738994327e80236dccc6a8c4244d56483a04", 0x31}, {&(0x7f0000000240)="bb75cd6f97f153d0dd9a050a5373e518ea88fcce200dc3d8fe867b35b0d2711deda92dd851090c6cd2481d123cac1241d60b91b085d712ad325e681fe4b0772f0dff11e337a73a446d375bfc74af1751d8345cdc884af7c554f0c992a8370632019bcfe84cfdc66b50aafe0a0dd9180285bf204d48b4cc2f89b0bc5a41e62f156b66f141d1b7c8d3c298b4c8a6971356bd8dcb297993b5e80eae6dcb6d7a9d8508f5be4e2b22de1e5992033e20b5c2", 0xaf}, {&(0x7f0000000300)="759e52ec9349370c75b3c77e5831f0b0a4c7bcd28635bd39bc395575593cc6e24aa708a15c4362785997bb71b5d44bb564f0607b6ce43461b3c1f283ddaa826388f0db1f6fa8f62effdfadc0e01e8f4d9fc9b0a13c6c40c55f55da661e143292897e6a44225ea565eee0cd2d190e16", 0x6f}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="ce3e524d5d97480d484df4eec7686cbd0b18beea678b5bbb118232a6df6af8b171dc8f93b0070c64958569ecd032c3fe17b998f0046aac7ea335afcc7a97e9042640b783ff270c3873e11ed7d5279ac120e9e93877bfdf20005a4ab176fbd9aafed190e8", 0x64}], 0x6, &(0x7f0000000580)=[{0xa8, 0xff, 0xc000000, "58f0387734153f093c06c492bb2bc951b1bfc817583daa67f22ffc7e93aa17aeaff8cf2198fc05ce657d95d11765fb1571e04d2a7d5448e489e00d861b2f8db59d89c0243a3d963553e89d9b3aabdc588cdb40e82ddf2e4deb3abe8588c9fc7dc25b03ff4dda75b57df1d30e26a3e34516bded47b320076509fa2f2995332380a63ff9e0eeeaa7ff217f385a4cb8cf95859ab7aaa4a5"}, {0x68, 0x109, 0x6, "bac31c99a953b8c9e82aef4c209d297ddf99bb05952ed046172119d2bd938fb4cc44b415b78b99e3653a83fa5d505944129db7674155f9022d2685e61c71e0f53a5181f8b9a7d45dd9f654aba2608603aade"}, {0x20, 0x108, 0x5, "256a6af0352968bf91"}], 0x130}, 0x20000020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) 1m12.502485638s ago: executing program 3 (id=1567): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[@ANYBLOB="5000000084e66dfdb6280ae8cd2cf8ba0468eca628a7ea26a9c9a23abd9e0f9191c4571b0a587c833a4c147b943feba3f4742936862938eb95c4b6e9f7371700bbc1fb1608d69a8201a1fef81e311839ef3f59a09a334a870da9d6b58452f65bc1a9b01e18219fbf7b182d19b6a401f4403344530da7d5f856f46616159d38c7de4ea99e0aa5456e", @ANYRES16=r3, @ANYBLOB="000327bd7000fddbdf25010000000900010073797a31000000000900010073797a30000000000900030073797a31000000000900030073797a31000000000900030073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002300)=@in6={0xa, 0x4e23, 0x7, @mcast1, 0x2}, 0x80, 0x0}}], 0x2, 0xf5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x4004804) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10, &(0x7f0000000080)=0x10001, 0x4) getsockopt(r6, 0x9, 0x77cfa047, &(0x7f0000000100)=""/215, &(0x7f0000000200)=0xd7) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0xf}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x8890}, 0x24014094) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x2c4, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xad, 0x8, "b3650a9e59c6e4aa28b8af22e4ef3fd989828010ab7f7610edc534d0cf0e2354448291f41baea938ff4b4b471c2ab26ba5382d6c4896bfbc29a5370c5746113ee7a60e826c10e40f25660e081eaff1fa0e2ebf74d3ad6b6c1b8cd9cfe9f666edd8c172b1357f57fd99b9085a0cfdd3a06039bf9733f265115e830fe4c58549d5cdab70926bf7c125e0f23eddb4abb28f70fa65444fee25e5953a40a97d0b07db01d162aad28fec7451"}, @NFTA_OBJ_USERDATA={0x46, 0x8, "ab77c28a5a5df7ab68a31adc095bc2b401173a9cae2ddfcb3ef570488a6ecb031d9ce69ac99371fb6f4849ec96befdbf1e904f23a1712d154698d380b4e62fdbf17b"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xb8, 0x8, "f07960bc29aff7eef7c0a3433bcf48ef32b3c565f29826a19bf554a8ee6bada52fcf773f84c7782e547f0244555b28f6e31e08720616dbaf63eb7e8160a4723f48531e4f38fc5652071d0b1eff6720c30676559a7a6185f126a279efccce766aaf8df152aefe362ef735ed173c603f7863829ff854ce377223321d763ab64adf971d5b8353ae786a916850c73db7e57066f1d0ba81c1d51398c96cb66d78680b04a3a3006fe63b4991636658cb23f93a318c2f6a"}, @NFTA_OBJ_USERDATA={0xd3, 0x8, "a356b2079b1bfe57bb3ef8ff4829102153cb41d73093cab233676e0c2de85df5ea57afd712411723a0088cc2617dc26e521ed31fef1db0dac3d398868ea110c6eef384674c103aa207e6ffb733f2cdc270bd1059938bd286f5ce06c5c102d15e405b075d70624e1c31638d809a06861c607028a64704c97b9f0b62c8056f8e3578cdd02b9e0a73f1b4164045c32a14075f6cae409c283ac843f1ed773375341e80c6cd1a86cda5d01c7e25893ea14886682ea657f8ebc03871c8beecfc63c704fc3b91a5c10a589e4ea18dce83be6a"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x2ec}, 0x1, 0x0, 0x0, 0x800}, 0x24004044) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000000700)={0x5, 0x10, 0xf18, 0x6, 0x8}) 1m12.170235482s ago: executing program 4 (id=1568): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 54.933006618s ago: executing program 32 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 47.174614703s ago: executing program 33 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="2f5e2750f5af2f53fad68f5579b0eba07da346e4e17ee663fa30", 0x1a}, {&(0x7f00000001c0)="592c7a20dbe0b1ce9cbed5d889b5a5d334accdb774cd4d76e13ade9edfa478738994327e80236dccc6a8c4244d56483a04", 0x31}, {&(0x7f0000000240)="bb75cd6f97f153d0dd9a050a5373e518ea88fcce200dc3d8fe867b35b0d2711deda92dd851090c6cd2481d123cac1241d60b91b085d712ad325e681fe4b0772f0dff11e337a73a446d375bfc74af1751d8345cdc884af7c554f0c992a8370632019bcfe84cfdc66b50aafe0a0dd9180285bf204d48b4cc2f89b0bc5a41e62f156b66f141d1b7c8d3c298b4c8a6971356bd8dcb297993b5e80eae6dcb6d7a9d8508f5be4e2b22de1e5992033e20b5c2", 0xaf}, {&(0x7f0000000300)="759e52ec9349370c75b3c77e5831f0b0a4c7bcd28635bd39bc395575593cc6e24aa708a15c4362785997bb71b5d44bb564f0607b6ce43461b3c1f283ddaa826388f0db1f6fa8f62effdfadc0e01e8f4d9fc9b0a13c6c40c55f55da661e143292897e6a44225ea565eee0cd2d190e16", 0x6f}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="ce3e524d5d97480d484df4eec7686cbd0b18beea678b5bbb118232a6df6af8b171dc8f93b0070c64958569ecd032c3fe17b998f0046aac7ea335afcc7a97e9042640b783ff270c3873e11ed7d5279ac120e9e93877bfdf20005a4ab176fbd9aafed190e8", 0x64}], 0x6, &(0x7f0000000580)=[{0xa8, 0xff, 0xc000000, "58f0387734153f093c06c492bb2bc951b1bfc817583daa67f22ffc7e93aa17aeaff8cf2198fc05ce657d95d11765fb1571e04d2a7d5448e489e00d861b2f8db59d89c0243a3d963553e89d9b3aabdc588cdb40e82ddf2e4deb3abe8588c9fc7dc25b03ff4dda75b57df1d30e26a3e34516bded47b320076509fa2f2995332380a63ff9e0eeeaa7ff217f385a4cb8cf95859ab7aaa4a5"}, {0x68, 0x109, 0x6, "bac31c99a953b8c9e82aef4c209d297ddf99bb05952ed046172119d2bd938fb4cc44b415b78b99e3653a83fa5d505944129db7674155f9022d2685e61c71e0f53a5181f8b9a7d45dd9f654aba2608603aade"}, {0x20, 0x108, 0x5, "256a6af0352968bf91"}], 0x130}, 0x20000020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) 0s ago: executing program 34 (id=1565): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9cc8fb"], 0x0, 0x26}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x2d8, 0x2e0, 0x2e0, 0x2d8, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xf0, 0x158, 0x0, {0x1000000}, [@common=@unspec=@limit={{0x48}, {0x2000007a, 0x0, 0x40, 0x8, 0xe6, 0x75800a43, 0xfffffffffffffff9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x8, 0x6, 0x462, 'syz1\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'nr0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x3, 0x3d}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x5, 0x9, 0x81, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 0x46, 0x2001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6cb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @multicast1, 0x1, "626fd6aa25504a3d742d2a2ea5dc0c791538a6de3d17a5f7c87112729f7c0664", 0xc, 0x1, 0x80, 0x4}, 0x3c) kernel console output (not intermixed with test programs): v0: Adding interface: batadv_slave_0 [ 84.500416][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.500446][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.524571][ T5616] hsr_slave_0: entered promiscuous mode [ 84.525673][ T5616] hsr_slave_1: entered promiscuous mode [ 84.526568][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 84.526651][ T5616] Cannot create hsr debugfs directory [ 84.606055][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.606074][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.606099][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.620767][ T5617] hsr_slave_0: entered promiscuous mode [ 84.621996][ T5617] hsr_slave_1: entered promiscuous mode [ 84.623146][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 84.623165][ T5617] Cannot create hsr debugfs directory [ 84.694322][ T5626] hsr_slave_0: entered promiscuous mode [ 84.695078][ T5626] hsr_slave_1: entered promiscuous mode [ 84.695542][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 84.695562][ T5626] Cannot create hsr debugfs directory [ 84.870189][ T5619] hsr_slave_0: entered promiscuous mode [ 84.871017][ T5619] hsr_slave_1: entered promiscuous mode [ 84.871485][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 84.871505][ T5619] Cannot create hsr debugfs directory [ 85.315178][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.323884][ T5620] Bluetooth: hci0: command tx timeout [ 85.331856][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.336186][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.354452][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.357497][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.363679][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.364578][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.375074][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.403067][ T5620] Bluetooth: hci3: command tx timeout [ 85.403095][ T5623] Bluetooth: hci2: command tx timeout [ 85.403121][ T5623] Bluetooth: hci1: command tx timeout [ 85.403140][ T5623] Bluetooth: hci4: command tx timeout [ 85.470878][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.485037][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.486347][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.490072][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.491267][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.502164][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.524707][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.536915][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.660583][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.667358][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.681773][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.687921][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.688916][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.696217][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.711282][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.721614][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.819403][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.845272][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.848863][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.849962][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.854377][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.881712][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.888911][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.905332][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.909170][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.984683][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.030173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.030292][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.039253][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.084122][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.087282][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.087874][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.090109][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.123794][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.135750][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.137857][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.140984][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.153766][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.153905][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.162318][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.199983][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.200316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.258643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.258714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.282372][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.400581][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.455231][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.455359][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.479359][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.498493][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.498619][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.587311][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.590266][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.639431][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.639542][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.699815][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.700554][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.715776][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.769814][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.769948][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.824970][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.825087][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.261681][ T192] cfg80211: failed to load regulatory.db [ 87.403536][ T5620] Bluetooth: hci0: command tx timeout [ 87.484035][ T5631] Bluetooth: hci4: command tx timeout [ 87.484075][ T5631] Bluetooth: hci1: command tx timeout [ 87.484099][ T5631] Bluetooth: hci2: command tx timeout [ 87.484273][ T5620] Bluetooth: hci3: command tx timeout [ 87.726125][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.900693][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.040634][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.162106][ T5618] veth0_vlan: entered promiscuous mode [ 88.217975][ T5618] veth1_vlan: entered promiscuous mode [ 88.361286][ T5626] veth0_vlan: entered promiscuous mode [ 88.441444][ T5626] veth1_vlan: entered promiscuous mode [ 88.482071][ T5618] veth0_macvtap: entered promiscuous mode [ 88.505725][ T5618] veth1_macvtap: entered promiscuous mode [ 88.527630][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.560675][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.586059][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.614789][ T5616] veth0_vlan: entered promiscuous mode [ 88.616955][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.646587][ T5626] veth0_macvtap: entered promiscuous mode [ 88.673934][ T3383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.676618][ T5616] veth1_vlan: entered promiscuous mode [ 88.678327][ T5626] veth1_macvtap: entered promiscuous mode [ 88.764990][ T5617] veth0_vlan: entered promiscuous mode [ 88.771302][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.773108][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.773153][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.773186][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.834184][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.850574][ T5619] veth0_vlan: entered promiscuous mode [ 88.883258][ T5617] veth1_vlan: entered promiscuous mode [ 88.908340][ T5616] veth0_macvtap: entered promiscuous mode [ 88.923592][ T3383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.930154][ T5619] veth1_vlan: entered promiscuous mode [ 88.940325][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.940347][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.987208][ T5616] veth1_macvtap: entered promiscuous mode [ 89.067335][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.067360][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.103623][ T5617] veth0_macvtap: entered promiscuous mode [ 89.113366][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.113386][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.128546][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.129366][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131665][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.150617][ T5617] veth1_macvtap: entered promiscuous mode [ 89.201089][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.218871][ T5619] veth0_macvtap: entered promiscuous mode [ 89.238288][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.261967][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.285102][ T5619] veth1_macvtap: entered promiscuous mode [ 89.291867][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.298318][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.298340][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.312830][ T3383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.314561][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.314599][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.314631][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340632][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.450717][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.465991][ T3339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.483241][ T5620] Bluetooth: hci0: command tx timeout [ 89.483389][ T3383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.484400][ T3383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489649][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.563847][ T5623] Bluetooth: hci2: command tx timeout [ 89.563885][ T5623] Bluetooth: hci1: command tx timeout [ 89.563909][ T5623] Bluetooth: hci4: command tx timeout [ 89.563974][ T5620] Bluetooth: hci3: command tx timeout [ 89.583091][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.729602][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.729655][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.763792][ T3383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.763847][ T3383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.763884][ T3383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.763921][ T3383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.769217][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 89.847968][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.848009][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.874152][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 89.895627][ T5821] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 90.049785][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.049860][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.077899][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.077921][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.102888][ T5823] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8'. [ 90.196172][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.196196][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.360269][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.360292][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.549086][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 90.726556][ T5838] Zero length message leads to an empty skb [ 133.333722][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.333775][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.311364][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 153.332327][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 153.400717][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 153.400743][ T5872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15'. [ 153.501528][ T5862] macvtap1: entered promiscuous mode [ 153.501555][ T5862] vlan0: entered promiscuous mode [ 153.502239][ T5862] macvtap1: entered allmulticast mode [ 153.502253][ T5862] vlan0: entered allmulticast mode [ 153.502265][ T5862] veth0_vlan: entered allmulticast mode [ 153.638711][ T5857] netlink: 256 bytes leftover after parsing attributes in process `syz.4.15'. [ 153.876715][ T5899] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET) [ 153.881148][ T5894] netlink: 64 bytes leftover after parsing attributes in process `syz.1.21'. [ 153.899806][ T5898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22'. [ 154.147699][ T5916] Bluetooth: MGMT ver 1.23 [ 154.211225][ T5918] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 154.327117][ T5922] syzkaller0: entered promiscuous mode [ 154.327142][ T5922] syzkaller0: entered allmulticast mode [ 154.569574][ T5936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.29'. [ 154.650157][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 155.063479][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 155.120701][ T5960] bond1: option ad_user_port_key: invalid value (4116) [ 155.120731][ T5960] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 155.125460][ T5960] bond1 (unregistering): Released all slaves [ 155.383902][ T5970] ip_tunnel: non-ECT from 172.30.1.2 with TOS=0x3 [ 155.423496][ T5976] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 155.492671][ T5978] netlink: 'syz.0.45': attribute type 11 has an invalid length. [ 155.517519][ T5978] netlink: 'syz.0.45': attribute type 11 has an invalid length. [ 155.532965][ T147] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.533029][ T1011] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.533065][ T1011] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.533097][ T1011] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.727987][ T5981] netlink: 'syz.4.44': attribute type 12 has an invalid length. [ 155.818210][ T5998] warning: `syz.2.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.824582][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.862174][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.016441][ T6004] sctp: [Deprecated]: syz.1.49 (pid 6004) Use of int in maxseg socket option. [ 156.016441][ T6004] Use struct sctp_assoc_value instead [ 156.171299][ T6019] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.171440][ T6019] Cannot find add_set index 0 as target [ 156.203507][ T5631] Bluetooth: hci0: command 0x0c3a tx timeout [ 156.204418][ T5620] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 156.476026][ T6032] syzkaller1: entered promiscuous mode [ 156.476054][ T6032] syzkaller1: entered allmulticast mode [ 156.715930][ T6048] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 156.900708][ T6056] syzkaller1: entered promiscuous mode [ 156.900733][ T6056] syzkaller1: entered allmulticast mode [ 157.109974][ T6072] netlink: 'syz.2.68': attribute type 4 has an invalid length. [ 157.174287][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.183482][ T6065] bond1: (slave bond0): Enslaving as an active interface with an up link [ 157.209926][ T6072] .`: renamed from bond0 (while UP) [ 157.349902][ T6084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.569024][ T6091] openvswitch: netlink: Message has 8 unknown bytes. [ 157.569066][ T6091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.631680][ T6098] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 157.631704][ T6098] netlink: 'syz.1.75': attribute type 7 has an invalid length. [ 157.631716][ T6098] netlink: 'syz.1.75': attribute type 8 has an invalid length. [ 157.631729][ T6098] NCSI netlink: No device for ifindex 65584 [ 157.713830][ T6104] syzkaller0: entered promiscuous mode [ 157.713855][ T6104] syzkaller0: entered allmulticast mode [ 157.736757][ T6104] tipc: Started in network mode [ 157.736791][ T6104] tipc: Node identity ae647b76549, cluster identity 4711 [ 157.749858][ T6104] tipc: Enabled bearer , priority 0 [ 157.770879][ T6104] block nbd0: not configured, cannot reconfigure [ 157.785174][ T6104] tipc: Resetting bearer [ 157.791261][ T6102] tipc: Resetting bearer [ 157.836558][ T6102] tipc: Disabling bearer [ 158.065206][ T6121] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 158.289735][ T6125] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 158.321487][ T12] IPVS: starting estimator thread 0... [ 158.414716][ T6129] IPVS: using max 25 ests per chain, 60000 per kthread [ 158.586430][ T6140] __nla_validate_parse: 15 callbacks suppressed [ 158.586456][ T6140] netlink: 76 bytes leftover after parsing attributes in process `syz.2.91'. [ 158.586474][ T6140] nbd: illegal input index 65508 [ 158.726263][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.88'. [ 158.796369][ T6151] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 158.869161][ T6149] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 158.887884][ T6149] bond1 (unregistering): Released all slaves [ 158.892260][ T6158] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 159.024784][ T6150] tipc: Enabling of bearer rejected, failed to enable media [ 159.217893][ T5620] Bluetooth: hci1: Malformed Event: 0x02 [ 159.364657][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 159.604483][ T6190] xt_LOG: level 8 >= 8 [ 159.778052][ T6198] netlink: 44 bytes leftover after parsing attributes in process `syz.2.109'. [ 159.803438][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.821423][ T6201] xt_l2tp: invalid flags combination: 0 [ 160.322635][ T6226] gtp0: entered promiscuous mode [ 160.322661][ T6226] gtp0: entered allmulticast mode [ 160.326740][ T6230] sctp: [Deprecated]: syz.2.115 (pid 6230) Use of int in max_burst socket option deprecated. [ 160.326740][ T6230] Use struct sctp_assoc_value instead [ 160.328681][ T6228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.331452][ T6231] sctp: [Deprecated]: syz.2.115 (pid 6231) Use of int in max_burst socket option deprecated. [ 160.331452][ T6231] Use struct sctp_assoc_value instead [ 160.499269][ T6237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'. [ 160.569207][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'. [ 160.649484][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 160.649534][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 160.714554][ T6249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.121'. [ 161.031937][ T6274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.128'. [ 161.045926][ T6269] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 161.045958][ T6269] bond1: option packets_per_slave: allowed values 0 - 65535 [ 161.048844][ T6269] bond1 (unregistering): Released all slaves [ 161.107117][ T6275] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 161.296637][ T6283] bond0: option fail_over_mac: invalid value (16) [ 161.546792][ T6283] bond0 (unregistering): Released all slaves [ 161.633575][ T6303] openvswitch: netlink: IP tunnel dst address not specified [ 161.633631][ T6303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.759502][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.830976][ T6308] ovs-dp0: entered promiscuous mode [ 162.196043][ T6326] Cannot find add_set index 0 as target [ 162.277240][ T5620] block nbd0: Receive control failed (result -107) [ 162.728353][ T6348] vlan2: entered allmulticast mode [ 162.728380][ T6348] bond0: entered allmulticast mode [ 162.728393][ T6348] bond_slave_0: entered allmulticast mode [ 162.728408][ T6348] bond_slave_1: entered allmulticast mode [ 163.286409][ T6380] x_tables: unsorted entry at hook 2 [ 163.490939][ T6393] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 163.490966][ T6393] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 163.513928][ T6397] netlink: 'syz.4.162': attribute type 33 has an invalid length. [ 163.620011][ T6389] __nla_validate_parse: 10 callbacks suppressed [ 163.620067][ T6389] netlink: 80 bytes leftover after parsing attributes in process `syz.0.160'. [ 163.620086][ T6389] netlink: 80 bytes leftover after parsing attributes in process `syz.0.160'. [ 163.765664][ T6409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.794288][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.822294][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.839890][ T6416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.847802][ T6415] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 164.296653][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.176'. [ 165.145957][ T6478] netlink: zone id is out of range [ 165.145976][ T6478] netlink: zone id is out of range [ 165.145986][ T6478] netlink: zone id is out of range [ 165.145994][ T6478] netlink: zone id is out of range [ 165.146002][ T6478] netlink: zone id is out of range [ 165.146010][ T6478] netlink: zone id is out of range [ 165.146211][ T6478] netlink: zone id is out of range [ 165.403599][ T3339] wlan1: Trigger new scan to find an IBSS to join [ 165.452996][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 165.460708][ T6501] syz_tun: entered allmulticast mode [ 165.545902][ T6499] syz_tun: left allmulticast mode [ 165.784719][ T6513] Cannot find map_set index 2 as target [ 165.787765][ T6523] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 166.017715][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 166.051140][ T6534] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 166.051178][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.203'. [ 166.051194][ T6534] NCSI netlink: No device for ifindex 0 [ 166.559926][ T6563] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 166.559951][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.4.209'. [ 166.560047][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 166.564452][ T6563] netlink: 'syz.4.209': attribute type 3 has an invalid length. [ 166.575809][ T6563] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 166.575844][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.4.209'. [ 166.585115][ T6566] netlink: 'syz.4.209': attribute type 3 has an invalid length. [ 166.791185][ T6583] netlink: 'syz.4.211': attribute type 6 has an invalid length. [ 166.843483][ T6587] netlink: 'syz.4.211': attribute type 6 has an invalid length. [ 167.124582][ T6606] netlink: 'syz.2.214': attribute type 5 has an invalid length. [ 167.320808][ T6616] netlink: 'syz.2.216': attribute type 9 has an invalid length. [ 167.805607][ T6644] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 167.984225][ T6654] C: renamed from lo (while UP) [ 168.013613][ T6654] net_ratelimit: 4 callbacks suppressed [ 168.013634][ T6654] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 168.019246][ T6656] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 168.071773][ T6649] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 168.364075][ T12] wlan1: Trigger new scan to find an IBSS to join [ 168.689363][ T6647] ip_tables: iptables: counters copy to user failed while replacing table [ 168.707203][ T6658] netlink: 'syz.4.229': attribute type 4 has an invalid length. [ 169.452065][ T6700] __nla_validate_parse: 15 callbacks suppressed [ 169.452089][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 169.513587][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 169.857168][ T6721] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 170.047859][ T6735] ipt_REJECT: ECHOREPLY no longer supported. [ 170.150535][ T6736] vxcan0: tx address claim with dlc 0 [ 170.198698][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 170.198727][ T6739] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 170.201127][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 170.447479][ T6748] IPv6: addrconf: prefix option has invalid lifetime [ 170.447498][ T6748] IPv6: addrconf: prefix option has invalid lifetime [ 170.467829][ T6754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.252'. [ 170.549739][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 170.589561][ T6764] netlink: 84 bytes leftover after parsing attributes in process `syz.1.256'. [ 170.589608][ T6764] netlink: 84 bytes leftover after parsing attributes in process `syz.1.256'. [ 170.590334][ T6764] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 170.590369][ T6763] netlink: 84 bytes leftover after parsing attributes in process `syz.1.256'. [ 170.590393][ T6763] netlink: 84 bytes leftover after parsing attributes in process `syz.1.256'. [ 170.595534][ T6763] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 170.599021][ T6758] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.818466][ T6757] syz.2.255 (6757) used greatest stack depth: 18088 bytes left [ 171.333107][ T83] wlan1: Trigger new scan to find an IBSS to join [ 171.611114][ T6806] syzkaller0: entered promiscuous mode [ 171.611140][ T6806] syzkaller0: entered allmulticast mode [ 171.626184][ T6806] validate_nla: 1 callbacks suppressed [ 171.626208][ T6806] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 171.711436][ T6814] netlink: 'syz.4.272': attribute type 58 has an invalid length. [ 171.763868][ T6806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.849197][ T6819] bond1: (slave geneve2): making interface the new active one [ 171.861493][ T6819] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 172.245759][ T50] wlan1: Creating new IBSS network, BSSID 46:27:26:9f:cc:18 [ 172.591337][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.591364][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.614337][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.614362][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.039482][ T6904] nbd: must specify at least one socket [ 173.087284][ T6898] syzkaller0: entered promiscuous mode [ 173.087310][ T6898] syzkaller0: entered allmulticast mode [ 173.270212][ T6913] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.362860][ T6918] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.412501][ T5620] Bluetooth: hci1: command tx timeout [ 173.418726][ T6924] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.462354][ T6920] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 174.025673][ T6951] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 174.116213][ T6951] bond2: (slave veth0_to_bond): making interface the new active one [ 174.117537][ T6951] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 174.141892][ T6951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.501019][ T6987] __nla_validate_parse: 14 callbacks suppressed [ 174.501043][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 174.725763][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 174.988446][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 175.260636][ T7022] netlink: 'syz.2.317': attribute type 25 has an invalid length. [ 175.510952][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 175.510998][ T7030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.680756][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 175.680807][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 175.709925][ T7036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.709948][ T7036] IPv6: NLM_F_CREATE should be set when creating new route [ 175.783199][ T7041] netlink: 'syz.4.322': attribute type 2 has an invalid length. [ 175.784351][ T36] IPVS: starting estimator thread 0... [ 175.872566][ T7047] IPVS: using max 31 ests per chain, 74400 per kthread [ 176.003768][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 176.038853][ T5620] Bluetooth: hci0: ISO packet too small [ 176.274064][ T7080] netlink: 384 bytes leftover after parsing attributes in process `syz.0.335'. [ 176.307073][ T7083] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 176.685798][ T7111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.342'. [ 176.817816][ T7116] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 177.015707][ T7116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.098188][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 177.123672][ T7114] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 177.143885][ T7114] bond1 (unregistering): Released all slaves [ 177.251004][ T7133] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 177.265602][ T7119] bond2: (slave veth0_to_bond): Releasing active interface [ 177.281367][ T7119] bond3: (slave veth0_to_bond): making interface the new active one [ 177.292324][ T7119] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 177.770242][ T7160] netlink: Conntrack attr has 4 unknown bytes [ 178.352868][ T7197] wireguard: wg2: Could not create IPv4 socket [ 178.356531][ T7197] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 178.383472][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.383509][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.442298][ T7197] bond4: entered promiscuous mode [ 178.443299][ T7197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.497167][ T7198] bond4: (slave bridge3): making interface the new active one [ 178.497195][ T7198] bridge3: entered promiscuous mode [ 178.502207][ T7198] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 178.507405][ T7195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.731803][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.731828][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.763686][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.204211][ T3339] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.204261][ T3339] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.204295][ T3339] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.204327][ T3339] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.404584][ T12] wlan1: Trigger new scan to find an IBSS to join [ 179.522104][ T7247] __nla_validate_parse: 81 callbacks suppressed [ 179.522128][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 179.611904][ T7254] nbd: couldn't find a device at index 131072 [ 179.791630][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 180.058877][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 180.199286][ T7279] xt_hashlimit: size too large, truncated to 1048576 [ 180.254203][ T7279] xt_LOG: prefix is not null-terminated [ 180.298234][ T7280] xt_hashlimit: size too large, truncated to 1048576 [ 180.903932][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 181.009934][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 181.010074][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.044882][ T7307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.066220][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 181.126632][ T7314] netlink: 32 bytes leftover after parsing attributes in process `syz.0.400'. [ 181.222547][ T7306] hsr_slave_1 (unregistering): left promiscuous mode [ 181.294809][ T7324] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 181.599657][ T7344] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.844202][ T7352] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 182.367293][ T12] wlan1: Trigger new scan to find an IBSS to join [ 182.818728][ T7404] sctp: [Deprecated]: syz.4.422 (pid 7404) Use of int in maxseg socket option. [ 182.818728][ T7404] Use struct sctp_assoc_value instead [ 182.936611][ T7413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.122191][ T7415] ip_tables: iptables: counters copy to user failed while replacing table [ 183.156047][ T7415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.425'. [ 183.160256][ T7415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.425'. [ 183.403625][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.431'. [ 183.518573][ T7435] ªªªªª»: renamed from dummy0 (while UP) [ 184.180436][ T7468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.180456][ T7468] IPv6: NLM_F_CREATE should be set when creating new route [ 184.212686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.362914][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.526799][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.619153][ T7495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.701749][ T7498] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 184.850140][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.875124][ T7498] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 184.957078][ T7518] __nla_validate_parse: 5 callbacks suppressed [ 184.957099][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 184.974483][ T7498] bond2: option primary_reselect: invalid value (255) [ 184.981458][ T7498] bond2 (unregistering): Released all slaves [ 185.026638][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.026905][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.057208][ T7522] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 185.127249][ T7502] netlink: 'syz.1.449': attribute type 83 has an invalid length. [ 185.146453][ T7518] hsr_slave_1 (unregistering): left promiscuous mode [ 185.252663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.412124][ T1011] wlan1: Trigger new scan to find an IBSS to join [ 185.481203][ T7508] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 186.296159][ T12] wlan1: Creating new IBSS network, BSSID ca:1a:07:e9:8b:c4 [ 186.616228][ T5754] net_ratelimit: 5 callbacks suppressed [ 186.616250][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.852649][ T5620] Bluetooth: hci0: command 0x0c3a tx timeout [ 187.082764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.161709][ T7545] xt_cgroup: path and classid specified [ 187.162217][ T7545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.177672][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.460'. [ 187.244602][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.253131][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.301265][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'. [ 187.407240][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.496052][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 187.565870][ T7562] netlink: 'syz.0.465': attribute type 2 has an invalid length. [ 187.650924][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.111137][ T7588] netlink: 'syz.2.470': attribute type 7 has an invalid length. [ 188.111163][ T7588] netlink: 140 bytes leftover after parsing attributes in process `syz.2.470'. [ 188.266356][ T7588] netlink: 196 bytes leftover after parsing attributes in process `syz.2.470'. [ 188.420243][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.420950][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.685391][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.745061][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 188.976506][ T7619] netlink: 'syz.1.478': attribute type 4 has an invalid length. [ 188.976531][ T7619] netlink: 240 bytes leftover after parsing attributes in process `syz.1.478'. [ 189.193590][ T7616] 8021q: VLANs not supported on ip6_vti0 [ 189.297103][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 190.021155][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 190.958431][ T7670] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 191.144529][ T7686] xt_hashlimit: size too large, truncated to 1048576 [ 191.361332][ T7694] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 191.511790][ T7694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.787088][ T60] net_ratelimit: 11 callbacks suppressed [ 191.787111][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.787364][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.807782][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.189886][ T7694] bond1: (slave geneve2): making interface the new active one [ 192.208082][ T7694] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 192.298899][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 192.301261][ T7716] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.362488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.386616][ T7717] netlink: 'syz.2.499': attribute type 21 has an invalid length. [ 192.386638][ T7717] netlink: 152 bytes leftover after parsing attributes in process `syz.2.499'. [ 192.394160][ T7716] netlink: 'syz.2.499': attribute type 21 has an invalid length. [ 192.394179][ T7716] netlink: 152 bytes leftover after parsing attributes in process `syz.2.499'. [ 192.406128][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 192.844799][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.913874][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.923040][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.110569][ T7754] netlink: 'syz.0.510': attribute type 2 has an invalid length. [ 193.110596][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 193.139754][ T7752] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 193.139783][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 193.139796][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 193.146881][ T7756] netlink: 56 bytes leftover after parsing attributes in process `syz.1.508'. [ 193.186690][ T7754] : entered promiscuous mode [ 193.402480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.483578][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.936646][ T7780] netlink: 64 bytes leftover after parsing attributes in process `syz.0.515'. [ 194.091803][ T7786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.155212][ T30] audit: type=1800 audit(1790973064.200:2): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.519" name=0A dev="tmpfs" ino=500 res=0 errno=0 [ 194.201947][ T30] audit: type=1800 audit(1790973064.280:3): pid=7792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.519" name=0A dev="tmpfs" ino=500 res=0 errno=0 [ 194.833166][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.181206][ T7815] __nla_validate_parse: 3 callbacks suppressed [ 197.181229][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 197.303034][ T5754] net_ratelimit: 11 callbacks suppressed [ 197.303056][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.416001][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.416251][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.711468][ T7823] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 197.880304][ T7833] netlink: 'syz.2.532': attribute type 2 has an invalid length. [ 197.880545][ T7834] netlink: 'syz.2.532': attribute type 2 has an invalid length. [ 197.960106][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 198.020315][ T7840] ip_tables: iptables: counters copy to user failed while replacing table [ 198.044781][ T7840] syzkaller1: entered promiscuous mode [ 198.044804][ T7840] syzkaller1: entered allmulticast mode [ 198.363408][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.586656][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.586920][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.784053][ T7851] x_tables: duplicate underflow at hook 1 [ 198.786778][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 198.927146][ T7863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.404455][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.694451][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.844972][ T7897] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 199.934194][ T7901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.550'. [ 200.266018][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 200.293216][ T7906] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 200.436831][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 200.454258][ T7902] bond3: (slave veth0_to_bond): Releasing active interface [ 200.501687][ T7902] bond5: (slave veth0_to_bond): making interface the new active one [ 200.518466][ T7902] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 200.549169][ T7897] macvlan2: entered promiscuous mode [ 200.549192][ T7897] macvlan2: entered allmulticast mode [ 200.558113][ T7897] bond5: entered promiscuous mode [ 200.558137][ T7897] veth0_to_bond: entered promiscuous mode [ 200.563731][ T7897] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.566960][ T7897] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 200.570283][ T7897] bond5: left promiscuous mode [ 200.570303][ T7897] veth0_to_bond: left promiscuous mode [ 200.817146][ T7906] team0: Device veth0_macvtap failed to register rx_handler [ 201.087686][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.558'. [ 201.087723][ T7923] netlink: 'syz.1.558': attribute type 7 has an invalid length. [ 201.087736][ T7923] netlink: 'syz.1.558': attribute type 8 has an invalid length. [ 201.087748][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 201.162815][ T7924] netlink: 'syz.1.558': attribute type 11 has an invalid length. [ 201.173517][ T7918] veth0_macvtap: entered allmulticast mode [ 201.301975][ T7923] tipc: Enabling of bearer rejected, failed to enable media [ 201.376959][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 201.378007][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 201.406446][ T5620] Bluetooth: hci4: link tx timeout [ 201.406469][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.298587][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.523976][ T5724] net_ratelimit: 12 callbacks suppressed [ 202.523997][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.844668][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.010993][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.035531][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.035973][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.037307][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.043305][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.043620][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.043915][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.045159][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.439937][ T8000] xt_hashlimit: size too large, truncated to 1048576 [ 203.482582][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 203.725430][ T8012] Bluetooth: hci0: unsupported parameter 5135 [ 203.725456][ T8012] Bluetooth: hci0: unsupported parameter 8192 [ 203.725469][ T8012] Bluetooth: hci0: unsupported parameter 5135 [ 203.725481][ T8012] Bluetooth: hci0: unsupported parameter 8192 [ 203.773980][ T8012] __nla_validate_parse: 67 callbacks suppressed [ 203.774003][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.583'. [ 203.774038][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 203.806239][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 203.856334][ T8016] netlink: 44 bytes leftover after parsing attributes in process `syz.3.585'. [ 204.422266][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 204.658017][ T1011] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.658101][ T1011] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.658139][ T1011] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.848967][ T8029] syzkaller1: entered promiscuous mode [ 204.848994][ T8029] syzkaller1: entered allmulticast mode [ 204.904180][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.466026][ T8062] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 206.270704][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 206.367500][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.597'. [ 206.495365][ T8084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 206.776960][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 206.781144][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 207.050674][ T8100] syzkaller0: entered promiscuous mode [ 207.050702][ T8100] syzkaller0: entered allmulticast mode [ 207.094614][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 207.094655][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 207.094682][ T5631] Bluetooth: hci0: command 0x0c3a tx timeout [ 207.094708][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 207.240078][ T8099] bond6: entered promiscuous mode [ 207.286896][ T50] IPVS: starting estimator thread 0... [ 207.373539][ T8111] IPVS: using max 23 ests per chain, 55200 per kthread [ 207.543499][ T12] net_ratelimit: 68 callbacks suppressed [ 207.543520][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.543761][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.755555][ T8131] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 207.764927][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.846200][ T8131] team0: Device vxcan1 is of different type [ 208.282889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.418316][ T8124] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 208.643965][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.644207][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.844548][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.923724][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.322578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.703272][ T8172] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 209.703866][ T8172] __nla_validate_parse: 7 callbacks suppressed [ 209.703881][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 209.732717][ T53] Bluetooth: hci0: command 0x0c3a tx timeout [ 210.348944][ T8114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.027336][ T53] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 211.027370][ T53] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 211.069264][ T8192] ip6gretap0: entered promiscuous mode [ 211.069290][ T8192] ip6gretap0: entered allmulticast mode [ 211.431738][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 213.003892][ T5733] net_ratelimit: 15 callbacks suppressed [ 213.003912][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.095005][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.095257][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.388731][ T8269] ip6t_ah: unknown flags 5 [ 213.395334][ T8269] x_tables: duplicate underflow at hook 2 [ 213.482642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.768521][ T8279] x_tables: duplicate entry at hook 2 [ 213.781949][ T8279] netlink: 88 bytes leftover after parsing attributes in process `syz.2.656'. [ 213.814776][ T8279] v: renamed from veth0_vlan (while UP) [ 213.928861][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.052241][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.151607][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 214.215299][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.216581][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.458019][ T8302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.458042][ T8302] IPv6: NLM_F_CREATE should be set when creating new route [ 214.522940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.736608][ T8312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.949170][ T8317] batadv_slave_1: entered promiscuous mode [ 214.952104][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.666'. [ 215.003761][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.155322][ T8316] batadv_slave_1: left promiscuous mode [ 215.535227][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'. [ 215.581830][ T8330] xt_REDIRECT: bad rangesize 26624. [ 215.956455][ T8348] bond2: entered promiscuous mode [ 215.958119][ T8348] bond2: entered allmulticast mode [ 215.960293][ T8348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.993774][ T8348] bond3: entered promiscuous mode [ 215.993848][ T8348] bond3: entered allmulticast mode [ 215.994267][ T8348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.038708][ T8348] bond4: entered promiscuous mode [ 216.038811][ T8348] bond4: entered allmulticast mode [ 216.039357][ T8348] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.324740][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 216.470377][ T8378] IPv6: sit1: Disabled Multicast RS [ 216.621858][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.685'. [ 216.929043][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 217.261963][ T8401] syz.2.692 (8401) used greatest stack depth: 17760 bytes left [ 217.271060][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 217.303799][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.691'. [ 217.707898][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 217.707923][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 217.711181][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 217.765441][ T3339] IPVS: starting estimator thread 0... [ 217.853267][ T8423] IPVS: using max 28 ests per chain, 67200 per kthread [ 218.044060][ T5747] net_ratelimit: 11 callbacks suppressed [ 218.044081][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.204507][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.656714][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.664138][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.753915][ T8460] tipc: Started in network mode [ 218.753962][ T8460] tipc: Node identity fe80000000000000000000000000001, cluster identity 6 [ 218.764449][ T8460] tipc: Enabled bearer , priority 10 [ 218.785632][ T8465] tipc: Enabling of bearer rejected, already enabled [ 219.245835][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.423052][ T8496] vlan1: entered allmulticast mode [ 219.638573][ T8497] syzkaller0: entered promiscuous mode [ 219.638599][ T8497] syzkaller0: entered allmulticast mode [ 219.726806][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.773532][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.777145][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.125641][ T8530] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 220.191909][ T8531] __nla_validate_parse: 10 callbacks suppressed [ 220.191932][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 220.282189][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 220.282916][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.762511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.423447][ T5724] tipc: Node number set to 4269801488 [ 222.517735][ T8527] tipc: Started in network mode [ 222.517768][ T8527] tipc: Node identity 7f000001, cluster identity 4711 [ 222.518702][ T8527] tipc: Enabled bearer , priority 10 [ 222.846988][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.847516][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.944079][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.018721][ T8554] netlink: 45 bytes leftover after parsing attributes in process `syz.0.725'. [ 223.069841][ T8543] team0: Device gtp1 is up. Set it down before adding it as a team port [ 223.070600][ T147] IPVS: starting estimator thread 0... [ 223.093853][ T3339] net_ratelimit: 10 callbacks suppressed [ 223.093967][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.094247][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.107154][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.724'. [ 223.133673][ T8558] netlink: 45 bytes leftover after parsing attributes in process `syz.0.725'. [ 223.180811][ T8556] IPVS: using max 28 ests per chain, 67200 per kthread [ 223.302227][ T8567] netlink: 'syz.1.728': attribute type 13 has an invalid length. [ 223.328072][ T8567] netlink: 45 bytes leftover after parsing attributes in process `syz.1.728'. [ 223.405057][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.421131][ T8567] netlink: 'syz.1.728': attribute type 13 has an invalid length. [ 223.458487][ T8567] netlink: 45 bytes leftover after parsing attributes in process `syz.1.728'. [ 223.632540][ T5733] tipc: Node number set to 2130706433 [ 223.882545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.985320][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 224.090108][ T8596] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 224.123977][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.203639][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.204341][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.353748][ T8596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.442625][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.482736][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 224.583673][ T8600] bond1: (slave gretap1): making interface the new active one [ 224.598459][ T8610] netlink: 'syz.2.739': attribute type 33 has an invalid length. [ 224.610808][ T8600] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 224.610919][ T8601] lo: entered allmulticast mode [ 224.864005][ T8610] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 224.922493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.295888][ T8610] bond3 (unregistering): Released all slaves [ 225.296688][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.742'. [ 225.339580][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.455136][ T8601] lo: left allmulticast mode [ 225.774653][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 225.774677][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 225.887508][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.744'. [ 226.097690][ T8644] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 226.394823][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.750'. [ 226.768549][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.751'. [ 227.154557][ T8672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.755'. [ 227.756773][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 227.936956][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 228.459119][ T8735] ip6tnl0: entered allmulticast mode [ 228.559477][ T8735] dvmrp8: entered allmulticast mode [ 228.606837][ T5724] net_ratelimit: 13 callbacks suppressed [ 228.606861][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.735799][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.736976][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.082828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.289460][ T8728] ip6tnl0: left allmulticast mode [ 229.401549][ T8764] netlink: 'syz.4.775': attribute type 23 has an invalid length. [ 229.497722][ T8765] netlink: 'syz.4.775': attribute type 21 has an invalid length. [ 229.497760][ T8765] netlink: 128 bytes leftover after parsing attributes in process `syz.4.775'. [ 229.497836][ T8765] netlink: 'syz.4.775': attribute type 5 has an invalid length. [ 229.497850][ T8765] netlink: 'syz.4.775': attribute type 6 has an invalid length. [ 229.644420][ T192] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 229.653478][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.819491][ T8775] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 229.885920][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.888044][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.015928][ T8785] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.122490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.203531][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.643581][ T8806] __nla_validate_parse: 2 callbacks suppressed [ 230.643692][ T8806] netlink: 68 bytes leftover after parsing attributes in process `syz.3.788'. [ 230.761552][ T8822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.791'. [ 230.929383][ T8822] bond1 (unregistering): Released all slaves [ 232.321418][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 232.379170][ T8873] netlink: 'syz.4.803': attribute type 49 has an invalid length. [ 232.522037][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 232.522062][ T8886] netlink: 2 bytes leftover after parsing attributes in process `syz.2.804'. [ 232.667867][ T8873] ip6gretap0: entered promiscuous mode [ 232.667893][ T8873] ip6gretap0: entered allmulticast mode [ 232.714343][ T8882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.805'. [ 232.714369][ T8882] tipc: Invalid UDP bearer configuration [ 232.714411][ T8882] tipc: Enabling of bearer rejected, failed to enable media [ 233.036036][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 233.108066][ T8905] xfrm1: entered promiscuous mode [ 233.108296][ T8905] xfrm1: entered allmulticast mode [ 233.323524][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.578164][ T8905] raw_sendmsg: syz.2.808 forgot to set AF_INET. Fix it! [ 233.883167][ T5724] net_ratelimit: 13 callbacks suppressed [ 233.883190][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.966724][ T8936] netlink: 'syz.4.816': attribute type 2 has an invalid length. [ 233.970744][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 234.055106][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 234.089326][ T8940] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 234.282530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.365471][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.365896][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.389716][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.809'. [ 234.456776][ T8950] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 234.490635][ T8944] netlink: 'syz.3.809': attribute type 4 has an invalid length. [ 234.930484][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.463204][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.463914][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.771851][ T8994] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 235.771873][ T8994] __nla_validate_parse: 2 callbacks suppressed [ 235.771884][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.3.826'. [ 235.771898][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 236.044025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.046486][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.049325][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.890340][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 237.397628][ T9027] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 237.397656][ T9027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.835'. [ 237.537914][ T9037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.837'. [ 237.541150][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.837'. [ 237.604693][ T9038] netlink: 9 bytes leftover after parsing attributes in process `syz.4.838'. [ 237.622915][ T9038] gretap0: entered promiscuous mode [ 237.646791][ T9038] netlink: 5 bytes leftover after parsing attributes in process `syz.4.838'. [ 237.647186][ T9038] 0ªî{X¹¦: renamed from gretap0 [ 237.754882][ T9038] 0ªî{X¹¦: left promiscuous mode [ 237.754909][ T9038] 0ªî{X¹¦: entered allmulticast mode [ 238.895512][ T6953] net_ratelimit: 9 callbacks suppressed [ 238.895548][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.895806][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.086467][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.163013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.164342][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.249556][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.846'. [ 239.993158][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.993886][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.067349][ T9086] netlink: 'syz.4.852': attribute type 5 has an invalid length. [ 240.161867][ T9111] netlink: 'syz.2.857': attribute type 4 has an invalid length. [ 240.161891][ T9111] netlink: 152 bytes leftover after parsing attributes in process `syz.2.857'. [ 240.212832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.217055][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.442893][ T9122] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 240.818864][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 240.890826][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 241.015596][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 241.072807][ T9144] netlink: 'syz.2.866': attribute type 1 has an invalid length. [ 241.072832][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 241.143671][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.550318][ T9152] netlink: 'syz.4.868': attribute type 16 has an invalid length. [ 241.560452][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.868'. [ 241.833343][ T9176] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 241.833368][ T9176] netlink: 'syz.3.875': attribute type 4 has an invalid length. [ 241.833379][ T9176] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.875'. [ 241.970741][ T9181] netlink: 'syz.1.877': attribute type 2 has an invalid length. [ 242.040850][ T9183] netlink: 1 bytes leftover after parsing attributes in process `syz.1.879'. [ 242.484113][ T9197] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 242.484139][ T9197] netlink: 232 bytes leftover after parsing attributes in process `syz.0.882'. [ 242.484155][ T9197] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 242.590086][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 243.145889][ T9219] netlink: 76 bytes leftover after parsing attributes in process `syz.2.887'. [ 243.248249][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.249445][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.640684][ T9226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.847501][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.945971][ T9220] erspan0: entered promiscuous mode [ 244.362540][ C1] net_ratelimit: 14 callbacks suppressed [ 244.362566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.533119][ T9258] tc_dump_action: action bad kind [ 244.563452][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.564194][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.163165][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.331383][ T53] Bluetooth: hci3: unexpected event 0x04 length: 17 > 10 [ 245.331411][ T53] Bluetooth: unknown link type 128 [ 245.338212][ T9294] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.412896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.487060][ T9302] netlink: 'syz.0.911': attribute type 64 has an invalid length. [ 245.609360][ T9308] gre1: entered promiscuous mode [ 245.698567][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.699277][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.844498][ T9321] ip_tables: iptables: counters copy to user failed while replacing table [ 245.908038][ T9327] __nla_validate_parse: 7 callbacks suppressed [ 245.908058][ T9327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.923'. [ 246.029729][ T9335] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 246.128162][ T9335] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 246.128187][ T9335] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 246.128201][ T9335] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 246.128214][ T9335] netlink: 272 bytes leftover after parsing attributes in process `syz.1.925'. [ 246.128365][ T9335] netlink: 76 bytes leftover after parsing attributes in process `syz.1.925'. [ 246.306689][ T9340] bridge_slave_1: left allmulticast mode [ 246.306740][ T9340] bridge_slave_1: left promiscuous mode [ 246.335272][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.392941][ T9340] bridge_slave_0: left allmulticast mode [ 246.392971][ T9340] bridge_slave_0: left promiscuous mode [ 246.393220][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.442657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.603912][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.841266][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 247.166201][ T9372] netlink: 'syz.1.934': attribute type 19 has an invalid length. [ 247.342766][ T9376] xt_socket: unknown flags 0xc [ 247.388744][ T9380] xt_socket: unknown flags 0xc [ 247.403514][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 248.569030][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 248.806854][ T9428] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 248.806854][ T9428] Please contact the netfilter-devel mailing list or update your nftables rules. [ 248.812413][ T9431] netlink: 'syz.0.949': attribute type 4 has an invalid length. [ 248.880990][ T9429] netlink: 'syz.0.949': attribute type 4 has an invalid length. [ 249.026349][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 249.472191][ T9453] net_ratelimit: 10 callbacks suppressed [ 249.472214][ T9453] openvswitch: netlink: IP tunnel dst address not specified [ 249.562719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.575610][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 249.575636][ T9459] netlink: 14 bytes leftover after parsing attributes in process `syz.1.957'. [ 249.998679][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 250.037304][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'. [ 250.069804][ T9473] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 250.173169][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.173441][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.613300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.632679][ T9473] block nbd296: server does not support multiple connections per device. [ 250.686986][ T9473] block nbd296: shutting down sockets [ 250.935593][ T9477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.061668][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 251.083476][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.088003][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.304290][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.304561][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.762389][ T9551] netlink: 9 bytes leftover after parsing attributes in process `syz.4.973'. [ 253.762512][ T9551] 0·: renamed from hsr0 (while UP) [ 253.806448][ T9551] 0·: entered allmulticast mode [ 253.806479][ T9551] hsr_slave_0: entered allmulticast mode [ 253.806498][ T9551] hsr_slave_1: entered allmulticast mode [ 253.962850][ T9555] netlink: 9 bytes leftover after parsing attributes in process `syz.4.973'. [ 253.963680][ T9555] 1·: renamed from c0· (while UP) [ 254.431164][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 254.762988][ C1] net_ratelimit: 12 callbacks suppressed [ 254.763013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.769627][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.842143][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.854857][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.925225][ T8696] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.154104][ T9605] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 255.802533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.961969][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 255.974225][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.974943][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.209869][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.467641][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.488704][ T9652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.842231][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 256.842622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.871530][ T9673] netlink: 'syz.3.1002': attribute type 12 has an invalid length. [ 257.312329][ T9684] syzkaller1: entered promiscuous mode [ 257.319191][ T9684] syzkaller1: entered allmulticast mode [ 257.361107][ T9684] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 257.461549][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1008'. [ 257.461609][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1008'. [ 257.488761][ T9697] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1008'. [ 257.539831][ T9706] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1008'. [ 257.542597][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1008'. [ 257.891078][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 257.980461][ T9723] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.166523][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.369767][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 258.388269][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 258.407120][ T9736] veth0: entered promiscuous mode [ 258.481498][ T9735] veth0: left promiscuous mode [ 258.534243][ T9744] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 258.573919][ T9744] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.605365][ T9744] bond7: (slave bridge4): making interface the new active one [ 258.607881][ T9744] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 258.700350][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 259.448378][ T9770] netlink: 'syz.1.1024': attribute type 15 has an invalid length. [ 259.476004][ T9770] netlink: 'syz.1.1024': attribute type 15 has an invalid length. [ 259.477329][ T8699] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 259.478375][ T8699] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 259.478438][ T8699] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 259.547288][ T9773] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 259.962612][ C1] net_ratelimit: 13 callbacks suppressed [ 259.962637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.443781][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.444063][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.603502][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.979826][ T9723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.002864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.544397][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.547272][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.042456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.353842][ T9773] bond1 (unregistering): Released all slaves [ 262.475428][ T8699] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 262.612967][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.635955][ T9786] __nla_validate_parse: 6 callbacks suppressed [ 262.635975][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1029'. [ 262.636333][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1029'. [ 262.675198][ T9792] veth0: entered promiscuous mode [ 262.690283][ T9793] veth0: left promiscuous mode [ 262.718179][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.272468][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 263.719110][ T9837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.719129][ T9837] IPv6: NLM_F_CREATE should be set when creating new route [ 263.719173][ T9837] IPv6: NLM_F_CREATE should be set when creating new route [ 263.719198][ T9837] IPv6: NLM_F_CREATE should be set when creating new route [ 263.870825][ T9837] xt_REDIRECT: bad rangesize 26624. [ 264.450098][ T8696] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.562099][ T9863] bridge0: port 3(vlan2) entered blocking state [ 264.562284][ T9863] bridge0: port 3(vlan2) entered disabled state [ 264.577419][ T9863] vlan2: entered allmulticast mode [ 264.577440][ T9863] geneve0: entered allmulticast mode [ 264.594269][ T9863] vlan2: entered promiscuous mode [ 264.594288][ T9863] geneve0: entered promiscuous mode [ 264.732291][ T9866] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 264.987439][ T8699] net_ratelimit: 7 callbacks suppressed [ 264.987461][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.987761][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.993785][ T9872] pim6reg: entered allmulticast mode [ 265.026960][ T9871] ovs-dp0: left promiscuous mode [ 265.110019][ T9880] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.162614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.166421][ T9876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.196838][ T9876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.198680][ T9876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.201076][ T9876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.202265][ T9876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.237039][ T9876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.237516][ T9876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.307744][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 266.950392][ T9931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.982674][ T9931] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1063'. [ 267.525201][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 267.561945][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 267.700738][ T9956] xt_hashlimit: size too large, truncated to 1048576 [ 267.700916][ T9956] xt_hashlimit: max too large, truncated to 1048576 [ 267.701150][ T9956] xt_hashlimit: overflow, rate too high: 0 [ 268.456816][ T9987] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 268.586995][ T9977] bond5: entered promiscuous mode [ 268.781380][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1084'. [ 270.362701][ C1] net_ratelimit: 384 callbacks suppressed [ 270.362727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.682917][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.684351][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.171999][ T9971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.402551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.488316][T10016] syzkaller1: entered promiscuous mode [ 271.488338][T10016] syzkaller1: entered allmulticast mode [ 271.669424][T10035] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 271.669449][T10035] netlink: 'syz.2.1094': attribute type 3 has an invalid length. [ 271.669463][T10035] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1094'. [ 271.756999][T10037] veth0: entered promiscuous mode [ 271.780476][T10036] veth0: left promiscuous mode [ 271.828202][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.828808][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.074901][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 272.074936][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 272.075232][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 272.075253][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 272.172545][T10050] tc_dump_action: action bad kind [ 272.201753][T10051] tc_dump_action: action bad kind [ 272.442485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.640756][T10064] xt_l2tp: wrong L2TP version: 255 [ 272.886023][T10071] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.939588][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.940282][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.415303][ T6953] net_ratelimit: 8 callbacks suppressed [ 275.415327][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.589762][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1107'. [ 275.590641][T10086] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 275.861817][T10099] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1110'. [ 275.933950][T10099] netlink: 'syz.2.1110': attribute type 3 has an invalid length. [ 275.933975][T10099] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 275.933989][T10099] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1110'. [ 276.073801][T10099] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 276.110038][T10099] veth1_macvtap: left promiscuous mode [ 276.165350][T10099] veth1_macvtap: entered promiscuous mode [ 276.193539][T10099] .`: (slave macsec0): Enslaving as an active interface with an up link [ 276.193897][T10109] syzkaller1: entered promiscuous mode [ 276.193917][T10109] syzkaller1: entered allmulticast mode [ 276.202503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.276822][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.277254][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.577429][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 276.791842][T10131] netlink: zone id is out of range [ 276.791860][T10131] netlink: zone id is out of range [ 276.791868][T10131] netlink: zone id is out of range [ 276.791875][T10131] netlink: zone id is out of range [ 276.791883][T10131] netlink: zone id is out of range [ 276.791890][T10131] netlink: zone id is out of range [ 277.345918][T10158] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 277.577130][T10165] netlink: 'syz.1.1130': attribute type 2 has an invalid length. [ 277.580082][T10165] netlink: 'syz.1.1130': attribute type 2 has an invalid length. [ 277.580102][T10165] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1130'. [ 277.908331][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 278.119454][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 278.527196][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 278.656357][T10209] vlan4: entered promiscuous mode [ 278.656380][T10209] bridge0: entered promiscuous mode [ 278.656601][T10209] vlan4: entered allmulticast mode [ 278.656615][T10209] bridge0: entered allmulticast mode [ 278.720196][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 278.976698][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 279.417273][T10240] bond3 (unregistering): Released all slaves [ 279.457590][T10242] netlink: 'syz.4.1147': attribute type 4 has an invalid length. [ 279.765477][T10249] netlink: 'syz.3.1150': attribute type 10 has an invalid length. [ 279.844816][T10249] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 279.998415][T10249] team0: Port device wlan0 added [ 280.523187][ T8696] net_ratelimit: 513 callbacks suppressed [ 280.523211][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.713184][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.713462][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.402454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.812780][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.813051][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.442509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.913299][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.913575][ T8698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.249316][T10271] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 283.341247][T10274] netlink: 'syz.4.1159': attribute type 11 has an invalid length. [ 283.482668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.530487][T10280] ovs0: entered promiscuous mode [ 283.532269][T10281] openvswitch: ovs0: Dropping previously announced user features [ 283.955626][T10304] __nla_validate_parse: 7 callbacks suppressed [ 283.955647][T10304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1164'. [ 283.955665][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1164'. [ 284.180047][T10309] netlink: 'syz.4.1166': attribute type 16 has an invalid length. [ 284.180073][T10309] netlink: 'syz.4.1166': attribute type 17 has an invalid length. [ 284.201085][T10309] 0ªî{X¹¦: left allmulticast mode [ 284.201930][T10309] erspan0: left promiscuous mode [ 284.235039][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.279613][T10309] 1·: left allmulticast mode [ 284.279639][T10309] hsr_slave_0: left allmulticast mode [ 284.279654][T10309] hsr_slave_1: left allmulticast mode [ 284.334901][T10309] veth0_macvtap: left allmulticast mode [ 284.354704][T10309] gtp0: left promiscuous mode [ 284.354729][T10309] gtp0: left allmulticast mode [ 284.377817][T10309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.996885][T10331] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1172'. [ 285.018665][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1172'. [ 285.220655][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1175'. [ 285.220683][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1175'. [ 285.320453][T10343] TCP: TCP_TX_DELAY enabled [ 285.506441][T10344] netlink: 'syz.4.1177': attribute type 10 has an invalid length. [ 285.562577][ C0] net_ratelimit: 11 callbacks suppressed [ 285.562601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.936040][T10372] openvswitch: netlink: Message has 8 unknown bytes. [ 285.936082][T10372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.204843][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 286.210580][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 286.280852][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.281577][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.309512][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.479377][T10392] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1190'. [ 286.604090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.619467][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1191'. [ 286.925234][ T8697] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.224647][T10422] macsec1: entered promiscuous mode [ 287.385197][ T8697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.385496][ T8697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.469481][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.469534][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.469570][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.469602][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.565748][T10434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.080779][ T53] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 288.092731][ T53] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 289.439165][T10489] __nla_validate_parse: 143 callbacks suppressed [ 289.439189][T10489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1220'. [ 290.162326][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.166816][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.167059][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.168987][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.171016][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.171247][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.171472][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.171705][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.171949][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.764686][ T50] net_ratelimit: 12 callbacks suppressed [ 290.764709][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.848854][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.849141][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.162676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.578920][T10549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.727210][T10560] syzkaller0: entered promiscuous mode [ 291.727236][T10560] syzkaller0: entered allmulticast mode [ 291.983142][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.983423][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.028663][T10577] x_tables: unsorted entry at hook 2 [ 292.044001][ T8697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.202884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.082929][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.727264][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 294.944279][T10587] __nla_validate_parse: 2 callbacks suppressed [ 294.944300][T10587] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1246'. [ 295.034186][T10594] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1246'. [ 295.035494][T10593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1248'. [ 295.949820][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 296.066585][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1253'. [ 298.510145][T10680] ip6erspan0: entered allmulticast mode [ 298.513340][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 298.753156][T10685] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 299.565216][T10688] net_ratelimit: 7 callbacks suppressed [ 299.565237][T10688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.414500][T10715] netlink: 'syz.4.1275': attribute type 4 has an invalid length. [ 301.628955][T10722] bridge0: port 3(dummy0) entered blocking state [ 301.631797][T10722] bridge0: port 3(dummy0) entered disabled state [ 301.632182][T10722] dummy0: entered allmulticast mode [ 301.696307][T10722] dummy0: entered promiscuous mode [ 301.701874][T10722] bridge0: port 3(dummy0) entered blocking state [ 301.702204][T10722] bridge0: port 3(dummy0) entered forwarding state [ 302.044731][T10728] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 302.092303][T10732] netlink: Unknown NAT attribute (type=2049, max=9) [ 302.092706][T10732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.155110][T10728] bond1 (unregistering): Released all slaves [ 303.066611][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 303.108211][T10750] x_tables: unsorted entry at hook 2 [ 303.930711][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 303.930756][T10771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.250597][T10777] netlink: 'syz.4.1289': attribute type 4 has an invalid length. [ 305.176120][T10796] veth1_macvtap: left promiscuous mode [ 305.176362][T10796] macsec0: entered promiscuous mode [ 306.982109][T10823] netlink: 'syz.0.1303': attribute type 4 has an invalid length. [ 308.029476][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1309'. [ 308.402371][T10854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 309.058313][T10869] openvswitch: netlink: Message has 1 unknown bytes. [ 309.769658][T10884] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 309.830710][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805697a400: rx timeout, send abort [ 309.939152][T10884] bond1 (unregistering): Released all slaves [ 310.001129][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 310.331148][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805697a000: rx timeout, send abort [ 310.331983][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805697a400: abort rx timeout. Force session deactivation [ 310.831201][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805697a000: abort rx timeout. Force session deactivation [ 310.920314][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069b08c00: rx timeout, send abort [ 310.920714][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888069b08c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 312.441738][T10918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1323'. [ 312.600364][T10924] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 312.882531][T10931] tun0: tun_chr_ioctl cmd 1074025675 [ 312.882556][T10931] tun0: persist disabled [ 312.954745][T10931] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 316.255805][ T30] audit: type=1107 audit(1790973186.340:4): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='9¼®!‘WI·@b²‚9J¤âI‰ùóìì_@Ô3ô­FEãC Eòé~iSI|Sö8©•÷sœuÉPwSÁþiRWZ÷*öÁGe®åQÛKW^–S{÷ý@ß3zßYýÏb=ã“{#eGl8' [ 316.330931][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1337'. [ 316.725764][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 317.650047][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.115465][T10994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1340'. [ 318.507265][T10997] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1340'. [ 318.927580][ T3339] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.251566][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 319.776414][T11011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1345'. [ 321.647024][ T6956] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 322.088062][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 322.088099][T11031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1349'. [ 322.191506][T11031] geneve2: entered promiscuous mode [ 322.191733][T11031] geneve2: entered allmulticast mode [ 322.436396][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 323.145459][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 323.526344][T11066] netlink: 'syz.4.1361': attribute type 30 has an invalid length. [ 323.794487][T11066] bond3: option arp_missed_max: invalid value (0) [ 323.794514][T11066] bond3: option arp_missed_max: allowed values 1 - 255 [ 323.920971][T11066] bond3 (unregistering): Released all slaves [ 325.060251][T11102] netlink: 'syz.0.1368': attribute type 2 has an invalid length. [ 325.060278][T11102] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1368'. [ 325.784928][T11120] ip_vti0: entered promiscuous mode [ 325.825520][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 325.825556][T11121] netlink: 'syz.3.1374': attribute type 5 has an invalid length. [ 325.825571][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1374'. [ 326.049562][T11121] netlink: 'syz.3.1374': attribute type 11 has an invalid length. [ 327.099263][T11146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1380'. [ 327.778217][T11162] netlink: 'syz.1.1386': attribute type 21 has an invalid length. [ 327.778306][T11162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1386'. [ 327.885353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.992797][T11161] geneve1: mtu less than device minimum [ 328.103823][T11166] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1387'. [ 330.674929][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1391'. [ 330.700492][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1391'. [ 330.718098][T11193] netlink: 'syz.0.1392': attribute type 16 has an invalid length. [ 330.718123][T11193] netlink: 'syz.0.1392': attribute type 17 has an invalid length. [ 330.899340][T11194] netlink: 'syz.4.1391': attribute type 32 has an invalid length. [ 330.899365][T11194] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1391'. [ 331.691763][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 331.700605][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 331.808023][T11193] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.068886][T11193] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.069046][T11193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.744467][T11193] gretap0: entered promiscuous mode [ 333.543502][T11193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 333.609153][T11193] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 333.772581][T11202] bridge1: entered promiscuous mode [ 333.772797][T11202] bridge1: entered allmulticast mode [ 334.330448][ T8696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 334.504856][ T3383] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 334.861981][T11215] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 336.521625][T11248] netlink: 'syz.0.1405': attribute type 3 has an invalid length. [ 336.521649][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 336.917281][T11251] netlink: 'syz.0.1405': attribute type 3 has an invalid length. [ 336.917308][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 338.282568][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 338.282877][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.579178][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 339.176577][T11279] bond1: entered allmulticast mode [ 339.303528][T11279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.064949][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1424'. [ 342.290033][T11328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1424'. [ 342.489450][T11325] bond3: entered promiscuous mode [ 342.495103][T11325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.456555][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1429'. [ 343.470869][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1429'. [ 344.731581][T11380] netlink: 'syz.1.1435': attribute type 2 has an invalid length. [ 345.547233][T11386] gtp3: entered promiscuous mode [ 345.547465][T11386] gtp3: entered allmulticast mode [ 345.802616][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 345.940246][T11396] FAULT_INJECTION: forcing a failure. [ 345.940246][T11396] name failslab, interval 1, probability 0, space 0, times 1 [ 345.940280][T11396] CPU: 0 UID: 0 PID: 11396 Comm: syz.2.1442 Not tainted syzkaller #0 PREEMPT(full) [ 345.940302][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 345.940313][T11396] Call Trace: [ 345.940387][T11396] [ 345.940428][T11396] dump_stack_lvl+0xe8/0x150 [ 345.940598][T11396] should_fail_ex+0x410/0x560 [ 345.940715][T11396] should_failslab+0xa8/0x100 [ 345.940777][T11396] ? skb_clone+0x212/0x3a0 [ 345.940924][T11396] kmem_cache_alloc_noprof+0xa1/0x600 [ 345.940949][T11396] ? skb_clone+0x212/0x3a0 [ 345.940985][T11396] skb_clone+0x212/0x3a0 [ 345.941018][T11396] __netlink_deliver_tap+0x413/0x860 [ 345.941087][T11396] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.941120][T11396] netlink_deliver_tap+0x19c/0x1b0 [ 345.941144][T11396] netlink_unicast+0x781/0x940 [ 345.941224][T11396] netlink_sendmsg+0x813/0xb40 [ 345.941256][T11396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.941288][T11396] ? apparmor_socket_sendmsg+0x98/0x360 [ 345.941361][T11396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.941382][T11396] sock_sendmsg_nosec+0x13a/0x180 [ 345.941430][T11396] ____sys_sendmsg+0x54e/0x850 [ 345.941486][T11396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.941527][T11396] ? import_iovec+0x73/0xa0 [ 345.941612][T11396] ___sys_sendmsg+0x2a5/0x360 [ 345.941638][T11396] ? __lock_acquire+0x747/0x2de0 [ 345.941689][T11396] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.941755][T11396] ? __fget_files+0x2a/0x420 [ 345.941794][T11396] ? __fget_files+0x3a2/0x420 [ 345.941832][T11396] __x64_sys_sendmsg+0x1b1/0x290 [ 345.941862][T11396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.941912][T11396] do_syscall_64+0x166/0x520 [ 345.942022][T11396] ? trace_irq_disable+0x3b/0x140 [ 345.942062][T11396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.942100][T11396] ? clear_bhb_loop+0x70/0xc0 [ 345.942134][T11396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.942154][T11396] RIP: 0033:0x7fa6ed59e159 [ 345.942197][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.942234][T11396] RSP: 002b:00007fa6ee426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.942277][T11396] RAX: ffffffffffffffda RBX: 00007fa6ed825fa0 RCX: 00007fa6ed59e159 [ 345.942292][T11396] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 345.942304][T11396] RBP: 00007fa6ee426090 R08: 0000000000000000 R09: 0000000000000000 [ 345.942316][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.942328][T11396] R13: 00007fa6ed826038 R14: 00007fa6ed825fa0 R15: 00007ffd51f83178 [ 345.942362][T11396] [ 345.961356][T11392] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1440'. [ 346.120568][T11396] netlink: 'syz.2.1442': attribute type 2 has an invalid length. [ 346.442919][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.160526][ T53] Bluetooth: hci4: unexpected event 0x1c length: 22 > 5 [ 348.067285][T11431] netlink: 'syz.4.1448': attribute type 2 has an invalid length. [ 348.539705][T11433] xt_CT: No such helper "netbios-ns" [ 348.847204][T11441] xt_CONNSECMARK: invalid mode: 0 [ 348.863795][T11446] FAULT_INJECTION: forcing a failure. [ 348.863795][T11446] name failslab, interval 1, probability 0, space 0, times 0 [ 348.863829][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.1.1455 Not tainted syzkaller #0 PREEMPT(full) [ 348.863860][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 348.863872][T11446] Call Trace: [ 348.863881][T11446] [ 348.863890][T11446] dump_stack_lvl+0xe8/0x150 [ 348.863926][T11446] should_fail_ex+0x410/0x560 [ 348.863958][T11446] should_failslab+0xa8/0x100 [ 348.863984][T11446] ? skb_clone+0x212/0x3a0 [ 348.864015][T11446] kmem_cache_alloc_noprof+0xa1/0x600 [ 348.864039][T11446] ? skb_clone+0x212/0x3a0 [ 348.864076][T11446] skb_clone+0x212/0x3a0 [ 348.864110][T11446] __netlink_deliver_tap+0x413/0x860 [ 348.864146][T11446] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.864169][T11446] netlink_deliver_tap+0x19c/0x1b0 [ 348.864191][T11446] netlink_unicast+0x781/0x940 [ 348.864232][T11446] netlink_sendmsg+0x813/0xb40 [ 348.864265][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.864294][T11446] ? apparmor_socket_sendmsg+0x98/0x360 [ 348.864321][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.864340][T11446] sock_sendmsg_nosec+0x13a/0x180 [ 348.864365][T11446] ____sys_sendmsg+0x54e/0x850 [ 348.864399][T11446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.864436][T11446] ? import_iovec+0x73/0xa0 [ 348.864466][T11446] ___sys_sendmsg+0x2a5/0x360 [ 348.864492][T11446] ? __lock_acquire+0x747/0x2de0 [ 348.864519][T11446] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.864585][T11446] ? __fget_files+0x2a/0x420 [ 348.864611][T11446] ? __fget_files+0x3a2/0x420 [ 348.864648][T11446] __x64_sys_sendmsg+0x1b1/0x290 [ 348.864679][T11446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.864730][T11446] do_syscall_64+0x166/0x520 [ 348.864756][T11446] ? trace_irq_disable+0x3b/0x140 [ 348.864778][T11446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.864798][T11446] ? clear_bhb_loop+0x70/0xc0 [ 348.864822][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.864842][T11446] RIP: 0033:0x7f4d5ed9e159 [ 348.864872][T11446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.864889][T11446] RSP: 002b:00007f4d5fce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.864913][T11446] RAX: ffffffffffffffda RBX: 00007f4d5f025fa0 RCX: 00007f4d5ed9e159 [ 348.864927][T11446] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 348.864940][T11446] RBP: 00007f4d5fce5090 R08: 0000000000000000 R09: 0000000000000000 [ 348.864952][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.864964][T11446] R13: 00007f4d5f026038 R14: 00007f4d5f025fa0 R15: 00007ffe2f9ea4c8 [ 348.864996][T11446] [ 348.871837][T11446] netlink: 'syz.1.1455': attribute type 2 has an invalid length. [ 349.741541][T11451] netlink: 'syz.0.1456': attribute type 2 has an invalid length. [ 349.741567][T11451] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1456'. [ 350.387705][T11456] dummy0: left allmulticast mode [ 350.391128][T11456] dummy0: left promiscuous mode [ 350.407541][T11456] bridge0: port 3(dummy0) entered disabled state [ 350.643667][T11463] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 350.720157][T11456] bridge_slave_0: left allmulticast mode [ 350.729840][T11456] bridge_slave_0: left promiscuous mode [ 350.730865][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.926759][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.242000][T11456] bridge_slave_1: left promiscuous mode [ 351.275464][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.384659][T11456] bond5: (slave veth0_to_bond): Releasing active interface [ 351.539176][T11456] bond0: (slave bond_slave_0): Releasing backup interface [ 351.667422][T11456] bond0: (slave bond_slave_1): Releasing backup interface [ 351.840932][T11456] team0: Port device team_slave_0 removed [ 351.971468][T11456] team0: Port device team_slave_1 removed [ 351.999006][T11456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 352.265240][T11459] team0: Port device xfrm0 added [ 352.335658][T11461] tipc: Enabled bearer , priority 0 [ 352.776701][T11481] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 352.828766][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 354.223404][T11513] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 354.250702][T11513] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 354.255505][T11520] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 354.817080][T11526] netlink: 'syz.0.1475': attribute type 2 has an invalid length. [ 356.323381][T11541] ip_tables: iptables: counters copy to user failed while replacing table [ 356.332091][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 356.929559][T11560] block nbd0: NBD_DISCONNECT [ 356.930075][T11560] block nbd0: Send disconnect failed -32 [ 356.930095][T11560] block nbd0: shutting down sockets [ 357.880442][T11577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.989172][T11579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.110900][T11577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.255892][T11560] udevd[11560]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 358.317116][T11579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.612793][T11588] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 358.766473][T11588] bond2 (unregistering): Released all slaves [ 358.993251][T11579] batman_adv: batadv0: Adding interface: syzkaller0 [ 359.025244][T11579] batman_adv: batadv0: Interface activated: syzkaller0 [ 359.325867][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 359.366366][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 359.366394][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 359.369463][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 359.369482][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 359.649043][T11610] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 359.729982][T11610] bond2 (unregistering): Released all slaves [ 360.069260][T11613] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 360.181912][T11613] bond2 (unregistering): Released all slaves [ 360.978319][T11632] netlink: 'syz.4.1495': attribute type 16 has an invalid length. [ 360.978344][T11632] netlink: 'syz.4.1495': attribute type 17 has an invalid length. [ 361.163361][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 361.276805][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'. [ 361.311996][T11640] xt_bpf: check failed: parse error [ 362.217324][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'. [ 362.331325][T11653] netlink: 'syz.2.1500': attribute type 21 has an invalid length. [ 362.499072][T11632] ip_vti0: left promiscuous mode [ 363.082579][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.359089][T11632] bridge1: left promiscuous mode [ 363.359324][T11632] bridge1: left allmulticast mode [ 363.392702][T11632] bond3: left promiscuous mode [ 364.017082][T11653] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1500'. [ 365.269781][T11690] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1506'. [ 365.461529][T11693] pimreg3: entered allmulticast mode [ 366.125866][T11699] netlink: 776 bytes leftover after parsing attributes in process `syz.0.1509'. [ 366.703003][T11712] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 367.866956][T11726] netlink: 'syz.0.1517': attribute type 10 has an invalid length. [ 367.986894][T11736] netlink: 'syz.0.1517': attribute type 10 has an invalid length. [ 368.032173][T11726] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.047954][T11726] bond0: (slave team0): Enslaving as an active interface with an up link [ 368.053302][T11739] netlink: 'syz.2.1518': attribute type 10 has an invalid length. [ 368.228405][T11739] macsec0: left promiscuous mode [ 368.496790][T11744] ip_tables: iptables: counters copy to user failed while replacing table [ 368.575451][T11751] netlink: zone id is out of range [ 368.575470][T11751] netlink: zone id is out of range [ 368.575478][T11751] netlink: zone id is out of range [ 368.575486][T11751] netlink: zone id is out of range [ 368.575493][T11751] netlink: zone id is out of range [ 368.575501][T11751] netlink: zone id is out of range [ 368.575513][T11751] netlink: zone id is out of range [ 368.575521][T11751] netlink: zone id is out of range [ 368.630127][T11748] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 368.630153][T11748] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 369.889199][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 369.889225][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 369.924852][T11771] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1527'. [ 370.169469][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'. [ 370.184304][T11786] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1530'. [ 370.184543][T11786] erspan0: entered promiscuous mode [ 370.758670][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 370.985239][T11801] x_tables: duplicate underflow at hook 1 [ 371.086310][T11806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1534'. [ 373.831479][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 374.709132][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 377.244938][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 378.215202][T11860] ÿÿÿÿÿÿ: renamed from vlan1 [ 378.924524][T11863] netlink: 'syz.4.1545': attribute type 1 has an invalid length. [ 379.098460][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.164700][T11869] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1548'. [ 380.187165][T11869] 8021q: VLANs not supported on ip_vti0 [ 380.241112][T11867] xt_LOG: prefix is not null-terminated [ 381.044839][T11873] syzkaller0: entered promiscuous mode [ 381.045068][T11873] syzkaller0: entered allmulticast mode [ 381.172266][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 382.662041][T11884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1552'. [ 382.959485][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.851482][ T6953] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.525745][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'. [ 385.339583][T11888] bond8: entered promiscuous mode [ 385.354824][T11888] 8021q: adding VLAN 0 to HW filter on device bond8 [ 385.704426][T11896] 8021q: adding VLAN 0 to HW filter on device bond8 [ 385.710820][T11896] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 385.787062][T11896] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 385.879530][T11903] net_ratelimit: 1 callbacks suppressed [ 385.879553][T11903] openvswitch: netlink: Multiple metadata blocks provided [ 387.975519][T11909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1558'. [ 389.669747][T11931] openvswitch: netlink: IP tunnel dst address not specified [ 389.799801][T11932] xt_l2tp: wrong L2TP version: 255 [ 389.962942][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 390.884426][T11938] xt_limit: Overflow, try lower: 536871034/0 [ 391.052406][T11935] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.110619][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.083423][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 398.762322][ C1] sched: DL replenish lagged too much [ 415.033355][ T157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.205786][ T8702] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.581218][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.071992][ T157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.764282][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 452.499461][ T1011] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 461.003513][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.805613][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.905941][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.990197][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.374024][ T1011] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.763292][ T31] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 546.763708][ T31] Not tainted syzkaller #0 [ 546.764071][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.764429][ T31] task:kworker/1:0 state:D stack:24008 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 546.767115][ T31] Workqueue: events netdev_work_proc [ 546.768360][ T31] Call Trace: [ 546.768370][ T31] [ 546.768761][ T31] __schedule+0x17db/0x58f0 [ 546.769183][ T31] ? update_protect_slice+0x128/0x210 [ 546.770660][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 546.771441][ T31] ? __pfx___schedule+0x10/0x10 [ 547.562264][ T31] ? schedule+0x90/0x2b0 [ 547.563798][ T31] schedule+0x164/0x2b0 [ 547.564224][ T31] schedule_preempt_disabled+0x13/0x30 [ 547.564624][ T31] __mutex_lock+0x7c1/0x1550 [ 547.565015][ T31] ? __mutex_lock+0x5d4/0x1550 [ 547.565404][ T31] ? netdev_work_proc+0x6f/0x770 [ 547.565797][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 547.566201][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 547.566946][ T31] netdev_work_proc+0x6f/0x770 [ 547.567342][ T31] ? __pfx_netdev_work_proc+0x10/0x10 [ 547.567734][ T31] ? rcu_is_watching+0x16/0xb0 [ 547.568155][ T31] ? process_scheduled_works+0x97a/0x1630 [ 547.568551][ T31] process_scheduled_works+0xc3d/0x1630 [ 547.569673][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.570065][ T31] ? assign_work+0x3cf/0x5d0 [ 547.570454][ T31] worker_thread+0xa47/0xfb0 [ 547.571577][ T31] kthread+0x38b/0x480 [ 547.572025][ T31] ? __pfx_worker_thread+0x10/0x10 [ 547.572285][ T31] ? __pfx_kthread+0x10/0x10 [ 547.572812][ T31] ret_from_fork+0x514/0xb70 [ 547.573240][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 547.573986][ T31] ? __switch_to+0xc89/0x1420 [ 547.574387][ T31] ? __pfx_kthread+0x10/0x10 [ 547.574780][ T31] ret_from_fork_asm+0x1a/0x30 [ 547.575534][ T31] [ 547.577336][ T31] INFO: task kworker/u8:9:3339 blocked for more than 144 seconds. [ 547.577757][ T31] Not tainted syzkaller #0 [ 547.578115][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.578125][ T31] task:kworker/u8:9 state:D stack:22016 pid:3339 tgid:3339 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 547.579260][ T31] Workqueue: events_unbound linkwatch_event [ 547.579762][ T31] Call Trace: [ 547.580120][ T31] [ 547.580479][ T31] __schedule+0x17db/0x58f0 [ 547.581989][ T31] ? __pfx___schedule+0x10/0x10 [ 548.209873][ T31] ? schedule+0x90/0x2b0 [ 548.210266][ T31] schedule+0x164/0x2b0 [ 548.210658][ T31] schedule_preempt_disabled+0x13/0x30 [ 548.211050][ T31] __mutex_lock+0x7c1/0x1550 [ 548.211809][ T31] ? __mutex_lock+0x5d4/0x1550 [ 548.212198][ T31] ? linkwatch_event+0xe/0x60 [ 548.212725][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 548.213111][ T31] ? lock_acquire+0x115/0x350 [ 548.213602][ T31] ? rcu_is_watching+0x16/0xb0 [ 548.213994][ T31] ? process_scheduled_works+0x97a/0x1630 [ 548.214388][ T31] linkwatch_event+0xe/0x60 [ 548.214752][ T31] process_scheduled_works+0xc3d/0x1630 [ 548.215903][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 548.216303][ T31] ? assign_work+0x3cf/0x5d0 [ 548.216691][ T31] worker_thread+0xa47/0xfb0 [ 548.218165][ T31] kthread+0x38b/0x480 [ 548.218562][ T31] ? __pfx_worker_thread+0x10/0x10 [ 548.218942][ T31] ? __pfx_kthread+0x10/0x10 [ 548.219310][ T31] ret_from_fork+0x514/0xb70 [ 548.219702][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 548.220091][ T31] ? __switch_to+0xc89/0x1420 [ 548.220847][ T31] ? __pfx_kthread+0x10/0x10 [ 548.221240][ T31] ret_from_fork_asm+0x1a/0x30 [ 548.221992][ T31] [ 548.410121][ T31] INFO: task kworker/1:3:5724 blocked for more than 144 seconds. [ 548.410513][ T31] Not tainted syzkaller #0 [ 548.410874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.411263][ T31] task:kworker/1:3 state:D stack:22304 pid:5724 tgid:5724 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 548.994156][ T31] Workqueue: events switchdev_deferred_process_work [ 548.994269][ T31] Call Trace: [ 548.994278][ T31] [ 548.994294][ T31] __schedule+0x17db/0x58f0 [ 548.994328][ T31] ? update_protect_slice+0x128/0x210 [ 548.994368][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 548.994406][ T31] ? __pfx___schedule+0x10/0x10 [ 548.994443][ T31] ? schedule+0x90/0x2b0 [ 548.994474][ T31] schedule+0x164/0x2b0 [ 548.994501][ T31] schedule_preempt_disabled+0x13/0x30 [ 548.994527][ T31] __mutex_lock+0x7c1/0x1550 [ 548.994561][ T31] ? __mutex_lock+0x5d4/0x1550 [ 548.994594][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 548.994627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 548.994657][ T31] ? lock_acquire+0x115/0x350 [ 548.994690][ T31] ? rcu_is_watching+0x16/0xb0 [ 548.994718][ T31] ? process_scheduled_works+0x97a/0x1630 [ 548.994747][ T31] switchdev_deferred_process_work+0xe/0x20 [ 548.994775][ T31] process_scheduled_works+0xc3d/0x1630 [ 548.994838][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 548.994874][ T31] ? assign_work+0x3cf/0x5d0 [ 548.994909][ T31] worker_thread+0xa47/0xfb0 [ 548.994953][ T31] ? __kthread_parkme+0x71/0x1f0 [ 548.995636][ T31] kthread+0x38b/0x480 [ 548.996067][ T31] ? __pfx_worker_thread+0x10/0x10 [ 548.996456][ T31] ? __pfx_kthread+0x10/0x10 [ 548.996816][ T31] ret_from_fork+0x514/0xb70 [ 548.997179][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 548.997575][ T31] ? __switch_to+0xc89/0x1420 [ 548.997965][ T31] ? __pfx_kthread+0x10/0x10 [ 548.998361][ T31] ret_from_fork_asm+0x1a/0x30 [ 548.999208][ T31] [ 549.000295][ T31] INFO: task syz.2.1565:11937 blocked for more than 145 seconds. [ 549.000679][ T31] Not tainted syzkaller #0 [ 549.000692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.001046][ T31] task:syz.2.1565 state:D stack:28808 pid:11937 tgid:11936 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 549.772915][ T31] Call Trace: [ 549.772927][ T31] [ 549.772942][ T31] __schedule+0x17db/0x58f0 [ 549.773002][ T31] ? __kasan_slab_free+0x5c/0x80 [ 549.773032][ T31] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 549.773124][ T31] ? do_syscall_64+0x166/0x520 [ 549.773164][ T31] ? __pfx___schedule+0x10/0x10 [ 549.773203][ T31] ? schedule+0x90/0x2b0 [ 549.773233][ T31] schedule+0x164/0x2b0 [ 549.773262][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.773290][ T31] __mutex_lock+0x7c1/0x1550 [ 549.773326][ T31] ? __mutex_lock+0x5d4/0x1550 [ 549.773360][ T31] ? wext_ioctl_dispatch+0xa2/0x410 [ 549.773444][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.773481][ T31] ? dev_load+0x21/0x1f0 [ 549.773557][ T31] ? dev_load+0x21/0x1f0 [ 549.773584][ T31] ? __pfx_ioctl_standard_call+0x10/0x10 [ 549.773608][ T31] wext_ioctl_dispatch+0xa2/0x410 [ 549.773637][ T31] wext_handle_ioctl+0x110/0x1d0 [ 549.773665][ T31] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 549.773686][ T31] ? hook_file_ioctl+0x1f2/0x600 [ 549.773774][ T31] sock_ioctl+0x159/0x7e0 [ 549.773801][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 549.773825][ T31] ? __fget_files+0x2a/0x420 [ 549.773855][ T31] ? __fget_files+0x3a2/0x420 [ 549.773883][ T31] ? __fget_files+0x2a/0x420 [ 549.773917][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 549.773962][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 549.773993][ T31] __se_sys_ioctl+0xfc/0x170 [ 549.774035][ T31] do_syscall_64+0x166/0x520 [ 549.774722][ T31] ? trace_irq_disable+0x3b/0x140 [ 549.775144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.775507][ T31] ? clear_bhb_loop+0x70/0xc0 [ 549.775907][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.776325][ T31] RIP: 0033:0x7fa6ed59e159 [ 549.776716][ T31] RSP: 002b:00007fa6ee426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.777086][ T31] RAX: ffffffffffffffda RBX: 00007fa6ed825fa0 RCX: 00007fa6ed59e159 [ 549.777470][ T31] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 549.777835][ T31] RBP: 00007fa6ed63506b R08: 0000000000000000 R09: 0000000000000000 [ 549.778222][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.778588][ T31] R13: 00007fa6ed826038 R14: 00007fa6ed825fa0 R15: 00007ffd51f83178 [ 549.779322][ T31] [ 549.779704][ T31] INFO: task syz.2.1565:11938 blocked for more than 146 seconds. [ 549.780092][ T31] Not tainted syzkaller #0 [ 549.780105][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.780451][ T31] task:syz.2.1565 state:D stack:28448 pid:11938 tgid:11936 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 549.781964][ T31] Call Trace: [ 550.754318][ T31] [ 550.754711][ T31] __schedule+0x17db/0x58f0 [ 550.755472][ T31] ? trace_sched_exit_tp+0x3a/0x130 [ 550.756220][ T31] ? __pfx___schedule+0x10/0x10 [ 550.756973][ T31] ? schedule+0x90/0x2b0 [ 550.757373][ T31] schedule+0x164/0x2b0 [ 550.757763][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.758151][ T31] __mutex_lock+0x7c1/0x1550 [ 550.758552][ T31] ? __mutex_lock+0x5d4/0x1550 [ 550.758943][ T31] ? ip_mroute_setsockopt+0x137/0x10d0 [ 550.790368][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.790792][ T31] ? __futex_wait+0x358/0x400 [ 550.791188][ T31] ? __pfx___futex_wait+0x10/0x10 [ 550.791613][ T31] ip_mroute_setsockopt+0x137/0x10d0 [ 550.792004][ T31] ? futex_hash+0x4e/0x2b0 [ 551.175178][ T31] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 551.175255][ T31] do_ip_setsockopt+0xeba/0x2e30 [ 551.175385][ T31] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 551.175409][ T31] ? do_futex+0x3e7/0x4e0 [ 551.175443][ T31] ? lock_acquire+0x115/0x350 [ 551.175478][ T31] ? aa_sock_opt_perm+0xe8/0x1e0 [ 551.175512][ T31] ip_setsockopt+0x66/0x110 [ 551.175537][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 551.175566][ T31] do_sock_setsockopt+0x17c/0x1b0 [ 551.175602][ T31] __x64_sys_setsockopt+0x13d/0x1b0 [ 551.175639][ T31] do_syscall_64+0x166/0x520 [ 551.175668][ T31] ? trace_irq_disable+0x3b/0x140 [ 551.175689][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.175710][ T31] ? clear_bhb_loop+0x70/0xc0 [ 551.175737][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.175758][ T31] RIP: 0033:0x7fa6ed59e159 [ 551.175777][ T31] RSP: 002b:00007fa6ee405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 551.175801][ T31] RAX: ffffffffffffffda RBX: 00007fa6ed826090 RCX: 00007fa6ed59e159 [ 551.175817][ T31] RDX: 00000000000000d3 RSI: 0000000000000000 RDI: 0000000000000005 [ 551.175830][ T31] RBP: 00007fa6ed63506b R08: 000000000000003c R09: 0000000000000000 [ 551.175842][ T31] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.175856][ T31] R13: 00007fa6ed826128 R14: 00007fa6ed826090 R15: 00007ffd51f83178 [ 551.175892][ T31] [ 551.881838][ T31] INFO: task syz.1.1566:11941 blocked for more than 148 seconds. [ 551.882255][ T31] Not tainted syzkaller #0 [ 551.882272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.885765][ T31] task:syz.1.1566 state:D stack:27200 pid:11941 tgid:11940 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 551.888421][ T31] Call Trace: [ 551.888779][ T31] [ 551.889494][ T31] __schedule+0x17db/0x58f0 [ 551.890683][ T31] ? __pfx___schedule+0x10/0x10 [ 551.891434][ T31] ? schedule+0x90/0x2b0 [ 551.891832][ T31] schedule+0x164/0x2b0 [ 551.892738][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.893133][ T31] __mutex_lock+0x7c1/0x1550 [ 551.893537][ T31] ? __mutex_lock+0x5d4/0x1550 [ 551.893931][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 551.894317][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.894712][ T31] ? lock_acquire+0x115/0x350 [ 551.895595][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 551.896349][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 551.896744][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.897129][ T31] ? ref_tracker_free+0x689/0x830 [ 551.897599][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 551.898380][ T31] netlink_rcv_skb+0x226/0x4a0 [ 551.898779][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.899172][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.899921][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.900313][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.900711][ T31] netlink_unicast+0x7bd/0x940 [ 551.901459][ T31] netlink_sendmsg+0x813/0xb40 [ 552.270978][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.271028][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 552.271058][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.271079][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 552.271108][ T31] ____sys_sendmsg+0x54e/0x850 [ 552.271145][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.271187][ T31] ? import_iovec+0x73/0xa0 [ 552.271221][ T31] ___sys_sendmsg+0x2a5/0x360 [ 552.271249][ T31] ? __lock_acquire+0x747/0x2de0 [ 552.271278][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.271312][ T31] ? futex_wait+0x2a2/0x390 [ 552.271368][ T31] ? __fget_files+0x2a/0x420 [ 552.271397][ T31] ? __fget_files+0x3a2/0x420 [ 552.271438][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 552.271480][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.271536][ T31] do_syscall_64+0x166/0x520 [ 552.271565][ T31] ? trace_irq_disable+0x3b/0x140 [ 552.271587][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.271609][ T31] ? clear_bhb_loop+0x70/0xc0 [ 552.271635][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.271656][ T31] RIP: 0033:0x7f4d5ed9e159 [ 552.271677][ T31] RSP: 002b:00007f4d5fce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.271701][ T31] RAX: ffffffffffffffda RBX: 00007f4d5f025fa0 RCX: 00007f4d5ed9e159 [ 552.271717][ T31] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 552.271731][ T31] RBP: 00007f4d5ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 552.271745][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.271758][ T31] R13: 00007f4d5f026038 R14: 00007f4d5f025fa0 R15: 00007ffe2f9ea4c8 [ 552.271794][ T31] [ 552.271809][ T31] INFO: task syz.3.1567:11944 blocked for more than 148 seconds. [ 552.271825][ T31] Not tainted syzkaller #0 [ 552.271836][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.271846][ T31] task:syz.3.1567 state:D stack:28808 pid:11944 tgid:11942 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 552.271914][ T31] Call Trace: [ 552.271921][ T31] [ 552.271935][ T31] __schedule+0x17db/0x58f0 [ 552.271978][ T31] ? __kasan_slab_free+0x5c/0x80 [ 552.272003][ T31] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 552.272029][ T31] ? do_syscall_64+0x166/0x520 [ 552.272066][ T31] ? __pfx___schedule+0x10/0x10 [ 552.272104][ T31] ? schedule+0x90/0x2b0 [ 552.272134][ T31] schedule+0x164/0x2b0 [ 552.272163][ T31] schedule_preempt_disabled+0x13/0x30 [ 552.272189][ T31] __mutex_lock+0x7c1/0x1550 [ 552.272223][ T31] ? __mutex_lock+0x5d4/0x1550 [ 552.272254][ T31] ? wext_ioctl_dispatch+0xa2/0x410 [ 552.272279][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 552.272318][ T31] ? dev_load+0x21/0x1f0 [ 552.272348][ T31] ? dev_load+0x21/0x1f0 [ 552.272374][ T31] ? __pfx_ioctl_standard_call+0x10/0x10 [ 552.272397][ T31] wext_ioctl_dispatch+0xa2/0x410 [ 552.272425][ T31] wext_handle_ioctl+0x110/0x1d0 [ 552.272461][ T31] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 552.272482][ T31] ? hook_file_ioctl+0x1f2/0x600 [ 552.272506][ T31] ? __asan_memcpy+0x40/0x70 [ 552.272545][ T31] sock_ioctl+0x159/0x7e0 [ 552.272570][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 552.272592][ T31] ? __fget_files+0x2a/0x420 [ 552.272620][ T31] ? __fget_files+0x3a2/0x420 [ 552.272648][ T31] ? __fget_files+0x2a/0x420 [ 552.272681][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 552.272711][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 552.622810][ T31] __se_sys_ioctl+0xfc/0x170 [ 552.656925][ T31] do_syscall_64+0x166/0x520 [ 552.680478][ T31] ? trace_irq_disable+0x3b/0x140 [ 552.680867][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.681260][ T31] ? clear_bhb_loop+0x70/0xc0 [ 552.681657][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.682047][ T31] RIP: 0033:0x7fb3c859e159 [ 553.121418][ T31] RSP: 002b:00007fb3c944b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.121451][ T31] RAX: ffffffffffffffda RBX: 00007fb3c8825fa0 RCX: 00007fb3c859e159 [ 553.121467][ T31] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 553.121480][ T31] RBP: 00007fb3c863506b R08: 0000000000000000 R09: 0000000000000000 [ 553.121494][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.121506][ T31] R13: 00007fb3c8826038 R14: 00007fb3c8825fa0 R15: 00007ffc3b135bc8 [ 553.121543][ T31] [ 553.121557][ T31] INFO: task syz.4.1568:11943 blocked for more than 149 seconds. [ 553.121573][ T31] Not tainted syzkaller #0 [ 553.121593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.121603][ T31] task:syz.4.1568 state:D stack:25608 pid:11943 tgid:11943 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 553.121667][ T31] Call Trace: [ 553.121675][ T31] [ 553.121688][ T31] __schedule+0x17db/0x58f0 [ 553.121740][ T31] ? __pfx_stack_trace_save+0x10/0x10